$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft File: P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft (raw, json) Hash identifier: bg9kG/Sa37uE+rp092LE8BhuFrE7z/ZemFMhxeJ03qU= Subject key identifier: 8F:EF:5D:AC:74:9B:66:C0:AE:11:6F:7C:64:D8:B4:95:99:56:2D:52 Authority key identifier: 3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7 Certificate issuer: /CN=A91C4A80/serialNumber=3FD7F555FC7D6FC23539A3A621EF2D048D4C7CC7 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft Manifest number: 4B Signing time: Tue 01 Jul 2025 08:05:53 +0000 Manifest this update: Tue 01 Jul 2025 08:05:52 +0000 Manifest next update: Tue 08 Jul 2025 08:05:52 +0000 Files and hashes: 1: P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl (hash: LvG+94NShwSgoYG9geMpyy8q8rrmjVSnB872GAfGw68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4A80, serialNumber=3FD7F555FC7D6FC23539A3A621EF2D048D4C7CC7 Validity Not Before: Jul 1 08:05:52 2025 GMT Not After : Jul 8 08:05:52 2025 GMT Subject: CN=686396e0-68d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4b:f1:5a:6d:5e:34:c9:b6:81:7c:b4:1b:41: 83:bb:1a:29:69:c6:89:65:33:27:2d:2c:67:7e:f4: e3:e9:1a:9f:e1:ab:89:17:16:18:a8:ab:64:16:25: a7:c0:4c:77:a6:f4:eb:65:47:c6:0f:a3:d4:53:ae: 00:90:51:3b:3d:a9:75:93:5d:46:9e:c5:56:ca:59: a1:00:fd:c2:8e:5f:be:59:7b:55:11:66:35:1c:b6: f9:0a:a7:5c:8a:01:36:45:69:f3:34:63:13:5b:8f: ca:b7:bd:7c:15:3c:4b:aa:15:30:4c:df:be:94:26: e4:28:9d:47:8b:07:a1:d3:d9:3b:da:c2:8b:e1:43: ec:aa:af:d3:33:c5:a0:49:6c:24:03:4e:50:df:ca: 6f:a8:32:dc:ad:fd:94:ab:33:7d:f4:80:61:a9:db: 9e:d6:67:50:fb:03:00:22:ba:bc:b8:3e:27:8f:6d: e7:3b:8a:b3:cc:4a:7a:dc:81:7d:97:35:d9:4b:5d: c7:17:61:5d:43:4d:58:bc:6a:bf:d5:a4:9d:e9:fc: 7d:f4:e5:4a:a6:3a:17:9e:64:c6:34:b1:92:c4:8e: af:fd:96:09:71:fa:7f:f0:f6:e0:ce:9b:0e:45:16: 7b:f5:3f:28:44:b4:45:e2:c2:ba:80:ae:c1:9c:94: 09:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:EF:5D:AC:74:9B:66:C0:AE:11:6F:7C:64:D8:B4:95:99:56:2D:52 X509v3 Authority Key Identifier: keyid:3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:da:23:de:7c:cf:e5:82:aa:c6:a8:44:1a:bd:e5:39:4c:3a: 9b:53:61:9f:1d:e2:3e:ce:77:f1:93:45:1c:66:2c:96:f7:ce: 88:79:d2:35:4c:11:d6:a5:d1:21:1a:6b:9a:14:25:48:c4:64: bd:fe:ec:11:4c:b6:e6:05:80:14:76:19:5b:77:7d:02:46:94: 61:82:38:4a:eb:e6:75:3f:19:d9:a7:c7:9a:7e:51:91:94:db: 35:f4:25:d1:0f:af:a1:57:d0:7d:3b:e3:64:36:72:c5:be:99: 53:0b:3f:7a:35:36:d8:c4:09:18:1f:f0:4f:5f:de:03:00:fc: 77:f8:4a:e0:0d:19:26:1a:64:8c:78:a2:5d:24:9f:52:8e:51: 80:3a:25:a9:32:57:bc:2a:df:a7:a8:9e:4d:1b:96:d0:45:20: 2b:b0:95:24:82:ed:9d:3b:b4:b5:66:df:27:cd:dd:9b:22:e6: 6e:d0:2f:0e:d6:b0:61:40:d8:f3:fd:97:b2:5d:2f:e9:5a:16: e1:8d:f8:89:51:ac:93:0c:86:31:81:44:3e:88:cf:6c:70:61: 6a:37:72:dd:71:0d:0a:46:b5:04:b0:22:64:4a:b1:51:18:7f: 1f:71:f2:88:7f:68:45:73:1f:09:80:08:fd:c6:20:81:c8:61: ae:3e:52:85 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NEE4MDExMC8GA1UEBRMoM0ZEN0Y1NTVGQzdENkZDMjM1MzlBM0E2MjFFRjJEMDQ4 RDRDN0NDNzAeFw0yNTA3MDEwODA1NTJaFw0yNTA3MDgwODA1NTJaMBgxFjAUBgNV BAMTDTY4NjM5NmUwLTY4ZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwS/FabV40ybaBfLQbQYO7GilpxollMyctLGd+9OPpGp/hq4kXFhioq2QWJafA THem9OtlR8YPo9RTrgCQUTs9qXWTXUaexVbKWaEA/cKOX75Ze1URZjUctvkKp1yK ATZFafM0YxNbj8q3vXwVPEuqFTBM376UJuQonUeLB6HT2TvawovhQ+yqr9MzxaBJ bCQDTlDfym+oMtyt/ZSrM330gGGp257WZ1D7AwAiury4PiePbec7irPMSnrcgX2X NdlLXccXYV1DTVi8ar/VpJ3p/H305UqmOheeZMY0sZLEjq/9lglx+n/w9uDOmw5F Fnv1PyhEtEXiwrqArsGclAnfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUj+9drHSb ZsCuEW98ZNi0lZlWLVIwHwYDVR0jBBgwFoAUP9f1Vfx9b8I1OaOmIe8tBI1MfMcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0QTgwLzI5RUM3M0JBRTRF RjExRUZCNzE0RTU2Q0M0RjlBRTAyL1A5ZjFWZng5YjhJMU9hT21JZTh0QkkxTWZN Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUDlmMVZmeDliOEkxT2FPbUllOHRCSTFNZk1jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0 QTgwLzI5RUM3M0JBRTRFRjExRUZCNzE0RTU2Q0M0RjlBRTAyL1A5ZjFWZng5YjhJ MU9hT21JZTh0QkkxTWZNYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALfaI958z+WCqsaoRBq95TlMOptTYZ8d4j7Od/GTRRxmLJb3zoh50jVM Edal0SEaa5oUJUjEZL3+7BFMtuYFgBR2GVt3fQJGlGGCOErr5nU/Gdmnx5p+UZGU 2zX0JdEPr6FX0H0742Q2csW+mVMLP3o1NtjECRgf8E9f3gMA/Hf4SuANGSYaZIx4 ol0kn1KOUYA6JakyV7wq36eonk0bltBFICuwlSSC7Z07tLVm3yfN3Zsi5m7QLw7W sGFA2PP9l7JdL+laFuGN+IlRrJMMhjGBRD6Iz2xwYWo3ct1xDQpGtQSwImRKsVEY fx9x8oh/aEVzHwmACP3GIIHIYa4+UoU= -----END CERTIFICATE-----Generated at Tue Jul 1 21:22:43 2025 by rpki-client