$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft File: 1mk-41xy689CY8aYRW2C9o5xT1w.mft (raw, json) Hash identifier: w/A1ihPq3rc8gOx06LHKenvLwDP59E4osKA9dXiH1WA= Subject key identifier: B0:7A:74:33:29:18:B7:17:09:B4:0C:2F:76:F9:EC:05:35:1E:F0:DF Authority key identifier: D6:69:3E:E3:5C:72:EB:CF:42:63:C6:98:45:6D:82:F6:8E:71:4F:5C Certificate issuer: /CN=A916EF5E/serialNumber=D6693EE35C72EBCF4263C698456D82F68E714F5C Certificate serial: 098F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft Manifest number: 098F Signing time: Wed 02 Jul 2025 16:50:50 +0000 Manifest this update: Wed 02 Jul 2025 16:50:50 +0000 Manifest next update: Wed 09 Jul 2025 16:50:50 +0000 Files and hashes: 1: 1mk-41xy689CY8aYRW2C9o5xT1w.crl (hash: VnrAIz2M1Af6Yi6OAN4mmYRDkt74eG2hDCNGPiIgErM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.crl rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:50:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2447 (0x98f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EF5E, serialNumber=D6693EE35C72EBCF4263C698456D82F68E714F5C Validity Not Before: Jul 2 16:50:50 2025 GMT Not After : Jul 9 16:50:50 2025 GMT Subject: CN=6865636a-9b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:41:69:3d:56:99:d4:65:79:af:8e:02:da:2d: 4a:ef:4c:1f:10:a2:a0:30:2a:b3:55:86:9a:fa:c4: ff:05:83:a8:35:7f:7c:4c:6d:7c:37:3c:57:a0:a3: 68:f3:5c:2c:19:90:91:0d:9e:f7:29:b0:5c:5c:e6: 40:a0:1c:98:1c:71:83:52:83:b4:66:16:7e:63:ea: da:d9:ed:f4:d3:2d:c3:90:f2:3b:a7:bd:b3:1a:62: f4:3b:7d:b7:3d:a6:80:fd:9d:ca:e5:eb:68:8c:79: 02:da:c5:c1:a7:73:f8:3b:b2:75:b1:22:fd:62:2e: de:48:e7:1b:eb:a6:ea:6a:8c:17:85:16:1e:b0:f1: 71:15:78:e9:0f:34:e9:46:74:04:3b:e9:93:79:52: b2:8f:b2:bf:b3:32:57:25:1f:c5:62:26:9c:b4:5a: a4:0b:72:43:15:33:f3:d8:ce:5b:b9:95:3d:df:29: 77:48:16:c4:49:1c:21:62:44:25:79:e6:26:23:a1: db:1a:78:0a:2e:ad:5b:c6:69:84:20:c7:91:67:1d: d3:73:93:63:4f:44:a4:08:08:cb:2b:6a:91:d3:4e: 57:f4:13:95:03:39:2c:fc:f2:92:cc:69:42:c4:47: bf:13:aa:8d:6f:eb:f5:86:49:4c:71:4e:8c:66:16: 31:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7A:74:33:29:18:B7:17:09:B4:0C:2F:76:F9:EC:05:35:1E:F0:DF X509v3 Authority Key Identifier: keyid:D6:69:3E:E3:5C:72:EB:CF:42:63:C6:98:45:6D:82:F6:8E:71:4F:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:0d:7f:92:d9:71:c8:1e:1a:33:58:64:66:6f:e5:fe:71:c6: 07:9d:db:ba:cc:86:2b:91:8f:d3:1e:1f:88:fb:5e:8a:05:c0: be:ff:3a:d1:08:5e:b6:e7:ef:28:51:d2:24:29:74:1b:41:15: 11:9d:fb:cf:0d:4e:29:d1:a1:2b:0e:ef:2e:57:f5:40:63:ec: c9:0d:aa:09:04:91:c1:4f:05:a7:2c:bb:e8:9b:88:f7:d7:ca: d5:48:ef:2c:af:37:75:17:02:ae:c3:52:b4:03:d4:a4:d4:fe: 6e:e6:ba:e4:9d:a6:3c:88:d1:d6:d5:a2:48:8f:54:51:a7:cc: 0e:5d:14:47:f7:93:8e:51:e8:08:fb:61:8f:a6:50:4a:d4:01: 0c:18:f7:ac:d4:23:62:a3:a7:7f:34:e5:62:2f:dc:34:b9:b3: a5:f4:3b:e0:c4:f1:1a:51:6a:e0:cb:4d:fe:17:37:fb:02:88: a7:b0:ac:9a:51:61:fd:eb:81:50:61:91:9c:05:81:65:e1:51: 78:88:36:9f:a2:29:1a:a5:c1:b2:5f:4a:33:86:cd:f9:a1:69: 44:66:58:a8:4e:73:2b:19:18:ce:39:e1:6c:77:9b:29:c8:e0: e5:0c:ec:29:37:cd:70:59:17:43:18:f4:f5:da:ce:05:a5:ad: 02:12:82:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVGNUUxMTAvBgNVBAUTKEQ2NjkzRUUzNUM3MkVCQ0Y0MjYzQzY5ODQ1NkQ4MkY2 OEU3MTRGNUMwHhcNMjUwNzAyMTY1MDUwWhcNMjUwNzA5MTY1MDUwWjAYMRYwFAYD VQQDEw02ODY1NjM2YS05YjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0FpPVaZ1GV5r44C2i1K70wfEKKgMCqzVYaa+sT/BYOoNX98TG18NzxXoKNo 81wsGZCRDZ73KbBcXOZAoByYHHGDUoO0ZhZ+Y+ra2e300y3DkPI7p72zGmL0O323 PaaA/Z3K5etojHkC2sXBp3P4O7J1sSL9Yi7eSOcb66bqaowXhRYesPFxFXjpDzTp RnQEO+mTeVKyj7K/szJXJR/FYiactFqkC3JDFTPz2M5buZU93yl3SBbESRwhYkQl eeYmI6HbGngKLq1bxmmEIMeRZx3Tc5NjT0SkCAjLK2qR005X9BOVAzks/PKSzGlC xEe/E6qNb+v1hklMcU6MZhYxMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLB6dDMp GLcXCbQML3b57AU1HvDfMB8GA1UdIwQYMBaAFNZpPuNccuvPQmPGmEVtgvaOcU9c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY1RS8yQ0U0OTRDMDhG OTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi8xbWstNDF4eTY4OUNZOGFZUlcyQzlvNXhU MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFtay00MXh5Njg5Q1k4YVlSVzJDOW81eFQxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUY1RS8yQ0U0OTRDMDhGOTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi8xbWstNDF4eTY4 OUNZOGFZUlcyQzlvNXhUMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtDX+S2XHIHhozWGRmb+X+ccYHndu6zIYrkY/THh+I+16KBcC+/zrR CF625+8oUdIkKXQbQRURnfvPDU4p0aErDu8uV/VAY+zJDaoJBJHBTwWnLLvom4j3 18rVSO8srzd1FwKuw1K0A9Sk1P5u5rrknaY8iNHW1aJIj1RRp8wOXRRH95OOUegI +2GPplBK1AEMGPes1CNio6d/NOViL9w0ubOl9DvgxPEaUWrgy03+Fzf7AoinsKya UWH964FQYZGcBYFl4VF4iDafoikapcGyX0ozhs35oWlEZlioTnMrGRjOOeFsd5sp yODlDOwpN81wWRdDGPT12s4Fpa0CEoJY -----END CERTIFICATE-----Generated at Thu Jul 3 23:11:31 2025 by rpki-client