$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft File: mFpmWpz7T1ygDsqL_rgGML9PSBY.mft (raw, json) Hash identifier: +HMUxio8vy2FkZ7DvcgXxXmosxgAQaZcaD+fQY3Z7L0= Subject key identifier: 24:6C:83:7D:5B:6B:64:95:DC:42:54:60:39:2F:E6:FE:1D:C9:8C:B8 Authority key identifier: 98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16 Certificate issuer: /CN=A91E6D5D/serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816 Certificate serial: 2549 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft Manifest number: 9F81 Signing time: Mon 30 Jun 2025 14:34:10 +0000 Manifest this update: Mon 30 Jun 2025 14:34:09 +0000 Manifest next update: Mon 07 Jul 2025 14:34:09 +0000 Files and hashes: 1: mFpmWpz7T1ygDsqL_rgGML9PSBY.crl (hash: 7nK1hnfWJ6zv/ncpXvhCz0qDBSgRVjpraAycELPTLSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 14:34:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9545 (0x2549) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816 Validity Not Before: Jun 30 14:34:09 2025 GMT Not After : Jul 7 14:34:09 2025 GMT Subject: CN=6862a061-043d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9d:0f:e0:d6:e5:62:e5:9a:53:08:de:04:c0: 8b:2b:3b:34:12:77:82:10:ad:a6:bf:d7:e0:7b:60: ec:b6:42:d7:a2:fa:78:7c:6b:a3:05:ab:76:3b:06: 30:30:fd:80:94:7d:95:4f:3b:3c:60:33:b1:fb:59: 69:0c:c2:81:e4:a5:4a:b6:e2:a7:35:31:12:40:71: b0:5e:2a:fb:e7:82:3c:aa:34:12:9a:1c:7e:8c:6a: fd:d7:44:e4:82:f6:31:0e:5c:55:5d:30:67:2d:bf: c6:0a:88:1a:ac:6e:60:b7:32:f5:1f:29:a9:ac:ce: e8:96:c2:35:63:c7:30:1b:65:58:99:6f:a5:11:13: ac:e7:04:a9:07:bc:3a:74:ab:5e:42:65:86:3a:40: 57:ec:27:f7:fa:1a:55:13:1a:71:b9:17:5d:50:71: a6:81:d8:bf:11:a9:85:dc:02:66:51:e4:ae:38:8d: 1e:da:e4:ef:0d:03:13:4a:1d:0d:3f:0c:db:d3:97: 63:51:e2:a0:f7:da:a8:6d:7c:6f:e4:67:f4:9c:03: 8e:e1:4e:b0:55:8d:e5:8a:c5:f3:ec:1a:ff:bb:95: 85:d2:56:8d:b8:6b:67:35:ab:ba:c2:5b:b8:7d:e3: b7:18:b3:23:63:40:ca:a3:24:c0:b1:32:bc:e7:ad: fd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:6C:83:7D:5B:6B:64:95:DC:42:54:60:39:2F:E6:FE:1D:C9:8C:B8 X509v3 Authority Key Identifier: keyid:98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ee:43:61:c8:a5:a8:49:eb:f6:0f:e9:9c:f3:01:92:88:48:69: e6:2f:b0:da:49:0c:d0:46:d0:6f:0a:2e:f2:ee:22:d0:6a:47: 58:e7:3f:4a:6b:c6:92:14:88:6a:dc:20:de:45:5a:1a:9c:76: d3:23:97:e1:86:16:fc:17:2e:db:1a:a7:28:6a:45:ed:8d:0a: 4a:d2:79:55:a2:2b:a2:20:bd:cb:ff:8c:1c:61:20:fa:de:e1: 87:e6:db:ce:fd:11:89:16:bb:ab:6e:b1:14:0f:b3:79:9f:e1: 33:f3:84:3b:3c:70:81:40:99:64:30:01:32:f2:bb:29:cd:1e: 41:e9:84:9b:81:5e:5a:f7:bd:09:53:e9:33:f4:2e:84:5a:a1: ea:f4:48:f7:41:fa:9e:82:a3:f9:5c:e7:5c:9d:58:11:bd:41: 29:1f:c1:99:63:d0:6a:f5:1f:d2:1f:82:9c:cc:57:7b:e0:54: 25:ad:d4:8a:0c:bd:a0:f9:51:2e:bd:73:c8:a9:23:6b:f7:58: ad:6e:9a:73:ce:60:a7:d2:6d:ff:48:29:ce:83:5f:f9:3d:53: 5b:cd:69:de:77:56:34:e7:0e:68:be:f1:77:c4:d1:36:a5:d8: bc:04:e6:28:6a:b0:73:07:c7:30:d5:76:cd:ec:0f:bf:77:9b: e7:87:f8:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDk4NUE2NjVBOUNGQjRGNUNBMDBFQ0E4QkZFQjgwNjMw QkY0RjQ4MTYwHhcNMjUwNjMwMTQzNDA5WhcNMjUwNzA3MTQzNDA5WjAYMRYwFAYD VQQDEw02ODYyYTA2MS0wNDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoZ0P4NblYuWaUwjeBMCLKzs0EneCEK2mv9fge2DstkLXovp4fGujBat2OwYw MP2AlH2VTzs8YDOx+1lpDMKB5KVKtuKnNTESQHGwXir754I8qjQSmhx+jGr910Tk gvYxDlxVXTBnLb/GCogarG5gtzL1HymprM7olsI1Y8cwG2VYmW+lEROs5wSpB7w6 dKteQmWGOkBX7Cf3+hpVExpxuRddUHGmgdi/EamF3AJmUeSuOI0e2uTvDQMTSh0N Pwzb05djUeKg99qobXxv5Gf0nAOO4U6wVY3lisXz7Br/u5WF0laNuGtnNau6wlu4 feO3GLMjY0DKoyTAsTK85639BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRsg31b a2SV3EJUYDkv5v4dyYy4MB8GA1UdIwQYMBaAFJhaZlqc+09coA7Ki/64BjC/T0gW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9tRnBtV3B6N1QxeWdEc3FMX3JnR01MOVBT QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21GcG1XcHo3VDF5Z0RzcUxfcmdHTUw5UFNCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9tRnBtV3B6N1Qx eWdEc3FMX3JnR01MOVBTQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDuQ2HIpahJ6/YP6ZzzAZKISGnmL7DaSQzQRtBvCi7y7iLQakdY5z9K a8aSFIhq3CDeRVoanHbTI5fhhhb8Fy7bGqcoakXtjQpK0nlVoiuiIL3L/4wcYSD6 3uGH5tvO/RGJFrurbrEUD7N5n+Ez84Q7PHCBQJlkMAEy8rspzR5B6YSbgV5a970J U+kz9C6EWqHq9Ej3QfqegqP5XOdcnVgRvUEpH8GZY9Bq9R/SH4KczFd74FQlrdSK DL2g+VEuvXPIqSNr91itbppzzmCn0m3/SCnOg1/5PVNbzWned1Y05w5ovvF3xNE2 pdi8BOYoarBzB8cw1XbN7A+/d5vnh/iU -----END CERTIFICATE-----Generated at Tue Jul 1 16:11:15 2025 by rpki-client