$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft File: Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft (raw, json) Hash identifier: tPBCUAa1FjGbBYk3xC8a4M0sSRejx7eJSlrPOxGVqJE= Subject key identifier: D6:63:28:B2:2D:09:0D:A3:8E:5E:E1:EE:A4:A5:7C:DE:C9:94:2A:B5 Authority key identifier: 56:7E:32:1D:AF:4A:F7:44:3B:0D:79:E3:2A:C0:30:79:75:27:F1:D9 Certificate issuer: /CN=A91BB246/serialNumber=567E321DAF4AF7443B0D79E32AC030797527F1D9 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft Manifest number: 14 Signing time: Thu 03 Jul 2025 08:17:47 +0000 Manifest this update: Thu 03 Jul 2025 08:17:47 +0000 Manifest next update: Thu 10 Jul 2025 08:17:47 +0000 Files and hashes: 1: Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl (hash: BG861gFR9vhUSa/ZdAGNUh7iU+H4O3n8fUmoIrR04zc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB246, serialNumber=567E321DAF4AF7443B0D79E32AC030797527F1D9 Validity Not Before: Jul 3 08:17:47 2025 GMT Not After : Jul 10 08:17:47 2025 GMT Subject: CN=68663cab-ddad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c3:4b:53:35:b9:dc:bd:0b:05:9e:4e:ef:01: c8:b9:56:4d:e7:44:b3:b2:f2:e4:d3:e4:38:e4:4f: 74:b9:d9:f1:60:9e:ac:90:3a:0f:44:89:b0:80:10: 91:93:3f:f6:5f:c5:85:c6:24:f2:48:81:ac:ea:c9: cd:c0:5b:b0:85:14:a4:ca:31:59:35:34:22:d0:1e: 84:c9:8b:16:b6:9e:6d:25:6b:9f:e7:94:3e:76:4e: 14:5a:2d:c6:29:f4:52:48:e4:3c:7c:e3:0e:86:39: db:9b:14:46:c6:e2:fe:38:0b:0e:ba:32:1f:b3:bf: 82:6e:06:be:4f:0a:53:df:24:f4:94:9d:ba:6d:c8: 63:a9:77:1d:0c:81:a2:14:e1:8b:08:86:ff:68:d7: c7:51:85:80:88:93:ee:d1:54:6b:e1:63:29:ea:0e: 52:93:62:44:c8:3e:71:7d:3a:c1:09:17:68:93:b7: 80:63:53:45:3f:a3:51:29:ff:62:d0:8e:69:3c:0a: 8e:4e:2a:cb:0d:cf:25:b4:b0:52:dc:f0:40:ed:da: d5:8f:67:70:7d:87:22:5e:41:1a:27:5f:01:19:8b: 71:c9:88:30:95:50:33:25:f5:bd:16:13:24:28:5e: 2a:a1:99:ec:cd:ab:2f:30:1a:60:3b:15:53:bf:a0: f4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:63:28:B2:2D:09:0D:A3:8E:5E:E1:EE:A4:A5:7C:DE:C9:94:2A:B5 X509v3 Authority Key Identifier: keyid:56:7E:32:1D:AF:4A:F7:44:3B:0D:79:E3:2A:C0:30:79:75:27:F1:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:be:cb:78:4c:92:4a:1d:44:4c:e3:49:d3:a0:2b:9c:ab:b8: 81:f9:42:ed:6f:80:49:69:ad:b2:66:11:60:c7:99:07:1c:82: 99:4a:3b:98:26:6b:35:fe:fd:72:d9:66:ec:31:f9:a4:39:a3: ee:9a:54:58:e2:7a:23:82:19:28:51:ff:2e:33:55:f5:d9:05: 44:cb:5b:b6:16:bc:18:fe:be:7b:2c:90:1c:4e:40:9e:97:ce: 8b:44:43:82:15:b5:fa:7b:c5:9e:9b:18:4b:cd:b1:d5:2e:c6: 0b:92:14:ef:3f:6b:bf:23:a6:1d:e6:1b:bb:35:a2:b2:3f:ac: 52:ce:f4:4b:92:7e:72:a0:31:b8:02:d1:47:b0:32:df:9f:bc: 78:b2:bd:e4:dd:f2:84:40:b0:80:6f:9d:14:f0:53:ff:28:c5: e8:55:db:95:41:d4:7c:9e:a2:8b:ef:61:71:ff:cc:4f:d4:37: 90:7e:b5:6e:cd:5f:65:e3:8d:e7:ff:b1:4f:8f:72:a1:a0:b9: 68:90:6c:09:19:63:27:01:93:56:eb:78:ab:7f:86:53:d1:97: 3e:02:1b:de:b2:4a:f2:a3:b5:b8:10:8a:f5:cf:07:bb:c7:8a: ab:75:29:4b:78:dc:94:df:80:cc:7b:0e:34:91:a4:f2:e5:0e: e0:1c:7f:37 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjI0NjExMC8GA1UEBRMoNTY3RTMyMURBRjRBRjc0NDNCMEQ3OUUzMkFDMDMwNzk3 NTI3RjFEOTAeFw0yNTA3MDMwODE3NDdaFw0yNTA3MTAwODE3NDdaMBgxFjAUBgNV BAMTDTY4NjYzY2FiLWRkYWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrw0tTNbncvQsFnk7vAci5Vk3nRLOy8uTT5DjkT3S52fFgnqyQOg9EibCAEJGT P/ZfxYXGJPJIgazqyc3AW7CFFKTKMVk1NCLQHoTJixa2nm0la5/nlD52ThRaLcYp 9FJI5Dx84w6GOdubFEbG4v44Cw66Mh+zv4JuBr5PClPfJPSUnbptyGOpdx0MgaIU 4YsIhv9o18dRhYCIk+7RVGvhYynqDlKTYkTIPnF9OsEJF2iTt4BjU0U/o1Ep/2LQ jmk8Co5OKssNzyW0sFLc8EDt2tWPZ3B9hyJeQRonXwEZi3HJiDCVUDMl9b0WEyQo XiqhmezNqy8wGmA7FVO/oPSZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1mMosi0J DaOOXuHupKV83smUKrUwHwYDVR0jBBgwFoAUVn4yHa9K90Q7DXnjKsAweXUn8dkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMjQ2L0YxQzVDOTUyM0Mw RDExRjA5NkNDREI1RkM0RjlBRTAyL1ZuNHlIYTlLOTBRN0RYbmpLc0F3ZVhVbjhk ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVm40eUhhOUs5MFE3RFhuaktzQXdlWFVuOGRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC MjQ2L0YxQzVDOTUyM0MwRDExRjA5NkNDREI1RkM0RjlBRTAyL1ZuNHlIYTlLOTBR N0RYbmpLc0F3ZVhVbjhkay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABe+y3hMkkodREzjSdOgK5yruIH5Qu1vgElprbJmEWDHmQccgplKO5gm azX+/XLZZuwx+aQ5o+6aVFjieiOCGShR/y4zVfXZBUTLW7YWvBj+vnsskBxOQJ6X zotEQ4IVtfp7xZ6bGEvNsdUuxguSFO8/a78jph3mG7s1orI/rFLO9EuSfnKgMbgC 0UewMt+fvHiyveTd8oRAsIBvnRTwU/8oxehV25VB1HyeoovvYXH/zE/UN5B+tW7N X2Xjjef/sU+PcqGguWiQbAkZYycBk1breKt/hlPRlz4CG96ySvKjtbgQivXPB7vH iqt1KUt43JTfgMx7DjSRpPLlDuAcfzc= -----END CERTIFICATE-----Generated at Thu Jul 3 22:53:13 2025 by rpki-client