$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft File: _edM0WVtTsrysOa7wxNdTrhAeCs.mft (raw, json) Hash identifier: 9sI/K+wqcOS6m1a8h5mUGJMW7LkzYksazHhNMpLhnQY= Subject key identifier: 53:DF:BE:49:70:28:57:48:B1:D1:65:73:60:53:37:BE:AE:CA:73:8A Authority key identifier: FD:E7:4C:D1:65:6D:4E:CA:F2:B0:E6:BB:C3:13:5D:4E:B8:40:78:2B Certificate issuer: /CN=A91DA898/serialNumber=FDE74CD1656D4ECAF2B0E6BBC3135D4EB840782B Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft Manifest number: 46 Signing time: Mon 02 Jun 2025 14:38:18 +0000 Manifest this update: Mon 02 Jun 2025 14:38:17 +0000 Manifest next update: Mon 09 Jun 2025 14:38:17 +0000 Files and hashes: 1: _edM0WVtTsrysOa7wxNdTrhAeCs.crl (hash: KkpzaaPQwO1WFAcHGU8kIEEGapFDHrcEFk1xZcwaq0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.crl rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 14:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA898, serialNumber=FDE74CD1656D4ECAF2B0E6BBC3135D4EB840782B Validity Not Before: Jun 2 14:38:17 2025 GMT Not After : Jun 9 14:38:17 2025 GMT Subject: CN=683db759-7dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0c:c7:78:22:69:f6:45:17:d9:0f:bf:a9:49: 32:b9:43:1b:df:3f:02:10:46:aa:89:f9:1b:15:8c: f0:c2:e3:0a:db:b7:45:c3:f7:9f:3c:6b:94:de:e5: 1c:42:9e:f2:7e:c2:bf:84:43:d8:c3:4a:26:7d:6a: 89:34:8d:a7:40:14:8a:01:4e:15:b8:9a:b0:46:c7: fc:ff:82:a8:7f:2c:33:d8:20:51:c2:0d:58:ad:c7: d0:ea:d7:a0:33:72:ae:a7:07:a2:5e:90:d7:34:fe: 0f:9e:9f:70:d4:4c:8b:2e:44:a3:b0:28:31:22:5e: f1:b7:15:9d:21:9c:27:f9:c3:c1:7b:a9:35:a2:b9: b8:a5:c8:72:62:16:53:cf:06:c2:7f:d0:2d:6b:49: bb:30:87:7d:4c:47:30:56:52:b7:f9:a5:c2:00:dc: ba:1c:00:3c:f9:de:77:1c:1f:02:16:e8:6e:87:8d: c1:2a:01:15:77:3f:ad:0c:ea:48:73:a5:8a:66:93: 09:0b:7e:e5:88:07:f4:c7:24:57:2d:85:fd:fc:c6: 73:82:77:9f:a4:2b:f5:a1:42:ec:43:d8:df:e5:14: 2d:af:2c:63:13:b6:ca:1d:24:8f:f9:60:7d:7e:a2: 41:a0:d5:8b:a8:eb:97:4e:23:e8:db:c1:8f:57:e7: e5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:DF:BE:49:70:28:57:48:B1:D1:65:73:60:53:37:BE:AE:CA:73:8A X509v3 Authority Key Identifier: keyid:FD:E7:4C:D1:65:6D:4E:CA:F2:B0:E6:BB:C3:13:5D:4E:B8:40:78:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:2e:91:1a:c4:5f:9e:1f:e8:ca:49:fc:30:dc:f4:28:ff:94: 01:cb:41:12:57:5f:64:b9:c7:e7:27:56:7b:1b:a1:ba:8f:5d: 87:ff:99:69:e8:f6:85:4f:c8:f1:34:b2:f8:8c:f0:32:a5:6b: 37:2e:43:89:d5:21:82:4a:c9:db:7a:0c:18:dc:76:39:c1:b5: 3f:7c:aa:94:1b:66:18:0f:cf:07:f0:b4:8e:4f:16:c8:86:13: 28:29:24:5c:7f:73:11:ee:31:de:7e:66:5b:0e:0b:27:8c:11: fb:1f:ac:75:12:00:7c:a2:ed:d9:12:33:2b:de:8f:71:5c:7d: 10:a4:d1:77:34:d0:7f:dc:32:b0:5f:73:ea:b9:59:99:8e:64: 28:88:67:d5:83:18:26:ea:01:fe:31:12:e1:6b:33:3f:33:32: 2e:5d:10:7c:9e:da:bc:25:46:3e:17:55:2d:35:e6:00:c4:3f: 1b:81:84:a7:86:e1:4d:c0:32:ed:67:a5:79:b8:19:87:66:5b: 22:dd:65:0d:90:44:41:a4:e4:c5:aa:94:26:c8:02:fa:0a:93: e9:8d:20:fc:8c:1f:b1:0c:10:cc:48:dc:be:86:80:af:40:4d: e9:b2:cf:63:e7:9b:f0:e6:66:f3:9d:b5:93:47:2a:17:d0:32: c0:f1:6a:50 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QTg5ODExMC8GA1UEBRMoRkRFNzRDRDE2NTZENEVDQUYyQjBFNkJCQzMxMzVENEVC ODQwNzgyQjAeFw0yNTA2MDIxNDM4MTdaFw0yNTA2MDkxNDM4MTdaMBgxFjAUBgNV BAMTDTY4M2RiNzU5LTdkYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrDMd4Imn2RRfZD7+pSTK5QxvfPwIQRqqJ+RsVjPDC4wrbt0XD9588a5Te5RxC nvJ+wr+EQ9jDSiZ9aok0jadAFIoBThW4mrBGx/z/gqh/LDPYIFHCDVitx9Dq16Az cq6nB6JekNc0/g+en3DUTIsuRKOwKDEiXvG3FZ0hnCf5w8F7qTWiubilyHJiFlPP BsJ/0C1rSbswh31MRzBWUrf5pcIA3LocADz53nccHwIW6G6HjcEqARV3P60M6khz pYpmkwkLfuWIB/THJFcthf38xnOCd5+kK/WhQuxD2N/lFC2vLGMTtsodJI/5YH1+ okGg1Yuo65dOI+jbwY9X5+U9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUU9++SXAo V0ix0WVzYFM3vq7Kc4owHwYDVR0jBBgwFoAU/edM0WVtTsrysOa7wxNdTrhAeCsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBODk4LzQwN0EyNUVBRDg3 RjExRUY5MUNDNTM0NkM0RjlBRTAyL19lZE0wV1Z0VHNyeXNPYTd3eE5kVHJoQWVD cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX2VkTTBXVnRUc3J5c09hN3d4TmRUcmhBZUNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB ODk4LzQwN0EyNUVBRDg3RjExRUY5MUNDNTM0NkM0RjlBRTAyL19lZE0wV1Z0VHNy eXNPYTd3eE5kVHJoQWVDcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIsukRrEX54f6MpJ/DDc9Cj/lAHLQRJXX2S5x+cnVnsbobqPXYf/mWno 9oVPyPE0sviM8DKlazcuQ4nVIYJKydt6DBjcdjnBtT98qpQbZhgPzwfwtI5PFsiG EygpJFx/cxHuMd5+ZlsOCyeMEfsfrHUSAHyi7dkSMyvej3FcfRCk0Xc00H/cMrBf c+q5WZmOZCiIZ9WDGCbqAf4xEuFrMz8zMi5dEHye2rwlRj4XVS015gDEPxuBhKeG 4U3AMu1npXm4GYdmWyLdZQ2QREGk5MWqlCbIAvoKk+mNIPyMH7EMEMxI3L6GgK9A Temyz2Pnm/DmZvOdtZNHKhfQMsDxalA= -----END CERTIFICATE-----Generated at Tue Jun 3 23:42:33 2025 by rpki-client