$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft File: MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft (raw, json) Hash identifier: FbSdHV28wUj9UAxihsxYo2VTxBR4fKJ53uIXucCjvxw= Subject key identifier: 52:B6:E5:80:34:27:72:B8:BE:7A:AD:34:52:EC:E5:03:1A:69:BF:D5 Authority key identifier: 30:7A:D4:5E:01:B8:47:9F:A2:28:A1:23:DE:7A:FA:A5:D1:97:C1:7D Certificate issuer: /CN=A91B4F3C/serialNumber=307AD45E01B8479FA228A123DE7AFAA5D197C17D Certificate serial: 3496 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft Manifest number: 3496 Signing time: Mon 30 Jun 2025 15:14:37 +0000 Manifest this update: Mon 30 Jun 2025 15:14:36 +0000 Manifest next update: Mon 07 Jul 2025 15:14:36 +0000 Files and hashes: 1: MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl (hash: adobNOnx1VHEvO2BLPDeQcFcHfYcIGxRQBNTFZXygzM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 15:14:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13462 (0x3496) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4F3C, serialNumber=307AD45E01B8479FA228A123DE7AFAA5D197C17D Validity Not Before: Jun 30 15:14:36 2025 GMT Not After : Jul 7 15:14:36 2025 GMT Subject: CN=6862a9dc-2fa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e5:87:71:23:8c:06:71:b9:4a:e4:d6:1b:c8: 6f:fd:9e:eb:f6:43:8c:cf:ac:51:2b:a3:bd:ac:e6: 85:44:dd:61:af:b3:ad:12:9d:00:3d:16:07:4b:1c: 1c:2b:19:83:83:89:c1:46:26:e9:76:9f:34:ed:7e: ab:de:fb:be:14:28:b8:fa:a8:8c:e3:f1:b4:3d:3d: 24:be:df:8e:05:e9:1d:57:2d:b6:90:00:47:d8:23: 05:67:41:d1:64:17:3b:0e:04:cd:86:49:56:a6:95: b9:3f:04:90:13:f7:6f:d9:87:2f:5a:cd:5f:0d:c9: 0b:81:6f:14:ee:c4:5d:0f:ef:8e:b4:4f:26:5f:54: 1c:26:80:7c:0a:e7:42:7c:ea:a1:1d:47:28:3f:cc: 14:cc:4f:00:30:6c:2a:13:52:de:b5:97:90:38:08: 20:e3:e3:51:b3:f1:a7:80:90:b5:e6:37:99:97:7c: 8e:97:ec:a5:62:ea:6d:17:38:83:eb:88:07:2f:37: 08:9f:54:53:ae:4d:78:0e:d4:d1:4c:c5:fd:72:af: 76:c4:a5:9f:93:cc:86:c9:8f:41:a5:08:50:4c:84: f5:5f:4e:71:fb:55:ac:5f:92:80:a1:37:45:0b:16: f1:71:d4:07:99:73:15:5e:2c:a3:d1:34:0c:89:4a: b8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B6:E5:80:34:27:72:B8:BE:7A:AD:34:52:EC:E5:03:1A:69:BF:D5 X509v3 Authority Key Identifier: keyid:30:7A:D4:5E:01:B8:47:9F:A2:28:A1:23:DE:7A:FA:A5:D1:97:C1:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:cb:ad:da:6a:04:a2:99:a7:af:b9:54:76:a1:c8:fc:29:7c: 35:9f:38:fc:e1:a5:5f:1d:91:e1:5c:91:c5:25:47:75:c9:56: 7a:a4:14:0c:0c:12:5b:2b:98:5f:b8:c3:07:45:eb:52:39:7c: 46:71:f3:96:3b:84:b6:1a:0d:0f:18:85:c2:14:26:29:e1:1a: e7:ea:b2:0a:2c:c7:fd:ef:87:6a:f4:82:18:af:69:eb:24:b9: 1f:e4:2e:78:28:79:80:64:ce:66:06:0a:d7:fa:53:2c:f9:d3: 0c:8d:77:43:e5:cd:86:94:b2:e7:fc:bc:29:c0:14:7e:44:6d: 1d:51:0c:25:ca:78:cc:26:58:ae:d1:da:2b:99:87:fa:f5:6b: 8c:08:df:28:b8:bf:f2:e3:30:37:6c:9c:91:c5:8b:77:ea:07: 53:16:c8:45:91:45:b1:0b:79:ad:fe:43:36:a9:86:ae:2c:8f: 2c:d7:90:49:39:a2:18:84:fd:4d:97:f6:25:2a:ad:cb:7e:50: 75:9d:bb:05:00:e6:93:0f:a8:73:fd:fc:4d:31:a9:68:4b:bd: da:2c:e1:23:30:67:5f:93:c7:08:de:3a:80:37:02:8a:b2:4c: ea:ca:b5:cb:4c:73:92:df:96:48:92:08:32:3c:9e:e9:45:46: 6e:60:af:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRGM0MxMTAvBgNVBAUTKDMwN0FENDVFMDFCODQ3OUZBMjI4QTEyM0RFN0FGQUE1 RDE5N0MxN0QwHhcNMjUwNjMwMTUxNDM2WhcNMjUwNzA3MTUxNDM2WjAYMRYwFAYD VQQDEw02ODYyYTlkYy0yZmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm+WHcSOMBnG5SuTWG8hv/Z7r9kOMz6xRK6O9rOaFRN1hr7OtEp0APRYHSxwc KxmDg4nBRibpdp807X6r3vu+FCi4+qiM4/G0PT0kvt+OBekdVy22kABH2CMFZ0HR ZBc7DgTNhklWppW5PwSQE/dv2YcvWs1fDckLgW8U7sRdD++OtE8mX1QcJoB8CudC fOqhHUcoP8wUzE8AMGwqE1LetZeQOAgg4+NRs/GngJC15jeZl3yOl+ylYuptFziD 64gHLzcIn1RTrk14DtTRTMX9cq92xKWfk8yGyY9BpQhQTIT1X05x+1WsX5KAoTdF CxbxcdQHmXMVXiyj0TQMiUq4rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFK25YA0 J3K4vnqtNFLs5QMaab/VMB8GA1UdIwQYMBaAFDB61F4BuEefoiihI956+qXRl8F9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEYzQy84QTU1QTZBNDFE QTYxMUUyQjkxQ0QyOUQwOEIwMkNEMi9NSHJVWGdHNFI1LWlLS0VqM25yNnBkR1h3 WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01IclVYZ0c0UjUtaUtLRWozbnI2cGRHWHdYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEYzQy84QTU1QTZBNDFEQTYxMUUyQjkxQ0QyOUQwOEIwMkNEMi9NSHJVWGdHNFI1 LWlLS0VqM25yNnBkR1h3WDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9y63aagSimaevuVR2ocj8KXw1nzj84aVfHZHhXJHFJUd1yVZ6pBQM DBJbK5hfuMMHRetSOXxGcfOWO4S2Gg0PGIXCFCYp4Rrn6rIKLMf974dq9IIYr2nr JLkf5C54KHmAZM5mBgrX+lMs+dMMjXdD5c2GlLLn/LwpwBR+RG0dUQwlynjMJliu 0dormYf69WuMCN8ouL/y4zA3bJyRxYt36gdTFshFkUWxC3mt/kM2qYauLI8s15BJ OaIYhP1Nl/YlKq3LflB1nbsFAOaTD6hz/fxNMaloS73aLOEjMGdfk8cI3jqANwKK skzqyrXLTHOS35ZIkggyPJ7pRUZuYK+h -----END CERTIFICATE-----Generated at Tue Jul 1 08:35:17 2025 by rpki-client