$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft File: RtfjskJlD3X4XEWBNYWNzYyZwgM.mft (raw, json) Hash identifier: 5QdqHTrH5uU8mVLtKaP8g6I2cFTUtCjkiv823YwmJzs= Subject key identifier: D5:D4:93:38:CB:05:A5:AB:68:68:84:5F:40:8F:42:01:CC:70:E6:87 Authority key identifier: 46:D7:E3:B2:42:65:0F:75:F8:5C:45:81:35:85:8D:CD:8C:99:C2:03 Certificate issuer: /CN=A91F3989/serialNumber=46D7E3B242650F75F85C458135858DCD8C99C203 Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft Manifest number: DB Signing time: Sat 31 May 2025 05:08:51 +0000 Manifest this update: Sat 31 May 2025 05:08:50 +0000 Manifest next update: Sat 07 Jun 2025 05:08:50 +0000 Files and hashes: 1: RtfjskJlD3X4XEWBNYWNzYyZwgM.crl (hash: HjqpCGWrHP9pzz+nH+aWdM2HVUTh1kxvlcJKrQFnp3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.crl rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3989, serialNumber=46D7E3B242650F75F85C458135858DCD8C99C203 Validity Not Before: May 31 05:08:50 2025 GMT Not After : Jun 7 05:08:50 2025 GMT Subject: CN=683a8ee2-953a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f0:ae:93:cf:22:2c:f5:f6:f1:94:a1:b4:d3: b1:d1:12:6d:93:c3:a8:c8:a1:4a:62:a3:91:b8:9c: 7a:d0:7f:c3:af:df:13:26:20:d1:cf:29:a2:a3:5f: 92:71:f9:10:52:5b:c6:cb:5b:84:ed:27:dd:7e:c0: 1f:b1:2a:83:c9:20:e4:34:80:84:1b:36:5b:3f:bd: 26:8a:c9:50:fa:8d:d2:92:70:45:92:ac:5d:ed:cc: 4d:24:9c:a9:18:e6:58:3f:a2:9b:a5:a3:7a:41:6f: 3b:5c:37:82:05:40:6a:2f:e4:43:3c:09:5b:b3:e0: cb:de:d1:43:7a:16:79:76:4b:36:94:a2:6f:87:d6: c9:8e:d0:e6:dd:c2:82:ae:70:4d:f5:c7:aa:4a:c8: f7:ee:d9:bd:1f:62:ff:d7:85:e9:3d:be:f1:71:b1: be:a1:b9:28:2a:70:cf:b2:f6:4e:b7:97:c9:cc:f6: 13:36:97:cc:a2:40:d1:c6:50:27:ee:a2:c7:7d:00: 5e:30:66:e7:5c:d7:2e:93:09:12:00:cf:2c:ea:41: 99:2e:14:b6:48:9b:8f:1c:02:1d:46:61:09:ea:5b: c2:1e:f3:aa:bb:1f:af:c3:3b:1a:76:70:a3:d2:90: 26:3d:17:9d:ec:7a:a6:b9:45:ab:3a:66:a5:49:47: 2c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D4:93:38:CB:05:A5:AB:68:68:84:5F:40:8F:42:01:CC:70:E6:87 X509v3 Authority Key Identifier: keyid:46:D7:E3:B2:42:65:0F:75:F8:5C:45:81:35:85:8D:CD:8C:99:C2:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:06:98:8e:5f:eb:27:f8:d5:89:d5:66:73:b6:0e:ee:ed:2d: 43:05:9e:80:80:a7:c0:19:2a:63:8b:9e:de:dd:83:fb:54:78: 8c:bc:04:3c:d4:32:c2:96:86:75:0a:45:83:d4:72:58:bc:1c: 3e:5c:83:d0:68:b0:72:d4:a2:9a:88:1d:d8:fa:97:28:49:74: a8:86:77:4e:f2:cf:b1:f7:7b:d5:2b:17:69:3e:ee:33:e9:0d: b2:ff:10:43:5d:e7:f6:72:64:c5:e6:5a:03:83:49:ae:90:58: c6:98:f3:a0:be:58:b6:01:94:51:34:93:9c:fc:c9:25:24:d0: 6e:0d:76:0b:38:e2:e5:81:67:ec:79:cc:d8:63:44:46:89:75: 21:86:7d:cc:0a:af:0a:e0:57:d7:d3:54:d7:a9:96:5b:78:96: 6a:e5:3c:9f:b0:d3:3a:e6:9c:dd:f8:a8:7b:88:ed:60:9b:00: 3c:89:c9:08:dc:43:14:79:c3:82:40:2b:20:8a:35:b6:e7:2a: 42:29:8d:9d:58:79:8c:42:4a:13:40:aa:9a:21:90:34:b4:2b: 9c:34:d3:6a:3e:f4:57:5f:0a:35:2d:2e:41:35:bc:b7:57:dc: 68:76:7b:5c:66:7e:cf:a0:dc:e2:e9:a0:1b:ae:98:73:95:1d: aa:40:da:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5ODkxMTAvBgNVBAUTKDQ2RDdFM0IyNDI2NTBGNzVGODVDNDU4MTM1ODU4RENE OEM5OUMyMDMwHhcNMjUwNTMxMDUwODUwWhcNMjUwNjA3MDUwODUwWjAYMRYwFAYD VQQDEw02ODNhOGVlMi05NTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PCuk88iLPX28ZShtNOx0RJtk8OoyKFKYqORuJx60H/Dr98TJiDRzymio1+S cfkQUlvGy1uE7SfdfsAfsSqDySDkNICEGzZbP70mislQ+o3SknBFkqxd7cxNJJyp GOZYP6KbpaN6QW87XDeCBUBqL+RDPAlbs+DL3tFDehZ5dks2lKJvh9bJjtDm3cKC rnBN9ceqSsj37tm9H2L/14XpPb7xcbG+obkoKnDPsvZOt5fJzPYTNpfMokDRxlAn 7qLHfQBeMGbnXNcukwkSAM8s6kGZLhS2SJuPHAIdRmEJ6lvCHvOqux+vwzsadnCj 0pAmPRed7HqmuUWrOmalSUcsvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXUkzjL BaWraGiEX0CPQgHMcOaHMB8GA1UdIwQYMBaAFEbX47JCZQ91+FxFgTWFjc2MmcID MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzk4OS8zQUFDMEU1OEVD RDAxMUVFOEEyMjRENDlDNEY5QUUwMi9SdGZqc2tKbEQzWDRYRVdCTllXTnpZeVp3 Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J0Zmpza0psRDNYNFhFV0JOWVdOell5WndnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mzk4OS8zQUFDMEU1OEVDRDAxMUVFOEEyMjRENDlDNEY5QUUwMi9SdGZqc2tKbEQz WDRYRVdCTllXTnpZeVp3Z00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOBpiOX+sn+NWJ1WZztg7u7S1DBZ6AgKfAGSpji57e3YP7VHiMvAQ8 1DLCloZ1CkWD1HJYvBw+XIPQaLBy1KKaiB3Y+pcoSXSohndO8s+x93vVKxdpPu4z 6Q2y/xBDXef2cmTF5loDg0mukFjGmPOgvli2AZRRNJOc/MklJNBuDXYLOOLlgWfs eczYY0RGiXUhhn3MCq8K4FfX01TXqZZbeJZq5TyfsNM65pzd+Kh7iO1gmwA8ickI 3EMUecOCQCsgijW25ypCKY2dWHmMQkoTQKqaIZA0tCucNNNqPvRXXwo1LS5BNby3 V9xodntcZn7PoNzi6aAbrphzlR2qQNqp -----END CERTIFICATE-----Generated at Sat May 31 17:49:43 2025 by rpki-client