$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft File: MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft (raw, json) Hash identifier: 53eB5+lCO5QHeERwJMtiajajKVu0SXvFYvPilIVF+2k= Subject key identifier: 05:39:C0:8C:9F:B6:36:C8:A9:51:43:A2:EC:B2:7B:3B:C5:9A:D0:FF Authority key identifier: 30:E8:96:E7:89:D4:43:60:34:6E:A4:CB:B4:ED:45:91:4E:AD:02:7D Certificate issuer: /CN=A91EF73D/serialNumber=30E896E789D44360346EA4CBB4ED45914EAD027D Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft Manifest number: FE Signing time: Tue 01 Jul 2025 05:37:50 +0000 Manifest this update: Tue 01 Jul 2025 05:37:49 +0000 Manifest next update: Tue 08 Jul 2025 05:37:49 +0000 Files and hashes: 1: MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl (hash: UZirW1ZDGwcK+fErurinDlOpKUbsNs/KGjrX9wBO6MI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF73D, serialNumber=30E896E789D44360346EA4CBB4ED45914EAD027D Validity Not Before: Jul 1 05:37:49 2025 GMT Not After : Jul 8 05:37:49 2025 GMT Subject: CN=6863742e-f147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:92:67:77:29:e5:24:6d:e2:8c:55:83:ed:3a: aa:a3:cb:d4:1e:03:08:ac:ba:04:29:44:7e:6b:6e: 33:0b:5d:44:9f:7a:d2:5f:ae:d6:1d:73:09:58:0b: dc:1f:ec:15:e2:00:98:ae:08:38:9e:1f:8f:56:f3: 1f:5c:1a:18:24:7e:e3:ed:77:33:37:ee:14:2f:e3: f9:51:78:73:33:11:53:07:ee:6f:ad:fd:c3:cf:81: 82:ce:de:b8:12:b4:e0:9b:05:04:fb:f2:a4:0d:f2: b6:9b:c8:d9:76:47:7d:8d:dc:91:66:79:9c:29:c4: 39:44:17:bf:6f:53:12:fc:22:37:e9:6b:7f:15:09: ad:38:2b:9f:26:a4:78:a1:62:5b:6d:5d:14:75:a1: dc:d7:f8:23:e7:7b:ea:9a:fb:11:23:aa:ed:63:16: 98:c9:e7:c6:c3:f6:fe:2f:a0:39:ce:c9:18:0e:e2: 2a:21:80:75:22:ed:cd:42:e9:e0:bc:7d:87:8a:ce: 7d:e8:f0:07:f8:20:3b:d8:e7:10:8d:ff:af:1c:c5: 16:79:55:26:c5:a7:48:5b:05:98:1e:7d:bb:50:3f: e3:73:a8:d9:32:05:87:be:89:fd:26:08:52:9a:84: 35:ab:7b:0f:18:7c:fc:5f:24:f8:26:7e:7a:b6:80: 4b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:39:C0:8C:9F:B6:36:C8:A9:51:43:A2:EC:B2:7B:3B:C5:9A:D0:FF X509v3 Authority Key Identifier: keyid:30:E8:96:E7:89:D4:43:60:34:6E:A4:CB:B4:ED:45:91:4E:AD:02:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:f0:89:78:ec:d2:ea:74:8d:16:ea:a0:54:7c:b5:e1:b1:c1: 0d:06:83:f3:de:9a:bd:6f:1c:80:43:32:77:51:e6:39:d9:09: 5c:2d:e8:3b:5c:c1:66:03:2b:94:07:5d:86:a4:66:0b:98:30: 9b:ff:ed:a1:df:99:58:67:73:79:a3:7e:b3:85:44:99:89:6c: b2:62:a4:4c:00:ab:73:71:07:26:25:53:92:bf:0a:df:59:95: 17:c4:b6:a4:01:45:ed:dd:22:76:dd:a9:39:bb:68:bf:4b:cc: 48:fe:5f:28:cc:2a:7f:66:08:10:d8:d3:fc:94:e2:1d:6a:c7: 09:bb:93:26:d6:81:94:24:9f:03:fa:ae:eb:a7:55:e3:65:4c: b2:00:2c:cf:0b:a0:d2:7c:47:a6:05:4a:8b:e2:39:83:d4:02: 7f:7a:1a:ed:3e:ca:16:2c:21:6f:19:b2:13:bb:ec:0d:aa:27: 39:3b:19:68:1f:82:7d:2a:9e:55:16:9b:b5:ed:b4:fe:16:09: 06:f6:61:a2:d1:b8:38:2a:94:42:7f:50:2c:41:30:f5:79:29: ba:d3:d2:e8:6b:08:29:f1:d9:67:42:95:4e:9b:c8:8a:7d:29: de:55:e4:d4:c4:5c:66:9d:7d:57:09:c2:1c:10:29:29:f0:9b: 53:10:98:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3M0QxMTAvBgNVBAUTKDMwRTg5NkU3ODlENDQzNjAzNDZFQTRDQkI0RUQ0NTkx NEVBRDAyN0QwHhcNMjUwNzAxMDUzNzQ5WhcNMjUwNzA4MDUzNzQ5WjAYMRYwFAYD VQQDEw02ODYzNzQyZS1mMTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA65JndynlJG3ijFWD7Tqqo8vUHgMIrLoEKUR+a24zC11En3rSX67WHXMJWAvc H+wV4gCYrgg4nh+PVvMfXBoYJH7j7XczN+4UL+P5UXhzMxFTB+5vrf3Dz4GCzt64 ErTgmwUE+/KkDfK2m8jZdkd9jdyRZnmcKcQ5RBe/b1MS/CI36Wt/FQmtOCufJqR4 oWJbbV0UdaHc1/gj53vqmvsRI6rtYxaYyefGw/b+L6A5zskYDuIqIYB1Iu3NQung vH2His596PAH+CA72OcQjf+vHMUWeVUmxadIWwWYHn27UD/jc6jZMgWHvon9JghS moQ1q3sPGHz8XyT4Jn56toBL7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAU5wIyf tjbIqVFDouyyezvFmtD/MB8GA1UdIwQYMBaAFDDolueJ1ENgNG6ky7TtRZFOrQJ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjczRC9EMjcyMzBERUNF MUYxMUVFQUM2MjYxN0NDNEY5QUUwMi9NT2lXNTRuVVEyQTBicVRMdE8xRmtVNnRB bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PaVc1NG5VUTJBMGJxVEx0TzFGa1U2dEFuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjczRC9EMjcyMzBERUNFMUYxMUVFQUM2MjYxN0NDNEY5QUUwMi9NT2lXNTRuVVEy QTBicVRMdE8xRmtVNnRBbjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz8Il47NLqdI0W6qBUfLXhscENBoPz3pq9bxyAQzJ3UeY52QlcLeg7 XMFmAyuUB12GpGYLmDCb/+2h35lYZ3N5o36zhUSZiWyyYqRMAKtzcQcmJVOSvwrf WZUXxLakAUXt3SJ23ak5u2i/S8xI/l8ozCp/ZggQ2NP8lOIdascJu5Mm1oGUJJ8D +q7rp1XjZUyyACzPC6DSfEemBUqL4jmD1AJ/ehrtPsoWLCFvGbITu+wNqic5Oxlo H4J9Kp5VFpu17bT+FgkG9mGi0bg4KpRCf1AsQTD1eSm609Loawgp8dlnQpVOm8iK fSneVeTUxFxmnX1XCcIcECkp8JtTEJgK -----END CERTIFICATE-----Generated at Wed Jul 2 14:06:59 2025 by rpki-client