$ rpki-client -vvf rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.mft File: 0KCTtlEHkzVIStC6HXZhX1w2aIo.mft (raw, json) Hash identifier: tzXcqfIsejXv8ej6VzTF7d+YkJT9wFTLgzSWbypmMhs= Subject key identifier: 7A:97:F8:E9:E7:83:AD:CC:E6:67:4E:26:EA:75:CE:98:9D:8B:E7:1C Authority key identifier: D0:A0:93:B6:51:07:93:35:48:4A:D0:BA:1D:76:61:5F:5C:36:68:8A Certificate issuer: /CN=A91E275B/serialNumber=D0A093B651079335484AD0BA1D76615F5C36688A Certificate serial: 331A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KCTtlEHkzVIStC6HXZhX1w2aIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.mft Manifest number: 9A24 Signing time: Sat 31 May 2025 15:16:19 +0000 Manifest this update: Sat 31 May 2025 15:16:19 +0000 Manifest next update: Sat 07 Jun 2025 15:16:19 +0000 Files and hashes: 1: 0KCTtlEHkzVIStC6HXZhX1w2aIo.crl (hash: LvQFCrfog+ND7ove3nDmzPFL/50pRuXaNS9lh/ovGyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.crl rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KCTtlEHkzVIStC6HXZhX1w2aIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:16:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13082 (0x331a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E275B, serialNumber=D0A093B651079335484AD0BA1D76615F5C36688A Validity Not Before: May 31 15:16:19 2025 GMT Not After : Jun 7 15:16:19 2025 GMT Subject: CN=683b1d43-94f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:75:c3:84:de:96:94:5a:cf:cb:d6:79:78:4b: 38:f2:7f:ea:f0:d3:fc:e2:d6:1d:0b:00:57:7c:3a: cb:9f:56:a8:af:bd:9b:b2:5f:c8:16:93:10:0e:37: 78:b8:77:3d:04:10:9b:83:51:c4:83:bd:d5:68:d3: 11:56:c1:fb:6a:65:ab:3b:8d:b4:c5:e4:c5:87:d0: 7e:a1:a0:ec:75:00:30:db:60:b4:65:98:48:36:f2: 0d:12:e5:d1:83:da:21:a7:3b:e5:48:f8:b8:17:48: 2f:7b:ea:aa:3a:c1:65:17:c2:f1:4c:33:87:28:8d: cd:ab:7e:bf:ef:06:78:ad:b3:4d:3e:55:6f:d5:66: 6c:78:0e:b9:94:36:79:14:96:61:6b:99:d1:b0:72: d5:f5:f1:d2:87:c9:15:89:5c:f6:e9:53:f6:e7:7f: 26:ae:34:b6:8e:00:5b:8d:5f:85:26:ff:51:27:c7: d9:f2:52:6b:2d:ad:ca:d6:81:23:ed:02:2d:20:96: a9:e7:24:ab:fe:d0:73:26:d4:f2:7a:87:46:78:11: d1:bf:78:55:9d:3d:6e:dd:c3:fd:30:b9:10:0b:50: cc:60:3c:4a:ed:ff:87:d4:87:02:4b:fe:18:d6:fe: 1d:26:3e:f8:33:67:f7:71:32:ff:c7:fb:d6:6e:5d: 6a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:97:F8:E9:E7:83:AD:CC:E6:67:4E:26:EA:75:CE:98:9D:8B:E7:1C X509v3 Authority Key Identifier: keyid:D0:A0:93:B6:51:07:93:35:48:4A:D0:BA:1D:76:61:5F:5C:36:68:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KCTtlEHkzVIStC6HXZhX1w2aIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:b1:ef:3e:b2:32:45:31:bb:66:3d:ca:21:98:28:47:73:3c: 07:fe:67:78:e6:19:c1:8c:44:42:f0:09:df:ec:5a:9d:99:fb: 6a:b2:72:c0:54:a2:a9:57:13:e5:29:5b:fa:34:e4:ba:36:63: 49:ad:e2:91:70:6c:9a:8b:d0:b4:8a:50:31:22:01:46:d7:af: 40:13:1f:da:ee:87:7f:29:d4:8f:56:2f:24:bf:0c:d5:f8:28: 7e:15:6a:4f:69:b2:56:9d:5b:73:69:6d:68:6a:82:88:42:11: a6:92:d0:6b:8d:66:5d:64:8e:aa:d0:f4:1f:12:95:fb:fc:28: 97:bb:61:7b:e5:55:32:6f:36:9e:4d:63:4f:f1:0b:93:bc:e6: 25:ec:93:30:d6:7e:45:8f:8d:ba:dd:64:24:b9:74:ed:c2:68: e8:8f:a5:86:09:85:4a:2a:60:32:39:44:0e:6e:50:1f:48:68: 41:a1:fb:a7:83:d4:1f:62:66:38:3a:e7:b5:10:e1:5a:79:07: 92:04:62:56:bd:61:77:30:e5:4d:a3:a0:fc:a5:e4:bf:d6:34: 75:d3:33:2b:69:39:c8:1a:52:c3:07:ec:39:7b:95:45:b3:c1: 90:18:1d:fb:99:d4:5c:72:c4:be:9e:3f:87:2b:68:d1:5f:fe: e1:e2:cd:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI3NUIxMTAvBgNVBAUTKEQwQTA5M0I2NTEwNzkzMzU0ODRBRDBCQTFENzY2MTVG NUMzNjY4OEEwHhcNMjUwNTMxMTUxNjE5WhcNMjUwNjA3MTUxNjE5WjAYMRYwFAYD VQQDEw02ODNiMWQ0My05NGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnXDhN6WlFrPy9Z5eEs48n/q8NP84tYdCwBXfDrLn1aor72bsl/IFpMQDjd4 uHc9BBCbg1HEg73VaNMRVsH7amWrO420xeTFh9B+oaDsdQAw22C0ZZhINvINEuXR g9ohpzvlSPi4F0gve+qqOsFlF8LxTDOHKI3Nq36/7wZ4rbNNPlVv1WZseA65lDZ5 FJZha5nRsHLV9fHSh8kViVz26VP2538mrjS2jgBbjV+FJv9RJ8fZ8lJrLa3K1oEj 7QItIJap5ySr/tBzJtTyeodGeBHRv3hVnT1u3cP9MLkQC1DMYDxK7f+H1IcCS/4Y 1v4dJj74M2f3cTL/x/vWbl1qqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHqX+Onn g63M5mdOJup1zpidi+ccMB8GA1UdIwQYMBaAFNCgk7ZRB5M1SErQuh12YV9cNmiK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjc1Qi9BQjIwMjIzMDFE QTkxMUUyQjA5NUM0QTQwOEIwMkNEMi8wS0NUdGxFSGt6VklTdEM2SFhaaFgxdzJh SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBLQ1R0bEVIa3pWSVN0QzZIWFpoWDF3MmFJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjc1Qi9BQjIwMjIzMDFEQTkxMUUyQjA5NUM0QTQwOEIwMkNEMi8wS0NUdGxFSGt6 VklTdEM2SFhaaFgxdzJhSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZse8+sjJFMbtmPcohmChHczwH/md45hnBjERC8Anf7FqdmftqsnLA VKKpVxPlKVv6NOS6NmNJreKRcGyai9C0ilAxIgFG169AEx/a7od/KdSPVi8kvwzV +Ch+FWpPabJWnVtzaW1oaoKIQhGmktBrjWZdZI6q0PQfEpX7/CiXu2F75VUybzae TWNP8QuTvOYl7JMw1n5Fj4263WQkuXTtwmjoj6WGCYVKKmAyOUQOblAfSGhBofun g9QfYmY4Oue1EOFaeQeSBGJWvWF3MOVNo6D8peS/1jR10zMraTnIGlLDB+w5e5VF s8GQGB37mdRccsS+nj+HK2jRX/7h4s1R -----END CERTIFICATE-----Generated at Mon Jun 2 06:27:17 2025 by rpki-client