$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft File: vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft (raw, json) Hash identifier: j+QoiVzrX5LdIHgURBG+rmbCP9l6IQVoTdcQyO+DV+A= Subject key identifier: 14:2C:90:7F:57:71:B3:A6:95:12:65:C2:92:42:5D:D8:87:BB:81:93 Authority key identifier: BC:E9:FA:6C:37:7C:94:34:B1:2C:77:BE:FC:DD:42:A5:B7:03:4F:F2 Certificate issuer: /CN=A91EC3C9/serialNumber=BCE9FA6C377C9434B12C77BEFCDD42A5B7034FF2 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft Manifest number: 1A Signing time: Sun 29 Jun 2025 06:58:27 +0000 Manifest this update: Sun 29 Jun 2025 06:58:26 +0000 Manifest next update: Sun 06 Jul 2025 06:58:26 +0000 Files and hashes: 1: vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl (hash: lfeWaovOa77RjqD/DmGlt83DHn9z/q9L5F+OzDnikjw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 06:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3C9, serialNumber=BCE9FA6C377C9434B12C77BEFCDD42A5B7034FF2 Validity Not Before: Jun 29 06:58:26 2025 GMT Not After : Jul 6 06:58:26 2025 GMT Subject: CN=6860e412-e432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:40:9f:61:62:0d:59:94:85:bd:de:b9:2f:ac: a2:39:d4:49:3e:e6:dc:2d:65:ef:7b:d9:a1:06:65: 5e:6e:ce:cd:7c:b5:71:91:16:ee:99:fb:dc:7c:ab: 2d:91:94:08:a8:2f:b0:9a:4a:46:c7:b4:64:4e:2f: 0d:77:88:a7:54:f2:f4:61:cc:7c:b2:4d:69:56:08: d2:96:76:31:06:ef:ae:a1:48:2e:58:78:14:5a:27: 77:58:03:db:22:76:9d:44:86:be:2f:4b:75:2a:38: 82:32:9e:86:28:2c:0e:4c:78:ad:9d:c5:72:d3:97: c1:fa:c2:12:63:be:b8:c8:8a:92:a6:fa:e9:88:d6: 4f:58:67:5b:34:a7:c6:27:d2:76:b7:da:3e:a1:1f: 4a:bd:3a:32:7e:c5:d7:c5:f5:8d:87:5e:59:d5:d7: 14:71:94:39:71:8f:ef:31:cb:95:70:c8:27:9d:bb: de:05:7d:63:f3:e8:5c:e5:2f:e1:28:11:ca:d4:83: 85:1f:1f:e0:e2:c3:47:f7:7a:fc:86:02:07:d8:65: 66:2b:56:52:bf:29:f4:a1:f3:4a:3c:2c:bf:87:4b: e9:c1:a8:e3:19:16:7c:47:d7:39:15:25:7e:d1:fe: da:a1:51:03:a2:06:a2:ff:2c:58:b9:fe:b9:ca:c2: fb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:2C:90:7F:57:71:B3:A6:95:12:65:C2:92:42:5D:D8:87:BB:81:93 X509v3 Authority Key Identifier: keyid:BC:E9:FA:6C:37:7C:94:34:B1:2C:77:BE:FC:DD:42:A5:B7:03:4F:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:d7:f6:fb:46:66:2a:3a:7e:91:2c:f6:2e:60:c7:bc:e3:35: 98:9d:13:0c:95:03:01:37:16:25:2c:2c:45:4c:e5:af:74:c3: 31:78:37:5b:2c:c0:34:de:62:d6:13:14:cb:77:cc:0a:ac:06: 9d:ec:49:49:59:b4:5d:45:f7:61:0f:fb:96:d8:10:c3:70:56: 46:4b:7c:95:ae:a6:e4:3f:34:53:65:b5:ec:95:25:0e:d4:b5: 5d:b4:6e:3a:c8:e4:2b:e1:63:26:f6:b5:f5:06:4b:79:e2:f2: 6c:28:a8:f7:10:6d:21:fd:19:b6:c5:7f:9f:2c:4b:91:72:a4: f8:a9:bd:67:8e:02:ab:a3:bd:53:48:1e:b9:73:4f:78:d8:66: 71:63:78:74:15:1f:a3:08:dc:9b:aa:f3:c7:34:50:6a:67:8c: 0f:25:9b:07:b6:54:b9:68:ca:5c:37:db:a0:81:ed:be:6e:95: c1:b6:b0:d3:d3:53:10:b1:fe:b2:b6:54:7e:de:ee:8e:81:43: b6:a0:8f:27:02:a9:c6:a3:7b:c4:5a:c9:e2:11:fc:e6:2b:78: c2:bc:12:0c:d6:3b:83:05:08:19:5e:d3:ff:2d:6c:85:07:2d: 25:89:20:23:bf:ec:35:8e:6d:00:e3:42:b0:d2:d9:79:e6:27: 18:8c:b1:a1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QzNDOTExMC8GA1UEBRMoQkNFOUZBNkMzNzdDOTQzNEIxMkM3N0JFRkNERDQyQTVC NzAzNEZGMjAeFw0yNTA2MjkwNjU4MjZaFw0yNTA3MDYwNjU4MjZaMBgxFjAUBgNV BAMTDTY4NjBlNDEyLWU0MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWQJ9hYg1ZlIW93rkvrKI51Ek+5twtZe972aEGZV5uzs18tXGRFu6Z+9x8qy2R lAioL7CaSkbHtGROLw13iKdU8vRhzHyyTWlWCNKWdjEG766hSC5YeBRaJ3dYA9si dp1Ehr4vS3UqOIIynoYoLA5MeK2dxXLTl8H6whJjvrjIipKm+umI1k9YZ1s0p8Yn 0na32j6hH0q9OjJ+xdfF9Y2HXlnV1xRxlDlxj+8xy5VwyCedu94FfWPz6FzlL+Eo EcrUg4UfH+Diw0f3evyGAgfYZWYrVlK/KfSh80o8LL+HS+nBqOMZFnxH1zkVJX7R /tqhUQOiBqL/LFi5/rnKwvu3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFCyQf1dx s6aVEmXCkkJd2Ie7gZMwHwYDVR0jBBgwFoAUvOn6bDd8lDSxLHe+/N1CpbcDT/Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDM0M5L0MxMkNEQUU0MzE4 RTExRjA5QzM2REE3QkM0RjlBRTAyL3ZPbjZiRGQ4bERTeExIZS1fTjFDcGJjRFRf SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdk9uNmJEZDhsRFN4TEhlLV9OMUNwYmNEVF9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD M0M5L0MxMkNEQUU0MzE4RTExRjA5QzM2REE3QkM0RjlBRTAyL3ZPbjZiRGQ4bERT eExIZS1fTjFDcGJjRFRfSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADDX9vtGZio6fpEs9i5gx7zjNZidEwyVAwE3FiUsLEVM5a90wzF4N1ss wDTeYtYTFMt3zAqsBp3sSUlZtF1F92EP+5bYEMNwVkZLfJWupuQ/NFNlteyVJQ7U tV20bjrI5CvhYyb2tfUGS3ni8mwoqPcQbSH9GbbFf58sS5FypPipvWeOAqujvVNI HrlzT3jYZnFjeHQVH6MI3Juq88c0UGpnjA8lmwe2VLloylw326CB7b5ulcG2sNPT UxCx/rK2VH7e7o6BQ7agjycCqcaje8RayeIR/OYreMK8EgzWO4MFCBle0/8tbIUH LSWJICO/7DWObQDjQrDS2XnmJxiMsaE= -----END CERTIFICATE-----Generated at Tue Jul 1 05:22:46 2025 by rpki-client