$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft File: e9ZuQtUwkEC0dRqcKySR1818FLg.mft (raw, json) Hash identifier: /YHRA2Gtamy5FgAEPMKlwmE/vttrw5MIztLgzRoMdjQ= Subject key identifier: 91:F9:BF:B8:F4:15:32:81:58:84:C1:D8:DA:D1:AD:2F:C7:F3:96:EF Authority key identifier: 7B:D6:6E:42:D5:30:90:40:B4:75:1A:9C:2B:24:91:D7:CD:7C:14:B8 Certificate issuer: /CN=A91CA5AD/serialNumber=7BD66E42D5309040B4751A9C2B2491D7CD7C14B8 Certificate serial: 349E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft Manifest number: 349D Signing time: Mon 30 Jun 2025 14:20:40 +0000 Manifest this update: Mon 30 Jun 2025 14:20:39 +0000 Manifest next update: Mon 07 Jul 2025 14:20:39 +0000 Files and hashes: 1: e9ZuQtUwkEC0dRqcKySR1818FLg.crl (hash: FoJqYz8psf65ZsOmDkNAl2p0uA6lb4bUAwWubRSlxzU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.crl rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 14:20:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13470 (0x349e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA5AD, serialNumber=7BD66E42D5309040B4751A9C2B2491D7CD7C14B8 Validity Not Before: Jun 30 14:20:39 2025 GMT Not After : Jul 7 14:20:39 2025 GMT Subject: CN=68629d37-37f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0c:4c:43:7c:11:fd:ff:84:c6:98:56:7a:43: 10:a4:53:1b:06:d5:7c:d6:4d:9e:16:5b:dd:8f:90: e4:51:50:aa:37:93:23:ec:76:7a:30:b4:86:01:fa: 34:72:a8:d5:18:26:54:6b:23:4e:ff:ff:d3:5a:15: d3:d4:fd:fb:5c:a7:10:4b:b4:a2:4f:7a:ef:3f:22: fa:7a:00:3f:9c:2c:fa:f9:0b:4b:5c:06:80:45:98: ba:8a:29:08:c7:f3:e4:9a:63:40:4c:97:2a:c0:1b: ff:72:e4:de:f9:6d:92:8e:40:05:f0:e5:8f:51:6e: fc:6f:1a:08:1d:53:33:23:5d:a7:10:56:d2:04:d9: de:61:1a:de:18:fe:c9:49:c3:fd:f8:4b:c4:72:17: 35:c3:f8:40:08:f7:c5:07:ef:48:89:20:4a:1c:ac: a4:16:83:d7:7c:30:23:ba:08:72:00:5f:5a:cb:a5: fe:57:5e:e7:e3:73:7c:8d:36:1c:2e:cd:cc:50:1e: 4f:f7:7f:42:e6:03:16:09:1e:b7:b1:11:7e:42:f1: 87:72:c4:28:3b:0b:d9:11:90:24:8e:94:80:14:70: ad:26:32:fb:d4:94:c2:3f:f1:44:0d:3b:3e:c4:36: d3:20:11:65:da:62:2c:df:27:06:32:28:da:7f:2d: 99:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F9:BF:B8:F4:15:32:81:58:84:C1:D8:DA:D1:AD:2F:C7:F3:96:EF X509v3 Authority Key Identifier: keyid:7B:D6:6E:42:D5:30:90:40:B4:75:1A:9C:2B:24:91:D7:CD:7C:14:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:52:ab:79:a1:01:43:58:6c:ba:73:1c:b6:1c:bd:6e:a5:a2: 74:21:cb:40:2a:d8:27:c2:37:f6:3c:07:0b:51:18:e2:c1:fe: 17:9e:f9:12:03:89:e4:ec:01:08:59:b9:15:db:eb:13:27:ec: 16:a7:ec:e7:38:55:e6:b0:66:8c:66:69:af:a9:07:c3:54:00: 18:9d:b2:da:8e:f3:66:12:b8:19:0e:e9:f0:74:30:66:75:a2: 6f:b8:72:7c:3b:47:cd:c6:d5:33:ce:2e:65:db:28:40:e6:78: e7:f0:c5:57:f5:ee:ae:9f:5a:fa:a5:be:2d:fb:69:94:bb:7f: 8c:bd:b2:72:cd:b7:51:af:e9:9e:54:04:21:26:93:24:e7:d0: ca:68:8c:f7:91:09:10:d1:ca:57:57:27:8d:f5:db:2d:0b:56: a8:55:93:4f:6e:3a:ff:9d:5e:7e:4e:5b:af:80:fd:fb:99:2f: 7e:0c:1c:cf:8a:7d:4b:6f:b5:92:d2:01:12:80:8f:2f:c2:40: 05:ba:3c:07:58:12:ce:fc:74:b6:66:ed:e0:e7:f9:3d:4a:d4: f4:81:64:6c:fc:cd:8a:23:73:d6:5f:a0:93:9d:08:85:04:b6: 77:7c:85:7c:eb:6b:9e:ac:fd:78:e3:b2:bc:eb:aa:a9:2c:55: ba:51:eb:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E1QUQxMTAvBgNVBAUTKDdCRDY2RTQyRDUzMDkwNDBCNDc1MUE5QzJCMjQ5MUQ3 Q0Q3QzE0QjgwHhcNMjUwNjMwMTQyMDM5WhcNMjUwNzA3MTQyMDM5WjAYMRYwFAYD VQQDEw02ODYyOWQzNy0zN2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAxMQ3wR/f+ExphWekMQpFMbBtV81k2eFlvdj5DkUVCqN5Mj7HZ6MLSGAfo0 cqjVGCZUayNO///TWhXT1P37XKcQS7SiT3rvPyL6egA/nCz6+QtLXAaARZi6iikI x/PkmmNATJcqwBv/cuTe+W2SjkAF8OWPUW78bxoIHVMzI12nEFbSBNneYRreGP7J ScP9+EvEchc1w/hACPfFB+9IiSBKHKykFoPXfDAjughyAF9ay6X+V17n43N8jTYc Ls3MUB5P939C5gMWCR63sRF+QvGHcsQoOwvZEZAkjpSAFHCtJjL71JTCP/FEDTs+ xDbTIBFl2mIs3ycGMijafy2ZBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJH5v7j0 FTKBWITB2NrRrS/H85bvMB8GA1UdIwQYMBaAFHvWbkLVMJBAtHUanCskkdfNfBS4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTVBRC8zNjZDNDQyRTFE NzExMUUyQUI1NEUyQjUwOEIwMkNEMi9lOVp1UXRVd2tFQzBkUnFjS3lTUjE4MThG TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U5WnVRdFV3a0VDMGRScWNLeVNSMTgxOEZMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTVBRC8zNjZDNDQyRTFENzExMUUyQUI1NEUyQjUwOEIwMkNEMi9lOVp1UXRVd2tF QzBkUnFjS3lTUjE4MThGTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApUqt5oQFDWGy6cxy2HL1upaJ0IctAKtgnwjf2PAcLURjiwf4XnvkS A4nk7AEIWbkV2+sTJ+wWp+znOFXmsGaMZmmvqQfDVAAYnbLajvNmErgZDunwdDBm daJvuHJ8O0fNxtUzzi5l2yhA5njn8MVX9e6un1r6pb4t+2mUu3+MvbJyzbdRr+me VAQhJpMk59DKaIz3kQkQ0cpXVyeN9dstC1aoVZNPbjr/nV5+TluvgP37mS9+DBzP in1Lb7WS0gESgI8vwkAFujwHWBLO/HS2Zu3g5/k9StT0gWRs/M2KI3PWX6CTnQiF BLZ3fIV862uerP1447K866qpLFW6Uetk -----END CERTIFICATE-----Generated at Mon Jun 30 17:31:48 2025 by rpki-client