$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft File: tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft (raw, json) Hash identifier: uNresJALXzubAQbyYot5zvg7i0484BGe6bT8ZI2DRbc= Subject key identifier: EF:11:45:F5:97:DE:45:63:6A:19:5F:C0:61:FF:F6:57:4E:57:25:51 Authority key identifier: B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 Certificate issuer: /CN=A91DB551/serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Certificate serial: 0CED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft Manifest number: 0CED Signing time: Sun 08 Jun 2025 17:56:05 +0000 Manifest this update: Sun 08 Jun 2025 17:56:05 +0000 Manifest next update: Sun 15 Jun 2025 17:56:05 +0000 Files and hashes: 1: tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl (hash: TvvFS3Xl5w8l0InZcM+Q9Zh++lxz2ridzAtnk9QnfMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 17:56:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3309 (0xced) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB551, serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Validity Not Before: Jun 8 17:56:05 2025 GMT Not After : Jun 15 17:56:05 2025 GMT Subject: CN=6845ceb5-9908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:73:b1:21:bd:39:1a:2c:cb:87:c0:d6:5c:83: 6f:28:02:64:79:a3:ac:dd:13:cd:37:d1:91:e6:2f: 16:1f:5c:f3:b2:0a:40:52:40:54:59:e6:08:00:a6: b2:84:b2:25:48:25:31:7e:c1:8c:e6:d7:84:f9:96: 2a:21:bb:3e:b8:bc:57:45:9c:36:8d:30:72:39:55: 38:2b:60:d2:91:44:a6:b6:f1:db:17:28:a7:dc:ab: e3:fc:6b:14:c0:4f:f0:48:8a:f6:c6:0c:17:83:63: 42:a9:37:1c:a3:ba:28:a6:eb:80:c1:7a:e5:7d:40: ae:94:de:d7:98:bb:d8:6f:88:07:44:61:17:8b:ea: 73:0a:7d:0f:5f:d8:43:09:12:80:09:cc:11:f0:4a: 52:a7:c2:82:3b:dd:73:e2:f3:a4:7d:b7:c1:b0:9d: 06:0b:88:1a:0f:ab:b3:29:90:ec:00:a5:c1:52:68: 1e:74:17:96:bc:f9:7d:b0:69:90:7c:b3:6e:c3:fc: 6c:72:be:3e:d2:83:8a:33:aa:5b:50:8f:ab:6b:65: 89:39:a0:1c:84:c3:a2:ba:11:81:27:86:18:07:b9: 9c:3b:53:db:19:41:03:ad:31:55:55:4e:2c:c0:d8: 0d:da:e5:b2:37:52:8a:0c:34:a3:90:92:69:97:c2: 4c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:11:45:F5:97:DE:45:63:6A:19:5F:C0:61:FF:F6:57:4E:57:25:51 X509v3 Authority Key Identifier: keyid:B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:2e:ac:e6:7f:db:ac:3d:6c:4d:1b:30:8e:44:eb:18:35:57: fd:46:02:7c:8d:9c:1c:6e:9a:ef:ab:9e:e6:5c:59:37:82:b7: b0:9c:2d:d5:5a:a9:b6:e0:78:3e:a2:98:a8:00:89:69:e2:e4: 0c:9e:70:c3:f4:9f:b1:91:97:d2:72:10:8e:3e:18:b2:d4:b3: b9:a9:89:9d:c8:93:c8:2e:b3:19:00:cf:de:9f:cb:bd:3e:4e: 65:78:2e:fd:a9:8b:ca:36:6e:69:fd:3b:bf:c0:25:db:d2:45: f4:88:1a:e0:ba:56:12:6e:ee:48:c3:a6:ae:0f:d4:55:22:92: 9b:e6:88:ee:60:6a:d0:f3:24:ed:13:54:cc:29:43:cc:99:f9: d3:19:4d:ac:01:c0:3a:81:62:cf:5c:fa:7d:e0:3c:37:48:bd: 64:af:9f:ac:f6:a9:78:17:f8:cf:bb:f8:86:11:55:0f:ce:b7: 7a:4b:9f:d1:52:9c:05:04:2e:89:d0:eb:9f:7a:ff:70:10:d3: 37:cc:4a:8d:21:b6:e9:79:c6:d6:f3:96:17:da:7d:01:78:0c: 92:67:30:40:16:dd:b4:c8:1f:d9:8a:aa:be:39:27:58:57:9e: 99:06:fb:13:b7:d2:a4:cc:60:31:5a:59:06:45:c3:bd:9e:90: 9e:de:b3:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI1NTExMTAvBgNVBAUTKEI2Mzg5NzkxQkQ1NDA5NkFEMDA5OTlBNzU5MUZCMjA0 MTg5QUYxOTgwHhcNMjUwNjA4MTc1NjA1WhcNMjUwNjE1MTc1NjA1WjAYMRYwFAYD VQQDEw02ODQ1Y2ViNS05OTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXOxIb05GizLh8DWXINvKAJkeaOs3RPNN9GR5i8WH1zzsgpAUkBUWeYIAKay hLIlSCUxfsGM5teE+ZYqIbs+uLxXRZw2jTByOVU4K2DSkUSmtvHbFyin3Kvj/GsU wE/wSIr2xgwXg2NCqTcco7oopuuAwXrlfUCulN7XmLvYb4gHRGEXi+pzCn0PX9hD CRKACcwR8EpSp8KCO91z4vOkfbfBsJ0GC4gaD6uzKZDsAKXBUmgedBeWvPl9sGmQ fLNuw/xscr4+0oOKM6pbUI+ra2WJOaAchMOiuhGBJ4YYB7mcO1PbGUEDrTFVVU4s wNgN2uWyN1KKDDSjkJJpl8JMzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO8RRfWX 3kVjahlfwGH/9ldOVyVRMB8GA1UdIwQYMBaAFLY4l5G9VAlq0AmZp1kfsgQYmvGY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU1MS9EQkY2RTFENEUy RTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNXclFDWm1uV1IteUJCaWE4 WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqaVhrYjFVQ1dyUUNabW5XUi15QkJpYThaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjU1MS9EQkY2RTFENEUyRTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNX clFDWm1uV1IteUJCaWE4WmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLLqzmf9usPWxNGzCOROsYNVf9RgJ8jZwcbprvq57mXFk3grewnC3V Wqm24Hg+opioAIlp4uQMnnDD9J+xkZfSchCOPhiy1LO5qYmdyJPILrMZAM/en8u9 Pk5leC79qYvKNm5p/Tu/wCXb0kX0iBrgulYSbu5Iw6auD9RVIpKb5ojuYGrQ8yTt E1TMKUPMmfnTGU2sAcA6gWLPXPp94Dw3SL1kr5+s9ql4F/jPu/iGEVUPzrd6S5/R UpwFBC6J0Oufev9wENM3zEqNIbbpecbW85YX2n0BeAySZzBAFt20yB/Ziqq+OSdY V56ZBvsTt9KkzGAxWlkGRcO9npCe3rOn -----END CERTIFICATE-----Generated at Mon Jun 9 20:03:19 2025 by rpki-client