$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft File: pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft (raw, json) Hash identifier: 1faplZO53NLtunjUiHieIEkaPv+Regd4uGISwANrksc= Subject key identifier: A8:1B:53:A2:23:68:EA:2D:3E:E7:7B:06:9E:8D:AE:67:04:B5:88:23 Authority key identifier: A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 Certificate issuer: /CN=A91D6552/serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Certificate serial: 3491 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft Manifest number: 3491 Signing time: Sat 28 Jun 2025 14:52:12 +0000 Manifest this update: Sat 28 Jun 2025 14:52:11 +0000 Manifest next update: Sat 05 Jul 2025 14:52:11 +0000 Files and hashes: 1: pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl (hash: bZCHKhOroQ2oC0YBvSsyMgDEPVZBocxUwRFFHx2erHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 14:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13457 (0x3491) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6552, serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Validity Not Before: Jun 28 14:52:11 2025 GMT Not After : Jul 5 14:52:11 2025 GMT Subject: CN=6860019b-e18b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9d:66:c0:91:cf:85:03:7b:3f:38:38:9a:62: 91:31:0b:28:de:0f:3c:80:fe:07:8e:1f:39:38:23: 7a:c1:3d:63:ae:64:e5:63:2f:bf:6c:9d:e7:3e:b4: 34:ae:16:89:22:ba:eb:61:7e:1a:97:b6:24:f3:7e: f6:53:61:d5:bb:60:d8:f3:38:07:d6:77:b8:68:2f: 89:ea:49:3e:67:e9:b4:48:51:85:0a:c2:91:33:2f: 99:95:18:64:2f:2f:51:5b:df:1a:20:2f:0e:02:d5: 4d:d4:a3:43:e1:7e:a8:db:29:70:38:f5:dd:a9:2d: 94:10:0c:ba:bd:61:21:de:d3:6d:16:a5:9a:1b:84: 1b:5b:17:20:10:83:01:c7:38:6d:e6:ed:0e:4b:0c: 50:5d:09:88:a1:37:de:1a:2e:ac:6c:3e:fb:63:48: 2a:09:92:89:4a:ba:64:7b:dc:b5:34:cc:eb:0c:ed: 56:35:0f:8d:78:1a:fe:b3:9c:9b:d2:e4:83:b7:c3: 0f:ac:e8:58:81:7b:b2:6f:55:10:f7:94:75:d8:87: d5:dd:10:7b:23:91:43:f1:51:12:8b:d0:03:62:67: a7:c9:e0:a4:59:a9:a1:01:74:be:f2:c4:dd:ae:16: f7:49:ce:a5:99:f3:ea:46:48:f6:a6:c8:74:84:fe: 4a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:1B:53:A2:23:68:EA:2D:3E:E7:7B:06:9E:8D:AE:67:04:B5:88:23 X509v3 Authority Key Identifier: keyid:A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:19:dc:f6:f0:0f:f6:7f:87:a7:36:81:d8:90:e0:e5:94:3e: bc:95:69:60:3c:8e:fa:8b:8b:84:62:0e:c4:4a:6e:16:2f:90: 39:12:b9:6c:8f:f0:a4:10:de:94:6d:25:5f:84:eb:70:bb:bd: d8:85:86:75:cc:57:8a:f6:ce:04:d6:90:43:71:38:70:f5:80: f3:b6:bf:f3:7d:76:af:3a:16:3a:0e:24:8b:2c:17:4d:07:92: 59:6b:e0:74:f3:8b:48:e3:25:77:f5:bb:91:c2:a3:3c:40:45: 31:30:81:36:4d:f5:c8:a2:9b:c7:9f:d9:0f:e9:42:a8:bc:d8: 62:5d:6a:4a:5d:8d:80:f4:1e:54:d3:2a:24:44:6d:87:03:52: cf:b7:20:5a:8f:8f:f7:ea:62:e7:49:64:7a:ba:21:e1:d7:ca: 4f:6d:65:ac:36:00:58:d0:51:cc:ec:a3:95:80:b0:b6:79:e8: 13:c4:10:15:75:95:db:9a:be:1a:bf:03:e2:67:5d:fb:55:56: 47:72:ed:47:0c:c7:cd:04:c4:21:65:14:45:46:f1:9c:bb:02: bf:d9:82:cb:71:07:48:a0:9f:76:ae:4c:51:7c:18:4e:b9:6a: 65:99:ec:4e:ec:14:b8:8b:46:5a:e9:f2:bf:1d:4f:97:c5:79: c5:94:53:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1NTIxMTAvBgNVBAUTKEE1NkUwNDMzQUVCOEIwRkNDNTlFRkU5MUYwRUFGNTA2 MUI3MEQxMTgwHhcNMjUwNjI4MTQ1MjExWhcNMjUwNzA1MTQ1MjExWjAYMRYwFAYD VQQDEw02ODYwMDE5Yi1lMThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZ1mwJHPhQN7Pzg4mmKRMQso3g88gP4Hjh85OCN6wT1jrmTlYy+/bJ3nPrQ0 rhaJIrrrYX4al7Yk8372U2HVu2DY8zgH1ne4aC+J6kk+Z+m0SFGFCsKRMy+ZlRhk Ly9RW98aIC8OAtVN1KND4X6o2ylwOPXdqS2UEAy6vWEh3tNtFqWaG4QbWxcgEIMB xzht5u0OSwxQXQmIoTfeGi6sbD77Y0gqCZKJSrpke9y1NMzrDO1WNQ+NeBr+s5yb 0uSDt8MPrOhYgXuyb1UQ95R12IfV3RB7I5FD8VESi9ADYmenyeCkWamhAXS+8sTd rhb3Sc6lmfPqRkj2psh0hP5KRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgbU6Ij aOotPud7Bp6NrmcEtYgjMB8GA1UdIwQYMBaAFKVuBDOuuLD8xZ7+kfDq9QYbcNEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjU1Mi84ODdENzUxMjFE OTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQekZudjZSOE9yMUJodHcw UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXNEVNNjY0c1B6Rm52NlI4T3IxQmh0dzBSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjU1Mi84ODdENzUxMjFEOTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQ ekZudjZSOE9yMUJodHcwUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwGdz28A/2f4enNoHYkODllD68lWlgPI76i4uEYg7ESm4WL5A5Erls j/CkEN6UbSVfhOtwu73YhYZ1zFeK9s4E1pBDcThw9YDztr/zfXavOhY6DiSLLBdN B5JZa+B084tI4yV39buRwqM8QEUxMIE2TfXIopvHn9kP6UKovNhiXWpKXY2A9B5U 0yokRG2HA1LPtyBaj4/36mLnSWR6uiHh18pPbWWsNgBY0FHM7KOVgLC2eegTxBAV dZXbmr4avwPiZ137VVZHcu1HDMfNBMQhZRRFRvGcuwK/2YLLcQdIoJ92rkxRfBhO uWplmexO7BS4i0Za6fK/HU+XxXnFlFPU -----END CERTIFICATE-----Generated at Sun Jun 29 14:34:16 2025 by rpki-client