$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft File: vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft (raw, json) Hash identifier: SzizTU0bec+AtVyri8pVPTq1Pj7eHqwyFdjV5beZi84= Subject key identifier: 23:C2:51:67:97:23:9D:F0:4C:A6:59:A9:30:0D:E4:37:AE:B3:0D:12 Authority key identifier: BC:E9:FA:6C:37:7C:94:34:B1:2C:77:BE:FC:DD:42:A5:B7:03:4F:F2 Certificate issuer: /CN=A91EC3C9/serialNumber=BCE9FA6C377C9434B12C77BEFCDD42A5B7034FF2 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft Manifest number: 0B Signing time: Sat 31 May 2025 07:42:04 +0000 Manifest this update: Sat 31 May 2025 07:42:04 +0000 Manifest next update: Sat 07 Jun 2025 07:42:04 +0000 Files and hashes: 1: vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl (hash: eTmjSTj8fx4ENMhOQSGw9o9zhg7JaIC3U4CIEPzEcGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3C9, serialNumber=BCE9FA6C377C9434B12C77BEFCDD42A5B7034FF2 Validity Not Before: May 31 07:42:04 2025 GMT Not After : Jun 7 07:42:04 2025 GMT Subject: CN=683ab2cc-e6f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ed:bb:35:a7:47:9e:0d:d5:e4:fc:0e:52:8d: 36:ca:3e:a7:f4:d1:cd:ad:d8:13:31:52:c0:10:ab: 97:85:78:db:33:cf:af:04:05:cc:a3:5d:06:f2:90: 57:7a:d3:13:7e:d3:2d:77:74:b6:3f:72:3b:87:9c: 8e:cb:d9:03:d4:bd:2d:c5:63:10:af:65:9c:3c:50: e0:57:dd:0a:9f:e4:17:00:79:50:c3:b3:9c:4c:8d: 39:1b:8f:38:bf:78:53:c5:11:3b:d0:4b:63:2a:0f: b3:bc:70:1b:23:77:b9:a9:f4:87:27:22:51:61:64: b0:d8:c8:99:9d:fb:e7:46:80:59:d7:1f:3b:e2:2b: 18:8a:03:c6:e7:4c:ca:40:e6:a6:66:e7:c9:76:80: a3:da:42:55:39:e7:65:7a:12:86:87:38:da:54:27: 74:71:c7:0e:15:9e:dc:f2:7c:60:a6:48:33:cd:5b: 48:2d:84:2e:ab:69:82:0b:82:47:6b:10:01:58:d7: f2:71:82:59:37:0d:db:2b:42:14:f3:cd:ec:5e:c6: d1:e8:9a:a2:3e:6f:a3:d5:25:61:1f:9a:03:9d:44: e2:ef:d0:2b:9b:a9:ef:24:7d:79:56:14:97:e7:b1: 09:cd:4e:4a:da:d2:29:17:8c:4b:34:cf:ac:57:be: ef:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C2:51:67:97:23:9D:F0:4C:A6:59:A9:30:0D:E4:37:AE:B3:0D:12 X509v3 Authority Key Identifier: keyid:BC:E9:FA:6C:37:7C:94:34:B1:2C:77:BE:FC:DD:42:A5:B7:03:4F:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:1b:e8:58:e1:3b:8e:f3:0f:04:c4:d0:e8:4d:22:45:e9:e4: e3:b4:cf:b7:d7:71:3a:6b:35:2b:d5:b8:a6:56:d6:a1:ea:a3: 46:f4:21:d5:d7:14:a4:cd:ed:0f:87:db:51:91:75:2e:ce:c5: 2e:c2:3a:d3:26:40:ef:87:7d:0f:b3:4b:e8:12:f9:87:a5:cb: 97:d5:31:0f:a8:93:cf:45:82:ea:05:e0:d2:70:db:d8:c1:84: b2:72:c5:35:de:73:be:d1:24:e0:47:f7:76:d0:9f:3a:64:71: 7f:f3:d8:b9:ac:d9:00:d5:fb:6c:61:24:f9:f4:b7:ab:7a:76: 75:db:9f:3a:d4:f7:f5:ce:46:21:ed:64:fc:3c:88:75:53:f2: b8:0c:64:cf:ac:ba:81:9e:ef:07:2c:ee:4c:fd:a0:a6:76:95: 1d:dc:d0:eb:ca:33:ce:7c:42:b0:0b:87:0e:ac:33:4e:5e:83: aa:32:24:d5:51:af:73:df:56:c7:a9:be:4c:84:4a:cb:eb:a8: a9:62:ec:0c:21:98:3e:c4:91:d1:ef:24:73:0e:bf:77:44:da: 3c:6c:05:68:a1:3c:e2:82:17:42:b1:62:da:b4:1f:82:20:1c: a2:a0:03:ef:01:33:11:76:5f:49:8e:95:8d:28:af:e5:c4:ae: 87:27:69:1f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QzNDOTExMC8GA1UEBRMoQkNFOUZBNkMzNzdDOTQzNEIxMkM3N0JFRkNERDQyQTVC NzAzNEZGMjAeFw0yNTA1MzEwNzQyMDRaFw0yNTA2MDcwNzQyMDRaMBgxFjAUBgNV BAMTDTY4M2FiMmNjLWU2ZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC97bs1p0eeDdXk/A5SjTbKPqf00c2t2BMxUsAQq5eFeNszz68EBcyjXQbykFd6 0xN+0y13dLY/cjuHnI7L2QPUvS3FYxCvZZw8UOBX3Qqf5BcAeVDDs5xMjTkbjzi/ eFPFETvQS2MqD7O8cBsjd7mp9IcnIlFhZLDYyJmd++dGgFnXHzviKxiKA8bnTMpA 5qZm58l2gKPaQlU552V6EoaHONpUJ3Rxxw4VntzyfGCmSDPNW0gthC6raYILgkdr EAFY1/Jxglk3DdsrQhTzzexextHomqI+b6PVJWEfmgOdROLv0Cubqe8kfXlWFJfn sQnNTkra0ikXjEs0z6xXvu+BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUI8JRZ5cj nfBMplmpMA3kN66zDRIwHwYDVR0jBBgwFoAUvOn6bDd8lDSxLHe+/N1CpbcDT/Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDM0M5L0MxMkNEQUU0MzE4 RTExRjA5QzM2REE3QkM0RjlBRTAyL3ZPbjZiRGQ4bERTeExIZS1fTjFDcGJjRFRf SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdk9uNmJEZDhsRFN4TEhlLV9OMUNwYmNEVF9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD M0M5L0MxMkNEQUU0MzE4RTExRjA5QzM2REE3QkM0RjlBRTAyL3ZPbjZiRGQ4bERT eExIZS1fTjFDcGJjRFRfSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACgb6FjhO47zDwTE0OhNIkXp5OO0z7fXcTprNSvVuKZW1qHqo0b0IdXX FKTN7Q+H21GRdS7OxS7COtMmQO+HfQ+zS+gS+Yely5fVMQ+ok89FguoF4NJw29jB hLJyxTXec77RJOBH93bQnzpkcX/z2Lms2QDV+2xhJPn0t6t6dnXbnzrU9/XORiHt ZPw8iHVT8rgMZM+suoGe7wcs7kz9oKZ2lR3c0OvKM858QrALhw6sM05eg6oyJNVR r3PfVsepvkyESsvrqKli7AwhmD7EkdHvJHMOv3dE2jxsBWihPOKCF0KxYtq0H4Ig HKKgA+8BMxF2X0mOlY0or+XErocnaR8= -----END CERTIFICATE-----Generated at Sat May 31 16:29:35 2025 by rpki-client