$ rpki-client -vvf rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft File: mIulA6dlHjJofEyW9u3hh8c9BDg.mft (raw, json) Hash identifier: ibSS+gZsrY9UjS+riVW+32+ruA3yG52Wc+k4j0hJYGs= Subject key identifier: 5A:72:EB:12:52:06:F9:A4:7D:B2:9E:38:B8:1E:BF:DC:CE:5A:9B:FC Authority key identifier: 98:8B:A5:03:A7:65:1E:32:68:7C:4C:96:F6:ED:E1:87:C7:3D:04:38 Certificate issuer: /CN=A91E923A/serialNumber=988BA503A7651E32687C4C96F6EDE187C73D0438 Certificate serial: 0CD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft Manifest number: 0E10 Signing time: Mon 02 Jun 2025 18:17:12 +0000 Manifest this update: Mon 02 Jun 2025 18:17:11 +0000 Manifest next update: Mon 09 Jun 2025 18:17:11 +0000 Files and hashes: 1: mIulA6dlHjJofEyW9u3hh8c9BDg.crl (hash: y7vZhlbyINiCxzT+UZP1+zjeZuWug6tZLAWbP/Vk4v4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.crl rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 18:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3288 (0xcd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E923A, serialNumber=988BA503A7651E32687C4C96F6EDE187C73D0438 Validity Not Before: Jun 2 18:17:11 2025 GMT Not After : Jun 9 18:17:11 2025 GMT Subject: CN=683deaa8-6c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5c:41:c1:4f:57:1c:42:90:6f:d9:51:ac:32: a5:16:86:3b:be:79:c8:ac:42:05:9c:e0:ee:9b:b7: 3d:02:44:39:e2:e4:a6:df:25:48:55:b0:45:16:12: fa:56:96:df:ca:37:ee:70:a7:04:2f:3c:6a:a7:b3: f3:02:e6:6b:ff:39:40:34:a8:73:25:c5:34:26:2f: 3c:25:7a:b5:09:b2:6d:54:1e:8f:ae:4e:ee:c1:af: 05:a6:c6:c1:19:17:dc:c0:d1:75:c2:34:48:02:79: 9e:a7:68:74:d1:85:42:68:92:fe:e0:f5:43:10:cc: b6:82:d1:10:25:c2:48:64:a2:d9:84:b2:1f:96:fa: 24:72:d0:0d:29:72:0e:21:fb:ed:7d:87:d6:61:0c: 24:e3:08:a8:32:a2:94:0f:dd:7b:12:bb:79:b6:63: 2b:0d:48:e8:a5:45:27:a2:12:6e:5b:5c:ae:a2:e0: 98:23:eb:1b:37:7b:ad:73:82:54:88:9e:5d:e6:56: aa:76:07:64:cf:1e:c3:db:bf:9f:5c:38:55:38:1b: de:75:bd:60:ef:21:db:fa:e3:40:8c:9e:a4:05:1e: b1:87:48:95:bd:78:61:d4:82:4c:96:46:29:9c:c6: 07:70:09:ff:32:9d:87:4d:60:1f:56:0b:46:35:f2: d7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:72:EB:12:52:06:F9:A4:7D:B2:9E:38:B8:1E:BF:DC:CE:5A:9B:FC X509v3 Authority Key Identifier: keyid:98:8B:A5:03:A7:65:1E:32:68:7C:4C:96:F6:ED:E1:87:C7:3D:04:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:92:cf:da:24:8e:e1:cc:38:cb:2f:66:bd:09:1e:b6:1f:39: 3e:ce:1c:c3:49:6e:ea:ba:3a:9d:2b:a4:84:ff:d9:cf:6d:d6: e3:96:14:24:54:ae:d5:5d:38:c1:4e:d8:ef:20:4d:fa:9c:d4: 7b:20:81:2e:ce:c4:10:75:b9:cf:77:e5:79:74:85:5d:af:41: 58:db:25:cf:ca:85:03:a9:70:dd:93:3d:96:fa:f6:bd:39:e0: ee:28:99:2c:e5:87:c7:be:c6:4a:6f:ad:38:2a:26:41:16:8c: d4:a6:36:86:19:85:42:60:aa:ee:e0:01:ac:6a:e1:1a:56:32: b4:bb:09:3e:54:25:8a:9d:c3:62:70:70:13:bc:b8:5e:96:e2: 85:1e:de:22:81:04:98:b6:8c:72:d7:cf:95:f1:9a:33:92:f6: 5f:b6:2b:dd:f1:39:58:33:5b:ae:f4:f9:e2:94:6c:aa:63:ad: ba:47:c0:71:9c:c0:3f:3e:d6:f2:33:8b:45:95:58:a3:59:6f: af:13:78:12:f8:15:fd:fb:7d:dd:60:a7:af:f0:90:bc:a7:a2: 53:77:ee:65:4a:11:02:9d:af:32:83:5d:af:f2:c5:42:03:40: 34:ab:2b:b1:18:b9:12:cd:53:e2:58:03:5d:b8:da:2c:89:65: 49:2d:08:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkyM0ExMTAvBgNVBAUTKDk4OEJBNTAzQTc2NTFFMzI2ODdDNEM5NkY2RURFMTg3 QzczRDA0MzgwHhcNMjUwNjAyMTgxNzExWhcNMjUwNjA5MTgxNzExWjAYMRYwFAYD VQQDEw02ODNkZWFhOC02YzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1xBwU9XHEKQb9lRrDKlFoY7vnnIrEIFnODum7c9AkQ54uSm3yVIVbBFFhL6 VpbfyjfucKcELzxqp7PzAuZr/zlANKhzJcU0Ji88JXq1CbJtVB6Prk7uwa8FpsbB GRfcwNF1wjRIAnmep2h00YVCaJL+4PVDEMy2gtEQJcJIZKLZhLIflvokctANKXIO IfvtfYfWYQwk4wioMqKUD917Ert5tmMrDUjopUUnohJuW1yuouCYI+sbN3utc4JU iJ5d5laqdgdkzx7D27+fXDhVOBvedb1g7yHb+uNAjJ6kBR6xh0iVvXhh1IJMlkYp nMYHcAn/Mp2HTWAfVgtGNfLX8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFpy6xJS BvmkfbKeOLgev9zOWpv8MB8GA1UdIwQYMBaAFJiLpQOnZR4yaHxMlvbt4YfHPQQ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTIzQS9DOUIzQ0M1NEVD MTExMUU5OEUwRjg2NDdDNEY5QUUwMi9tSXVsQTZkbEhqSm9mRXlXOXUzaGg4YzlC RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21JdWxBNmRsSGpKb2ZFeVc5dTNoaDhjOUJEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTIzQS9DOUIzQ0M1NEVDMTExMUU5OEUwRjg2NDdDNEY5QUUwMi9tSXVsQTZkbEhq Sm9mRXlXOXUzaGg4YzlCRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUks/aJI7hzDjLL2a9CR62Hzk+zhzDSW7qujqdK6SE/9nPbdbjlhQk VK7VXTjBTtjvIE36nNR7IIEuzsQQdbnPd+V5dIVdr0FY2yXPyoUDqXDdkz2W+va9 OeDuKJks5YfHvsZKb604KiZBFozUpjaGGYVCYKru4AGsauEaVjK0uwk+VCWKncNi cHATvLheluKFHt4igQSYtoxy18+V8ZozkvZftivd8TlYM1uu9PnilGyqY626R8Bx nMA/PtbyM4tFlVijWW+vE3gS+BX9+33dYKev8JC8p6JTd+5lShECna8yg12v8sVC A0A0qyuxGLkSzVPiWANduNosiWVJLQjG -----END CERTIFICATE-----Generated at Wed Jun 4 00:08:29 2025 by rpki-client