$ rpki-client -vvf rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft File: AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft (raw, json) Hash identifier: JYPBiPWHxJrrwxnFkwvk75ku7Zau1JQiHkchJF2YTQ0= Subject key identifier: DD:D8:94:D2:8F:98:FF:9A:01:10:62:33:99:0D:CE:54:96:CA:E0:B6 Authority key identifier: 00:FD:31:FD:06:B4:20:4C:3D:DC:B6:35:07:18:95:33:77:8C:CC:F8 Certificate issuer: /CN=A91C09EA/serialNumber=00FD31FD06B4204C3DDCB63507189533778CCCF8 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AP0x_Qa0IEw93LY1BxiVM3eMzPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft Manifest number: 4D Signing time: Sun 29 Jun 2025 06:20:48 +0000 Manifest this update: Sun 29 Jun 2025 06:20:48 +0000 Manifest next update: Sun 06 Jul 2025 06:20:48 +0000 Files and hashes: 1: AP0x_Qa0IEw93LY1BxiVM3eMzPg.crl (hash: DTRf8yhjKOlRq3D8FleSUzSUZ8sr/KoGgdtlRZX1fLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.crl rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AP0x_Qa0IEw93LY1BxiVM3eMzPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 06:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C09EA, serialNumber=00FD31FD06B4204C3DDCB63507189533778CCCF8 Validity Not Before: Jun 29 06:20:48 2025 GMT Not After : Jul 6 06:20:48 2025 GMT Subject: CN=6860db40-60d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f4:22:d4:8b:ab:75:96:f7:df:02:c3:27:a6: 09:a1:90:f5:9d:9c:ef:af:a8:18:2c:8c:01:23:0f: 2d:0c:08:52:88:5f:a0:33:fc:b5:91:73:cc:33:60: c5:ab:d5:59:1f:26:49:10:88:9a:66:61:76:be:33: f5:1e:01:da:c9:1e:84:3c:6c:25:c7:22:54:97:d3: 95:02:8a:12:35:67:15:c2:1c:f1:10:d4:ee:f5:78: 5d:7b:4b:25:ce:c7:f5:e4:01:d6:b7:0d:aa:9c:21: bc:aa:f4:29:b4:ea:b2:9b:d0:00:fb:5e:0b:88:14: 8f:35:39:94:f2:78:4c:07:3c:19:58:a1:9b:93:19: 33:4e:60:1d:c9:c0:85:2e:ee:60:ec:1c:c0:ea:cc: b7:1f:90:5e:4c:dc:79:5e:f4:2e:b9:08:33:95:5e: 69:6f:1a:b0:6e:40:4c:08:00:ee:ef:9b:88:d4:6e: ab:df:15:0a:7e:9b:9e:78:5c:d6:5a:17:a7:a5:3e: 26:ae:6f:83:34:cf:ad:30:79:d8:89:63:c7:5d:93: de:58:1f:bd:2a:ef:6a:a3:e0:ce:b9:13:16:42:da: 4e:27:2b:4b:9b:9b:5f:72:3e:43:9e:ac:6f:b2:79: a9:24:48:9d:83:c4:3a:f2:dc:c3:21:ac:e2:d0:06: 3d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D8:94:D2:8F:98:FF:9A:01:10:62:33:99:0D:CE:54:96:CA:E0:B6 X509v3 Authority Key Identifier: keyid:00:FD:31:FD:06:B4:20:4C:3D:DC:B6:35:07:18:95:33:77:8C:CC:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AP0x_Qa0IEw93LY1BxiVM3eMzPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:b0:f9:bc:94:58:e4:fc:3e:3c:4f:b7:67:3f:71:5c:84:87: 5d:f5:6b:52:da:db:6a:43:40:11:05:ad:a1:d0:5a:57:fe:38: da:72:4c:99:8a:d3:1c:e0:8a:70:ee:26:83:cc:cf:ec:27:13: 63:4c:09:aa:b1:61:20:77:c7:a9:d6:f5:dd:99:3f:d6:54:d1: 23:63:5c:25:c3:cd:5a:5e:52:52:03:97:70:3a:37:74:f3:3e: f9:18:82:c1:df:69:e3:de:18:1c:b1:9c:91:11:79:52:d4:8a: 1a:c5:78:82:4f:96:b8:c8:45:cc:08:41:5a:39:ab:41:5d:16: e1:bb:18:a2:7c:7f:21:20:01:3b:8d:e6:85:74:01:a1:8c:9d: 64:5a:88:38:29:01:2e:02:95:03:a9:c4:73:cd:02:a4:c4:97: 11:12:b1:5a:16:8f:5c:76:3c:00:d3:f1:7a:01:c2:89:cc:c1: 16:b2:65:45:d2:f4:cf:fa:b1:49:6d:54:9e:5a:ae:de:d5:dc: e6:3b:07:23:7a:68:3e:68:56:e6:dd:ab:4b:b1:c0:28:65:fa: 59:b2:a8:b6:45:2b:41:29:33:d4:a0:36:5f:74:44:6d:87:d4: 08:d0:87:15:23:0c:ae:cb:b4:48:90:5d:c5:56:b9:da:28:74: 0a:ca:89:73 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MDlFQTExMC8GA1UEBRMoMDBGRDMxRkQwNkI0MjA0QzNERENCNjM1MDcxODk1MzM3 NzhDQ0NGODAeFw0yNTA2MjkwNjIwNDhaFw0yNTA3MDYwNjIwNDhaMBgxFjAUBgNV BAMTDTY4NjBkYjQwLTYwZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDl9CLUi6t1lvffAsMnpgmhkPWdnO+vqBgsjAEjDy0MCFKIX6Az/LWRc8wzYMWr 1VkfJkkQiJpmYXa+M/UeAdrJHoQ8bCXHIlSX05UCihI1ZxXCHPEQ1O71eF17SyXO x/XkAda3DaqcIbyq9Cm06rKb0AD7XguIFI81OZTyeEwHPBlYoZuTGTNOYB3JwIUu 7mDsHMDqzLcfkF5M3Hle9C65CDOVXmlvGrBuQEwIAO7vm4jUbqvfFQp+m554XNZa F6elPiaub4M0z60wediJY8ddk95YH70q72qj4M65ExZC2k4nK0ubm19yPkOerG+y eakkSJ2DxDry3MMhrOLQBj2VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3diU0o+Y /5oBEGIzmQ3OVJbK4LYwHwYDVR0jBBgwFoAUAP0x/Qa0IEw93LY1BxiVM3eMzPgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwOUVBLzhDNTkxMkZFRTEz QjExRUZCQTdCREYzQkM0RjlBRTAyL0FQMHhfUWEwSUV3OTNMWTFCeGlWTTNlTXpQ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQVAweF9RYTBJRXc5M0xZMUJ4aVZNM2VNelBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMw OUVBLzhDNTkxMkZFRTEzQjExRUZCQTdCREYzQkM0RjlBRTAyL0FQMHhfUWEwSUV3 OTNMWTFCeGlWTTNlTXpQZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAM2w+byUWOT8PjxPt2c/cVyEh131a1La22pDQBEFraHQWlf+ONpyTJmK 0xzginDuJoPMz+wnE2NMCaqxYSB3x6nW9d2ZP9ZU0SNjXCXDzVpeUlIDl3A6N3Tz PvkYgsHfaePeGByxnJEReVLUihrFeIJPlrjIRcwIQVo5q0FdFuG7GKJ8fyEgATuN 5oV0AaGMnWRaiDgpAS4ClQOpxHPNAqTElxESsVoWj1x2PADT8XoBwonMwRayZUXS 9M/6sUltVJ5art7V3OY7ByN6aD5oVubdq0uxwChl+lmyqLZFK0EpM9SgNl90RG2H 1AjQhxUjDK7LtEiQXcVWudoodArKiXM= -----END CERTIFICATE-----Generated at Sun Jun 29 12:32:48 2025 by rpki-client