$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft File: 0q268NfVLLlNShOXizIFO833eg8.mft (raw, json) Hash identifier: GO5auFH/esh6a41WXPVj08LRmMwz3kE0WV+W9IjxqQM= Subject key identifier: 88:B1:8C:E2:B1:CB:DE:C0:93:60:50:FC:CB:51:F7:17:A2:43:66:72 Authority key identifier: D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F Certificate issuer: /CN=A91BE514/serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft Manifest number: 013E Signing time: Tue 01 Jul 2025 04:52:15 +0000 Manifest this update: Tue 01 Jul 2025 04:52:14 +0000 Manifest next update: Tue 08 Jul 2025 04:52:14 +0000 Files and hashes: 1: 0q268NfVLLlNShOXizIFO833eg8.crl (hash: /Bsw3IESbCXSmXKEJ/aFPb4C3TURUtzNKTPM37jngbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE514, serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F Validity Not Before: Jul 1 04:52:14 2025 GMT Not After : Jul 8 04:52:14 2025 GMT Subject: CN=6863697e-1de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:27:82:2a:a2:13:12:a0:81:11:1f:b4:0e:b6: 3f:f3:93:e7:dc:7a:6b:db:78:bb:24:3d:a0:9b:d2: ab:51:21:0f:a9:20:7b:da:1d:b1:3c:3f:99:d6:19: 46:ba:7f:37:b3:0e:61:4d:44:d1:5b:2a:34:f3:ca: 19:1c:80:05:b4:09:fe:27:f0:9b:13:3c:f0:df:59: 3e:5b:14:82:af:6e:5f:e7:f7:0a:4b:a7:f3:6d:b4: 33:e9:33:50:e9:e7:b2:dd:29:8b:c5:a0:07:13:01: bf:d0:29:c1:18:6b:1a:c0:ba:c6:d1:50:2d:3a:a0: df:c7:48:2e:3b:35:85:34:c2:e9:e1:ca:dd:cf:e2: 11:85:76:fe:2a:a8:14:f9:40:46:79:fd:0f:7f:fe: a9:bf:82:e2:6a:24:f2:fa:05:f0:55:78:fb:a9:c2: 46:2a:ae:20:81:43:f2:de:25:5d:c4:96:91:bb:8b: 41:cc:f2:61:e6:00:8b:fb:73:3c:aa:43:d1:76:b0: bb:68:a6:7a:cd:61:2f:c4:7c:4f:10:cd:38:0b:04: f0:fd:01:ec:1c:b1:f1:c4:6c:98:4e:2b:5c:e8:9e: 1b:26:d6:4e:d1:3a:a2:2c:37:93:e6:4b:11:a0:8f: 34:b2:78:89:8c:bd:dd:b4:62:58:42:bc:47:39:8a: 86:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B1:8C:E2:B1:CB:DE:C0:93:60:50:FC:CB:51:F7:17:A2:43:66:72 X509v3 Authority Key Identifier: keyid:D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:dc:e2:a4:0f:c8:a1:41:b9:c8:2a:2f:e8:d5:42:0e:a7:bf: 78:48:da:c7:da:f2:37:7d:12:a6:3d:15:a4:69:d1:24:d9:3d: b0:dc:f6:eb:db:25:92:4a:bb:7f:b2:4d:fb:bf:7f:3c:1f:e6: 74:0a:d4:51:ea:b4:c2:c8:35:f6:4c:7a:c7:6b:1b:37:d4:cb: a0:b6:80:cd:4b:2e:53:f3:71:57:e0:00:2d:30:4b:d8:b5:7f: 29:96:20:3b:79:d5:06:5e:a9:4e:8f:46:20:a9:35:7a:07:6d: 01:ec:34:f6:e4:b6:12:56:2e:6d:f6:e1:8d:10:b8:de:53:76: 6b:f4:ca:d1:9a:8d:17:8a:7a:30:6e:fe:fb:4d:4b:ff:14:9a: 06:ce:f8:14:f7:23:84:88:83:0d:e4:d6:5b:16:2a:9a:65:f0: 05:fe:d8:06:82:94:a1:e5:b8:56:0e:99:58:4a:4f:e2:bc:4e: 2a:e6:e3:29:73:45:b9:0f:7f:36:d6:62:88:20:fa:24:7e:b2: 12:bd:01:47:8e:97:dc:55:a5:3d:11:87:54:03:e3:78:68:a6: d3:3e:87:1f:fb:73:66:cc:cb:b6:76:42:51:c4:b1:51:df:00: 06:6c:42:f9:ae:fa:8e:93:5d:60:cd:f5:f7:2e:7d:b8:55:ea: 5e:66:de:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU1MTQxMTAvBgNVBAUTKEQyQURCQUYwRDdENTJDQjk0RDRBMTM5NzhCMzIwNTNC Q0RGNzdBMEYwHhcNMjUwNzAxMDQ1MjE0WhcNMjUwNzA4MDQ1MjE0WjAYMRYwFAYD VQQDEw02ODYzNjk3ZS0xZGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvieCKqITEqCBER+0DrY/85Pn3Hpr23i7JD2gm9KrUSEPqSB72h2xPD+Z1hlG un83sw5hTUTRWyo088oZHIAFtAn+J/CbEzzw31k+WxSCr25f5/cKS6fzbbQz6TNQ 6eey3SmLxaAHEwG/0CnBGGsawLrG0VAtOqDfx0guOzWFNMLp4crdz+IRhXb+KqgU +UBGef0Pf/6pv4LiaiTy+gXwVXj7qcJGKq4ggUPy3iVdxJaRu4tBzPJh5gCL+3M8 qkPRdrC7aKZ6zWEvxHxPEM04CwTw/QHsHLHxxGyYTitc6J4bJtZO0TqiLDeT5ksR oI80sniJjL3dtGJYQrxHOYqGwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIixjOKx y97Ak2BQ/MtR9xeiQ2ZyMB8GA1UdIwQYMBaAFNKtuvDX1Sy5TUoTl4syBTvN93oP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTUxNC9EOEVERjY4RTZF RjUxMUVFQkQxODBBMzJDNEY5QUUwMi8wcTI2OE5mVkxMbE5TaE9YaXpJRk84MzNl ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBxMjY4TmZWTExsTlNoT1hpeklGTzgzM2VnOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTUxNC9EOEVERjY4RTZFRjUxMUVFQkQxODBBMzJDNEY5QUUwMi8wcTI2OE5mVkxM bE5TaE9YaXpJRk84MzNlZzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS3OKkD8ihQbnIKi/o1UIOp794SNrH2vI3fRKmPRWkadEk2T2w3Pbr 2yWSSrt/sk37v388H+Z0CtRR6rTCyDX2THrHaxs31MugtoDNSy5T83FX4AAtMEvY tX8pliA7edUGXqlOj0YgqTV6B20B7DT25LYSVi5t9uGNELjeU3Zr9MrRmo0Xinow bv77TUv/FJoGzvgU9yOEiIMN5NZbFiqaZfAF/tgGgpSh5bhWDplYSk/ivE4q5uMp c0W5D3821mKIIPokfrISvQFHjpfcVaU9EYdUA+N4aKbTPocf+3NmzMu2dkJRxLFR 3wAGbEL5rvqOk11gzfX3Ln24VepeZt7l -----END CERTIFICATE-----Generated at Thu Jul 3 01:12:54 2025 by rpki-client