$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft File: dD54xFmO_HLaCEZGUOuPnNoW-YA.mft (raw, json) Hash identifier: 2oe+uLxa3WZU5hkMbLV7avrD4+c8RKxzIhdl49WR55g= Subject key identifier: D2:1E:BD:9D:F9:F7:48:E3:B6:AB:F1:D0:22:C3:63:B9:6B:FD:60:C5 Authority key identifier: 74:3E:78:C4:59:8E:FC:72:DA:08:46:46:50:EB:8F:9C:DA:16:F9:80 Certificate issuer: /CN=A91DE500/serialNumber=743E78C4598EFC72DA08464650EB8F9CDA16F980 Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft Manifest number: 01EB Signing time: Sun 01 Jun 2025 04:55:14 +0000 Manifest this update: Sun 01 Jun 2025 04:55:13 +0000 Manifest next update: Sun 08 Jun 2025 04:55:13 +0000 Files and hashes: 1: dD54xFmO_HLaCEZGUOuPnNoW-YA.crl (hash: UphBn1mgGsl/5MY4mgrMvqHQDvBVy98HetD6upI4GU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.crl rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 04:55:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500, serialNumber=743E78C4598EFC72DA08464650EB8F9CDA16F980 Validity Not Before: Jun 1 04:55:13 2025 GMT Not After : Jun 8 04:55:13 2025 GMT Subject: CN=683bdd31-9258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:00:3b:9f:e1:6f:23:47:a8:95:ee:0d:cb:91: 9f:72:09:6b:c9:47:92:43:a5:8d:6d:aa:42:31:13: aa:3e:21:f6:da:6c:3f:ba:30:cc:48:f7:f1:72:68: 9e:2f:1c:ee:56:9b:f6:50:c3:0d:f8:51:a3:01:1f: f3:c3:f7:35:55:b6:ea:f3:fc:15:5d:19:64:17:80: 3e:b2:85:6d:c7:80:46:2c:11:29:e2:c2:82:30:58: bb:df:42:6c:82:a8:6f:de:f1:f9:4f:98:bf:c0:fc: 79:e8:ca:e2:d3:b0:c2:df:7c:9b:a5:d2:b6:c3:87: f3:18:8d:db:11:b2:3a:f9:6f:3e:64:97:29:d2:25: 38:24:df:7e:7f:c5:40:0e:95:8c:28:fd:bd:44:ca: 76:d1:2c:f7:fa:a9:cb:c4:40:0d:5f:b2:53:41:c3: c6:b8:5e:a5:8b:6c:6a:13:35:7c:8f:cf:d9:e4:bb: f3:e6:14:76:99:ce:28:56:bb:7e:3c:67:aa:93:7c: 2f:f8:f6:bc:a0:27:80:b8:02:df:4a:40:5f:a7:79: 5e:ab:94:1a:12:fe:cd:17:66:48:83:48:f8:99:0d: 4c:40:54:9d:bb:aa:fe:59:72:73:c1:3d:6c:9f:55: 5b:e0:ec:4c:5b:2e:b6:ff:36:bd:36:6a:80:6a:ec: 62:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:1E:BD:9D:F9:F7:48:E3:B6:AB:F1:D0:22:C3:63:B9:6B:FD:60:C5 X509v3 Authority Key Identifier: keyid:74:3E:78:C4:59:8E:FC:72:DA:08:46:46:50:EB:8F:9C:DA:16:F9:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:6b:04:30:45:a4:b8:03:fc:ca:7f:88:53:fe:99:7f:5c:bb: 0d:5b:bf:34:bf:91:39:10:24:84:f3:dd:5a:66:f3:26:06:de: c7:c7:a5:60:64:de:bc:2c:48:54:f3:9a:b7:b1:8f:22:05:fb: d4:96:c0:74:71:9c:4a:e5:9a:3b:89:44:8f:1e:65:4a:63:17: 98:56:70:3f:7d:d4:03:12:b0:8b:b6:63:62:46:01:3b:2f:5e: 93:61:88:01:d6:fb:0d:35:1e:a3:0b:50:63:76:37:3b:97:8e: 83:78:de:01:12:3d:d1:9d:6e:c9:01:c1:59:1e:f8:24:f0:74: de:e0:e4:3f:81:c5:12:c1:6f:d6:71:82:e3:73:d2:aa:a5:be: 71:32:4a:96:6e:a5:2d:fd:33:01:7f:2d:01:81:5f:dd:8f:e0: 74:b5:1a:b6:58:6c:14:a7:2e:63:ff:8b:83:c3:9f:a8:7c:35: bd:21:b3:79:66:15:c2:11:cd:32:7a:94:02:ff:56:5c:3c:7e: 5d:15:70:08:ec:5e:82:a1:50:95:fa:2e:c1:f3:9b:5b:3d:a8: 02:9d:25:cf:79:c8:ab:e8:40:72:50:c0:7c:fa:f2:50:2d:5e: 98:df:27:0e:d2:13:23:d8:1b:b1:9d:61:bd:3d:8b:6e:14:67: 0b:e7:37:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKDc0M0U3OEM0NTk4RUZDNzJEQTA4NDY0NjUwRUI4RjlD REExNkY5ODAwHhcNMjUwNjAxMDQ1NTEzWhcNMjUwNjA4MDQ1NTEzWjAYMRYwFAYD VQQDEw02ODNiZGQzMS05MjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArwA7n+FvI0eole4Ny5GfcglryUeSQ6WNbapCMROqPiH22mw/ujDMSPfxcmie LxzuVpv2UMMN+FGjAR/zw/c1Vbbq8/wVXRlkF4A+soVtx4BGLBEp4sKCMFi730Js gqhv3vH5T5i/wPx56Mri07DC33ybpdK2w4fzGI3bEbI6+W8+ZJcp0iU4JN9+f8VA DpWMKP29RMp20Sz3+qnLxEANX7JTQcPGuF6li2xqEzV8j8/Z5Lvz5hR2mc4oVrt+ PGeqk3wv+Pa8oCeAuALfSkBfp3leq5QaEv7NF2ZIg0j4mQ1MQFSdu6r+WXJzwT1s n1Vb4OxMWy62/za9NmqAauxiPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNIevZ35 90jjtqvx0CLDY7lr/WDFMB8GA1UdIwQYMBaAFHQ+eMRZjvxy2ghGRlDrj5zaFvmA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC8zRkZGNUMzRUM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9kRDU0eEZtT19ITGFDRVpHVU91UG5Ob1ct WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RENTR4Rm1PX0hMYUNFWkdVT3VQbk5vVy1ZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTUwMC8zRkZGNUMzRUM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9kRDU0eEZtT19I TGFDRVpHVU91UG5Ob1ctWUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGawQwRaS4A/zKf4hT/pl/XLsNW780v5E5ECSE891aZvMmBt7Hx6Vg ZN68LEhU85q3sY8iBfvUlsB0cZxK5Zo7iUSPHmVKYxeYVnA/fdQDErCLtmNiRgE7 L16TYYgB1vsNNR6jC1Bjdjc7l46DeN4BEj3RnW7JAcFZHvgk8HTe4OQ/gcUSwW/W cYLjc9Kqpb5xMkqWbqUt/TMBfy0BgV/dj+B0tRq2WGwUpy5j/4uDw5+ofDW9IbN5 ZhXCEc0yepQC/1ZcPH5dFXAI7F6CoVCV+i7B85tbPagCnSXPecir6EByUMB8+vJQ LV6Y3ycO0hMj2BuxnWG9PYtuFGcL5zf4 -----END CERTIFICATE-----Generated at Mon Jun 2 21:51:03 2025 by rpki-client