$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft File: Ii81OE7WK2pwdPiC574Cnw4E40M.mft (raw, json) Hash identifier: dDJ/nvIfuBhZJUpi2FTSmFJDp2wmRgvMkRegPfMsE0g= Subject key identifier: 8F:42:69:4F:6A:A3:E9:D9:7C:9D:69:95:49:3B:F6:FE:8E:F2:2C:01 Authority key identifier: 22:2F:35:38:4E:D6:2B:6A:70:74:F8:82:E7:BE:02:9F:0E:04:E3:43 Certificate issuer: /CN=A91E5D61/serialNumber=222F35384ED62B6A7074F882E7BE029F0E04E343 Certificate serial: 34A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft Manifest number: 4732 Signing time: Mon 02 Jun 2025 14:22:11 +0000 Manifest this update: Mon 02 Jun 2025 14:22:11 +0000 Manifest next update: Mon 09 Jun 2025 14:22:11 +0000 Files and hashes: 1: Ii81OE7WK2pwdPiC574Cnw4E40M.crl (hash: aeDsOV1nJz6yma3FweyphP9xGKNhg9Fy1kgPdX1Pbq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.crl rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 14:22:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13475 (0x34a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=222F35384ED62B6A7074F882E7BE029F0E04E343 Validity Not Before: Jun 2 14:22:11 2025 GMT Not After : Jun 9 14:22:11 2025 GMT Subject: CN=683db393-03f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6c:d4:91:ee:04:fb:24:a8:9f:b6:3e:ab:df: 0a:81:d5:57:4e:18:b0:eb:ac:13:4c:21:bb:1f:94: 0d:e3:8a:33:a4:7e:8b:92:d9:47:de:12:77:50:d9: f4:3c:35:cb:b8:be:be:b3:93:5e:4e:5a:c5:19:88: 17:ab:7c:dc:ea:66:7a:e5:cc:7b:88:f4:b5:c8:35: 14:48:f8:20:ab:83:2e:2a:89:55:eb:85:df:9c:b8: ce:a1:20:e3:71:6d:95:80:35:ff:4c:3d:d5:ad:95: c6:14:41:f2:4e:6d:a4:d3:b8:dc:46:f4:85:3f:69: 88:b1:1d:a2:0f:59:93:96:e7:c8:63:dd:68:3a:61: 60:10:22:96:fd:b1:2c:30:28:77:1c:6b:ba:44:58: 24:ed:fb:1e:af:56:d0:70:63:71:7b:be:2e:00:ae: e5:7d:a9:9d:1f:09:58:8c:bd:ae:a7:e1:7f:66:9a: e8:2c:01:26:cd:fd:42:30:b9:2c:2c:a5:15:9c:44: 6c:d9:ef:a0:96:22:15:2d:52:35:6c:a9:e7:aa:92: 1d:e1:b1:23:7a:1b:32:a9:15:3c:92:b3:ed:8a:82: 94:b3:27:80:85:b1:14:c4:fb:b7:62:12:e0:64:1e: a3:38:0a:05:5d:32:17:e3:80:90:39:63:03:19:66: 6d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:42:69:4F:6A:A3:E9:D9:7C:9D:69:95:49:3B:F6:FE:8E:F2:2C:01 X509v3 Authority Key Identifier: keyid:22:2F:35:38:4E:D6:2B:6A:70:74:F8:82:E7:BE:02:9F:0E:04:E3:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:97:9c:58:7e:50:df:4c:11:79:bd:3e:1f:7d:80:cd:14:0f: 90:8a:38:80:58:aa:18:a8:78:17:01:68:11:b7:75:d6:ca:6a: 23:c7:f6:02:68:a5:ce:2d:ef:46:c6:ff:ea:87:4b:bc:f8:13: cf:b6:ce:a9:39:28:b3:47:95:fc:47:a7:61:61:aa:c7:d0:e0: 12:07:43:8d:d7:e6:7b:83:c5:67:97:9d:94:fa:44:75:4e:d3: 6e:36:f8:b3:64:a4:c8:8a:6d:cb:fc:4c:05:f7:a6:b3:4f:af: e2:46:58:26:7b:ec:b9:00:14:f6:ee:50:f6:5d:9a:6e:19:58: 9e:7d:84:06:79:e9:bb:49:aa:65:16:f1:7f:cb:88:d5:ee:fc: e0:7b:44:0d:da:c4:b4:88:dc:a6:d3:2b:ef:43:57:15:8d:33: 1b:82:03:0d:fe:52:32:16:44:4d:b4:52:21:24:6c:33:3d:d3: 34:b7:fb:a5:24:dc:2e:f1:82:15:e1:c0:7e:9d:89:24:51:93: bb:e5:74:44:7e:e2:5a:89:be:8f:de:f1:50:9d:c7:8b:ff:b1: d7:8d:7a:cd:7d:16:05:62:64:e7:43:73:90:63:f2:ed:da:0c: 86:20:6c:bf:d8:69:a1:37:a6:89:ce:8b:8d:8e:64:4c:cd:af: 08:e0:52:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDIyMkYzNTM4NEVENjJCNkE3MDc0Rjg4MkU3QkUwMjlG MEUwNEUzNDMwHhcNMjUwNjAyMTQyMjExWhcNMjUwNjA5MTQyMjExWjAYMRYwFAYD VQQDEw02ODNkYjM5My0wM2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WzUke4E+ySon7Y+q98KgdVXThiw66wTTCG7H5QN44ozpH6LktlH3hJ3UNn0 PDXLuL6+s5NeTlrFGYgXq3zc6mZ65cx7iPS1yDUUSPggq4MuKolV64XfnLjOoSDj cW2VgDX/TD3VrZXGFEHyTm2k07jcRvSFP2mIsR2iD1mTlufIY91oOmFgECKW/bEs MCh3HGu6RFgk7fser1bQcGNxe74uAK7lfamdHwlYjL2up+F/ZproLAEmzf1CMLks LKUVnERs2e+gliIVLVI1bKnnqpId4bEjehsyqRU8krPtioKUsyeAhbEUxPu3YhLg ZB6jOAoFXTIX44CQOWMDGWZtDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9CaU9q o+nZfJ1plUk79v6O8iwBMB8GA1UdIwQYMBaAFCIvNThO1itqcHT4gue+Ap8OBOND MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS9FRTY3RDhDMDFE NzgxMUUyODc5RTM4QzUwOEIwMkNEMi9JaTgxT0U3V0sycHdkUGlDNTc0Q253NEU0 ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lpODFPRTdXSzJwd2RQaUM1NzRDbnc0RTQwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS9FRTY3RDhDMDFENzgxMUUyODc5RTM4QzUwOEIwMkNEMi9JaTgxT0U3V0sy cHdkUGlDNTc0Q253NEU0ME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2l5xYflDfTBF5vT4ffYDNFA+QijiAWKoYqHgXAWgRt3XWymojx/YC aKXOLe9Gxv/qh0u8+BPPts6pOSizR5X8R6dhYarH0OASB0ON1+Z7g8Vnl52U+kR1 TtNuNvizZKTIim3L/EwF96azT6/iRlgme+y5ABT27lD2XZpuGViefYQGeem7Sapl FvF/y4jV7vzge0QN2sS0iNym0yvvQ1cVjTMbggMN/lIyFkRNtFIhJGwzPdM0t/ul JNwu8YIV4cB+nYkkUZO75XREfuJaib6P3vFQnceL/7HXjXrNfRYFYmTnQ3OQY/Lt 2gyGIGy/2GmhN6aJzouNjmRMza8I4FIr -----END CERTIFICATE-----Generated at Wed Jun 4 11:52:50 2025 by rpki-client