$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft File: Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft (raw, json) Hash identifier: Nk8NYXkAfmLjtmFpV0sRVtFS7ZBatQLES8pIZA8Tyzc= Subject key identifier: 38:75:DF:CE:4A:41:3E:DC:15:92:3D:2E:65:A2:43:11:7C:04:17:48 Authority key identifier: 0E:1F:62:4A:23:59:51:99:08:6E:18:2B:5F:C7:C5:24:63:A9:E5:5E Certificate issuer: /CN=A91E1936/serialNumber=0E1F624A23595199086E182B5FC7C52463A9E55E Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft Manifest number: FA Signing time: Fri 13 Jun 2025 04:06:51 +0000 Manifest this update: Fri 13 Jun 2025 04:06:51 +0000 Manifest next update: Fri 20 Jun 2025 04:06:51 +0000 Files and hashes: 1: Dh9iSiNZUZkIbhgrX8fFJGOp5V4.crl (hash: 5KkNqyEoUdlVJaxtH95Xf6hVlh8PY3/mMdcUlW3UHzE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.crl rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:06:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1936, serialNumber=0E1F624A23595199086E182B5FC7C52463A9E55E Validity Not Before: Jun 13 04:06:51 2025 GMT Not After : Jun 20 04:06:51 2025 GMT Subject: CN=684ba3db-d826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:50:31:22:4b:03:06:d4:c9:eb:7e:bb:71:d8: ca:4a:26:a0:3c:ed:09:82:a6:b9:4b:89:67:37:79: 4b:4d:22:13:46:78:82:96:f8:60:35:c5:3f:9c:d9: 12:83:c4:92:96:72:2f:64:54:ed:d8:49:ef:78:7f: 65:01:d8:56:56:dd:61:8a:ef:bc:24:c0:14:2b:5e: 81:03:12:8c:1b:08:2f:37:0d:ee:aa:1f:5f:74:ed: 02:12:81:6a:86:24:85:e5:c0:e4:ed:19:92:70:66: 96:4d:65:d9:01:0e:aa:99:98:cc:11:bb:32:58:7d: ac:02:be:8d:89:84:f1:48:58:4b:ea:c5:bb:4a:77: 86:8e:b7:06:7a:82:2f:40:e0:df:c0:af:37:43:1f: e5:22:d1:dc:9e:c1:ed:8f:f9:1b:0b:56:86:3e:01: b4:ff:8f:e7:22:48:18:f9:d6:46:1a:62:c3:1a:b2: bd:e7:ca:db:85:d5:6a:51:41:b1:be:4d:02:f8:f9: 92:3b:4a:9e:34:46:9c:1d:98:48:25:e1:9f:ad:4a: 95:50:16:f6:7a:8b:c5:8b:fa:91:84:59:c1:8b:1c: 9a:cd:69:7e:18:13:8c:c3:3f:fd:ce:23:fe:14:58: ae:30:55:be:68:89:ab:b6:ea:21:06:76:0d:4a:f7: 3a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:75:DF:CE:4A:41:3E:DC:15:92:3D:2E:65:A2:43:11:7C:04:17:48 X509v3 Authority Key Identifier: keyid:0E:1F:62:4A:23:59:51:99:08:6E:18:2B:5F:C7:C5:24:63:A9:E5:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:94:2b:be:b3:55:f3:6c:a1:06:01:76:1a:42:27:dc:50:63: d8:c4:1d:14:b8:fc:90:81:e4:28:3a:d7:7e:19:54:b1:d8:bf: 7f:9c:2d:14:be:db:ac:b0:fc:3c:01:fc:22:b6:27:06:d3:cd: f9:64:ef:e7:8e:e0:74:49:dc:ea:4a:76:38:5e:df:36:99:e4: 99:e1:f9:08:62:82:86:b6:58:25:d0:df:28:77:50:28:e7:48: 6e:61:1c:18:00:fb:42:79:aa:cb:d0:bf:66:3a:e6:1d:15:c8: 57:e3:bd:2c:c4:fa:50:46:f6:5b:62:48:7a:fd:0f:7e:08:32: 0a:26:dc:ad:53:22:a1:f7:16:71:90:cc:57:5e:27:a3:dd:21: d1:cf:97:c5:52:3f:46:78:b9:fd:db:9a:a1:25:71:cc:75:6f: 00:14:ed:f6:59:ec:ef:93:78:4d:35:d0:62:de:d8:31:58:70: 2e:60:bd:7c:69:ce:8a:f1:16:f0:48:18:6a:7e:ac:dd:83:61: 55:6a:56:40:6f:f4:00:15:47:04:f2:68:49:9b:04:09:9a:b0: 62:7c:22:2f:55:fa:43:55:8d:2d:25:a5:45:2b:fd:2a:8c:74: 94:a1:ea:22:e5:e1:78:6a:9d:de:47:6b:74:ed:18:df:a9:b5: 68:2c:e2:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE5MzYxMTAvBgNVBAUTKDBFMUY2MjRBMjM1OTUxOTkwODZFMTgyQjVGQzdDNTI0 NjNBOUU1NUUwHhcNMjUwNjEzMDQwNjUxWhcNMjUwNjIwMDQwNjUxWjAYMRYwFAYD VQQDEw02ODRiYTNkYi1kODI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2FAxIksDBtTJ6367cdjKSiagPO0Jgqa5S4lnN3lLTSITRniClvhgNcU/nNkS g8SSlnIvZFTt2EnveH9lAdhWVt1hiu+8JMAUK16BAxKMGwgvNw3uqh9fdO0CEoFq hiSF5cDk7RmScGaWTWXZAQ6qmZjMEbsyWH2sAr6NiYTxSFhL6sW7SneGjrcGeoIv QODfwK83Qx/lItHcnsHtj/kbC1aGPgG0/4/nIkgY+dZGGmLDGrK958rbhdVqUUGx vk0C+PmSO0qeNEacHZhIJeGfrUqVUBb2eovFi/qRhFnBixyazWl+GBOMwz/9ziP+ FFiuMFW+aImrtuohBnYNSvc6ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDh1385K QT7cFZI9LmWiQxF8BBdIMB8GA1UdIwQYMBaAFA4fYkojWVGZCG4YK1/HxSRjqeVe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTkzNi83N0E3N0QzMEM2 MzYxMUVFQUJDQzA0MEJDNEY5QUUwMi9EaDlpU2lOWlVaa0liaGdyWDhmRkpHT3A1 VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RoOWlTaU5aVVprSWJoZ3JYOGZGSkdPcDVWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTkzNi83N0E3N0QzMEM2MzYxMUVFQUJDQzA0MEJDNEY5QUUwMi9EaDlpU2lOWlVa a0liaGdyWDhmRkpHT3A1VjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2lCu+s1XzbKEGAXYaQifcUGPYxB0UuPyQgeQoOtd+GVSx2L9/nC0U vtussPw8AfwiticG0835ZO/njuB0SdzqSnY4Xt82meSZ4fkIYoKGtlgl0N8od1Ao 50huYRwYAPtCearL0L9mOuYdFchX470sxPpQRvZbYkh6/Q9+CDIKJtytUyKh9xZx kMxXXiej3SHRz5fFUj9GeLn925qhJXHMdW8AFO32Wezvk3hNNdBi3tgxWHAuYL18 ac6K8RbwSBhqfqzdg2FValZAb/QAFUcE8mhJmwQJmrBifCIvVfpDVY0tJaVFK/0q jHSUoeoi5eF4ap3eR2t07RjfqbVoLOKU -----END CERTIFICATE-----Generated at Sat Jun 14 14:02:07 2025 by rpki-client