$ rpki-client -vvf rpki.apnic.net/member_repository/A91E299A/A0AC0992DDF711EF80D2156FC4F9AE02/edSLikSpvRZsNNwg7IxXE_MJLss.mft File: edSLikSpvRZsNNwg7IxXE_MJLss.mft (raw, json) Hash identifier: VBva2cxiQ4BRMIX/9MM+eIQjmDTIjv3atbsPcZ9asG0= Subject key identifier: 52:E6:4E:E7:F6:8C:35:4F:E6:83:FC:1A:A1:37:6C:5F:FA:F8:46:E5 Authority key identifier: 79:D4:8B:8A:44:A9:BD:16:6C:34:DC:20:EC:8C:57:13:F3:09:2E:CB Certificate issuer: /CN=A91E299A/serialNumber=79D48B8A44A9BD166C34DC20EC8C5713F3092ECB Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edSLikSpvRZsNNwg7IxXE_MJLss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E299A/A0AC0992DDF711EF80D2156FC4F9AE02/edSLikSpvRZsNNwg7IxXE_MJLss.mft Manifest number: 3F Signing time: Sat 31 May 2025 07:02:43 +0000 Manifest this update: Sat 31 May 2025 07:02:42 +0000 Manifest next update: Sat 07 Jun 2025 07:02:42 +0000 Files and hashes: 1: edSLikSpvRZsNNwg7IxXE_MJLss.crl (hash: VWJIC879a3XRQirT2eVz+F3UWsIh/aW3e+TINKlUal8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E299A/A0AC0992DDF711EF80D2156FC4F9AE02/edSLikSpvRZsNNwg7IxXE_MJLss.crl rsync://rpki.apnic.net/member_repository/A91E299A/A0AC0992DDF711EF80D2156FC4F9AE02/edSLikSpvRZsNNwg7IxXE_MJLss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edSLikSpvRZsNNwg7IxXE_MJLss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E299A, serialNumber=79D48B8A44A9BD166C34DC20EC8C5713F3092ECB Validity Not Before: May 31 07:02:42 2025 GMT Not After : Jun 7 07:02:42 2025 GMT Subject: CN=683aa993-485e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:66:5e:92:bd:be:47:17:81:6d:c4:9b:0d:2f: 7d:f6:60:b8:16:08:ea:76:cd:84:76:2c:6d:65:14: 18:27:1e:a4:f8:51:17:b5:1f:f5:9b:dd:ac:ee:85: 68:4e:ef:59:c3:31:8e:5f:b6:5d:41:f2:d7:6e:7c: 12:c4:93:26:3d:c2:0c:84:a7:68:9d:92:40:dd:fe: 70:8c:b1:35:3f:32:85:5c:d1:94:51:8f:fb:57:6e: 55:db:e1:b6:1d:2a:ea:27:48:8f:8f:c9:30:1c:0f: 1a:55:fa:d1:0c:33:92:3b:92:95:0e:c9:e4:6b:3f: c3:60:de:43:4c:eb:c5:05:d5:2f:4e:06:80:35:a0: 19:90:f0:8b:13:af:fb:0c:76:48:7a:37:a3:e3:97: 96:77:67:cf:a5:f3:57:57:6a:df:f6:a2:63:cd:2a: 73:20:28:9b:48:7e:b5:fa:75:58:6f:dd:71:a2:32: 37:af:0d:cd:7a:c4:69:5e:24:70:d9:b7:f5:00:af: 4c:c3:b8:2d:74:3c:77:a2:b5:7f:f5:07:dd:70:81: 6d:9b:9e:93:57:4f:03:63:0e:cd:18:4c:2b:33:a0: d3:ac:da:f9:27:30:04:59:ba:ae:28:27:38:99:5c: 41:e0:e3:11:03:d0:54:67:0f:4d:68:7e:7b:9e:5e: 4b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E6:4E:E7:F6:8C:35:4F:E6:83:FC:1A:A1:37:6C:5F:FA:F8:46:E5 X509v3 Authority Key Identifier: keyid:79:D4:8B:8A:44:A9:BD:16:6C:34:DC:20:EC:8C:57:13:F3:09:2E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E299A/A0AC0992DDF711EF80D2156FC4F9AE02/edSLikSpvRZsNNwg7IxXE_MJLss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edSLikSpvRZsNNwg7IxXE_MJLss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E299A/A0AC0992DDF711EF80D2156FC4F9AE02/edSLikSpvRZsNNwg7IxXE_MJLss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:3a:36:d6:ea:df:b0:8b:ab:07:a9:07:14:71:89:f6:3b:82: 5d:dd:86:20:e4:1c:5f:c9:64:5c:d9:62:a5:41:87:95:b1:1d: d8:e5:f4:64:f4:4a:91:02:a6:dd:b9:93:91:9d:ac:78:b6:ed: e7:6a:c8:28:93:82:a7:fa:af:93:92:9f:3a:c4:af:a5:2c:c6: 7b:d3:a1:cf:c5:d5:53:5a:74:7a:ac:8b:0b:1d:9e:94:25:3f: 15:1f:55:6a:0e:9b:92:28:b4:a3:58:68:42:81:39:3f:f0:1f: d0:26:d9:38:bb:01:60:d7:2f:57:87:c5:5a:25:59:70:6e:71: e1:39:c8:c0:e1:9d:3c:49:ab:e9:9d:83:fd:cb:8c:82:e8:9f: 76:a6:b9:69:e8:b2:df:0b:0b:be:64:c6:95:e3:ef:a5:27:28: 1c:3c:68:06:57:ac:06:85:e1:09:d6:2b:50:65:bb:3b:1f:ee: 61:ba:ea:fb:08:e1:a3:a0:77:a9:86:a0:a2:bb:19:b0:06:c2: ae:e9:aa:b8:a2:7c:2d:e8:99:c0:83:9c:97:ea:75:f9:6d:6b: dc:a8:99:df:29:8e:0e:aa:ab:06:2d:b6:92:e1:77:5a:3e:ce: ba:ce:6c:70:2a:75:8e:cd:d4:34:f2:c2:7e:bc:44:f8:46:2f: 94:54:25:75 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF Mjk5QTExMC8GA1UEBRMoNzlENDhCOEE0NEE5QkQxNjZDMzREQzIwRUM4QzU3MTNG MzA5MkVDQjAeFw0yNTA1MzEwNzAyNDJaFw0yNTA2MDcwNzAyNDJaMBgxFjAUBgNV BAMTDTY4M2FhOTkzLTQ4NWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDZl6Svb5HF4FtxJsNL332YLgWCOp2zYR2LG1lFBgnHqT4URe1H/Wb3azuhWhO 71nDMY5ftl1B8tdufBLEkyY9wgyEp2idkkDd/nCMsTU/MoVc0ZRRj/tXblXb4bYd KuonSI+PyTAcDxpV+tEMM5I7kpUOyeRrP8Ng3kNM68UF1S9OBoA1oBmQ8IsTr/sM dkh6N6Pjl5Z3Z8+l81dXat/2omPNKnMgKJtIfrX6dVhv3XGiMjevDc16xGleJHDZ t/UAr0zDuC10PHeitX/1B91wgW2bnpNXTwNjDs0YTCszoNOs2vknMARZuq4oJziZ XEHg4xED0FRnD01ofnueXks7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUuZO5/aM NU/mg/waoTdsX/r4RuUwHwYDVR0jBBgwFoAUedSLikSpvRZsNNwg7IxXE/MJLssw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUyOTlBL0EwQUMwOTkyRERG NzExRUY4MEQyMTU2RkM0RjlBRTAyL2VkU0xpa1NwdlJac05Od2c3SXhYRV9NSkxz cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZWRTTGlrU3B2UlpzTk53ZzdJeFhFX01KTHNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUy OTlBL0EwQUMwOTkyRERGNzExRUY4MEQyMTU2RkM0RjlBRTAyL2VkU0xpa1NwdlJa c05Od2c3SXhYRV9NSkxzcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADU6Ntbq37CLqwepBxRxifY7gl3dhiDkHF/JZFzZYqVBh5WxHdjl9GT0 SpECpt25k5GdrHi27edqyCiTgqf6r5OSnzrEr6UsxnvToc/F1VNadHqsiwsdnpQl PxUfVWoOm5IotKNYaEKBOT/wH9Am2Ti7AWDXL1eHxVolWXBuceE5yMDhnTxJq+md g/3LjILon3amuWnost8LC75kxpXj76UnKBw8aAZXrAaF4QnWK1Bluzsf7mG66vsI 4aOgd6mGoKK7GbAGwq7pqriifC3omcCDnJfqdflta9yomd8pjg6qqwYttpLhd1o+ zrrObHAqdY7N1DTywn68RPhGL5RUJXU= -----END CERTIFICATE-----Generated at Sat May 31 16:42:05 2025 by rpki-client