$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft File: Iin2usLWDFC9Hk9Y9CwMobD4m28.mft (raw, json) Hash identifier: XlYlEsubRtx6WOPQcOPmigczvJmHusvb4yYeHFTO9Mo= Subject key identifier: 2A:5D:1B:2B:2A:F1:C0:61:8F:96:82:9F:39:15:F2:A9:71:E2:42:DB Authority key identifier: 22:29:F6:BA:C2:D6:0C:50:BD:1E:4F:58:F4:2C:0C:A1:B0:F8:9B:6F Certificate issuer: /CN=A91B8C13/serialNumber=2229F6BAC2D60C50BD1E4F58F42C0CA1B0F89B6F Certificate serial: 34A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft Manifest number: 34A1 Signing time: Sat 28 Jun 2025 15:14:19 +0000 Manifest this update: Sat 28 Jun 2025 15:14:18 +0000 Manifest next update: Sat 05 Jul 2025 15:14:18 +0000 Files and hashes: 1: Iin2usLWDFC9Hk9Y9CwMobD4m28.crl (hash: ceyGkF6orPKWbbt1xrds4Ad1Q6RX8iIQlqAHhvqLzkk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.crl rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 15:14:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13473 (0x34a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C13, serialNumber=2229F6BAC2D60C50BD1E4F58F42C0CA1B0F89B6F Validity Not Before: Jun 28 15:14:18 2025 GMT Not After : Jul 5 15:14:18 2025 GMT Subject: CN=686006cb-58f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8b:ad:ce:f3:d7:c0:a6:1f:65:60:48:5d:83: f0:65:d6:07:55:37:7d:b1:12:1e:9e:55:69:b4:72: 42:95:ca:a5:fa:51:33:10:db:a6:3c:03:c8:77:c7: b5:1d:2c:b1:a7:18:6c:38:92:89:7e:24:cc:0c:eb: 1d:25:30:00:12:f4:bd:7b:c0:ab:0d:e0:6d:15:7a: 3c:b8:fa:19:0f:ce:ad:f0:15:32:e5:37:ea:30:9c: b5:94:95:49:e9:1a:cc:ea:b9:58:97:98:eb:ac:ae: 27:e1:ef:c8:29:6d:d4:66:03:5c:a5:99:3f:fa:e4: 57:2d:a8:05:d2:7a:be:76:2f:25:8e:51:52:f2:44: 37:c4:0d:2d:31:19:31:05:cd:5e:b1:1f:8d:fc:08: ce:c2:ad:a8:ef:f1:d4:ad:ee:47:5f:8b:ab:90:c0: 8e:09:a6:d5:68:90:05:af:4d:2c:ca:f3:b3:8d:16: d3:a5:19:f1:88:dd:fa:d7:69:ed:de:e8:b1:d6:ee: 3c:c8:9a:2f:cb:50:e6:40:02:48:58:a4:47:22:66: b0:6a:fc:bb:8d:74:cc:6f:8c:0d:a1:b2:c3:ad:f0: 32:90:cc:bb:94:48:ec:2b:63:cb:cf:8f:ed:d6:b0: be:a2:9b:5e:3c:a2:99:27:35:d0:55:da:58:78:f3: ce:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:5D:1B:2B:2A:F1:C0:61:8F:96:82:9F:39:15:F2:A9:71:E2:42:DB X509v3 Authority Key Identifier: keyid:22:29:F6:BA:C2:D6:0C:50:BD:1E:4F:58:F4:2C:0C:A1:B0:F8:9B:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:5b:c2:64:88:52:05:01:b9:5d:4b:65:5e:d3:b5:13:5f:ba: c3:ba:5f:80:01:d8:d9:b6:38:4d:77:79:c8:4c:e7:b7:e4:e3: 8a:90:38:a3:58:13:90:82:86:c0:a2:55:e6:34:5a:14:49:1c: 80:23:56:19:e6:50:2c:c5:02:25:d7:ff:fe:42:14:f7:a6:8f: c3:93:01:27:56:b8:93:bb:07:52:20:68:6e:d0:91:2f:87:47: 27:9d:6e:95:8f:41:80:20:80:5e:f0:26:5b:fb:f9:41:5e:7e: 45:7c:d7:e0:5f:3d:45:0e:dd:98:bc:e2:3e:94:db:95:2b:3b: 9f:c3:da:4b:09:da:b2:c6:6e:41:ef:f5:f9:ea:fe:59:72:dc: 69:e3:0c:b2:d8:db:82:0d:a2:d5:7a:32:f3:ed:2c:a3:a0:be: 16:e0:69:5e:91:0d:4b:42:31:99:84:d9:a2:ce:2e:a4:fe:58: f4:10:51:57:7f:c7:fc:a2:95:c4:88:ec:e8:db:ba:0f:66:33: 63:d1:18:70:2c:f0:b4:a0:88:5d:4f:aa:92:74:af:16:bc:f8: 30:2d:42:2e:7f:e0:9d:60:78:49:b4:44:05:b6:7e:d0:76:b0: 41:43:f9:5c:be:f2:65:ea:ab:10:99:a1:09:f1:37:57:20:32: b0:29:d9:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDMTMxMTAvBgNVBAUTKDIyMjlGNkJBQzJENjBDNTBCRDFFNEY1OEY0MkMwQ0Ex QjBGODlCNkYwHhcNMjUwNjI4MTUxNDE4WhcNMjUwNzA1MTUxNDE4WjAYMRYwFAYD VQQDEw02ODYwMDZjYi01OGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmYutzvPXwKYfZWBIXYPwZdYHVTd9sRIenlVptHJClcql+lEzENumPAPId8e1 HSyxpxhsOJKJfiTMDOsdJTAAEvS9e8CrDeBtFXo8uPoZD86t8BUy5TfqMJy1lJVJ 6RrM6rlYl5jrrK4n4e/IKW3UZgNcpZk/+uRXLagF0nq+di8ljlFS8kQ3xA0tMRkx Bc1esR+N/AjOwq2o7/HUre5HX4urkMCOCabVaJAFr00syvOzjRbTpRnxiN3612nt 3uix1u48yJovy1DmQAJIWKRHImawavy7jXTMb4wNobLDrfAykMy7lEjsK2PLz4/t 1rC+optePKKZJzXQVdpYePPOowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpdGysq 8cBhj5aCnzkV8qlx4kLbMB8GA1UdIwQYMBaAFCIp9rrC1gxQvR5PWPQsDKGw+Jtv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEMxMy82RkE5NUI1ODFE QUExMUUyODVDMjFDQTYwOEIwMkNEMi9JaW4ydXNMV0RGQzlIazlZOUN3TW9iRDRt MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpbjJ1c0xXREZDOUhrOVk5Q3dNb2JENG0yOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEMxMy82RkE5NUI1ODFEQUExMUUyODVDMjFDQTYwOEIwMkNEMi9JaW4ydXNMV0RG QzlIazlZOUN3TW9iRDRtMjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwW8JkiFIFAbldS2Ve07UTX7rDul+AAdjZtjhNd3nITOe35OOKkDij WBOQgobAolXmNFoUSRyAI1YZ5lAsxQIl1//+QhT3po/DkwEnVriTuwdSIGhu0JEv h0cnnW6Vj0GAIIBe8CZb+/lBXn5FfNfgXz1FDt2YvOI+lNuVKzufw9pLCdqyxm5B 7/X56v5Zctxp4wyy2NuCDaLVejLz7SyjoL4W4GlekQ1LQjGZhNmizi6k/lj0EFFX f8f8opXEiOzo27oPZjNj0RhwLPC0oIhdT6qSdK8WvPgwLUIuf+CdYHhJtEQFtn7Q drBBQ/lcvvJl6qsQmaEJ8TdXIDKwKdmN -----END CERTIFICATE-----Generated at Sun Jun 29 19:25:13 2025 by rpki-client