$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft File: -sRVX74xo4CWkO4YeF16u-KnJ6M.mft (raw, json) Hash identifier: PRLjDHYQrNK+ggSlo3U9odCQuK87KufNOXgxzZyQuDI= Subject key identifier: CE:D5:70:67:15:83:E2:42:6C:AA:74:53:C1:4C:1A:06:CD:32:72:69 Authority key identifier: FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3 Certificate issuer: /CN=A91C4204/serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft Manifest number: 19 Signing time: Tue 01 Jul 2025 08:43:53 +0000 Manifest this update: Tue 01 Jul 2025 08:43:52 +0000 Manifest next update: Tue 08 Jul 2025 08:43:52 +0000 Files and hashes: 1: -sRVX74xo4CWkO4YeF16u-KnJ6M.crl (hash: nFj31ixCwPKUGGoSJuxQLAejjdws62xXY6/kEOVLvVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:43:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4204, serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3 Validity Not Before: Jul 1 08:43:52 2025 GMT Not After : Jul 8 08:43:52 2025 GMT Subject: CN=68639fc8-6f27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:74:0a:14:cb:3c:c2:49:77:88:30:aa:ba:77: 4b:64:0c:7e:1e:db:ca:0d:a0:fd:93:05:68:8a:74: 91:98:f7:30:f5:70:7d:5f:60:8d:a4:c3:c4:1b:20: b1:7b:7b:1f:95:e5:11:71:9c:87:f4:10:e0:0b:79: 7d:9d:77:c8:51:49:da:6a:13:ea:be:6e:74:b9:30: 89:7a:3e:02:ef:93:f3:70:7a:16:9a:69:25:89:2a: 82:98:1f:2c:80:48:9c:a1:c4:95:d1:2b:76:97:a3: c3:43:88:b3:4d:8f:49:73:77:5f:fb:cf:7b:99:93: 67:0f:da:6a:9c:13:e0:d2:40:fc:37:c5:bb:bb:6d: 28:87:dd:e1:17:69:a4:18:98:d5:59:60:75:6f:af: a6:17:df:a7:38:c2:ed:c8:b3:5a:ef:36:cb:63:1a: 33:29:dd:fb:72:76:07:ad:68:20:13:66:2f:a7:87: 14:9a:26:c4:d8:d9:dc:4f:b5:1a:8e:60:48:d9:0a: 54:5f:15:75:90:5b:35:1e:f6:44:f8:f5:95:84:5f: f1:a2:07:db:b5:a3:5e:48:ad:df:99:4c:25:b7:56: 49:12:9b:e7:5e:a6:0e:10:bf:3e:e9:83:d0:4a:10: 8c:b3:b7:f5:d2:51:05:80:15:75:57:7d:73:9c:93: fc:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D5:70:67:15:83:E2:42:6C:AA:74:53:C1:4C:1A:06:CD:32:72:69 X509v3 Authority Key Identifier: keyid:FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:1d:bf:cd:63:de:f5:08:03:bf:72:e2:aa:2c:48:61:4a:23: e8:0d:02:03:7c:a7:c7:5f:26:c4:aa:22:48:5c:ff:65:6b:97: 3d:3f:bd:07:96:b5:2e:46:0b:26:1f:65:17:5f:f8:82:3d:12: 3b:a2:7c:4e:04:bf:27:4d:79:63:ad:41:7e:ae:cb:af:aa:c3: 10:dc:a8:fd:f8:a1:43:33:9f:65:a2:2e:9e:37:a3:b4:49:cc: c3:cc:9b:29:ac:b7:65:4d:45:a8:9f:1c:b4:fb:0e:0b:3d:20: dc:5f:a5:0c:c1:3e:24:68:c8:2a:72:4a:4e:17:a3:86:75:9c: f8:58:d3:fd:c3:45:c3:df:6f:f7:92:51:57:fa:89:e1:1f:95: 04:0d:6e:b3:08:eb:0d:81:ed:70:7c:77:a2:45:c7:ce:3d:4c: f5:16:02:5d:46:a2:ec:87:40:14:c3:af:de:9a:ab:bf:52:10: 87:74:b1:5a:4e:e1:0c:4e:eb:02:71:37:3d:a0:e4:8e:77:25: 47:b0:1b:56:56:32:5b:4c:44:a9:5f:14:3f:c3:a2:c4:a6:15: df:b4:fc:d5:02:9b:b3:d0:6b:60:a0:1f:65:0f:0b:21:84:e3: 16:b2:32:fd:e7:53:66:d7:8a:c0:34:14:fe:86:74:fa:29:d3: c9:65:14:e1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NDIwNDExMC8GA1UEBRMoRkFDNDU1NUZCRTMxQTM4MDk2OTBFRTE4Nzg1RDdBQkJF MkE3MjdBMzAeFw0yNTA3MDEwODQzNTJaFw0yNTA3MDgwODQzNTJaMBgxFjAUBgNV BAMTDTY4NjM5ZmM4LTZmMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCndAoUyzzCSXeIMKq6d0tkDH4e28oNoP2TBWiKdJGY9zD1cH1fYI2kw8QbILF7 ex+V5RFxnIf0EOALeX2dd8hRSdpqE+q+bnS5MIl6PgLvk/NwehaaaSWJKoKYHyyA SJyhxJXRK3aXo8NDiLNNj0lzd1/7z3uZk2cP2mqcE+DSQPw3xbu7bSiH3eEXaaQY mNVZYHVvr6YX36c4wu3Is1rvNstjGjMp3ftydgetaCATZi+nhxSaJsTY2dxPtRqO YEjZClRfFXWQWzUe9kT49ZWEX/GiB9u1o15Ird+ZTCW3VkkSm+depg4Qvz7pg9BK EIyzt/XSUQWAFXVXfXOck/yLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUztVwZxWD 4kJsqnRTwUwaBs0ycmkwHwYDVR0jBBgwFoAU+sRVX74xo4CWkO4YeF16u+KnJ6Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0MjA0LzRDNUQyRURFMzAw OTExRjBBMEFBN0QzREM0RjlBRTAyLy1zUlZYNzR4bzRDV2tPNFllRjE2dS1Lbko2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLXNSVlg3NHhvNENXa080WWVGMTZ1LUtuSjZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0 MjA0LzRDNUQyRURFMzAwOTExRjBBMEFBN0QzREM0RjlBRTAyLy1zUlZYNzR4bzRD V2tPNFllRjE2dS1Lbko2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFIdv81j3vUIA79y4qosSGFKI+gNAgN8p8dfJsSqIkhc/2Vrlz0/vQeW tS5GCyYfZRdf+II9EjuifE4EvydNeWOtQX6uy6+qwxDcqP34oUMzn2WiLp43o7RJ zMPMmymst2VNRaifHLT7Dgs9INxfpQzBPiRoyCpySk4Xo4Z1nPhY0/3DRcPfb/eS UVf6ieEflQQNbrMI6w2B7XB8d6JFx849TPUWAl1GouyHQBTDr96aq79SEId0sVpO 4QxO6wJxNz2g5I53JUewG1ZWMltMRKlfFD/DosSmFd+0/NUCm7PQa2CgH2UPCyGE 4xayMv3nU2bXisA0FP6GdPop08llFOE= -----END CERTIFICATE-----Generated at Thu Jul 3 09:00:22 2025 by rpki-client