$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft File: tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft (raw, json) Hash identifier: BoOw2HF3TU7oWhQxsrW+pTjFWkY4i7qGNZ6pJaa37e0= Subject key identifier: 08:B5:73:8E:73:B4:F0:44:A8:DB:38:59:6A:B6:33:5A:D2:89:E1:E2 Authority key identifier: B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 Certificate issuer: /CN=A91DB551/serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Certificate serial: 0CF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft Manifest number: 0CF9 Signing time: Wed 02 Jul 2025 18:17:52 +0000 Manifest this update: Wed 02 Jul 2025 18:17:52 +0000 Manifest next update: Wed 09 Jul 2025 18:17:52 +0000 Files and hashes: 1: tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl (hash: WHS/0j4o4cFWacY0PHVjcGfxkhikl+kAxUkM7KIIIKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3321 (0xcf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB551, serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Validity Not Before: Jul 2 18:17:52 2025 GMT Not After : Jul 9 18:17:52 2025 GMT Subject: CN=686577d0-a304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b3:91:df:6c:86:8a:a8:10:57:0d:94:88:d1: e2:b3:0a:dd:f4:3e:0c:16:2d:cb:de:fb:45:e6:6e: 53:ea:c9:41:c3:63:c9:b4:13:db:4a:82:c1:20:81: ab:b3:51:22:68:8e:75:0d:dd:8e:0a:7b:01:79:4a: fa:d7:0a:c6:dd:39:63:ea:4d:be:bd:59:fc:41:45: a9:e2:9e:20:75:18:e9:76:2f:ee:27:af:a5:ea:e9: ac:8c:cf:ab:98:68:47:4d:b5:bc:ca:c9:ea:eb:07: 54:36:16:d3:24:8d:76:fc:df:2a:2e:18:83:6f:06: 5d:4d:09:9c:27:0e:31:3f:2c:f2:86:6f:49:8b:79: dc:82:b7:c7:64:44:f5:91:93:5f:80:72:d9:1c:58: be:ec:41:d3:49:f1:8a:65:fc:f9:4b:46:7e:56:3e: 30:3d:d9:9e:c8:ce:87:0e:3c:8a:2c:d2:7c:42:19: e7:85:dd:69:7f:a2:95:22:46:22:40:0e:20:3a:82: a7:cd:49:d8:1b:e3:4f:39:19:b5:79:47:0c:64:0d: 38:b8:bf:dd:d0:e1:d8:78:38:0b:55:d6:2c:88:7e: be:8e:f9:b6:3a:40:3d:f6:4f:48:04:39:9f:41:13: 17:d2:71:e5:17:af:c4:1f:6a:54:4a:d3:3d:3c:3e: d8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B5:73:8E:73:B4:F0:44:A8:DB:38:59:6A:B6:33:5A:D2:89:E1:E2 X509v3 Authority Key Identifier: keyid:B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:af:c2:d6:c0:eb:bf:da:ab:57:af:65:3f:62:a4:c1:78:04: ff:e9:ad:55:69:a6:33:cf:be:f5:06:da:54:ff:24:05:fd:2b: c9:39:fd:d5:ea:87:7e:f2:67:f7:b6:8f:57:c3:c9:96:b2:29: 0a:5c:e1:00:eb:7f:38:f3:2f:95:3b:6d:2a:66:57:93:ff:e2: a3:9a:ba:18:86:5f:63:1c:55:90:ca:a8:14:71:4f:c7:6f:1b: 3d:57:60:2c:4a:a8:ec:7c:ef:48:10:5b:df:c9:e5:d8:d3:33: 4f:d4:b3:95:ff:80:c2:96:6e:5a:72:9b:e3:32:b9:f1:9a:b6: e8:64:48:37:a1:3a:10:97:69:1e:14:b4:d5:5e:25:1e:76:7d: 3c:bb:d0:a8:75:a0:69:7b:80:9b:3d:b1:18:f2:2c:81:f3:88: eb:26:a8:d6:f5:bd:02:bf:56:62:0f:8a:61:97:2b:52:c5:56: 4a:65:54:86:40:be:0c:c7:78:6b:b7:6e:f2:6e:9b:88:06:ba: 1d:95:2a:91:40:45:c2:96:2f:c7:37:30:4b:62:0c:a1:f8:25: 55:cd:5d:de:fb:50:79:16:9a:73:dd:e0:ec:d2:dc:09:a2:9f: 00:08:60:a6:f8:fa:1b:cc:02:89:51:1d:f0:da:e3:bb:de:cb: f7:a5:cc:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI1NTExMTAvBgNVBAUTKEI2Mzg5NzkxQkQ1NDA5NkFEMDA5OTlBNzU5MUZCMjA0 MTg5QUYxOTgwHhcNMjUwNzAyMTgxNzUyWhcNMjUwNzA5MTgxNzUyWjAYMRYwFAYD VQQDEw02ODY1NzdkMC1hMzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxrOR32yGiqgQVw2UiNHiswrd9D4MFi3L3vtF5m5T6slBw2PJtBPbSoLBIIGr s1EiaI51Dd2OCnsBeUr61wrG3Tlj6k2+vVn8QUWp4p4gdRjpdi/uJ6+l6umsjM+r mGhHTbW8ysnq6wdUNhbTJI12/N8qLhiDbwZdTQmcJw4xPyzyhm9Ji3ncgrfHZET1 kZNfgHLZHFi+7EHTSfGKZfz5S0Z+Vj4wPdmeyM6HDjyKLNJ8Qhnnhd1pf6KVIkYi QA4gOoKnzUnYG+NPORm1eUcMZA04uL/d0OHYeDgLVdYsiH6+jvm2OkA99k9IBDmf QRMX0nHlF6/EH2pUStM9PD7YiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAi1c45z tPBEqNs4WWq2M1rSieHiMB8GA1UdIwQYMBaAFLY4l5G9VAlq0AmZp1kfsgQYmvGY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU1MS9EQkY2RTFENEUy RTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNXclFDWm1uV1IteUJCaWE4 WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqaVhrYjFVQ1dyUUNabW5XUi15QkJpYThaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjU1MS9EQkY2RTFENEUyRTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNX clFDWm1uV1IteUJCaWE4WmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqr8LWwOu/2qtXr2U/YqTBeAT/6a1VaaYzz771BtpU/yQF/SvJOf3V 6od+8mf3to9Xw8mWsikKXOEA63848y+VO20qZleT/+KjmroYhl9jHFWQyqgUcU/H bxs9V2AsSqjsfO9IEFvfyeXY0zNP1LOV/4DClm5acpvjMrnxmrboZEg3oToQl2ke FLTVXiUedn08u9CodaBpe4CbPbEY8iyB84jrJqjW9b0Cv1ZiD4phlytSxVZKZVSG QL4Mx3hrt27ybpuIBrodlSqRQEXCli/HNzBLYgyh+CVVzV3e+1B5Fppz3eDs0twJ op8ACGCm+PobzAKJUR3w2uO73sv3pczr -----END CERTIFICATE-----Generated at Thu Jul 3 09:12:01 2025 by rpki-client