$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft File: MAKFsSjLjblfHkH_vS68Io1FPvw.mft (raw, json) Hash identifier: 3kYUQ5KOcU6SCqsSWmDIvHsfTGyRxnjPE69kfWINtJQ= Subject key identifier: 28:05:DD:E7:E6:AE:E1:A1:91:D2:80:9C:38:4C:73:AA:E7:00:7C:06 Authority key identifier: 30:02:85:B1:28:CB:8D:B9:5F:1E:41:FF:BD:2E:BC:22:8D:45:3E:FC Certificate issuer: /CN=A91CD39D/serialNumber=300285B128CB8DB95F1E41FFBD2EBC228D453EFC Certificate serial: 0473 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft Manifest number: 0473 Signing time: Thu 03 Jul 2025 00:26:35 +0000 Manifest this update: Thu 03 Jul 2025 00:26:34 +0000 Manifest next update: Thu 10 Jul 2025 00:26:34 +0000 Files and hashes: 1: MAKFsSjLjblfHkH_vS68Io1FPvw.crl (hash: 0cxVtUnC47uUOGwEN5P3jUhMicCgcftzGDNcvMlqifQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.crl rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:26:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1139 (0x473) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD39D, serialNumber=300285B128CB8DB95F1E41FFBD2EBC228D453EFC Validity Not Before: Jul 3 00:26:34 2025 GMT Not After : Jul 10 00:26:34 2025 GMT Subject: CN=6865ce3a-aadf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:27:fe:e0:e2:3f:32:4d:8b:c6:8b:3b:fc:53: cf:7c:25:7b:d2:aa:5d:05:fc:08:df:d9:6a:0d:81: cb:be:da:26:4f:fe:18:27:f6:07:d7:32:c4:c1:23: 7c:a8:97:1f:43:b8:34:cb:b4:66:b2:d0:b0:8e:a0: bf:f1:ee:33:43:ff:1b:ed:b9:c3:62:0f:ed:a9:97: e3:2d:b2:7a:3e:52:96:4e:00:bc:9d:44:d6:40:bc: da:4b:18:f6:46:9b:ff:35:66:10:ef:59:92:cf:f1: f7:df:98:bc:bc:6f:09:99:51:4b:5c:61:c6:5f:13: 46:90:52:79:04:7a:42:f5:e3:eb:bb:14:72:19:f5: 4b:52:5c:69:07:ee:64:f2:79:97:cd:a2:94:62:08: 60:f5:6b:8f:4a:09:e5:dc:7e:50:f8:ad:3b:de:67: f8:bb:ab:d1:5f:98:28:a3:39:f4:2f:49:bd:22:82: 48:6f:04:8f:a2:e8:05:2d:45:6e:5e:18:c9:1a:05: 3f:f0:23:d4:46:fb:86:88:06:a7:73:a3:f0:0b:8a: a6:61:30:5e:6b:51:4c:81:cf:8f:8c:4d:51:7e:9d: b6:62:54:f8:3d:7b:81:fa:26:36:fa:8c:23:3e:38: a6:ea:a0:f2:b8:88:0c:69:95:d0:a1:5f:f8:64:e0: f0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:05:DD:E7:E6:AE:E1:A1:91:D2:80:9C:38:4C:73:AA:E7:00:7C:06 X509v3 Authority Key Identifier: keyid:30:02:85:B1:28:CB:8D:B9:5F:1E:41:FF:BD:2E:BC:22:8D:45:3E:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:0f:39:cb:06:ae:58:12:a7:9e:c7:2c:1b:0e:0d:ff:9e:e1: 1d:14:b6:b6:da:d1:90:7d:7a:e4:99:c1:3a:bc:59:0b:85:db: 71:f7:b9:13:46:e9:96:92:e6:25:2a:63:b3:c1:f8:7e:50:b2: 77:3b:dd:62:ee:bd:67:be:4d:0a:48:fc:c4:03:ab:dd:89:08: 8b:f8:14:eb:2e:c4:d7:c9:8e:d1:16:72:45:f8:b3:c9:e8:2e: b2:cc:fd:df:a5:35:a5:c0:d7:ab:ab:87:00:25:f8:7e:ef:d9: 21:75:5f:bf:16:49:19:bd:57:80:ea:28:0a:b4:ea:89:b1:6e: ff:1a:96:57:94:d3:9f:87:92:d3:ef:65:93:a8:c7:cb:b1:87: 2f:e4:c5:3b:c1:2b:f3:99:69:cf:12:df:08:1b:a5:32:b2:ad: f8:2f:58:a4:43:a6:36:e7:ac:c2:65:57:15:1b:e0:bc:24:dd: c5:56:e8:20:5e:16:0e:ae:f2:d3:b2:62:80:d3:25:1f:d0:98: fa:64:d4:a2:85:0a:8b:b1:f3:97:e1:65:99:26:6c:db:8f:9a: e0:6a:cb:bb:7f:12:04:42:4b:bc:15:1a:48:94:07:e3:c5:1d: 1e:3e:12:e3:35:3a:83:6d:f9:53:af:9e:b8:5b:d9:2d:e0:ea: 56:5a:fa:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QzOUQxMTAvBgNVBAUTKDMwMDI4NUIxMjhDQjhEQjk1RjFFNDFGRkJEMkVCQzIy OEQ0NTNFRkMwHhcNMjUwNzAzMDAyNjM0WhcNMjUwNzEwMDAyNjM0WjAYMRYwFAYD VQQDEw02ODY1Y2UzYS1hYWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtif+4OI/Mk2Lxos7/FPPfCV70qpdBfwI39lqDYHLvtomT/4YJ/YH1zLEwSN8 qJcfQ7g0y7RmstCwjqC/8e4zQ/8b7bnDYg/tqZfjLbJ6PlKWTgC8nUTWQLzaSxj2 Rpv/NWYQ71mSz/H335i8vG8JmVFLXGHGXxNGkFJ5BHpC9ePruxRyGfVLUlxpB+5k 8nmXzaKUYghg9WuPSgnl3H5Q+K073mf4u6vRX5goozn0L0m9IoJIbwSPougFLUVu XhjJGgU/8CPURvuGiAanc6PwC4qmYTBea1FMgc+PjE1Rfp22YlT4PXuB+iY2+owj Pjim6qDyuIgMaZXQoV/4ZODwWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgF3efm ruGhkdKAnDhMc6rnAHwGMB8GA1UdIwQYMBaAFDAChbEoy425Xx5B/70uvCKNRT78 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ENDRFMzZEMDRF NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9NQUtGc1NqTGpibGZIa0hfdlM2OElvMUZQ dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01BS0ZzU2pMamJsZkhrSF92UzY4SW8xRlB2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDM5RC9ENDRFMzZEMDRFNzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9NQUtGc1NqTGpi bGZIa0hfdlM2OElvMUZQdncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuDznLBq5YEqeexywbDg3/nuEdFLa22tGQfXrkmcE6vFkLhdtx97kT RumWkuYlKmOzwfh+ULJ3O91i7r1nvk0KSPzEA6vdiQiL+BTrLsTXyY7RFnJF+LPJ 6C6yzP3fpTWlwNerq4cAJfh+79khdV+/FkkZvVeA6igKtOqJsW7/GpZXlNOfh5LT 72WTqMfLsYcv5MU7wSvzmWnPEt8IG6Uysq34L1ikQ6Y256zCZVcVG+C8JN3FVugg XhYOrvLTsmKA0yUf0Jj6ZNSihQqLsfOX4WWZJmzbj5rgasu7fxIEQku8FRpIlAfj xR0ePhLjNTqDbflTr564W9kt4OpWWvoX -----END CERTIFICATE-----Generated at Thu Jul 3 22:57:53 2025 by rpki-client