$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft File: MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft (raw, json) Hash identifier: PO4B5HCqo9+PLfCz3GiCY7zKarTLgteTmZICrnmdFbE= Subject key identifier: E8:6A:23:5D:1E:5A:7C:89:E5:7F:3D:61:2E:52:50:C4:88:AC:72:2B Authority key identifier: 30:B5:DE:5E:87:86:28:82:F8:FD:A2:B6:90:C2:F3:07:09:95:F5:FE Certificate issuer: /CN=A91D560D/serialNumber=30B5DE5E87862882F8FDA2B690C2F3070995F5FE Certificate serial: 0B1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLXeXoeGKIL4_aK2kMLzBwmV9f4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft Manifest number: 13AC Signing time: Mon 30 Jun 2025 19:25:00 +0000 Manifest this update: Mon 30 Jun 2025 19:25:00 +0000 Manifest next update: Mon 07 Jul 2025 19:25:00 +0000 Files and hashes: 1: MLXeXoeGKIL4_aK2kMLzBwmV9f4.crl (hash: Ccm7Gj5xD6S3BKmahXoFyCkszN6DKuQgYF8qxBoTOFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.crl rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLXeXoeGKIL4_aK2kMLzBwmV9f4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:24:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2843 (0xb1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D560D, serialNumber=30B5DE5E87862882F8FDA2B690C2F3070995F5FE Validity Not Before: Jun 30 19:25:00 2025 GMT Not After : Jul 7 19:25:00 2025 GMT Subject: CN=6862e48c-3716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3b:26:61:75:fb:60:49:05:56:f8:d7:90:ee: c7:76:c4:a5:3e:dc:da:2f:99:72:01:47:79:df:b8: c0:3d:ba:66:91:4b:e4:8d:73:b1:62:5a:2c:43:b3: ec:be:22:88:4d:ed:bd:1a:b8:7e:69:78:24:dc:79: 84:f3:21:bf:97:ec:f2:cd:38:76:03:a4:b5:e4:ea: 82:ef:02:77:45:74:7a:e1:de:94:41:0e:2f:ca:1f: c6:d5:f0:45:bf:70:0f:f2:c2:ff:4c:5e:8a:1e:ce: 78:ca:94:ff:7d:fd:7b:86:f3:b3:73:27:15:97:7b: 2b:4f:ef:17:09:4b:8b:5c:bc:01:dd:7a:ca:a6:b1: 22:88:54:b2:99:78:52:82:e1:41:e0:67:82:f1:82: ca:f7:45:16:22:1f:b3:8a:3d:fb:bf:e2:a2:d4:ec: 4f:27:a9:78:bc:e5:94:ce:58:27:ed:47:ba:74:46: 35:dc:46:c5:d2:33:2d:60:c9:5a:ac:0c:20:82:4f: fe:38:e3:b1:b5:24:36:fc:59:12:55:ad:6e:13:3b: 03:37:79:5a:bc:1f:ce:67:69:46:2a:31:44:91:9d: 9f:85:2f:48:66:be:7d:98:5b:4f:2d:10:01:c0:e5: 63:d8:a8:3f:cb:f0:0a:97:6e:a2:ca:6b:1e:1f:a9: bc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:6A:23:5D:1E:5A:7C:89:E5:7F:3D:61:2E:52:50:C4:88:AC:72:2B X509v3 Authority Key Identifier: keyid:30:B5:DE:5E:87:86:28:82:F8:FD:A2:B6:90:C2:F3:07:09:95:F5:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLXeXoeGKIL4_aK2kMLzBwmV9f4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:a8:a3:be:ca:d2:5f:42:84:05:03:de:37:e2:ad:70:b5:1d: b7:21:10:12:ce:9b:ce:a6:ad:a3:ff:d4:bf:55:f4:82:68:4e: 5a:c1:1a:9e:e1:17:8e:b5:1d:f9:fc:ae:bc:96:52:2e:95:da: 0c:b5:f0:90:ee:1a:2f:3f:fc:ad:3e:0c:92:c2:af:c2:be:2d: 1b:9c:bc:e4:1b:8c:45:c4:50:7a:0c:e5:a6:e2:74:fa:c4:49: 51:de:c2:31:10:a7:07:c9:7a:06:49:19:30:38:d5:f3:ae:cd: 9c:e4:cc:e6:03:2a:03:6b:57:b5:65:a7:08:2b:92:5a:ef:98: 0b:fb:78:e2:5e:f1:6d:3d:b0:45:3e:d9:73:b0:ab:50:63:97: b3:76:e6:eb:0c:0c:14:60:5e:f0:6f:54:ee:67:4f:f4:1c:35: d1:c4:41:64:da:44:9a:8b:d3:24:b1:6e:17:3d:f7:fc:50:68: 8b:69:f2:a1:50:37:47:83:67:a0:36:4b:62:ba:6d:a9:1f:90: a1:23:9d:57:36:8c:54:a9:33:8a:05:7f:d6:81:76:fc:b8:e3: 31:1b:f2:9e:b0:ab:96:a3:21:67:f3:94:02:07:9d:c6:3a:15: 39:63:dd:ce:c4:03:28:25:10:8f:77:6f:36:2f:f4:a1:29:88: f4:c1:61:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2MEQxMTAvBgNVBAUTKDMwQjVERTVFODc4NjI4ODJGOEZEQTJCNjkwQzJGMzA3 MDk5NUY1RkUwHhcNMjUwNjMwMTkyNTAwWhcNMjUwNzA3MTkyNTAwWjAYMRYwFAYD VQQDEw02ODYyZTQ4Yy0zNzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTsmYXX7YEkFVvjXkO7HdsSlPtzaL5lyAUd537jAPbpmkUvkjXOxYlosQ7Ps viKITe29Grh+aXgk3HmE8yG/l+zyzTh2A6S15OqC7wJ3RXR64d6UQQ4vyh/G1fBF v3AP8sL/TF6KHs54ypT/ff17hvOzcycVl3srT+8XCUuLXLwB3XrKprEiiFSymXhS guFB4GeC8YLK90UWIh+zij37v+Ki1OxPJ6l4vOWUzlgn7Ue6dEY13EbF0jMtYMla rAwggk/+OOOxtSQ2/FkSVa1uEzsDN3lavB/OZ2lGKjFEkZ2fhS9IZr59mFtPLRAB wOVj2Kg/y/AKl26iymseH6m8dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhqI10e WnyJ5X89YS5SUMSIrHIrMB8GA1UdIwQYMBaAFDC13l6HhiiC+P2itpDC8wcJlfX+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTYwRC82OEMzRjQ5QTQx RUUxMUVBOUNFQTFGNzVDNEY5QUUwMi9NTFhlWG9lR0tJTDRfYUsya01MekJ3bVY5 ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01MWGVYb2VHS0lMNF9hSzJrTUx6QndtVjlmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTYwRC82OEMzRjQ5QTQxRUUxMUVBOUNFQTFGNzVDNEY5QUUwMi9NTFhlWG9lR0tJ TDRfYUsya01MekJ3bVY5ZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDqKO+ytJfQoQFA9434q1wtR23IRASzpvOpq2j/9S/VfSCaE5awRqe 4ReOtR35/K68llIuldoMtfCQ7hovP/ytPgySwq/Cvi0bnLzkG4xFxFB6DOWm4nT6 xElR3sIxEKcHyXoGSRkwONXzrs2c5MzmAyoDa1e1ZacIK5Ja75gL+3jiXvFtPbBF PtlzsKtQY5ezdubrDAwUYF7wb1TuZ0/0HDXRxEFk2kSai9MksW4XPff8UGiLafKh UDdHg2egNktium2pH5ChI51XNoxUqTOKBX/WgXb8uOMxG/KesKuWoyFn85QCB53G OhU5Y93OxAMoJRCPd282L/ShKYj0wWHe -----END CERTIFICATE-----Generated at Wed Jul 2 06:26:49 2025 by rpki-client