$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft File: -BaXnSqJmynqWV8rVO6jmQokNvk.mft (raw, json) Hash identifier: e2gYB16ELRzQg/l5SvZmQlKLsNdS2ftiCqEi4hz1eAc= Subject key identifier: 3E:7C:F0:60:68:26:D3:44:5E:B1:B7:C4:FE:19:F6:A3:6A:C4:1A:73 Authority key identifier: F8:16:97:9D:2A:89:9B:29:EA:59:5F:2B:54:EE:A3:99:0A:24:36:F9 Certificate issuer: /CN=A91D5DB6/serialNumber=F816979D2A899B29EA595F2B54EEA3990A2436F9 Certificate serial: 15F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft Manifest number: 15F3 Signing time: Fri 30 May 2025 16:56:08 +0000 Manifest this update: Fri 30 May 2025 16:56:08 +0000 Manifest next update: Fri 06 Jun 2025 16:56:08 +0000 Files and hashes: 1: -BaXnSqJmynqWV8rVO6jmQokNvk.crl (hash: htIeXS+jofzQEuyAe7L7r1hGtpUQ4qisez7v9cPAFes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.crl rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:56:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5619 (0x15f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5DB6, serialNumber=F816979D2A899B29EA595F2B54EEA3990A2436F9 Validity Not Before: May 30 16:56:08 2025 GMT Not After : Jun 6 16:56:08 2025 GMT Subject: CN=6839e328-3d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:af:dd:dd:18:fb:f7:b1:24:d1:bf:44:8d:1c: e3:bc:2a:1a:07:03:51:7e:28:8b:f3:10:5c:17:87: 4b:4b:98:a8:df:9f:ef:82:51:dd:d7:32:f5:be:26: 5f:9e:af:be:77:7a:f7:ae:67:37:73:0f:1d:d3:ec: 39:dc:15:b1:b3:86:9a:54:5b:6d:81:35:7f:5f:70: c9:91:11:03:57:cb:ef:92:ae:c4:75:ea:64:fa:d0: c0:8a:eb:ee:fd:35:00:4a:3c:8b:8f:f1:c3:33:49: 8d:8d:37:6c:dd:31:1d:40:41:e9:7d:78:5f:db:cd: e3:2f:40:7b:aa:d5:4a:b9:2b:d3:8f:da:06:ba:88: 42:eb:bb:b2:a7:b4:9b:21:7a:8d:ab:c5:e4:1c:56: f9:dd:e6:3e:57:5e:8b:32:00:bf:87:1d:37:6a:b1: e5:db:a6:96:2a:90:5d:fc:ce:81:f9:53:10:9d:7d: 91:bd:3e:92:70:8c:6d:6d:b3:3b:20:a1:e3:dc:0d: fa:9c:e3:95:ac:03:29:bf:de:58:96:55:15:1f:14: af:62:71:9c:6a:8d:f4:f1:fe:a5:ae:28:1b:bf:79: 05:c1:b7:12:a8:af:a6:16:35:23:a4:56:4c:35:f6: 85:11:0c:89:a0:ac:14:b4:46:80:3c:7e:aa:59:16: fd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:7C:F0:60:68:26:D3:44:5E:B1:B7:C4:FE:19:F6:A3:6A:C4:1A:73 X509v3 Authority Key Identifier: keyid:F8:16:97:9D:2A:89:9B:29:EA:59:5F:2B:54:EE:A3:99:0A:24:36:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:87:5e:59:f4:6d:a4:04:64:71:de:90:8f:a0:2e:84:c3:38: 73:d4:85:aa:fa:3c:f5:fd:45:04:90:3b:36:ef:46:90:32:c6: 17:c1:e3:f0:17:ab:c5:ac:cc:c8:39:9f:63:7d:ab:8d:8e:7c: 6c:ef:63:e6:5c:61:0c:e4:d5:cf:25:5e:f1:2b:ad:98:a2:d1: 4d:eb:00:2f:c0:f6:55:38:b0:c1:e9:6c:4b:67:09:e8:3e:81: 8a:9b:52:5f:5a:02:f1:03:3f:97:70:c1:79:ce:42:4c:60:73: c6:d0:93:24:e2:45:6f:86:bd:ec:cf:2c:8c:77:92:55:7b:7a: 6a:f3:4b:6a:fb:f4:71:92:da:90:dc:6d:4f:a7:ba:82:c2:02: db:f0:25:0b:e2:d9:52:a3:96:ab:f9:e2:15:18:91:fd:5d:32: 51:32:b0:05:26:a0:51:54:f2:a2:5f:3f:9e:bf:cd:d3:85:69: 6d:7f:e9:10:74:98:a6:03:78:b5:21:51:c3:82:f0:e5:b2:5d: 6e:f6:66:35:7d:45:37:c7:df:69:2d:2c:85:c2:00:5b:00:ab: 67:37:be:18:69:8f:39:27:15:2e:71:51:df:24:ea:1f:7d:09: 62:cc:db:22:77:9f:3c:85:48:40:bf:b9:35:32:cb:76:1e:d9: bd:2e:f0:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVEQjYxMTAvBgNVBAUTKEY4MTY5NzlEMkE4OTlCMjlFQTU5NUYyQjU0RUVBMzk5 MEEyNDM2RjkwHhcNMjUwNTMwMTY1NjA4WhcNMjUwNjA2MTY1NjA4WjAYMRYwFAYD VQQDEw02ODM5ZTMyOC0zZDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6/d3Rj797Ek0b9EjRzjvCoaBwNRfiiL8xBcF4dLS5io35/vglHd1zL1viZf nq++d3r3rmc3cw8d0+w53BWxs4aaVFttgTV/X3DJkREDV8vvkq7Edepk+tDAiuvu /TUASjyLj/HDM0mNjTds3TEdQEHpfXhf283jL0B7qtVKuSvTj9oGuohC67uyp7Sb IXqNq8XkHFb53eY+V16LMgC/hx03arHl26aWKpBd/M6B+VMQnX2RvT6ScIxtbbM7 IKHj3A36nOOVrAMpv95YllUVHxSvYnGcao308f6lrigbv3kFwbcSqK+mFjUjpFZM NfaFEQyJoKwUtEaAPH6qWRb9PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD588GBo JtNEXrG3xP4Z9qNqxBpzMB8GA1UdIwQYMBaAFPgWl50qiZsp6llfK1Tuo5kKJDb5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENURCNi8xM0Y5NkI4MjE4 NjIxMUU4QjFFMzE3MjlDNEY5QUUwMi8tQmFYblNxSm15bnFXVjhyVk82am1Rb2tO dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1CYVhuU3FKbXlucVdWOHJWTzZqbVFva052ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NURCNi8xM0Y5NkI4MjE4NjIxMUU4QjFFMzE3MjlDNEY5QUUwMi8tQmFYblNxSm15 bnFXVjhyVk82am1Rb2tOdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCch15Z9G2kBGRx3pCPoC6Ewzhz1IWq+jz1/UUEkDs270aQMsYXwePw F6vFrMzIOZ9jfauNjnxs72PmXGEM5NXPJV7xK62YotFN6wAvwPZVOLDB6WxLZwno PoGKm1JfWgLxAz+XcMF5zkJMYHPG0JMk4kVvhr3szyyMd5JVe3pq80tq+/RxktqQ 3G1Pp7qCwgLb8CUL4tlSo5ar+eIVGJH9XTJRMrAFJqBRVPKiXz+ev83ThWltf+kQ dJimA3i1IVHDgvDlsl1u9mY1fUU3x99pLSyFwgBbAKtnN74YaY85JxUucVHfJOof fQlizNsid588hUhAv7k1Mst2Htm9LvDY -----END CERTIFICATE-----Generated at Sat May 31 17:18:49 2025 by rpki-client