$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft File: i6wN0-SRhYlP2uKChO3IBHILRhQ.mft (raw, json) Hash identifier: OdDjoY83cnLSTBNqqdH0GnaIcAvbv4r9j+PCjWR5EIg= Subject key identifier: 47:DF:E6:13:B6:DC:16:29:EC:9E:87:A4:D8:2F:3E:A6:72:38:DE:2D Authority key identifier: 8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14 Certificate issuer: /CN=A91EBFAE/serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614 Certificate serial: 348A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft Manifest number: 348A Signing time: Sat 31 May 2025 14:32:10 +0000 Manifest this update: Sat 31 May 2025 14:32:10 +0000 Manifest next update: Sat 07 Jun 2025 14:32:10 +0000 Files and hashes: 1: i6wN0-SRhYlP2uKChO3IBHILRhQ.crl (hash: tj+y8RfzXLyNj1YLRUF6isbAL7Cle61SGGVv9ZepSAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:32:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13450 (0x348a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBFAE, serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614 Validity Not Before: May 31 14:32:10 2025 GMT Not After : Jun 7 14:32:10 2025 GMT Subject: CN=683b12ea-3c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cc:d6:6e:be:de:24:a7:87:4a:cb:0d:9b:04: c8:c1:b6:7a:6c:b5:19:da:19:ec:ff:55:05:0f:66: 5e:c4:e4:42:b7:48:6f:a3:3b:9e:ae:50:23:d9:58: 4f:b3:3a:b5:6b:62:3b:b0:46:22:94:d1:3f:72:db: 39:fe:63:8e:a0:82:15:d1:5d:ac:6a:8f:a1:be:90: bd:1d:33:57:59:22:36:a6:2b:be:36:5d:fe:48:4c: bd:dc:9d:f1:7c:a3:06:99:5f:fa:02:ba:bd:a9:19: 02:7b:da:62:df:c0:33:ce:77:a1:58:4b:51:28:ca: bf:e6:8c:c1:0d:a2:b0:8e:91:54:da:3e:0f:88:28: 58:01:2b:79:86:85:b0:66:fb:0d:a7:d4:c6:58:ac: 4c:c7:c7:c9:e7:c7:00:10:9d:2f:48:e3:01:1a:40: 21:bb:57:6c:f5:ed:0f:52:c1:97:f2:6f:70:9f:95: 33:07:63:4d:03:92:db:22:4b:62:2b:2d:58:90:ef: c4:96:c1:34:c8:ad:58:7e:bb:c4:4c:ce:57:f6:28: 82:3c:fe:54:4c:3d:73:79:81:e3:d7:65:7c:c7:58: 4c:53:a0:05:a9:8e:0d:11:45:35:4e:67:a3:1a:61: 29:1f:f0:00:9d:ce:0e:1d:60:b1:b3:6e:66:f4:e8: 5e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:DF:E6:13:B6:DC:16:29:EC:9E:87:A4:D8:2F:3E:A6:72:38:DE:2D X509v3 Authority Key Identifier: keyid:8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:d3:2d:ef:dd:6c:8b:2e:80:8d:89:ae:0b:96:9c:64:7f:d8: 07:db:af:20:5f:c2:62:61:e9:c7:7b:4d:8b:76:a2:f8:9d:08: 3e:d6:b0:ce:08:77:23:12:06:df:3b:93:01:81:d9:4e:66:8b: bd:fe:0c:3f:9d:c0:ab:ee:98:a9:76:49:75:ea:24:f6:da:e8: 58:93:17:3f:f0:d0:03:5f:57:70:87:28:7c:47:8b:a7:68:5c: 42:5d:67:7c:55:56:63:1d:44:f4:04:5e:88:c4:3b:61:f8:33: e5:86:4a:be:e5:b0:fc:53:3b:82:61:23:71:83:a4:30:d5:e8: b9:aa:79:1d:d9:2e:93:b8:1b:79:18:87:82:d7:49:20:ba:53: 16:b0:b7:8e:56:46:99:1a:e9:0a:c2:05:9b:5c:28:28:51:ec: 52:24:6b:c4:ad:79:9a:d7:0c:8d:ca:58:3e:3c:6b:cf:bc:9c: 42:29:6d:65:17:a9:30:c9:5e:0e:f3:f5:29:d9:3a:dc:43:55: 79:4b:08:88:65:ae:ef:87:d9:0f:e8:7f:81:3d:2d:85:04:6d: 55:b8:ae:78:2d:d4:10:02:32:87:26:01:56:b0:87:9d:35:ef: 02:2a:45:5f:fe:47:57:41:2a:3a:f1:4e:0a:ee:31:53:9a:89: d5:00:f3:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGQUUxMTAvBgNVBAUTKDhCQUMwREQzRTQ5MTg1ODk0RkRBRTI4Mjg0RURDODA0 NzIwQjQ2MTQwHhcNMjUwNTMxMTQzMjEwWhcNMjUwNjA3MTQzMjEwWjAYMRYwFAYD VQQDEw02ODNiMTJlYS0zYzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxczWbr7eJKeHSssNmwTIwbZ6bLUZ2hns/1UFD2ZexORCt0hvozuerlAj2VhP szq1a2I7sEYilNE/cts5/mOOoIIV0V2sao+hvpC9HTNXWSI2piu+Nl3+SEy93J3x fKMGmV/6Arq9qRkCe9pi38AzznehWEtRKMq/5ozBDaKwjpFU2j4PiChYASt5hoWw ZvsNp9TGWKxMx8fJ58cAEJ0vSOMBGkAhu1ds9e0PUsGX8m9wn5UzB2NNA5LbIkti Ky1YkO/ElsE0yK1YfrvETM5X9iiCPP5UTD1zeYHj12V8x1hMU6AFqY4NEUU1Tmej GmEpH/AAnc4OHWCxs25m9OhehQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEff5hO2 3BYp7J6HpNgvPqZyON4tMB8GA1UdIwQYMBaAFIusDdPkkYWJT9rigoTtyARyC0YU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkZBRS8xNjhGRkQ2QzFE OEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZbFAydUtDaE8zSUJISUxS aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k2d04wLVNSaFlsUDJ1S0NoTzNJQkhJTFJoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkZBRS8xNjhGRkQ2QzFEOEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZ bFAydUtDaE8zSUJISUxSaFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh0y3v3WyLLoCNia4Llpxkf9gH268gX8JiYenHe02LdqL4nQg+1rDO CHcjEgbfO5MBgdlOZou9/gw/ncCr7pipdkl16iT22uhYkxc/8NADX1dwhyh8R4un aFxCXWd8VVZjHUT0BF6IxDth+DPlhkq+5bD8UzuCYSNxg6Qw1ei5qnkd2S6TuBt5 GIeC10kgulMWsLeOVkaZGukKwgWbXCgoUexSJGvErXma1wyNylg+PGvPvJxCKW1l F6kwyV4O8/Up2TrcQ1V5SwiIZa7vh9kP6H+BPS2FBG1VuK54LdQQAjKHJgFWsIed Ne8CKkVf/kdXQSo68U4K7jFTmonVAPMw -----END CERTIFICATE-----Generated at Sat May 31 16:44:47 2025 by rpki-client