$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft File: gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft (raw, json) Hash identifier: WgDE7eKCF8oZwwAdl/cZo7EQf0BUUlAJPIMXArIUGrk= Subject key identifier: 6C:C3:AF:A8:0E:61:97:47:1A:BC:DC:46:23:B2:C3:AB:E9:74:A2:4D Authority key identifier: 82:1F:4D:B2:2E:E5:9A:FD:59:3A:7E:68:9E:DA:9F:C9:4B:E5:85:DD Certificate issuer: /CN=A91C1C49/serialNumber=821F4DB22EE59AFD593A7E689EDA9FC94BE585DD Certificate serial: 349A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft Manifest number: 40B7 Signing time: Mon 30 Jun 2025 15:06:06 +0000 Manifest this update: Mon 30 Jun 2025 15:06:06 +0000 Manifest next update: Mon 07 Jul 2025 15:06:06 +0000 Files and hashes: 1: gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl (hash: Y5o44iLkJh3ps8We1pdZgTLXk0t/VtinGeuSK+KE0bE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 15:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13466 (0x349a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1C49, serialNumber=821F4DB22EE59AFD593A7E689EDA9FC94BE585DD Validity Not Before: Jun 30 15:06:06 2025 GMT Not After : Jul 7 15:06:06 2025 GMT Subject: CN=6862a7de-6478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c1:02:63:89:35:3e:c0:5a:bd:2b:4b:cc:27: 17:86:58:bd:ec:90:eb:18:1b:eb:74:f8:6c:6e:42: 97:f6:a7:27:60:a5:93:3b:c4:c2:6c:3f:15:fd:04: 8a:a2:cd:e2:57:04:1b:38:69:2a:f0:55:3b:c0:74: 1b:bb:e8:bb:bf:34:11:50:11:4f:6f:52:c1:65:22: 86:99:b5:f9:5d:6f:39:41:3b:d2:7d:13:b4:ea:37: 0d:41:c7:10:58:f0:f6:c7:fd:b5:c6:c4:a9:0a:45: b5:1f:24:51:2b:32:38:c2:2b:5f:b1:61:0b:92:bc: 73:13:0e:ef:81:39:34:cd:d4:58:36:8f:2f:87:4a: 63:d1:74:18:53:8a:d0:22:af:08:58:c7:93:9c:45: 0b:84:b1:85:9f:70:68:80:fb:5b:72:98:c1:78:61: bc:cf:6c:d8:ec:52:02:5b:19:ce:9b:a4:eb:d7:12: 74:ec:ff:8b:40:93:0e:e9:9d:dc:ca:9b:03:d0:07: 9c:9c:f4:a0:12:57:c9:44:93:85:ca:71:58:0f:f7: 81:7e:3b:15:f3:5a:b0:fa:9a:f6:e3:9c:31:65:ad: 38:cb:30:53:c8:8b:a6:e9:5f:30:48:01:03:43:ae: 2b:71:43:5d:39:f7:d4:b8:1a:e4:a4:80:e2:1f:ca: a9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C3:AF:A8:0E:61:97:47:1A:BC:DC:46:23:B2:C3:AB:E9:74:A2:4D X509v3 Authority Key Identifier: keyid:82:1F:4D:B2:2E:E5:9A:FD:59:3A:7E:68:9E:DA:9F:C9:4B:E5:85:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:66:e5:b7:49:b4:f2:5b:e7:77:96:12:eb:aa:90:8c:78:51: ab:30:2d:d9:ab:6d:bb:46:d0:1e:e9:68:35:2f:3b:12:b3:a9: 57:50:8a:a8:68:80:d1:99:95:80:a1:d7:a4:b2:fd:f5:1f:3e: 36:42:3e:73:10:99:92:65:ba:27:17:fa:8b:ca:51:1e:bb:ed: bd:05:10:94:dd:f0:5a:b6:b4:74:5e:1e:43:0b:bd:70:71:af: 4d:0e:59:c5:dd:06:08:b3:92:3b:e4:b8:28:1f:b3:8c:d5:bb: ac:2d:ff:2a:05:96:50:09:db:f7:9b:14:3c:6e:03:0b:fc:26: ce:58:03:b4:ce:6d:12:2b:af:0d:5e:35:7a:34:fd:cb:f1:5c: 16:2b:c7:e1:3b:0e:fc:ac:09:3f:69:7e:2c:bb:5c:7d:3c:22: e2:db:6c:70:cf:a5:36:16:68:d1:92:ed:92:c7:6a:9d:14:b7: 4d:30:d7:26:22:58:03:b2:b4:d6:36:df:9d:80:40:27:5a:ae: 2e:1e:d4:36:b9:14:90:f2:b5:3b:46:10:75:ad:9d:fb:01:2f: 30:3f:90:12:e9:1d:eb:82:6d:ed:89:9e:5f:23:4d:72:22:29: 2e:02:5a:b0:2e:82:a9:c5:26:df:f7:78:2d:97:0f:36:d8:66: cf:a8:1c:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFDNDkxMTAvBgNVBAUTKDgyMUY0REIyMkVFNTlBRkQ1OTNBN0U2ODlFREE5RkM5 NEJFNTg1REQwHhcNMjUwNjMwMTUwNjA2WhcNMjUwNzA3MTUwNjA2WjAYMRYwFAYD VQQDEw02ODYyYTdkZS02NDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8ECY4k1PsBavStLzCcXhli97JDrGBvrdPhsbkKX9qcnYKWTO8TCbD8V/QSK os3iVwQbOGkq8FU7wHQbu+i7vzQRUBFPb1LBZSKGmbX5XW85QTvSfRO06jcNQccQ WPD2x/21xsSpCkW1HyRRKzI4witfsWELkrxzEw7vgTk0zdRYNo8vh0pj0XQYU4rQ Iq8IWMeTnEULhLGFn3BogPtbcpjBeGG8z2zY7FICWxnOm6Tr1xJ07P+LQJMO6Z3c ypsD0AecnPSgElfJRJOFynFYD/eBfjsV81qw+pr245wxZa04yzBTyIum6V8wSAED Q64rcUNdOffUuBrkpIDiH8qpfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGzDr6gO YZdHGrzcRiOyw6vpdKJNMB8GA1UdIwQYMBaAFIIfTbIu5Zr9WTp+aJ7an8lL5YXd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUM0OS9DNDlGNzVGODFE OUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9naDlOc2k3bG12MVpPbjVvbnRxZnlVdmxo ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doOU5zaTdsbXYxWk9uNW9udHFmeVV2bGhkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUM0OS9DNDlGNzVGODFEOUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9naDlOc2k3bG12 MVpPbjVvbnRxZnlVdmxoZDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsZuW3SbTyW+d3lhLrqpCMeFGrMC3Zq227RtAe6Wg1LzsSs6lXUIqo aIDRmZWAodeksv31Hz42Qj5zEJmSZbonF/qLylEeu+29BRCU3fBatrR0Xh5DC71w ca9NDlnF3QYIs5I75LgoH7OM1busLf8qBZZQCdv3mxQ8bgML/CbOWAO0zm0SK68N XjV6NP3L8VwWK8fhOw78rAk/aX4su1x9PCLi22xwz6U2FmjRku2Sx2qdFLdNMNcm IlgDsrTWNt+dgEAnWq4uHtQ2uRSQ8rU7RhB1rZ37AS8wP5AS6R3rgm3tiZ5fI01y IikuAlqwLoKpxSbf93gtlw822GbPqBy0 -----END CERTIFICATE-----Generated at Tue Jul 1 08:34:17 2025 by rpki-client