$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft File: MRUQtiC24M1CLhwrbpUrYEil8eI.mft (raw, json) Hash identifier: vr8APcEfAs8SHU8E0Y2RpJ0MOOvy8/Toxk4oQCZo3XA= Subject key identifier: 71:B0:0E:BC:F7:34:ED:C1:4B:3F:55:1B:77:F3:69:73:3C:4F:1D:46 Authority key identifier: 31:15:10:B6:20:B6:E0:CD:42:2E:1C:2B:6E:95:2B:60:48:A5:F1:E2 Certificate issuer: /CN=A91BF979/serialNumber=311510B620B6E0CD422E1C2B6E952B6048A5F1E2 Certificate serial: 03A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft Manifest number: 03A0 Signing time: Tue 01 Jul 2025 01:21:04 +0000 Manifest this update: Tue 01 Jul 2025 01:21:03 +0000 Manifest next update: Tue 08 Jul 2025 01:21:03 +0000 Files and hashes: 1: MRUQtiC24M1CLhwrbpUrYEil8eI.crl (hash: NRJ0Jq1Ok1WBPsDBmAFhbRqZXfoxQN/CD6JSfSW1tg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.crl rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 929 (0x3a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF979, serialNumber=311510B620B6E0CD422E1C2B6E952B6048A5F1E2 Validity Not Before: Jul 1 01:21:03 2025 GMT Not After : Jul 8 01:21:03 2025 GMT Subject: CN=68633800-f328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0f:14:9d:08:5e:cb:84:fd:08:0b:8a:19:91: 4d:e3:3a:ab:c8:04:bf:1a:18:47:34:f6:07:ce:dc: 52:ab:09:4c:35:55:1b:81:5b:14:e4:57:c0:72:6a: e5:c6:84:4a:83:3f:97:90:b6:05:d6:1a:ea:a2:36: 1f:d9:9d:ab:51:4f:4e:f4:1b:d1:dc:5e:10:77:dd: d2:0f:b7:c4:af:b4:0f:0e:8a:f3:58:35:cc:2b:66: da:e2:2a:dd:a6:75:70:3c:09:d1:86:67:f6:d6:81: 8a:bb:00:2a:91:a9:63:82:42:d3:1e:16:4b:f1:6e: 08:4e:ef:4e:d1:92:7e:15:db:49:12:82:e2:46:14: 5d:ce:4f:9d:08:89:5e:a5:0c:2c:e7:c2:c0:65:1f: c3:94:66:77:b7:60:04:2a:72:f1:08:a8:81:b7:41: b0:7e:e3:f8:92:e9:1f:9c:ff:a6:7d:52:66:ee:04: 9c:34:ac:85:d3:5d:ba:9a:97:df:99:f0:0f:03:44: 3e:24:cf:c0:7c:c4:ab:5d:1e:a4:42:58:ae:ee:51: ea:e5:68:f8:23:de:2e:6f:3d:0b:1d:b7:13:05:92: db:bc:87:b7:66:5e:47:55:ba:68:18:4f:8d:f7:e3: 9f:3a:8d:4e:2d:d6:96:b0:5e:bf:38:a5:04:3b:c6: 79:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B0:0E:BC:F7:34:ED:C1:4B:3F:55:1B:77:F3:69:73:3C:4F:1D:46 X509v3 Authority Key Identifier: keyid:31:15:10:B6:20:B6:E0:CD:42:2E:1C:2B:6E:95:2B:60:48:A5:F1:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:5e:e6:9f:e4:15:48:47:86:f1:8d:73:5b:83:cd:74:7e:43: e9:d2:69:58:5d:dc:2f:69:78:e5:b7:64:27:fa:bb:d8:99:ff: 21:41:9b:7c:81:49:4a:c2:d0:c7:5c:1f:32:b6:05:d1:0b:b9: b2:1a:9d:2d:f3:ad:a0:b5:7e:4e:d2:25:f5:e3:5e:0e:f3:2a: 62:a4:e7:ca:ac:b0:d1:e9:e3:1f:eb:da:95:91:19:cd:93:8c: e6:e9:5d:05:bf:88:6b:89:9a:a3:af:5b:86:dd:50:87:a9:99: 0b:58:3d:c5:7a:17:ff:58:fc:b7:e3:e2:72:d2:11:3a:18:3d: 31:aa:e8:d5:94:8c:51:2b:e0:74:4e:cb:b7:80:a7:6a:e7:ff: d4:02:44:78:29:f4:01:71:e3:09:9e:2f:95:23:a2:d4:86:74: bc:f2:43:c1:9a:7f:a2:06:5e:48:57:c5:ba:52:ba:5c:23:af: c0:10:ac:2f:91:8b:73:6c:03:e3:a9:04:94:ad:0f:0b:7b:35: ab:02:f4:a8:31:cd:7a:81:e3:37:9d:a7:9d:b8:4c:1a:c2:c8: f4:b2:11:c9:7b:12:2a:75:d9:fa:83:3f:a7:30:01:e5:f3:60: 9a:2c:5d:63:a6:47:44:c9:6d:8e:02:e8:3a:82:e4:f2:11:1d: 43:01:c8:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY5NzkxMTAvBgNVBAUTKDMxMTUxMEI2MjBCNkUwQ0Q0MjJFMUMyQjZFOTUyQjYw NDhBNUYxRTIwHhcNMjUwNzAxMDEyMTAzWhcNMjUwNzA4MDEyMTAzWjAYMRYwFAYD VQQDEw02ODYzMzgwMC1mMzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwg8UnQhey4T9CAuKGZFN4zqryAS/GhhHNPYHztxSqwlMNVUbgVsU5FfAcmrl xoRKgz+XkLYF1hrqojYf2Z2rUU9O9BvR3F4Qd93SD7fEr7QPDorzWDXMK2ba4ird pnVwPAnRhmf21oGKuwAqkaljgkLTHhZL8W4ITu9O0ZJ+FdtJEoLiRhRdzk+dCIle pQws58LAZR/DlGZ3t2AEKnLxCKiBt0GwfuP4kukfnP+mfVJm7gScNKyF0126mpff mfAPA0Q+JM/AfMSrXR6kQliu7lHq5Wj4I94ubz0LHbcTBZLbvIe3Zl5HVbpoGE+N 9+OfOo1OLdaWsF6/OKUEO8Z5TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHGwDrz3 NO3BSz9VG3fzaXM8Tx1GMB8GA1UdIwQYMBaAFDEVELYgtuDNQi4cK26VK2BIpfHi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjk3OS8xQjQ2NUFBNjlF RUQxMUVDOTM4MURGMENDNEY5QUUwMi9NUlVRdGlDMjRNMUNMaHdyYnBVcllFaWw4 ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01SVVF0aUMyNE0xQ0xod3JicFVyWUVpbDhlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjk3OS8xQjQ2NUFBNjlFRUQxMUVDOTM4MURGMENDNEY5QUUwMi9NUlVRdGlDMjRN MUNMaHdyYnBVcllFaWw4ZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaXuaf5BVIR4bxjXNbg810fkPp0mlYXdwvaXjlt2Qn+rvYmf8hQZt8 gUlKwtDHXB8ytgXRC7myGp0t862gtX5O0iX1414O8ypipOfKrLDR6eMf69qVkRnN k4zm6V0Fv4hriZqjr1uG3VCHqZkLWD3Fehf/WPy34+Jy0hE6GD0xqujVlIxRK+B0 Tsu3gKdq5//UAkR4KfQBceMJni+VI6LUhnS88kPBmn+iBl5IV8W6UrpcI6/AEKwv kYtzbAPjqQSUrQ8LezWrAvSoMc16geM3naeduEwawsj0shHJexIqddn6gz+nMAHl 82CaLF1jpkdEyW2OAug6guTyER1DAcgZ -----END CERTIFICATE-----Generated at Wed Jul 2 15:24:33 2025 by rpki-client