$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft File: aVxF2kJFO04LBivxfb9Eclx4g4c.mft (raw, json) Hash identifier: nS2loHok43FjxftSw0KHHj9nP37sKrq5GVV1YgoTZNo= Subject key identifier: 00:83:12:99:27:06:E9:69:F2:BC:A4:00:3C:6B:BC:A8:D7:6A:C7:E1 Authority key identifier: 69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87 Certificate issuer: /CN=A91DF26F/serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387 Certificate serial: 2284 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft Manifest number: 2284 Signing time: Wed 04 Jun 2025 14:40:26 +0000 Manifest this update: Wed 04 Jun 2025 14:40:25 +0000 Manifest next update: Wed 11 Jun 2025 14:40:25 +0000 Files and hashes: 1: aVxF2kJFO04LBivxfb9Eclx4g4c.crl (hash: h74SOI89g+cVNtXSvBDJ5cJ5R5ZAady+zRyDTKrbPDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 14:40:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8836 (0x2284) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF26F, serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387 Validity Not Before: Jun 4 14:40:25 2025 GMT Not After : Jun 11 14:40:25 2025 GMT Subject: CN=68405ad9-31a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4c:c1:b2:5b:90:87:0b:d4:29:13:93:6c:11: dd:17:9d:df:75:c0:5e:37:db:29:89:a1:2c:84:ca: fb:c5:c0:2e:4a:14:25:8b:5b:40:d9:76:67:50:38: b3:09:fc:4e:30:b9:8e:08:d7:0c:0d:56:b1:45:6f: a8:b6:99:68:77:12:36:7d:b8:b8:c1:39:2f:17:ee: a7:2e:4c:ac:e9:14:4f:be:ad:d6:0a:9b:3b:f6:c3: fd:07:ae:42:fe:c2:8f:08:3f:d1:83:13:44:1c:43: ad:3a:66:9f:c7:51:9b:f1:0c:38:b0:e9:eb:91:70: ca:2f:00:13:f4:be:8c:20:3f:78:a7:4e:f6:c5:5d: 0f:36:44:30:db:17:a6:e8:52:be:0e:10:cb:76:0b: 0a:5d:13:41:60:c1:f3:14:8c:f9:23:d2:92:6a:f6: 0a:80:83:29:03:11:87:a0:07:14:7a:a6:1a:ad:2e: 54:63:43:42:56:07:1b:1a:97:52:06:63:12:0f:2f: fa:14:94:dd:f1:3c:ee:47:47:18:e9:67:8b:e0:a0: b4:c4:23:83:09:77:fa:6e:12:7d:db:13:5a:e0:f1: bb:4c:21:c9:f8:ea:40:ed:47:a7:0c:56:61:6a:58: a6:d3:eb:b5:f7:95:a7:11:be:59:d1:25:2e:80:34: 21:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:83:12:99:27:06:E9:69:F2:BC:A4:00:3C:6B:BC:A8:D7:6A:C7:E1 X509v3 Authority Key Identifier: keyid:69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:1d:21:ae:01:80:c0:09:e1:d3:73:72:63:4c:8e:33:64:2c: df:ae:63:c7:c4:28:c4:ce:0c:b0:96:8f:d1:59:c6:34:bd:5b: 5d:93:e5:48:05:01:38:80:36:2c:3b:ab:a5:1e:f7:43:37:34: 28:ea:21:9e:6d:7d:0f:19:eb:2f:56:39:e1:1f:2f:a2:ca:66: ee:ce:08:12:78:f7:37:90:6e:66:bb:a1:36:e7:80:54:dc:b0: 44:32:5a:21:e3:e9:bc:c7:02:8c:30:02:dc:2f:8f:14:5d:b1: 0e:0f:4d:c1:f6:44:e0:85:f9:39:34:c7:7e:4f:eb:ba:56:9b: f7:26:b5:d2:30:2d:20:64:0a:ae:e3:92:23:62:6c:30:db:90: 14:91:53:6d:55:f0:ce:79:04:ae:66:05:4f:26:b5:d0:aa:78: 1a:12:8d:7f:91:a1:fc:da:1e:ca:06:88:e6:6a:b7:ae:b9:dd: 58:93:d9:61:05:d9:ed:19:3a:e6:72:66:7f:94:54:40:52:20: 3d:84:ba:72:a7:3c:7c:80:0c:81:40:c8:5c:84:c9:37:df:da: fb:9c:08:02:d8:bb:d1:6f:4e:8e:1d:4f:eb:8b:f8:37:ab:49: 80:f0:a0:cc:fa:82:c6:b6:99:df:94:6b:10:ce:13:c7:8a:f6: b1:eb:9a:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYyNkYxMTAvBgNVBAUTKDY5NUM0NURBNDI0NTNCNEUwQjA2MkJGMTdEQkY0NDcy NUM3ODgzODcwHhcNMjUwNjA0MTQ0MDI1WhcNMjUwNjExMTQ0MDI1WjAYMRYwFAYD VQQDEw02ODQwNWFkOS0zMWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1EzBsluQhwvUKROTbBHdF53fdcBeN9spiaEshMr7xcAuShQli1tA2XZnUDiz CfxOMLmOCNcMDVaxRW+otplodxI2fbi4wTkvF+6nLkys6RRPvq3WCps79sP9B65C /sKPCD/RgxNEHEOtOmafx1Gb8Qw4sOnrkXDKLwAT9L6MID94p072xV0PNkQw2xem 6FK+DhDLdgsKXRNBYMHzFIz5I9KSavYKgIMpAxGHoAcUeqYarS5UY0NCVgcbGpdS BmMSDy/6FJTd8TzuR0cY6WeL4KC0xCODCXf6bhJ92xNa4PG7TCHJ+OpA7UenDFZh alim0+u195WnEb5Z0SUugDQhqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACDEpkn Bulp8rykADxrvKjXasfhMB8GA1UdIwQYMBaAFGlcRdpCRTtOCwYr8X2/RHJceIOH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjI2Ri84NDZFQzYyRUE3 OEUxMUU1ODAyNDFCNjJDNEY5QUUwMi9hVnhGMmtKRk8wNExCaXZ4ZmI5RWNseDRn NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FWeEYya0pGTzA0TEJpdnhmYjlFY2x4NGc0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjI2Ri84NDZFQzYyRUE3OEUxMUU1ODAyNDFCNjJDNEY5QUUwMi9hVnhGMmtKRk8w NExCaXZ4ZmI5RWNseDRnNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzHSGuAYDACeHTc3JjTI4zZCzfrmPHxCjEzgywlo/RWcY0vVtdk+VI BQE4gDYsO6ulHvdDNzQo6iGebX0PGesvVjnhHy+iymbuzggSePc3kG5mu6E254BU 3LBEMloh4+m8xwKMMALcL48UXbEOD03B9kTghfk5NMd+T+u6Vpv3JrXSMC0gZAqu 45IjYmww25AUkVNtVfDOeQSuZgVPJrXQqngaEo1/kaH82h7KBojmareuud1Yk9lh BdntGTrmcmZ/lFRAUiA9hLpypzx8gAyBQMhchMk339r7nAgC2LvRb06OHU/ri/g3 q0mA8KDM+oLGtpnflGsQzhPHivax65pD -----END CERTIFICATE-----Generated at Thu Jun 5 20:00:33 2025 by rpki-client