$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft File: 9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft (raw, json) Hash identifier: 2hN/fLTOviJYPbg/SUFs1yteEs9JviZ0+5OIM/5FEvo= Subject key identifier: 7D:03:1D:38:AB:D0:FB:9F:7F:A3:D7:0A:1B:13:38:0C:49:2C:53:F4 Authority key identifier: F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5 Certificate issuer: /CN=A91ECF21/serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5 Certificate serial: 0313 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft Manifest number: 0313 Signing time: Tue 01 Jul 2025 01:48:26 +0000 Manifest this update: Tue 01 Jul 2025 01:48:25 +0000 Manifest next update: Tue 08 Jul 2025 01:48:25 +0000 Files and hashes: 1: 9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl (hash: KTXnfHLDjfr+JbdDHV21XVn78mstaeDKI3uWUOPBNSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:48:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 787 (0x313) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECF21, serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5 Validity Not Before: Jul 1 01:48:25 2025 GMT Not After : Jul 8 01:48:25 2025 GMT Subject: CN=68633e69-7639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6f:36:13:00:2f:77:05:0f:21:71:4e:af:e0: 8b:44:5f:17:1b:6c:58:31:e9:5e:93:d7:96:33:29: 06:6b:c3:54:4c:9c:5b:6a:da:c5:28:21:b6:2f:e7: a3:f7:8c:4c:7a:14:9c:d4:81:02:5f:b8:68:e7:04: 03:c1:5c:8d:ab:f6:40:e1:4e:f1:e7:cf:17:69:1d: 2c:38:20:e0:82:14:05:3e:c8:0b:06:e6:91:64:2e: 0e:3e:5b:13:86:52:0a:2a:a0:06:48:71:08:00:72: 52:5f:f2:07:ca:90:a3:94:f3:ad:85:ce:53:40:10: b9:f4:a4:d6:21:f9:ea:ae:78:ac:4d:c8:32:9e:d0: da:f0:67:d9:56:2b:e6:b0:35:bf:0d:f0:6f:12:88: 43:06:7f:e5:21:b2:59:8e:92:a0:df:ff:dd:6b:38: 5a:90:2a:25:ec:00:67:5b:97:2c:fc:6c:8b:6c:13: 62:ab:c1:87:52:99:4a:cc:ef:ca:4a:45:c7:ce:81: 8a:1c:f1:b7:3e:b7:41:45:ae:47:80:ca:b2:e3:18: 82:75:92:a0:16:3d:76:78:c0:68:45:7b:79:48:cd: 6f:a2:49:76:17:66:77:a6:a6:c1:a9:b2:58:77:bc: 3b:0d:11:6a:75:08:1d:61:d6:a9:6f:b1:77:7d:f9: eb:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:03:1D:38:AB:D0:FB:9F:7F:A3:D7:0A:1B:13:38:0C:49:2C:53:F4 X509v3 Authority Key Identifier: keyid:F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:cc:f3:92:4f:7f:ef:7a:32:70:7f:75:11:eb:3b:0f:24:63: fc:72:71:06:1a:9d:1e:7c:c8:5a:3c:58:bb:5d:cf:cc:dc:09: f3:6e:dd:ea:53:b4:fb:7f:e0:f3:66:68:7c:b3:b6:2f:fd:26: 17:ef:4a:88:a8:a6:f1:1d:18:c6:64:dc:42:e5:b1:26:8f:57: f2:3c:a0:4f:99:d7:c4:02:00:db:04:aa:76:4f:9f:fe:52:67: 33:b9:58:31:2f:0b:dd:85:42:f9:f2:10:3d:da:43:cd:e7:f0: c0:ab:41:e7:71:df:1b:a4:11:29:1a:46:88:5a:b8:2d:47:50: 79:4f:3c:f7:92:be:9d:b1:5e:02:59:08:b4:12:85:57:91:d1: 77:a2:aa:96:ce:af:01:e2:ec:4e:d6:ad:c0:52:47:b0:d0:88: 34:6b:e1:74:b9:68:1f:6a:07:27:90:7d:4a:54:80:7b:79:90: e7:a1:4d:bc:70:5c:97:f3:da:40:35:b1:2e:26:47:f8:8e:e8: 60:a4:99:33:d6:b0:7f:9b:66:50:2a:05:9a:c3:75:e5:6c:35: ed:49:54:e9:b7:47:7a:27:bc:b2:2b:bc:2a:94:c7:96:49:59: 0b:e1:46:87:09:de:a1:96:ad:59:6c:b5:ac:c1:7a:a0:42:04: 64:8f:eb:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNGMjExMTAvBgNVBAUTKEY2N0RBOUYxNUU1RTkzNEQ5MEU0OEZFNTBFN0RDODU3 MUREOTM3QTUwHhcNMjUwNzAxMDE0ODI1WhcNMjUwNzA4MDE0ODI1WjAYMRYwFAYD VQQDEw02ODYzM2U2OS03NjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyW82EwAvdwUPIXFOr+CLRF8XG2xYMelek9eWMykGa8NUTJxbatrFKCG2L+ej 94xMehSc1IECX7ho5wQDwVyNq/ZA4U7x588XaR0sOCDgghQFPsgLBuaRZC4OPlsT hlIKKqAGSHEIAHJSX/IHypCjlPOthc5TQBC59KTWIfnqrnisTcgyntDa8GfZVivm sDW/DfBvEohDBn/lIbJZjpKg3//dazhakCol7ABnW5cs/GyLbBNiq8GHUplKzO/K SkXHzoGKHPG3PrdBRa5HgMqy4xiCdZKgFj12eMBoRXt5SM1vokl2F2Z3pqbBqbJY d7w7DRFqdQgdYdapb7F3ffnrcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0DHTir 0Puff6PXChsTOAxJLFP0MB8GA1UdIwQYMBaAFPZ9qfFeXpNNkOSP5Q59yFcd2Tel MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0YyMS9GMkVCRUIzNEQ1 MTAxMUVDOTU1MkI4MkFDNEY5QUUwMi85bjJwOFY1ZWswMlE1SV9sRG4zSVZ4M1pO NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluMnA4VjVlazAyUTVJX2xEbjNJVngzWk42VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0YyMS9GMkVCRUIzNEQ1MTAxMUVDOTU1MkI4MkFDNEY5QUUwMi85bjJwOFY1ZWsw MlE1SV9sRG4zSVZ4M1pONlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAczPOST3/vejJwf3UR6zsPJGP8cnEGGp0efMhaPFi7Xc/M3Anzbt3q U7T7f+DzZmh8s7Yv/SYX70qIqKbxHRjGZNxC5bEmj1fyPKBPmdfEAgDbBKp2T5/+ UmczuVgxLwvdhUL58hA92kPN5/DAq0Hncd8bpBEpGkaIWrgtR1B5Tzz3kr6dsV4C WQi0EoVXkdF3oqqWzq8B4uxO1q3AUkew0Ig0a+F0uWgfagcnkH1KVIB7eZDnoU28 cFyX89pANbEuJkf4juhgpJkz1rB/m2ZQKgWaw3XlbDXtSVTpt0d6J7yyK7wqlMeW SVkL4UaHCd6hlq1ZbLWswXqgQgRkj+vo -----END CERTIFICATE-----Generated at Tue Jul 1 17:51:45 2025 by rpki-client