$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1CC/7C1E344C4A3A11F0BD5C1B4FC4F9AE02/V-g9gYxmEEbA4OLv5TjuEncAqjM.mft File: V-g9gYxmEEbA4OLv5TjuEncAqjM.mft (raw, json) Hash identifier: XdRKpvc6sZ/rjoag9MPk8NjJ7PjmxN0kpsBgH4NmlG0= Subject key identifier: 01:C8:FD:22:23:30:D9:62:1A:CB:32:26:D3:E3:ED:51:E4:5C:FB:92 Authority key identifier: 57:E8:3D:81:8C:66:10:46:C0:E0:E2:EF:E5:38:EE:12:77:00:AA:33 Certificate issuer: /CN=A91DD1CC/serialNumber=57E83D818C661046C0E0E2EFE538EE127700AA33 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V-g9gYxmEEbA4OLv5TjuEncAqjM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD1CC/7C1E344C4A3A11F0BD5C1B4FC4F9AE02/V-g9gYxmEEbA4OLv5TjuEncAqjM.mft Manifest number: 0B Signing time: Thu 03 Jul 2025 08:23:29 +0000 Manifest this update: Thu 03 Jul 2025 08:23:29 +0000 Manifest next update: Thu 10 Jul 2025 08:23:28 +0000 Files and hashes: 1: V-g9gYxmEEbA4OLv5TjuEncAqjM.crl (hash: YzEHvUTWqa26OBdSefSX0Lkev5S26GbwiHK07N4Y28Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD1CC/7C1E344C4A3A11F0BD5C1B4FC4F9AE02/V-g9gYxmEEbA4OLv5TjuEncAqjM.crl rsync://rpki.apnic.net/member_repository/A91DD1CC/7C1E344C4A3A11F0BD5C1B4FC4F9AE02/V-g9gYxmEEbA4OLv5TjuEncAqjM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V-g9gYxmEEbA4OLv5TjuEncAqjM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD1CC, serialNumber=57E83D818C661046C0E0E2EFE538EE127700AA33 Validity Not Before: Jul 3 08:23:29 2025 GMT Not After : Jul 10 08:23:28 2025 GMT Subject: CN=68663e01-730b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:07:8a:53:7c:bd:cc:74:06:14:71:76:71:c7: 16:7c:57:ee:30:c9:dc:ea:78:7f:cb:ab:dc:76:43: f8:3c:19:75:71:8e:75:8c:d2:41:97:ac:98:78:dd: 73:e5:ae:92:06:32:bb:19:e5:52:94:f2:a7:2c:b8: a5:f9:6e:f9:2b:96:21:c9:f9:e2:1a:9f:6f:1e:95: ce:97:2f:30:d5:a7:a9:25:81:84:64:11:e9:cc:05: 17:c8:3b:29:a7:e0:4e:ea:38:ba:bc:c9:49:bb:d6: 32:2f:31:16:0b:df:0b:eb:ec:b2:a5:c8:34:30:3e: 94:c7:4a:85:b0:0e:fa:f5:6f:17:6e:ad:48:76:1d: 8b:f8:9e:e2:12:9b:7b:eb:48:ab:c4:09:e0:df:88: f1:cf:7e:c8:ac:c9:24:63:f7:23:cb:09:62:02:71: 83:4f:f3:85:e9:e3:ac:df:21:32:b3:8a:91:64:bb: 19:90:b7:c4:a5:dd:a1:97:af:9f:7b:d0:c2:cf:07: 42:2c:f1:6a:57:84:6a:73:4f:72:7f:ed:0d:dc:5e: f1:5a:b0:69:8e:ba:d7:b8:92:18:88:67:41:ff:15: 2d:e5:fc:73:da:1b:8a:d9:df:2e:f1:c6:79:d5:94: e4:c3:4f:37:15:0e:9b:eb:35:7e:0f:34:67:40:a3: aa:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C8:FD:22:23:30:D9:62:1A:CB:32:26:D3:E3:ED:51:E4:5C:FB:92 X509v3 Authority Key Identifier: keyid:57:E8:3D:81:8C:66:10:46:C0:E0:E2:EF:E5:38:EE:12:77:00:AA:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7C1E344C4A3A11F0BD5C1B4FC4F9AE02/V-g9gYxmEEbA4OLv5TjuEncAqjM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V-g9gYxmEEbA4OLv5TjuEncAqjM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7C1E344C4A3A11F0BD5C1B4FC4F9AE02/V-g9gYxmEEbA4OLv5TjuEncAqjM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:80:29:e0:53:c7:b9:32:0f:3b:7f:e9:57:54:ef:8a:87:50: 4e:f4:a9:b3:e5:4f:2f:92:11:53:b9:2a:42:3e:f3:df:1d:c4: f8:ef:5f:f8:20:70:28:26:67:ed:1b:ae:84:b3:d8:8b:dc:39: 66:31:0d:2c:73:38:7d:ae:c3:5b:39:1e:8d:68:ad:d2:17:e4: 72:c2:87:8f:46:f2:8e:81:6f:00:44:a9:95:82:89:15:36:48: fd:a5:98:cb:d7:19:08:54:2d:a1:20:03:49:8e:91:aa:d2:9b: 2e:f2:15:65:27:2c:3c:9e:cc:87:81:bc:fe:40:d8:d3:5b:83: db:78:c4:59:79:82:c5:68:90:d1:cc:9b:05:6a:5b:56:62:17: 43:84:88:3b:f4:a4:cc:ac:c1:ac:9d:8a:6d:81:a9:11:fa:e0: 86:92:a6:52:15:f0:09:a0:60:8e:01:31:5e:5d:68:bb:a3:2f: b7:85:ea:ae:55:77:c3:f6:79:5d:0b:1f:60:d3:af:89:2b:28: 61:86:14:2b:05:21:ad:35:f1:45:64:d8:45:80:2f:7f:27:ed: 8c:cf:c4:fb:c7:a6:1d:0b:52:ad:d9:78:00:23:a8:21:74:93: 64:67:29:09:b9:54:7a:67:dd:68:3a:f4:9c:5b:2f:b3:a7:e0: f3:a5:27:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDFDQzExMC8GA1UEBRMoNTdFODNEODE4QzY2MTA0NkMwRTBFMkVGRTUzOEVFMTI3 NzAwQUEzMzAeFw0yNTA3MDMwODIzMjlaFw0yNTA3MTAwODIzMjhaMBgxFjAUBgNV BAMTDTY4NjYzZTAxLTczMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkB4pTfL3MdAYUcXZxxxZ8V+4wydzqeH/Lq9x2Q/g8GXVxjnWM0kGXrJh43XPl rpIGMrsZ5VKU8qcsuKX5bvkrliHJ+eIan28elc6XLzDVp6klgYRkEenMBRfIOymn 4E7qOLq8yUm71jIvMRYL3wvr7LKlyDQwPpTHSoWwDvr1bxdurUh2HYv4nuISm3vr SKvECeDfiPHPfsisySRj9yPLCWICcYNP84Xp46zfITKzipFkuxmQt8Sl3aGXr597 0MLPB0Is8WpXhGpzT3J/7Q3cXvFasGmOute4khiIZ0H/FS3l/HPaG4rZ3y7xxnnV lOTDTzcVDpvrNX4PNGdAo6pnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAcj9IiMw 2WIayzIm0+PtUeRc+5IwHwYDVR0jBBgwFoAUV+g9gYxmEEbA4OLv5TjuEncAqjMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMUNDLzdDMUUzNDRDNEEz QTExRjBCRDVDMUI0RkM0RjlBRTAyL1YtZzlnWXhtRUViQTRPTHY1VGp1RW5jQXFq TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVi1nOWdZeG1FRWJBNE9MdjVUanVFbmNBcWpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE MUNDLzdDMUUzNDRDNEEzQTExRjBCRDVDMUI0RkM0RjlBRTAyL1YtZzlnWXhtRUVi QTRPTHY1VGp1RW5jQXFqTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGSAKeBTx7kyDzt/6VdU74qHUE70qbPlTy+SEVO5KkI+898dxPjvX/gg cCgmZ+0broSz2IvcOWYxDSxzOH2uw1s5Ho1ordIX5HLCh49G8o6BbwBEqZWCiRU2 SP2lmMvXGQhULaEgA0mOkarSmy7yFWUnLDyezIeBvP5A2NNbg9t4xFl5gsVokNHM mwVqW1ZiF0OEiDv0pMyswaydim2BqRH64IaSplIV8AmgYI4BMV5daLujL7eF6q5V d8P2eV0LH2DTr4krKGGGFCsFIa018UVk2EWAL38n7YzPxPvHph0LUq3ZeAAjqCF0 k2RnKQm5VHpn3Wg69JxbL7On4POlJ3c= -----END CERTIFICATE-----Generated at Fri Jul 4 00:29:57 2025 by rpki-client