$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft File: MAKFsSjLjblfHkH_vS68Io1FPvw.mft (raw, json) Hash identifier: WUCu2yRHKglIpARZR6lySo7K9ijQ2dLXWV7N9ayoNCc= Subject key identifier: A8:73:D8:31:28:ED:01:8F:F0:0A:04:C7:9B:12:F4:79:54:2B:63:72 Authority key identifier: 30:02:85:B1:28:CB:8D:B9:5F:1E:41:FF:BD:2E:BC:22:8D:45:3E:FC Certificate issuer: /CN=A91CD39D/serialNumber=300285B128CB8DB95F1E41FFBD2EBC228D453EFC Certificate serial: 0465 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft Manifest number: 0465 Signing time: Thu 05 Jun 2025 00:00:32 +0000 Manifest this update: Thu 05 Jun 2025 00:00:31 +0000 Manifest next update: Thu 12 Jun 2025 00:00:31 +0000 Files and hashes: 1: MAKFsSjLjblfHkH_vS68Io1FPvw.crl (hash: ZDFb9s8udOUmNJK/7kFKC83JMJ5hD36AvrpFY51QP24=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.crl rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 00:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1125 (0x465) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD39D, serialNumber=300285B128CB8DB95F1E41FFBD2EBC228D453EFC Validity Not Before: Jun 5 00:00:31 2025 GMT Not After : Jun 12 00:00:31 2025 GMT Subject: CN=6840de1f-93db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:47:b3:01:7a:e4:6e:0d:0f:b0:79:ba:d5:7b: 08:a0:5a:0e:b8:22:73:97:1a:c7:53:dc:03:79:7d: 90:f2:f9:9e:1f:b1:29:6b:a3:d2:5f:9e:fe:3f:a0: 30:d4:5d:56:b2:95:61:ce:30:0b:31:54:12:7b:3e: 41:9e:4d:d6:2f:e5:16:f4:d1:af:2c:cd:19:e2:6a: 25:50:71:86:dc:f1:b2:a5:b3:de:0c:8f:02:4d:62: e9:91:ba:87:dd:3a:a3:38:e7:24:22:43:9d:fc:46: 2f:53:d7:6c:6c:13:88:52:4c:ee:98:c7:25:ab:f0: d5:d3:7a:a0:ef:ed:e7:33:cb:30:aa:d6:10:ff:67: 07:ac:d2:b0:d2:17:8d:24:1b:bf:0b:ec:ea:f3:25: de:73:01:ab:d7:f7:87:56:ce:cf:d5:9a:0e:04:67: 68:69:3a:48:4f:ff:ef:95:a4:28:72:fd:57:93:7a: c9:22:33:73:7d:28:b0:66:cf:52:b3:78:60:8b:9d: f9:0c:da:d7:b9:4d:f3:c9:86:12:11:5a:2d:b1:d6: c9:89:46:f0:9d:6f:c9:4a:28:10:c7:24:92:a6:3c: 8e:4f:40:5e:66:f7:a4:31:1e:c6:f5:b6:63:d8:0f: 79:eb:69:b7:02:b9:e8:c6:99:c2:87:0b:f6:a1:c1: 3b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:73:D8:31:28:ED:01:8F:F0:0A:04:C7:9B:12:F4:79:54:2B:63:72 X509v3 Authority Key Identifier: keyid:30:02:85:B1:28:CB:8D:B9:5F:1E:41:FF:BD:2E:BC:22:8D:45:3E:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:a8:6e:e4:1d:30:74:57:15:5a:9b:79:44:fa:20:24:63:9c: d5:1a:24:62:3c:84:f2:44:d2:68:f2:38:22:94:91:e4:73:ea: c5:0a:21:f9:42:3c:6a:70:44:b5:86:45:f5:08:99:6d:7f:e0: b6:42:c3:40:8f:31:ef:e5:d7:a3:74:ae:88:a3:e5:19:ab:97: 91:36:aa:50:47:6f:20:c2:27:6c:bd:2c:9c:64:39:2c:bf:e1: 86:ed:0b:5d:a3:18:96:d1:0a:ca:13:3e:0f:3c:cc:81:85:02: 44:fd:ed:c0:bf:ae:a2:04:26:55:53:93:7f:f6:1f:21:f1:5c: cd:33:77:0c:1e:be:c2:6e:fc:d7:3c:93:b4:f8:2f:6f:a8:ac: b4:2b:74:c1:3e:e6:9d:64:2d:b9:54:d3:bb:d7:d7:8d:19:ca: 24:63:7b:6c:d1:bb:67:f8:32:3b:af:d6:b3:bf:3e:46:02:2a: 5e:9e:b6:c2:00:89:e2:30:2c:2a:d3:f7:e3:b4:21:f4:c6:fc: a0:17:23:7a:b2:10:41:bb:9f:8f:6d:9a:ef:56:a2:97:a1:4a: 9a:4a:62:7f:c0:84:87:ce:5d:eb:ca:2d:e2:21:de:c3:6f:ca: b5:b7:c0:7d:1d:8f:61:f3:5b:6e:14:4a:32:56:04:1c:a2:0b: e4:bf:36:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QzOUQxMTAvBgNVBAUTKDMwMDI4NUIxMjhDQjhEQjk1RjFFNDFGRkJEMkVCQzIy OEQ0NTNFRkMwHhcNMjUwNjA1MDAwMDMxWhcNMjUwNjEyMDAwMDMxWjAYMRYwFAYD VQQDEw02ODQwZGUxZi05M2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4EezAXrkbg0PsHm61XsIoFoOuCJzlxrHU9wDeX2Q8vmeH7Epa6PSX57+P6Aw 1F1WspVhzjALMVQSez5Bnk3WL+UW9NGvLM0Z4molUHGG3PGypbPeDI8CTWLpkbqH 3TqjOOckIkOd/EYvU9dsbBOIUkzumMclq/DV03qg7+3nM8swqtYQ/2cHrNKw0heN JBu/C+zq8yXecwGr1/eHVs7P1ZoOBGdoaTpIT//vlaQocv1Xk3rJIjNzfSiwZs9S s3hgi535DNrXuU3zyYYSEVotsdbJiUbwnW/JSigQxySSpjyOT0BeZvekMR7G9bZj 2A9562m3ArnoxpnChwv2ocE7yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhz2DEo 7QGP8AoEx5sS9HlUK2NyMB8GA1UdIwQYMBaAFDAChbEoy425Xx5B/70uvCKNRT78 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ENDRFMzZEMDRF NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9NQUtGc1NqTGpibGZIa0hfdlM2OElvMUZQ dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01BS0ZzU2pMamJsZkhrSF92UzY4SW8xRlB2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDM5RC9ENDRFMzZEMDRFNzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9NQUtGc1NqTGpi bGZIa0hfdlM2OElvMUZQdncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPqG7kHTB0VxVam3lE+iAkY5zVGiRiPITyRNJo8jgilJHkc+rFCiH5 QjxqcES1hkX1CJltf+C2QsNAjzHv5dejdK6Io+UZq5eRNqpQR28gwidsvSycZDks v+GG7QtdoxiW0QrKEz4PPMyBhQJE/e3Av66iBCZVU5N/9h8h8VzNM3cMHr7CbvzX PJO0+C9vqKy0K3TBPuadZC25VNO719eNGcokY3ts0btn+DI7r9azvz5GAipenrbC AIniMCwq0/fjtCH0xvygFyN6shBBu5+PbZrvVqKXoUqaSmJ/wISHzl3ryi3iId7D b8q1t8B9HY9h81tuFEoyVgQcogvkvzbf -----END CERTIFICATE-----Generated at Fri Jun 6 16:45:58 2025 by rpki-client