$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.mft File: 9TjVlahlU-nmlHrF6Pz8y8namyE.mft (raw, json) Hash identifier: rhGDFGic6v1hyNF9cRF6hci2OwWAijMjG8bnYT8vJbk= Subject key identifier: 0C:73:0F:71:95:94:D4:30:13:F1:8A:43:90:BE:0A:55:67:8C:D1:EB Authority key identifier: F5:38:D5:95:A8:65:53:E9:E6:94:7A:C5:E8:FC:FC:CB:C9:DA:9B:21 Certificate issuer: /CN=A91EA115/serialNumber=F538D595A86553E9E6947AC5E8FCFCCBC9DA9B21 Certificate serial: 3486 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TjVlahlU-nmlHrF6Pz8y8namyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.mft Manifest number: 3485 Signing time: Sat 31 May 2025 14:27:01 +0000 Manifest this update: Sat 31 May 2025 14:27:01 +0000 Manifest next update: Sat 07 Jun 2025 14:27:01 +0000 Files and hashes: 1: 9TjVlahlU-nmlHrF6Pz8y8namyE.crl (hash: fIrjOH0oewIKQDvX0JB/jj0rmGO0h+EPSEEk3LE1O08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.crl rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TjVlahlU-nmlHrF6Pz8y8namyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13446 (0x3486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA115, serialNumber=F538D595A86553E9E6947AC5E8FCFCCBC9DA9B21 Validity Not Before: May 31 14:27:01 2025 GMT Not After : Jun 7 14:27:01 2025 GMT Subject: CN=683b11b5-763a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b6:f6:bc:d8:7e:47:98:bf:52:1e:95:d8:8f: a6:9e:03:68:0f:32:0a:cc:d1:44:0b:d6:39:78:d6: 94:b0:6a:f8:c3:e2:63:0b:4e:72:74:4c:86:e6:b3: 56:80:c7:c0:da:87:c9:4f:42:36:45:9f:3e:62:3b: bd:43:10:f0:fa:50:fe:59:30:04:e9:b0:05:6f:f2: 72:cc:9a:aa:ae:bd:35:51:00:2a:fb:3a:0f:b4:b0: 31:f2:e1:e2:7a:90:d9:db:28:90:38:43:2c:f6:fa: d5:b5:42:77:8e:92:bf:f1:f8:9e:d3:1d:dd:e4:c9: e5:00:a2:68:51:a2:70:c3:d1:29:1f:a2:94:c9:92: 3c:09:2d:52:f6:96:1b:f9:0b:62:66:4c:aa:81:dc: a9:9c:6d:7b:89:cb:ee:79:4a:5f:92:de:8f:51:54: bb:8e:78:be:72:6c:af:42:e8:a9:77:b5:86:31:5e: 7b:05:3b:a1:94:2e:94:35:63:25:4e:3f:da:1e:c5: 7d:b9:c5:68:fc:c0:8d:59:4c:30:bd:a3:94:48:80: 82:08:52:a2:37:e7:76:2a:82:28:b7:90:78:db:4c: 64:0e:04:7a:3f:f6:9e:d8:ed:90:eb:14:a0:e6:86: 22:31:78:70:af:ac:6d:b0:8b:ce:07:ab:6c:63:10: 85:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:73:0F:71:95:94:D4:30:13:F1:8A:43:90:BE:0A:55:67:8C:D1:EB X509v3 Authority Key Identifier: keyid:F5:38:D5:95:A8:65:53:E9:E6:94:7A:C5:E8:FC:FC:CB:C9:DA:9B:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TjVlahlU-nmlHrF6Pz8y8namyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:f5:aa:8a:21:46:1c:8d:4c:be:82:69:da:65:ee:2e:c4:fc: 2f:8a:0c:0b:2e:4e:cf:0c:bf:34:04:4c:a8:10:a1:e0:88:a4: ed:f7:ab:ed:8e:2c:e5:85:b5:a6:e6:02:b8:8b:06:ca:30:cb: b4:ee:74:63:1e:3f:68:19:52:a3:bd:bf:29:92:fd:f6:56:29: d2:4e:fa:51:ac:ab:cc:96:90:9c:ce:14:63:c5:75:cb:13:c9: a4:75:ea:4b:ea:cd:0c:5f:d4:4b:2b:ac:b2:f1:d2:19:14:51: 30:c1:ce:7e:1a:63:53:0e:ba:78:39:79:f5:1f:54:3d:89:25: f8:9a:41:96:9b:3f:c6:4f:48:d4:8b:f4:ed:1b:31:b2:57:ce: 9c:ec:8b:dc:72:c6:93:d7:7f:66:64:67:bc:60:98:19:52:9a: d4:46:9d:27:2d:76:76:cd:74:86:8a:29:4f:68:98:db:64:c4: 3b:7d:f7:65:dd:5d:ce:10:e3:cc:d1:0d:8d:3e:85:0a:49:03: e6:a9:d6:63:dc:63:3e:41:43:a3:9a:34:3f:aa:ef:db:db:01: eb:b2:d4:ad:b1:f7:3a:47:e9:3c:11:6d:e8:98:dc:4d:6a:33: 58:96:68:d8:58:3e:26:a4:4c:3f:7b:a9:54:ca:6b:ed:2e:e7: 99:8b:de:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExMTUxMTAvBgNVBAUTKEY1MzhENTk1QTg2NTUzRTlFNjk0N0FDNUU4RkNGQ0NC QzlEQTlCMjEwHhcNMjUwNTMxMTQyNzAxWhcNMjUwNjA3MTQyNzAxWjAYMRYwFAYD VQQDEw02ODNiMTFiNS03NjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7b2vNh+R5i/Uh6V2I+mngNoDzIKzNFEC9Y5eNaUsGr4w+JjC05ydEyG5rNW gMfA2ofJT0I2RZ8+Yju9QxDw+lD+WTAE6bAFb/JyzJqqrr01UQAq+zoPtLAx8uHi epDZ2yiQOEMs9vrVtUJ3jpK/8fie0x3d5MnlAKJoUaJww9EpH6KUyZI8CS1S9pYb +QtiZkyqgdypnG17icvueUpfkt6PUVS7jni+cmyvQuipd7WGMV57BTuhlC6UNWMl Tj/aHsV9ucVo/MCNWUwwvaOUSICCCFKiN+d2KoIot5B420xkDgR6P/ae2O2Q6xSg 5oYiMXhwr6xtsIvOB6tsYxCFywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxzD3GV lNQwE/GKQ5C+ClVnjNHrMB8GA1UdIwQYMBaAFPU41ZWoZVPp5pR6xej8/MvJ2psh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTExNS85MTI1NDUwRTFE ODYxMUUyOUYzM0UwREQwOEIwMkNEMi85VGpWbGFobFUtbm1sSHJGNlB6OHk4bmFt eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlUalZsYWhsVS1ubWxIckY2UHo4eThuYW15RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTExNS85MTI1NDUwRTFEODYxMUUyOUYzM0UwREQwOEIwMkNEMi85VGpWbGFobFUt bm1sSHJGNlB6OHk4bmFteUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCz9aqKIUYcjUy+gmnaZe4uxPwvigwLLk7PDL80BEyoEKHgiKTt96vt jizlhbWm5gK4iwbKMMu07nRjHj9oGVKjvb8pkv32VinSTvpRrKvMlpCczhRjxXXL E8mkdepL6s0MX9RLK6yy8dIZFFEwwc5+GmNTDrp4OXn1H1Q9iSX4mkGWmz/GT0jU i/TtGzGyV86c7IvccsaT139mZGe8YJgZUprURp0nLXZ2zXSGiilPaJjbZMQ7ffdl 3V3OEOPM0Q2NPoUKSQPmqdZj3GM+QUOjmjQ/qu/b2wHrstStsfc6R+k8EW3omNxN ajNYlmjYWD4mpEw/e6lUymvtLueZi94k -----END CERTIFICATE-----Generated at Sat May 31 17:58:42 2025 by rpki-client