$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft File: x67AwRtt8SmLElCYMaTMAkTa3PI.mft (raw, json) Hash identifier: 1u226gfsdwHUOtkx0xHg7b3/5LuIGrRHitrdovHKDp4= Subject key identifier: D1:0F:01:E4:84:69:B3:ED:7F:4B:F1:71:66:99:DE:2E:02:12:8A:16 Authority key identifier: C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2 Certificate issuer: /CN=A91C612E/serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2 Certificate serial: 06C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft Manifest number: 12F7 Signing time: Mon 30 Jun 2025 18:45:50 +0000 Manifest this update: Mon 30 Jun 2025 18:45:49 +0000 Manifest next update: Mon 07 Jul 2025 18:45:49 +0000 Files and hashes: 1: x67AwRtt8SmLElCYMaTMAkTa3PI.crl (hash: XJjVHDYE+X/QPsXnQ9Tz4U0Vs9tljpFzIbIxSsMFqrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1734 (0x6c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C612E, serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2 Validity Not Before: Jun 30 18:45:49 2025 GMT Not After : Jul 7 18:45:49 2025 GMT Subject: CN=6862db5d-e59d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:70:49:90:44:6e:d7:08:39:cb:1d:23:91:6c: b5:0d:6e:33:a6:99:58:a5:75:ba:2c:5d:02:86:ca: 8f:ef:ce:7e:1c:0b:b3:55:00:82:8a:22:55:a7:b4: 8b:b4:a1:7f:b0:ad:6e:db:99:fe:7d:9c:8e:55:c1: 8c:f3:fc:eb:3c:b2:87:86:ba:9c:19:bb:6d:e6:54: 39:9c:d6:2a:23:73:09:57:e1:c0:37:38:30:b5:01: 09:11:7e:cc:6f:68:d8:3d:57:5c:73:5b:8e:fa:55: b2:97:fe:32:b0:49:e0:fe:85:45:5e:61:51:4d:75: 4b:fd:e3:4c:bb:07:ca:9d:a6:70:72:71:d0:27:63: 5d:17:5d:ef:8a:d8:fb:7a:d7:dd:e1:ed:5d:9a:43: 0e:a6:54:ef:fa:5d:6a:da:2e:94:85:bf:59:d9:65: 3d:91:60:1f:b0:4b:9e:df:4f:75:49:99:48:65:b3: a0:ed:95:c7:ae:5a:68:25:97:a8:7f:b9:34:05:28: 17:b6:c1:82:01:ea:7d:75:90:a8:1f:60:c8:b6:76: 60:46:43:01:20:06:e0:51:d0:da:b9:ee:67:ab:78: 32:12:63:7f:9a:65:ad:30:cb:9f:df:01:f8:98:92: c3:ab:79:23:c1:6a:c4:e6:ad:c5:6b:2c:63:2f:95: c7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:0F:01:E4:84:69:B3:ED:7F:4B:F1:71:66:99:DE:2E:02:12:8A:16 X509v3 Authority Key Identifier: keyid:C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:34:87:6b:52:90:5b:46:36:4c:01:89:51:9a:bd:e5:c9:b4: 8a:38:e4:c2:26:47:56:13:f4:f3:fd:5e:ff:5d:56:ad:aa:45: a8:d4:81:50:0b:5c:21:ba:65:fe:fa:c3:ca:6c:0b:61:3b:73: 72:31:4c:75:7a:82:93:dd:bb:73:26:33:8c:ce:9a:63:21:66: 5f:62:35:1c:1b:a5:a0:06:85:45:57:e8:37:cd:c1:bd:cf:f0: d8:4c:28:31:e2:10:f5:79:f6:02:73:59:18:32:3c:7a:1d:8c: ba:01:a2:23:c4:72:eb:80:78:76:88:98:b2:e9:58:e3:a8:fd: 75:ee:bc:f3:f6:ae:68:54:ef:7c:c9:28:56:b5:be:70:64:5b: ee:66:4e:70:6c:35:2c:4c:35:12:f7:06:c3:cc:75:02:0a:d3: 03:84:ff:0f:21:34:77:2b:2f:37:ae:56:a8:f2:9e:91:d5:11: 4c:49:da:17:cb:2a:7a:f7:5d:ae:48:9b:96:47:46:23:0d:f1: 31:da:91:bd:67:02:9a:9b:99:ea:0d:0d:f9:40:50:dc:33:90: 1f:15:4c:b0:88:47:f6:d0:1b:84:3b:9d:5e:1a:77:36:bd:95: 4f:0d:23:8c:b4:5b:4b:ba:98:7c:04:1a:59:cd:19:2d:4e:0b: c3:08:13:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYxMkUxMTAvBgNVBAUTKEM3QUVDMEMxMUI2REYxMjk4QjEyNTA5ODMxQTRDQzAy NDREQURDRjIwHhcNMjUwNjMwMTg0NTQ5WhcNMjUwNzA3MTg0NTQ5WjAYMRYwFAYD VQQDEw02ODYyZGI1ZC1lNTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHBJkERu1wg5yx0jkWy1DW4zpplYpXW6LF0ChsqP785+HAuzVQCCiiJVp7SL tKF/sK1u25n+fZyOVcGM8/zrPLKHhrqcGbtt5lQ5nNYqI3MJV+HANzgwtQEJEX7M b2jYPVdcc1uO+lWyl/4ysEng/oVFXmFRTXVL/eNMuwfKnaZwcnHQJ2NdF13vitj7 etfd4e1dmkMOplTv+l1q2i6Uhb9Z2WU9kWAfsEue3091SZlIZbOg7ZXHrlpoJZeo f7k0BSgXtsGCAep9dZCoH2DItnZgRkMBIAbgUdDaue5nq3gyEmN/mmWtMMuf3wH4 mJLDq3kjwWrE5q3FayxjL5XHrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNEPAeSE abPtf0vxcWaZ3i4CEooWMB8GA1UdIwQYMBaAFMeuwMEbbfEpixJQmDGkzAJE2tzy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjEyRS82NUJDMTdEMjBC NjExMUVBQUYwNDJGNjhDNEY5QUUwMi94NjdBd1J0dDhTbUxFbENZTWFUTUFrVGEz UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g2N0F3UnR0OFNtTEVsQ1lNYVRNQWtUYTNQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjEyRS82NUJDMTdEMjBCNjExMUVBQUYwNDJGNjhDNEY5QUUwMi94NjdBd1J0dDhT bUxFbENZTWFUTUFrVGEzUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxNIdrUpBbRjZMAYlRmr3lybSKOOTCJkdWE/Tz/V7/XVatqkWo1IFQ C1whumX++sPKbAthO3NyMUx1eoKT3btzJjOMzppjIWZfYjUcG6WgBoVFV+g3zcG9 z/DYTCgx4hD1efYCc1kYMjx6HYy6AaIjxHLrgHh2iJiy6VjjqP117rzz9q5oVO98 yShWtb5wZFvuZk5wbDUsTDUS9wbDzHUCCtMDhP8PITR3Ky83rlao8p6R1RFMSdoX yyp6912uSJuWR0YjDfEx2pG9ZwKam5nqDQ35QFDcM5AfFUywiEf20BuEO51eGnc2 vZVPDSOMtFtLuph8BBpZzRktTgvDCBMv -----END CERTIFICATE-----Generated at Tue Jul 1 00:57:48 2025 by rpki-client