$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft File: MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft (raw, json) Hash identifier: z6iaQ37BXeWSp8FQNv0GTDcbnneS5yGUYsOIBezQSwo= Subject key identifier: AB:C3:E8:05:E4:D6:EE:94:BE:50:26:44:E0:EC:BD:F4:F7:D0:EC:ED Authority key identifier: 31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E Certificate issuer: /CN=A91883D3/serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft Manifest number: A4 Signing time: Thu 03 Jul 2025 06:23:30 +0000 Manifest this update: Thu 03 Jul 2025 06:23:30 +0000 Manifest next update: Thu 10 Jul 2025 06:23:29 +0000 Files and hashes: 1: MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl (hash: 2DrLfO7Wq6gnu7l6JuQyWY/eRhXq+L6iWjtlVVZRWLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91883D3, serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E Validity Not Before: Jul 3 06:23:30 2025 GMT Not After : Jul 10 06:23:29 2025 GMT Subject: CN=686621e2-aadc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:58:ae:f5:9b:23:0a:c1:05:86:d0:ac:13:01: f8:63:09:f2:4a:ab:22:da:5a:c2:41:38:2f:23:cf: 4e:cc:b4:c0:e1:81:a4:03:c5:e1:e5:26:4d:73:f4: af:e5:1d:d5:67:f1:55:63:9c:56:b4:db:48:75:36: 73:ec:90:29:d5:28:f9:e4:10:00:30:24:57:05:36: f5:59:46:43:cd:ae:d6:fd:c2:3e:b0:de:9f:e1:44: 0b:1a:ac:bf:3f:5c:31:7b:c4:10:d5:6c:9c:33:8c: 93:54:1c:87:ac:eb:66:e7:2e:cb:1a:04:a2:ac:cb: da:98:a0:a4:43:9e:0b:82:88:d4:d4:7e:7a:06:0e: ff:65:50:c4:cd:11:ac:5b:b2:bb:4b:4b:24:21:5a: ff:4b:04:7b:0f:ed:a6:d5:fb:f9:f9:df:0d:8f:a8: ae:31:ad:72:11:00:2f:cd:a1:b3:08:ff:81:24:1a: 33:dd:f4:e3:7d:40:25:89:28:64:1f:db:3a:a7:b3: be:61:10:93:41:f2:f6:79:97:7f:ea:d0:3b:c2:f4: 9c:78:c2:d8:d0:ce:22:1c:28:f2:db:0a:24:66:f1: 1b:75:46:f7:75:db:af:e6:77:4f:ca:37:01:ad:fa: 9f:e7:79:e5:5d:c7:48:2d:17:f5:01:c5:4e:1a:0d: b6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C3:E8:05:E4:D6:EE:94:BE:50:26:44:E0:EC:BD:F4:F7:D0:EC:ED X509v3 Authority Key Identifier: keyid:31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:d7:7e:9f:7e:98:a4:e6:e7:bc:dd:81:51:f9:6c:76:bd:dd: e2:5d:18:51:f5:22:dd:5d:49:67:f9:93:69:b4:09:cd:ff:5b: 76:14:a6:21:e9:08:0f:61:03:00:18:7f:06:a0:6e:1a:b7:e9: 86:24:9e:b2:48:9a:8b:83:c9:5b:2d:1f:70:77:b2:8c:fa:5e: 83:1c:f2:f4:58:11:8a:5b:4c:37:e8:06:96:3f:9c:92:43:b2: b4:af:2a:d9:f2:07:ba:21:0e:fd:f8:07:60:e9:f2:cb:75:b7: 46:91:7f:b6:99:87:8e:a8:cd:47:ae:3f:b3:a2:fe:90:8b:f5: c8:d6:e9:31:53:28:ad:cf:53:b5:33:72:5e:30:bc:49:ea:29: c1:b3:02:55:d1:a0:84:25:4f:91:f5:06:bc:76:e0:a9:e2:d9: bd:9d:ee:60:15:62:e0:1b:eb:46:96:06:ca:77:0e:2c:30:24: 14:71:4d:c5:7b:a8:eb:01:db:d2:b2:6c:e1:66:37:21:10:03: 0b:1d:48:c5:22:50:5c:d9:19:59:0f:7b:56:88:3a:e3:de:bc: f9:56:e1:fc:fe:19:bd:2c:63:12:64:5b:39:04:fe:cb:12:c9: d8:17:c6:58:13:2a:67:4f:6d:57:32:b8:64:c6:8c:a2:d9:43: 01:c8:58:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODgzRDMxMTAvBgNVBAUTKDMxN0E3MjdGRjYzRTI3QzI5Q0MwMUNCNjc5OTNFMkM2 MUYwODA0MUUwHhcNMjUwNzAzMDYyMzMwWhcNMjUwNzEwMDYyMzI5WjAYMRYwFAYD VQQDEw02ODY2MjFlMi1hYWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFiu9ZsjCsEFhtCsEwH4YwnySqsi2lrCQTgvI89OzLTA4YGkA8Xh5SZNc/Sv 5R3VZ/FVY5xWtNtIdTZz7JAp1Sj55BAAMCRXBTb1WUZDza7W/cI+sN6f4UQLGqy/ P1wxe8QQ1WycM4yTVByHrOtm5y7LGgSirMvamKCkQ54LgojU1H56Bg7/ZVDEzRGs W7K7S0skIVr/SwR7D+2m1fv5+d8Nj6iuMa1yEQAvzaGzCP+BJBoz3fTjfUAliShk H9s6p7O+YRCTQfL2eZd/6tA7wvSceMLY0M4iHCjy2wokZvEbdUb3dduv5ndPyjcB rfqf53nlXcdILRf1AcVOGg22WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvD6AXk 1u6UvlAmRODsvfT30OztMB8GA1UdIwQYMBaAFDF6cn/2PifCnMActnmT4sYfCAQe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODNEMy85NTc2MDE2ODVF MzYxMUVGQUM5MkQzMTRDNEY5QUUwMi9NWHB5Zl9ZLUo4S2N3QnkyZVpQaXhoOElC QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01YcHlmX1ktSjhLY3dCeTJlWlBpeGg4SUJCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODNEMy85NTc2MDE2ODVFMzYxMUVGQUM5MkQzMTRDNEY5QUUwMi9NWHB5Zl9ZLUo4 S2N3QnkyZVpQaXhoOElCQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4136ffpik5ue83YFR+Wx2vd3iXRhR9SLdXUln+ZNptAnN/1t2FKYh 6QgPYQMAGH8GoG4at+mGJJ6ySJqLg8lbLR9wd7KM+l6DHPL0WBGKW0w36AaWP5yS Q7K0ryrZ8ge6IQ79+Adg6fLLdbdGkX+2mYeOqM1Hrj+zov6Qi/XI1ukxUyitz1O1 M3JeMLxJ6inBswJV0aCEJU+R9Qa8duCp4tm9ne5gFWLgG+tGlgbKdw4sMCQUcU3F e6jrAdvSsmzhZjchEAMLHUjFIlBc2RlZD3tWiDrj3rz5VuH8/hm9LGMSZFs5BP7L EsnYF8ZYEypnT21XMrhkxoyi2UMByFhd -----END CERTIFICATE-----Generated at Fri Jul 4 11:51:01 2025 by rpki-client