$ rpki-client -vvf rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft File: mIulA6dlHjJofEyW9u3hh8c9BDg.mft (raw, json) Hash identifier: txsFWoqr8PPfhDPs4SAQJcHbh2oU2aKLw0k+PmEUtyg= Subject key identifier: FF:84:7E:BA:40:C9:E6:1B:EE:9F:6A:CE:25:93:BD:BE:2B:42:56:42 Authority key identifier: 98:8B:A5:03:A7:65:1E:32:68:7C:4C:96:F6:ED:E1:87:C7:3D:04:38 Certificate issuer: /CN=A91E923A/serialNumber=988BA503A7651E32687C4C96F6EDE187C73D0438 Certificate serial: 0CE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft Manifest number: 0E2E Signing time: Wed 02 Jul 2025 18:19:37 +0000 Manifest this update: Wed 02 Jul 2025 18:19:37 +0000 Manifest next update: Wed 09 Jul 2025 18:19:37 +0000 Files and hashes: 1: mIulA6dlHjJofEyW9u3hh8c9BDg.crl (hash: ci7NqNKaM/bSIEgwSihTfFLU3SL5xwGzI76ukq5y6jI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.crl rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3303 (0xce7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E923A, serialNumber=988BA503A7651E32687C4C96F6EDE187C73D0438 Validity Not Before: Jul 2 18:19:37 2025 GMT Not After : Jul 9 18:19:37 2025 GMT Subject: CN=68657839-9af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d1:5a:7c:69:31:b6:05:df:35:2e:03:31:2f: 9b:74:2c:dc:2b:b7:ba:10:2d:4c:e4:8b:cd:76:d6: 35:8c:ec:0e:f4:83:62:da:f2:f9:7b:4d:59:bb:3f: 6d:12:ec:39:64:f2:47:7d:10:c4:3a:6a:6c:5a:23: 6a:08:f0:52:43:d1:65:28:ce:8b:f2:11:75:0f:21: ce:6c:80:e3:68:fa:f9:4a:42:13:6c:6d:db:4d:2c: c7:3d:e2:9c:21:b8:9e:b9:d5:7a:86:c1:7f:70:4d: 6c:c2:44:23:fe:97:17:40:74:86:ec:32:3b:d8:75: dd:d6:36:f0:fb:89:f4:4e:38:10:38:be:ee:56:21: 0c:83:37:a1:bc:35:8f:ba:ea:cc:ac:de:e9:24:37: fd:17:57:f0:24:10:01:7f:1a:3c:aa:ce:1a:05:36: 0b:48:a6:c3:d9:65:04:7a:3a:ae:bd:47:67:7f:cb: 51:3b:bc:6a:cf:c9:40:8d:c5:29:f1:e9:97:0a:ea: 5b:99:4d:35:ec:bd:64:c4:f5:a7:23:f9:f8:05:77: 68:be:4a:ee:77:e3:4a:a3:40:9c:42:32:83:4b:f6: 38:37:43:33:69:0d:e5:da:f8:53:dc:1f:c9:a7:9e: c3:8d:54:94:fd:57:61:a8:45:81:61:03:e8:5a:43: e4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:84:7E:BA:40:C9:E6:1B:EE:9F:6A:CE:25:93:BD:BE:2B:42:56:42 X509v3 Authority Key Identifier: keyid:98:8B:A5:03:A7:65:1E:32:68:7C:4C:96:F6:ED:E1:87:C7:3D:04:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:02:fd:21:9f:f9:69:b1:c5:48:4e:14:3f:66:f6:8f:12:a1: e2:f6:2a:88:c2:2f:0e:c5:7b:0a:c5:c8:fd:46:9b:39:b5:0f: 19:bc:8f:50:09:6c:0b:1e:07:1f:5f:2a:d1:68:55:50:57:0a: 28:9c:fa:d9:47:99:09:41:b9:e7:89:f4:2a:96:30:09:86:c7: a1:84:1f:c0:65:96:3a:aa:14:3e:ff:e2:80:eb:eb:a5:c0:a2: 87:77:83:e7:f9:b5:11:e2:ed:bc:8d:0e:9e:06:96:ff:bc:fe: 7e:a0:72:6d:48:f2:a4:bb:45:84:81:7d:57:a0:09:73:bd:04: fe:07:0c:2b:20:cd:af:48:38:16:95:2f:25:fb:c9:ed:8e:c8: f6:e4:5c:70:28:87:a6:30:a9:31:34:e8:2d:7a:fd:09:8e:74: 4e:db:10:c4:aa:d3:bd:21:97:44:cd:1e:bd:f9:b1:dc:68:c6: c2:bb:38:4d:8c:ce:54:b7:db:58:4c:21:31:04:3b:85:7d:c5: f7:e4:50:77:dc:82:b5:ce:dd:fa:a1:3e:f8:6b:f4:6b:1f:51: fd:ca:ae:64:5f:db:84:f6:64:4a:26:ef:19:8b:e1:33:9e:d9: d8:b6:bf:b0:9b:06:7b:10:21:06:d5:26:ec:a9:7f:ad:ca:c8: 19:3c:3c:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkyM0ExMTAvBgNVBAUTKDk4OEJBNTAzQTc2NTFFMzI2ODdDNEM5NkY2RURFMTg3 QzczRDA0MzgwHhcNMjUwNzAyMTgxOTM3WhcNMjUwNzA5MTgxOTM3WjAYMRYwFAYD VQQDEw02ODY1NzgzOS05YWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4tFafGkxtgXfNS4DMS+bdCzcK7e6EC1M5IvNdtY1jOwO9INi2vL5e01Zuz9t Euw5ZPJHfRDEOmpsWiNqCPBSQ9FlKM6L8hF1DyHObIDjaPr5SkITbG3bTSzHPeKc IbieudV6hsF/cE1swkQj/pcXQHSG7DI72HXd1jbw+4n0TjgQOL7uViEMgzehvDWP uurMrN7pJDf9F1fwJBABfxo8qs4aBTYLSKbD2WUEejquvUdnf8tRO7xqz8lAjcUp 8emXCupbmU017L1kxPWnI/n4BXdovkrud+NKo0CcQjKDS/Y4N0MzaQ3l2vhT3B/J p57DjVSU/VdhqEWBYQPoWkPk/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+EfrpA yeYb7p9qziWTvb4rQlZCMB8GA1UdIwQYMBaAFJiLpQOnZR4yaHxMlvbt4YfHPQQ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTIzQS9DOUIzQ0M1NEVD MTExMUU5OEUwRjg2NDdDNEY5QUUwMi9tSXVsQTZkbEhqSm9mRXlXOXUzaGg4YzlC RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21JdWxBNmRsSGpKb2ZFeVc5dTNoaDhjOUJEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTIzQS9DOUIzQ0M1NEVDMTExMUU5OEUwRjg2NDdDNEY5QUUwMi9tSXVsQTZkbEhq Sm9mRXlXOXUzaGg4YzlCRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3Av0hn/lpscVIThQ/ZvaPEqHi9iqIwi8OxXsKxcj9Rps5tQ8ZvI9Q CWwLHgcfXyrRaFVQVwoonPrZR5kJQbnnifQqljAJhsehhB/AZZY6qhQ+/+KA6+ul wKKHd4Pn+bUR4u28jQ6eBpb/vP5+oHJtSPKku0WEgX1XoAlzvQT+BwwrIM2vSDgW lS8l+8ntjsj25FxwKIemMKkxNOgtev0JjnRO2xDEqtO9IZdEzR69+bHcaMbCuzhN jM5Ut9tYTCExBDuFfcX35FB33IK1zt36oT74a/RrH1H9yq5kX9uE9mRKJu8Zi+Ez ntnYtr+wmwZ7ECEG1SbsqX+tysgZPDw8 -----END CERTIFICATE-----Generated at Thu Jul 3 06:00:02 2025 by rpki-client