$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft File: foUuJJ2cR8tllecBfQfeJ8OUrwk.mft (raw, json) Hash identifier: O9sBE71UFeKszoIOf+/RVCBtj1RlrXGs8RGB+G0ZNOU= Subject key identifier: 6A:09:35:7D:A7:F0:44:F9:0F:79:00:28:09:F5:36:AC:B0:F6:2A:12 Authority key identifier: 7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09 Certificate issuer: /CN=A91E5D61/serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09 Certificate serial: 34CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft Manifest number: 4783 Signing time: Sat 31 May 2025 14:21:00 +0000 Manifest this update: Sat 31 May 2025 14:20:59 +0000 Manifest next update: Sat 07 Jun 2025 14:20:59 +0000 Files and hashes: 1: foUuJJ2cR8tllecBfQfeJ8OUrwk.crl (hash: orkSSS2/w82U9OR+TlgDszIPAzPiihEPhWOtuwC4VYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13517 (0x34cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09 Validity Not Before: May 31 14:20:59 2025 GMT Not After : Jun 7 14:20:59 2025 GMT Subject: CN=683b104c-11a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:76:5d:4a:d4:88:ef:7c:dd:28:0f:bb:9c:5e: 10:36:78:7f:e6:83:84:01:3c:b0:d5:dd:dc:ee:ae: 1d:71:2b:fb:c5:37:6c:53:79:81:55:9b:c8:00:9a: 83:cd:9d:40:b6:fc:4d:a2:f9:ca:dd:d0:a8:1b:fb: 58:c9:86:41:da:2c:f4:7f:64:b9:49:b6:ec:90:da: ce:6e:55:a3:96:e3:0f:9e:9a:0e:9c:25:02:84:74: 1f:10:36:3f:8a:a8:c2:8b:be:b2:09:9a:95:5d:92: d0:85:b4:c5:16:9d:2d:49:70:bd:16:6a:5b:49:a8: 23:0f:c1:23:63:52:7f:ec:ac:95:cb:50:0d:93:e8: a0:d8:3c:44:02:bc:a9:e0:2c:7b:8b:59:d9:a3:4b: bc:e3:77:66:44:a4:e1:c4:f3:34:5f:c7:0b:95:32: 3a:e3:61:22:16:75:71:82:e0:12:f4:b4:11:74:57: 99:13:35:03:1d:7c:b9:f3:cc:99:21:8a:18:28:81: 63:d2:d7:26:14:41:69:93:33:84:44:a4:80:b0:93: 22:6d:1a:99:55:cb:17:88:48:a1:7f:5d:7d:11:26: d9:cf:c2:0a:f6:ed:86:d4:f0:9f:1e:f8:3f:74:a3: c9:f5:af:d2:76:40:f9:ff:48:52:bc:18:2f:56:35: 50:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:09:35:7D:A7:F0:44:F9:0F:79:00:28:09:F5:36:AC:B0:F6:2A:12 X509v3 Authority Key Identifier: keyid:7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:ad:e3:d6:14:23:42:a7:45:42:c6:79:51:2f:b6:c2:3d:fa: 57:a1:93:25:84:90:05:b5:fb:b6:e1:22:7b:2f:54:5d:37:72: 79:ae:81:7e:83:ec:88:f4:13:bc:3c:4a:bf:a7:a4:f6:4a:e0: 83:11:f9:4a:9f:7e:d6:4b:2e:01:bc:03:7f:4e:7f:91:e8:70: 73:5a:6b:32:26:d2:5c:c0:b0:72:2a:b1:ac:e5:4b:b1:9f:27: 01:3f:91:cf:c0:b7:c5:6f:2e:c3:f5:6e:1f:4b:48:28:ca:db: cd:8f:08:a6:85:e8:39:a8:06:ee:64:e2:64:c4:ee:e0:56:58: b7:53:f6:e1:e4:a5:ff:dd:da:6f:fb:47:ba:3a:2d:21:f2:47: 60:e6:ee:46:63:28:f8:53:50:23:9e:06:d8:41:eb:52:b2:fb: 8d:5c:c4:13:90:2b:ab:d7:98:8c:95:06:79:d5:b9:92:49:18: 4d:8e:46:2b:a9:67:0c:e7:b6:7c:97:db:98:30:2f:dc:44:2b: 0c:8f:61:71:eb:81:a7:b5:3a:8a:06:74:09:bd:81:63:d2:ba: 72:09:59:b7:b7:97:94:06:d8:89:be:59:30:56:b0:53:ec:e6: ac:0a:f9:be:31:08:21:8e:2b:17:b9:e6:93:02:27:5a:77:9c: bc:08:02:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDdFODUyRTI0OUQ5QzQ3Q0I2NTk1RTcwMTdEMDdERTI3 QzM5NEFGMDkwHhcNMjUwNTMxMTQyMDU5WhcNMjUwNjA3MTQyMDU5WjAYMRYwFAYD VQQDEw02ODNiMTA0Yy0xMWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3ZdStSI73zdKA+7nF4QNnh/5oOEATyw1d3c7q4dcSv7xTdsU3mBVZvIAJqD zZ1AtvxNovnK3dCoG/tYyYZB2iz0f2S5SbbskNrOblWjluMPnpoOnCUChHQfEDY/ iqjCi76yCZqVXZLQhbTFFp0tSXC9FmpbSagjD8EjY1J/7KyVy1ANk+ig2DxEAryp 4Cx7i1nZo0u843dmRKThxPM0X8cLlTI642EiFnVxguAS9LQRdFeZEzUDHXy588yZ IYoYKIFj0tcmFEFpkzOERKSAsJMibRqZVcsXiEihf119ESbZz8IK9u2G1PCfHvg/ dKPJ9a/SdkD5/0hSvBgvVjVQcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGoJNX2n 8ET5D3kAKAn1Nqyw9ioSMB8GA1UdIwQYMBaAFH6FLiSdnEfLZZXnAX0H3ifDlK8J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8wQzZBMEM5RTFE NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9mb1V1SkoyY1I4dGxsZWNCZlFmZUo4T1Vy d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZvVXVKSjJjUjh0bGxlY0JmUWZlSjhPVXJ3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS8wQzZBMEM5RTFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9mb1V1SkoyY1I4 dGxsZWNCZlFmZUo4T1Vyd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRrePWFCNCp0VCxnlRL7bCPfpXoZMlhJAFtfu24SJ7L1RdN3J5roF+ g+yI9BO8PEq/p6T2SuCDEflKn37WSy4BvAN/Tn+R6HBzWmsyJtJcwLByKrGs5Uux nycBP5HPwLfFby7D9W4fS0goytvNjwimheg5qAbuZOJkxO7gVli3U/bh5KX/3dpv +0e6Oi0h8kdg5u5GYyj4U1AjngbYQetSsvuNXMQTkCur15iMlQZ51bmSSRhNjkYr qWcM57Z8l9uYMC/cRCsMj2Fx64GntTqKBnQJvYFj0rpyCVm3t5eUBtiJvlkwVrBT 7OasCvm+MQghjisXueaTAidad5y8CAJM -----END CERTIFICATE-----Generated at Sat May 31 17:22:05 2025 by rpki-client