$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft File: Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft (raw, json) Hash identifier: hKD28uqCjn0HE9noV/jUZPxN9S9gP59XCeSAZTCmO+c= Subject key identifier: C1:40:CD:1B:EB:04:CC:BD:64:36:EC:1D:3E:7C:A1:B4:CA:17:ED:82 Authority key identifier: 16:2E:95:6F:88:DD:3E:09:A6:B0:44:D8:B2:B4:2D:EB:10:A8:3D:A1 Certificate issuer: /CN=A91E6F07/serialNumber=162E956F88DD3E09A6B044D8B2B42DEB10A83DA1 Certificate serial: 0C4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft Manifest number: 14A4 Signing time: Sat 28 Jun 2025 18:09:48 +0000 Manifest this update: Sat 28 Jun 2025 18:09:47 +0000 Manifest next update: Sat 05 Jul 2025 18:09:47 +0000 Files and hashes: 1: Fi6Vb4jdPgmmsETYsrQt6xCoPaE.crl (hash: OCrIi/3gmGeI9CbAQES6JNsU9m7QM2UcQSRHkimS2O4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.crl rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 18:09:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3149 (0xc4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6F07, serialNumber=162E956F88DD3E09A6B044D8B2B42DEB10A83DA1 Validity Not Before: Jun 28 18:09:47 2025 GMT Not After : Jul 5 18:09:47 2025 GMT Subject: CN=68602feb-3e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f5:40:1d:cd:bd:c3:a3:fb:bb:85:75:e9:47: 37:d7:58:3e:c1:07:f4:64:b3:84:e6:39:e6:88:16: 78:a8:23:bd:d2:01:1f:ef:dd:be:a0:45:48:4b:0c: 20:6d:13:60:03:45:f6:86:37:42:ec:f8:3b:e0:71: dd:57:16:15:6a:5a:d9:df:7c:54:6d:fa:18:b0:4e: d3:5a:ce:d7:fd:d4:dc:c0:4f:45:62:5a:f7:6d:0a: c8:80:7f:d5:c5:c0:0d:96:60:2d:f7:51:fd:fb:28: 7e:62:cf:a5:a8:98:d4:33:bf:18:45:ee:05:25:a1: 6b:c3:81:b3:e0:9f:28:ed:1b:50:e2:5b:70:62:9c: 76:8a:17:93:8c:bf:e7:29:5a:c4:ef:37:27:ab:ae: 8e:e4:50:8d:61:86:a6:51:0a:da:c6:e2:c0:ea:47: 41:39:65:cf:87:6f:8e:ec:e0:2c:61:ab:dd:2a:f2: 16:cf:bf:61:f4:15:88:4a:16:5c:3e:4c:9f:b1:71: a9:09:c4:15:a7:48:a5:b7:e9:1a:1c:d2:ef:64:61: 10:11:fd:e6:12:3b:01:ef:c6:33:6d:71:a8:30:37: 76:b0:d8:49:56:e7:9f:4f:fe:ff:b5:4a:8c:25:38: 67:3f:38:bf:42:50:ee:60:7a:2c:75:d7:95:0a:f6: 87:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:40:CD:1B:EB:04:CC:BD:64:36:EC:1D:3E:7C:A1:B4:CA:17:ED:82 X509v3 Authority Key Identifier: keyid:16:2E:95:6F:88:DD:3E:09:A6:B0:44:D8:B2:B4:2D:EB:10:A8:3D:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:8c:1d:1b:37:a6:7f:fe:a8:d9:c8:60:8a:de:a0:61:a8:9d: 90:be:83:3a:2c:f6:3f:8d:92:92:f4:29:8d:23:e9:88:98:d3: dd:c3:ac:ac:d8:dd:e6:ac:ef:67:ad:30:96:7c:d6:19:3b:fa: 64:91:b7:2a:1f:ca:e8:41:9f:94:0d:16:78:b2:d5:f1:5d:52: 93:4e:8a:cc:ee:86:21:d9:e3:51:45:9e:3e:a5:77:82:07:b6: e8:78:a5:dc:4a:96:cb:12:b9:e2:82:db:1b:51:db:dd:15:73: 8e:7e:c5:73:b7:07:8e:a4:70:4f:22:3b:8c:6a:56:fa:c1:5b: 87:e0:35:27:34:5b:9a:3b:c2:1d:25:a6:13:91:18:4f:f1:ad: aa:c4:c2:ee:14:d2:6c:ae:a1:e4:e1:4a:b1:99:2e:94:02:30: da:81:1f:eb:50:4d:5b:aa:1e:cb:59:71:f9:c6:9e:71:b7:33: d5:2b:d9:cc:5a:2c:f2:20:02:00:f2:b5:c6:ff:e5:5b:5a:8d: ac:91:89:87:69:5b:82:38:c3:27:8e:91:c6:a2:ac:22:49:54: 45:5c:7b:5c:45:02:e7:f1:5a:c3:2a:15:89:ec:d8:ed:2a:67: f4:99:35:c7:19:d8:f3:4f:5a:28:0b:7c:a9:88:bc:4b:75:55: 3c:34:1b:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZGMDcxMTAvBgNVBAUTKDE2MkU5NTZGODhERDNFMDlBNkIwNDREOEIyQjQyREVC MTBBODNEQTEwHhcNMjUwNjI4MTgwOTQ3WhcNMjUwNzA1MTgwOTQ3WjAYMRYwFAYD VQQDEw02ODYwMmZlYi0zZTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPVAHc29w6P7u4V16Uc311g+wQf0ZLOE5jnmiBZ4qCO90gEf792+oEVISwwg bRNgA0X2hjdC7Pg74HHdVxYValrZ33xUbfoYsE7TWs7X/dTcwE9FYlr3bQrIgH/V xcANlmAt91H9+yh+Ys+lqJjUM78YRe4FJaFrw4Gz4J8o7RtQ4ltwYpx2iheTjL/n KVrE7zcnq66O5FCNYYamUQraxuLA6kdBOWXPh2+O7OAsYavdKvIWz79h9BWIShZc PkyfsXGpCcQVp0ilt+kaHNLvZGEQEf3mEjsB78YzbXGoMDd2sNhJVuefT/7/tUqM JThnPzi/QlDuYHosddeVCvaHdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFAzRvr BMy9ZDbsHT58obTKF+2CMB8GA1UdIwQYMBaAFBYulW+I3T4JprBE2LK0LesQqD2h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkYwNy9DMTNEODFEODA1 MjkxMUVBODJENzQzMzdDNEY5QUUwMi9GaTZWYjRqZFBnbW1zRVRZc3JRdDZ4Q29Q YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZpNlZiNGpkUGdtbXNFVFlzclF0NnhDb1BhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkYwNy9DMTNEODFEODA1MjkxMUVBODJENzQzMzdDNEY5QUUwMi9GaTZWYjRqZFBn bW1zRVRZc3JRdDZ4Q29QYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3jB0bN6Z//qjZyGCK3qBhqJ2QvoM6LPY/jZKS9CmNI+mImNPdw6ys 2N3mrO9nrTCWfNYZO/pkkbcqH8roQZ+UDRZ4stXxXVKTTorM7oYh2eNRRZ4+pXeC B7boeKXcSpbLErnigtsbUdvdFXOOfsVztweOpHBPIjuMalb6wVuH4DUnNFuaO8Id JaYTkRhP8a2qxMLuFNJsrqHk4UqxmS6UAjDagR/rUE1bqh7LWXH5xp5xtzPVK9nM WizyIAIA8rXG/+VbWo2skYmHaVuCOMMnjpHGoqwiSVRFXHtcRQLn8VrDKhWJ7Njt Kmf0mTXHGdjzT1ooC3ypiLxLdVU8NBvD -----END CERTIFICATE-----Generated at Mon Jun 30 16:57:25 2025 by rpki-client