$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft File: 9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft (raw, json) Hash identifier: OpQP1rN+RVhwLJBo5IT/LtS2i6GWFNCLMi0OqJ1ZY/w= Subject key identifier: AF:54:47:B2:BC:57:77:92:92:04:17:BC:8D:7F:2A:EB:8A:F6:8D:60 Authority key identifier: F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5 Certificate issuer: /CN=A91ECF21/serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5 Certificate serial: 0303 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft Manifest number: 0303 Signing time: Sat 31 May 2025 01:25:37 +0000 Manifest this update: Sat 31 May 2025 01:25:37 +0000 Manifest next update: Sat 07 Jun 2025 01:25:37 +0000 Files and hashes: 1: 9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl (hash: YMxrpdSbMByAGdBjHSW7cOMzZ+tZ+seOFA/U1yYN4+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:25:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 771 (0x303) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECF21, serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5 Validity Not Before: May 31 01:25:37 2025 GMT Not After : Jun 7 01:25:37 2025 GMT Subject: CN=683a5a91-103b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9b:29:ff:e3:16:df:d5:e0:67:47:60:6e:bf: b4:f4:73:5b:e9:c4:6a:0b:3a:84:a2:0f:45:5a:1b: dd:02:e2:a4:b8:8d:53:f2:4b:85:a0:cb:fa:27:48: 8b:a6:ed:d0:4d:fe:1c:09:4a:dc:58:95:8b:ba:14: 42:9f:b6:a9:3e:45:6f:80:ba:37:c4:b3:d0:e7:a3: e6:f9:99:16:3f:8c:37:22:83:8a:3f:c4:37:46:91: a5:07:b9:b8:eb:6e:b9:e9:04:d2:5c:e9:80:aa:51: 40:5e:59:f5:51:99:0b:a7:d2:b8:b1:8a:1a:29:24: 38:ab:37:f1:33:7c:79:e1:05:ed:f8:c7:3f:44:c3: 3f:ce:00:ba:87:62:45:d1:5f:cb:bb:7c:5c:5e:1b: e8:dd:f6:ea:80:b6:91:64:0a:06:cd:32:f3:7c:ea: c9:76:0b:31:78:4e:ed:d5:5e:8d:2b:44:f8:a8:b5: 38:5d:7e:48:38:e0:3a:68:b2:f5:84:c1:ce:b6:56: 83:00:3c:38:11:5c:3b:55:73:81:6b:40:af:fe:8c: 78:ab:b0:33:13:39:e3:f6:da:f9:2c:64:31:7d:d4: 69:52:4d:05:2a:f1:c4:76:be:7d:07:4b:08:bc:ce: 6e:a7:6d:01:60:ec:c6:bd:6d:32:c6:e9:84:73:34: 08:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:54:47:B2:BC:57:77:92:92:04:17:BC:8D:7F:2A:EB:8A:F6:8D:60 X509v3 Authority Key Identifier: keyid:F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:9b:52:8f:7f:cc:1d:a4:b2:0f:29:17:f8:e5:f6:3c:0c:b9: 59:97:32:c7:af:23:ea:df:9f:4b:20:17:51:eb:02:06:c9:85: 1a:83:c4:1a:76:b1:cb:80:20:ec:de:d9:23:26:1c:cb:d7:f7: 70:e0:4e:53:de:28:ab:08:ad:4d:98:0d:03:11:e6:47:ab:55: 46:28:1a:6c:78:87:3a:89:64:6d:72:f2:63:dc:83:7e:f5:0a: 05:01:f6:8c:a1:8c:81:c4:9d:7a:ae:ea:36:94:ab:df:44:37: 30:5f:f7:b4:75:42:2b:c8:7e:8b:dc:76:56:01:3a:3e:7f:e8: b0:0b:95:50:58:f2:39:5e:22:2e:0c:13:26:74:18:b0:32:c9: f2:04:27:ed:16:c6:39:6c:8d:98:e7:c8:a2:8e:c4:37:1b:1f: aa:f3:6f:b7:d0:f9:ba:be:0c:e7:e0:f6:72:aa:52:b7:30:79: 41:8f:80:b7:cb:29:9a:3e:69:65:cb:eb:3d:92:0a:be:c0:9f: c1:86:04:be:64:72:77:fd:9a:49:fb:cc:5c:80:df:48:77:52: 7c:fa:97:31:c3:83:92:a9:02:63:18:1e:1a:f1:cc:5d:db:cc: 5c:19:c5:b8:6a:e6:0c:2b:9e:1c:0c:dc:7b:a9:cc:ce:4a:c1: 01:7e:bc:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNGMjExMTAvBgNVBAUTKEY2N0RBOUYxNUU1RTkzNEQ5MEU0OEZFNTBFN0RDODU3 MUREOTM3QTUwHhcNMjUwNTMxMDEyNTM3WhcNMjUwNjA3MDEyNTM3WjAYMRYwFAYD VQQDEw02ODNhNWE5MS0xMDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6psp/+MW39XgZ0dgbr+09HNb6cRqCzqEog9FWhvdAuKkuI1T8kuFoMv6J0iL pu3QTf4cCUrcWJWLuhRCn7apPkVvgLo3xLPQ56Pm+ZkWP4w3IoOKP8Q3RpGlB7m4 62656QTSXOmAqlFAXln1UZkLp9K4sYoaKSQ4qzfxM3x54QXt+Mc/RMM/zgC6h2JF 0V/Lu3xcXhvo3fbqgLaRZAoGzTLzfOrJdgsxeE7t1V6NK0T4qLU4XX5IOOA6aLL1 hMHOtlaDADw4EVw7VXOBa0Cv/ox4q7AzEznj9tr5LGQxfdRpUk0FKvHEdr59B0sI vM5up20BYOzGvW0yxumEczQIDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9UR7K8 V3eSkgQXvI1/KuuK9o1gMB8GA1UdIwQYMBaAFPZ9qfFeXpNNkOSP5Q59yFcd2Tel MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0YyMS9GMkVCRUIzNEQ1 MTAxMUVDOTU1MkI4MkFDNEY5QUUwMi85bjJwOFY1ZWswMlE1SV9sRG4zSVZ4M1pO NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluMnA4VjVlazAyUTVJX2xEbjNJVngzWk42VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0YyMS9GMkVCRUIzNEQ1MTAxMUVDOTU1MkI4MkFDNEY5QUUwMi85bjJwOFY1ZWsw MlE1SV9sRG4zSVZ4M1pONlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1m1KPf8wdpLIPKRf45fY8DLlZlzLHryPq359LIBdR6wIGyYUag8Qa drHLgCDs3tkjJhzL1/dw4E5T3iirCK1NmA0DEeZHq1VGKBpseIc6iWRtcvJj3IN+ 9QoFAfaMoYyBxJ16ruo2lKvfRDcwX/e0dUIryH6L3HZWATo+f+iwC5VQWPI5XiIu DBMmdBiwMsnyBCftFsY5bI2Y58iijsQ3Gx+q82+30Pm6vgzn4PZyqlK3MHlBj4C3 yymaPmlly+s9kgq+wJ/BhgS+ZHJ3/ZpJ+8xcgN9Id1J8+pcxw4OSqQJjGB4a8cxd 28xcGcW4auYMK54cDNx7qczOSsEBfrwQ -----END CERTIFICATE-----Generated at Sat May 31 16:38:50 2025 by rpki-client