$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft File: mFpmWpz7T1ygDsqL_rgGML9PSBY.mft (raw, json) Hash identifier: /Sy7tWWLWiQ2O60yR+Yadmx2ez1yN0Jgw49owtmlbC4= Subject key identifier: CE:B5:24:02:D1:83:E3:8B:51:FA:4B:71:64:AB:FD:49:0F:46:99:6E Authority key identifier: 98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16 Certificate issuer: /CN=A91E6D5D/serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816 Certificate serial: 2539 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft Manifest number: 9F41 Signing time: Fri 30 May 2025 14:30:01 +0000 Manifest this update: Fri 30 May 2025 14:30:01 +0000 Manifest next update: Fri 06 Jun 2025 14:30:01 +0000 Files and hashes: 1: mFpmWpz7T1ygDsqL_rgGML9PSBY.crl (hash: vx8f1q0sN+NftrFcwa3b+Px83SkCutdzQU1Xa5om2R0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 14:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9529 (0x2539) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816 Validity Not Before: May 30 14:30:01 2025 GMT Not After : Jun 6 14:30:01 2025 GMT Subject: CN=6839c0e9-5fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1c:32:c1:83:27:31:b5:ab:22:9d:68:a2:09: 26:d2:2b:41:92:83:f3:c2:d2:0a:f2:b7:57:c5:a9: 06:6a:f1:95:b2:6c:78:53:8a:93:d5:d4:69:86:ff: ca:cb:47:fe:71:73:db:1f:b9:6c:bf:48:43:36:40: 9c:80:a3:f1:5b:0a:69:56:26:fd:22:60:8e:79:d6: 9d:f0:a5:38:f4:9d:3a:fe:a6:70:46:57:41:93:eb: 41:43:9c:1d:7a:8a:cf:cd:73:35:04:4f:17:d4:02: dd:43:96:9a:6b:12:8d:65:eb:8b:e9:44:0d:5a:b7: c9:da:8f:af:af:d1:05:0c:ac:b9:4d:9d:ed:d7:4e: e1:ee:52:76:ba:30:71:b6:46:5d:29:5f:6e:39:d3: 7d:d1:99:65:aa:40:18:4a:8f:70:a5:71:a8:56:ec: 49:08:42:6c:bf:fc:41:90:0f:f8:90:3b:eb:ad:5c: 2f:52:fc:0c:21:84:75:ce:a2:87:2b:ac:78:cb:4b: 1a:c2:cf:88:2d:c4:bd:ef:1c:bb:9f:ef:a0:7c:e4: 45:e7:9f:be:8c:57:fc:80:3b:f5:c3:18:ff:58:7c: 5d:86:a6:f6:e4:19:fc:91:fe:85:69:18:44:b1:d9: 4a:e8:f6:f3:ba:93:83:9c:cc:8f:3f:d0:be:31:d2: ae:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B5:24:02:D1:83:E3:8B:51:FA:4B:71:64:AB:FD:49:0F:46:99:6E X509v3 Authority Key Identifier: keyid:98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:4d:2b:4c:23:68:66:c2:53:52:ac:67:64:68:30:ab:58:6d: e2:77:3b:2b:17:95:8f:c9:22:53:97:76:4c:f5:cc:fc:ee:2d: 5f:af:dd:8d:a9:ed:44:a8:2f:5c:c4:43:53:cb:86:67:6a:8b: c9:3c:26:0f:5c:55:7c:5c:06:57:cb:d8:d9:5e:f9:ed:9b:a5: f7:cd:27:e1:90:b6:85:83:44:71:98:eb:52:b2:7a:96:06:87: f5:66:3a:5b:a6:9d:80:a5:db:b8:56:b5:5f:ea:eb:eb:ac:b7: 8b:77:63:36:02:18:41:1d:3f:3a:7c:5d:95:ea:1e:1f:84:ef: 03:ed:13:f3:5a:a2:cb:3e:5e:a1:b0:bb:1f:83:2f:ab:fb:40: 76:d4:a1:e3:ca:42:12:65:26:c7:3d:97:43:10:0a:62:af:e9: 13:ab:07:ee:ea:f5:95:08:bb:7e:3a:51:92:a5:b4:34:3d:8f: 09:ce:9b:1a:db:e9:c2:73:1d:4f:1d:75:0a:12:6d:00:6a:33: ef:d9:8a:3e:67:79:36:ea:91:b0:0a:17:08:67:a0:a9:e6:27: 04:5e:bf:82:b8:c5:51:86:f9:01:61:b1:a5:3b:ee:94:02:3a: f1:39:3e:db:97:ab:e4:13:9e:d1:3b:8c:fb:53:3a:d8:54:6e: 2e:cd:4a:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDk4NUE2NjVBOUNGQjRGNUNBMDBFQ0E4QkZFQjgwNjMw QkY0RjQ4MTYwHhcNMjUwNTMwMTQzMDAxWhcNMjUwNjA2MTQzMDAxWjAYMRYwFAYD VQQDEw02ODM5YzBlOS01ZmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBwywYMnMbWrIp1oogkm0itBkoPzwtIK8rdXxakGavGVsmx4U4qT1dRphv/K y0f+cXPbH7lsv0hDNkCcgKPxWwppVib9ImCOedad8KU49J06/qZwRldBk+tBQ5wd eorPzXM1BE8X1ALdQ5aaaxKNZeuL6UQNWrfJ2o+vr9EFDKy5TZ3t107h7lJ2ujBx tkZdKV9uOdN90ZllqkAYSo9wpXGoVuxJCEJsv/xBkA/4kDvrrVwvUvwMIYR1zqKH K6x4y0saws+ILcS97xy7n++gfORF55++jFf8gDv1wxj/WHxdhqb25Bn8kf6FaRhE sdlK6PbzupODnMyPP9C+MdKuKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM61JALR g+OLUfpLcWSr/UkPRpluMB8GA1UdIwQYMBaAFJhaZlqc+09coA7Ki/64BjC/T0gW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9tRnBtV3B6N1QxeWdEc3FMX3JnR01MOVBT QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21GcG1XcHo3VDF5Z0RzcUxfcmdHTUw5UFNCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9tRnBtV3B6N1Qx eWdEc3FMX3JnR01MOVBTQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPTStMI2hmwlNSrGdkaDCrWG3idzsrF5WPySJTl3ZM9cz87i1fr92N qe1EqC9cxENTy4ZnaovJPCYPXFV8XAZXy9jZXvntm6X3zSfhkLaFg0RxmOtSsnqW Bof1Zjpbpp2Apdu4VrVf6uvrrLeLd2M2AhhBHT86fF2V6h4fhO8D7RPzWqLLPl6h sLsfgy+r+0B21KHjykISZSbHPZdDEApir+kTqwfu6vWVCLt+OlGSpbQ0PY8Jzpsa 2+nCcx1PHXUKEm0AajPv2Yo+Z3k26pGwChcIZ6Cp5icEXr+CuMVRhvkBYbGlO+6U AjrxOT7bl6vkE57RO4z7UzrYVG4uzUrB -----END CERTIFICATE-----Generated at Sat May 31 14:59:33 2025 by rpki-client