$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft File: RuPL70om399mDjVsdEBr4caZKlE.mft (raw, json) Hash identifier: 96hA5tfkEo1McKob6FRjMiqpnYJxWPtbwlEO9WMgdug= Subject key identifier: B7:C8:53:30:62:A3:64:29:EE:50:71:43:55:D0:1C:01:23:7A:D1:A8 Authority key identifier: 46:E3:CB:EF:4A:26:DF:DF:66:0E:35:6C:74:40:6B:E1:C6:99:2A:51 Certificate issuer: /CN=A9113C02/serialNumber=46E3CBEF4A26DFDF660E356C74406BE1C6992A51 Certificate serial: 1A4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RuPL70om399mDjVsdEBr4caZKlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft Manifest number: 2446 Signing time: Thu 24 Apr 2025 16:21:19 +0000 Manifest this update: Thu 24 Apr 2025 16:21:19 +0000 Manifest next update: Thu 01 May 2025 16:21:19 +0000 Files and hashes: 1: RuPL70om399mDjVsdEBr4caZKlE.crl (hash: 0WWf4qmxkz/X2VPEHt3tqSiloWD8WmfN6ex29FoXtJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RuPL70om399mDjVsdEBr4caZKlE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6735 (0x1a4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=46E3CBEF4A26DFDF660E356C74406BE1C6992A51 Validity Not Before: Apr 24 16:21:19 2025 GMT Not After : May 1 16:21:19 2025 GMT Subject: CN=680a64ff-ebe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:88:1d:6f:36:7b:7e:8a:03:c7:15:5c:b4:d7: c3:57:17:c5:8a:7a:3c:3c:5e:46:1a:73:7c:be:b4: c6:d5:27:97:d9:35:8a:70:22:18:ea:03:f0:3e:bf: bc:1a:bd:5f:e1:4a:67:7d:d8:7a:16:f2:c9:44:63: c4:f7:6d:b1:03:d8:44:7e:e4:d4:db:4b:80:38:97: c0:71:24:fa:44:23:39:9e:cd:bc:6e:b1:32:ba:aa: 61:2c:9d:cf:1c:15:e5:09:0f:3c:fa:2c:ac:7e:5b: 2e:fc:ed:93:72:fd:b9:63:e6:3d:c3:2e:7a:51:41: 49:fc:fd:4f:b5:18:8a:d3:bf:f0:4d:22:43:bc:64: 9f:23:cb:cd:9f:10:6f:9a:38:f2:da:c8:94:22:01: a1:e9:54:fe:0f:7c:04:27:61:9e:57:67:cc:37:51: 93:4a:d6:fa:dd:7a:6e:9b:73:ab:0e:01:b0:a2:30: 48:99:16:c8:9d:35:c5:cc:26:76:02:15:bc:01:e0: 14:4d:6a:1c:e5:47:0c:b3:0d:ac:9e:ad:bb:4b:85: 55:4c:71:8e:ae:c4:83:61:d8:03:5e:1a:e6:22:40: 38:e2:be:e5:d9:02:d4:e5:3b:a9:5a:3b:cc:21:be: 17:ca:3b:d3:bc:b2:9d:14:bf:7b:29:51:64:fc:18: 6b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C8:53:30:62:A3:64:29:EE:50:71:43:55:D0:1C:01:23:7A:D1:A8 X509v3 Authority Key Identifier: keyid:46:E3:CB:EF:4A:26:DF:DF:66:0E:35:6C:74:40:6B:E1:C6:99:2A:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RuPL70om399mDjVsdEBr4caZKlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:47:3c:96:46:7d:79:de:98:57:11:29:0a:54:a3:13:6b:4d: ec:74:de:80:d2:de:53:86:ef:6f:66:b9:90:c2:c1:c4:77:49: 49:87:39:78:52:ad:51:bd:79:7d:69:14:39:a0:ed:3f:d2:06: 09:88:3f:ba:5a:34:40:b4:12:f7:12:85:c2:e8:7c:69:cc:e7: df:8c:fd:52:bd:a5:7b:5c:a2:a3:26:42:f5:39:ce:4a:54:db: 81:ca:e7:37:20:ea:e1:60:c6:63:cf:da:ec:2a:17:77:05:89: e9:6d:45:08:5c:35:e3:95:b3:d9:b1:85:b1:d2:0b:8a:a4:84: aa:74:48:a9:7e:37:f9:c7:f3:eb:52:a9:4d:f7:44:de:d3:fd: c9:5a:ae:23:50:f6:48:03:66:15:07:29:9c:26:ab:b8:35:9a: 87:96:48:b3:15:b4:7c:db:6a:08:42:56:e0:56:65:d0:8d:16: 2a:8a:e0:72:01:87:6a:0b:03:bf:19:22:b1:b7:f2:30:8d:2d: f3:1f:f6:7d:e5:51:18:cb:1f:ad:82:52:98:aa:bf:81:19:3e: 12:02:e6:7b:33:8c:1a:02:54:f8:3d:09:83:46:57:cd:f1:96: 17:36:29:19:c9:78:35:de:95:eb:fa:7b:db:a4:21:2e:76:fc: 3a:3d:59:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNDMDIxMTAvBgNVBAUTKDQ2RTNDQkVGNEEyNkRGREY2NjBFMzU2Qzc0NDA2QkUx QzY5OTJBNTEwHhcNMjUwNDI0MTYyMTE5WhcNMjUwNTAxMTYyMTE5WjAYMRYwFAYD VQQDEw02ODBhNjRmZi1lYmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApogdbzZ7fooDxxVctNfDVxfFino8PF5GGnN8vrTG1SeX2TWKcCIY6gPwPr+8 Gr1f4Upnfdh6FvLJRGPE922xA9hEfuTU20uAOJfAcST6RCM5ns28brEyuqphLJ3P HBXlCQ88+iysflsu/O2Tcv25Y+Y9wy56UUFJ/P1PtRiK07/wTSJDvGSfI8vNnxBv mjjy2siUIgGh6VT+D3wEJ2GeV2fMN1GTStb63Xpum3OrDgGwojBImRbInTXFzCZ2 AhW8AeAUTWoc5UcMsw2snq27S4VVTHGOrsSDYdgDXhrmIkA44r7l2QLU5TupWjvM Ib4XyjvTvLKdFL97KVFk/BhrQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfIUzBi o2Qp7lBxQ1XQHAEjetGoMB8GA1UdIwQYMBaAFEbjy+9KJt/fZg41bHRAa+HGmSpR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9SdVBMNzBvbTM5OW1EalZzZEVCcjRjYVpL bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J1UEw3MG9tMzk5bURqVnNkRUJyNGNhWktsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9SdVBMNzBvbTM5 OW1EalZzZEVCcjRjYVpLbEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiRzyWRn153phXESkKVKMTa03sdN6A0t5Thu9vZrmQwsHEd0lJhzl4 Uq1RvXl9aRQ5oO0/0gYJiD+6WjRAtBL3EoXC6HxpzOffjP1SvaV7XKKjJkL1Oc5K VNuByuc3IOrhYMZjz9rsKhd3BYnpbUUIXDXjlbPZsYWx0guKpISqdEipfjf5x/Pr UqlN90Te0/3JWq4jUPZIA2YVBymcJqu4NZqHlkizFbR822oIQlbgVmXQjRYqiuBy AYdqCwO/GSKxt/IwjS3zH/Z95VEYyx+tglKYqr+BGT4SAuZ7M4waAlT4PQmDRlfN 8ZYXNikZyXg13pXr+nvbpCEudvw6PVk1 -----END CERTIFICATE-----Generated at Sat Apr 26 08:30:03 2025 by rpki-client