$ rpki-client -vvf rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft File: B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft (raw, json) Hash identifier: dAbQ1xgPjcqg7WLObuvzdV1TIai9CUwAv49ZkifW/qo= Subject key identifier: 40:38:37:9A:E0:30:A6:44:56:C9:00:7E:C3:6C:2E:AE:2E:73:5D:F8 Authority key identifier: 07:FE:41:71:DD:50:DC:E7:B6:4F:76:99:89:67:A5:71:CF:93:C4:0B Certificate issuer: /CN=A911BFB0/serialNumber=07FE4171DD50DCE7B64F76998967A571CF93C40B Certificate serial: 0F3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft Manifest number: 10ED Signing time: Thu 24 Apr 2025 17:35:09 +0000 Manifest this update: Thu 24 Apr 2025 17:35:09 +0000 Manifest next update: Thu 01 May 2025 17:35:09 +0000 Files and hashes: 1: B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.crl (hash: qr4ZxnviZ0B1mmseXQ+SD/RHAUA94qH2oMCV0K49D50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.crl rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3900 (0xf3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BFB0, serialNumber=07FE4171DD50DCE7B64F76998967A571CF93C40B Validity Not Before: Apr 24 17:35:09 2025 GMT Not After : May 1 17:35:09 2025 GMT Subject: CN=680a764d-d270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:68:33:97:ea:5d:e1:bd:cf:f4:d8:1e:ae:21: 29:dc:98:78:d3:bd:d7:a8:1e:b3:31:74:a7:14:46: 8b:cb:2a:96:dd:9f:5d:44:6e:19:8c:97:8f:9c:55: 01:53:4b:c7:05:11:73:76:f6:d8:fd:e0:e9:ce:2d: 1f:49:5e:20:c7:b3:b1:fa:95:85:f4:8f:7c:f9:fc: e3:d9:77:a0:51:6b:d1:48:c1:f2:1d:05:b8:91:32: 21:d1:06:1f:ae:56:7f:8d:42:a4:24:ed:03:c1:23: f5:de:1a:c1:06:f9:4f:32:be:2f:fa:33:7f:d3:83: f1:b3:43:82:e1:b3:fa:f9:21:10:f0:62:55:d6:53: 48:c1:ed:64:c3:a5:64:b3:1b:00:c8:32:54:ba:eb: 2b:03:97:23:00:67:f2:dd:f9:89:f3:30:9d:ac:35: 90:11:24:83:3b:3f:f0:5c:d2:86:80:3a:e9:39:ed: 03:8f:8b:31:1b:c4:d3:b8:9e:fa:29:dd:fd:90:51: e1:d9:43:2a:0b:33:5d:cd:1b:87:79:07:7b:59:a1: 1e:b8:e8:89:45:e9:66:d8:0e:08:a5:42:56:d2:f7: 9f:38:b6:06:33:d4:7f:8c:78:bb:6e:0b:8d:85:d8: b1:bb:32:1c:cd:d3:51:90:da:5d:e1:3a:16:97:9a: c8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:38:37:9A:E0:30:A6:44:56:C9:00:7E:C3:6C:2E:AE:2E:73:5D:F8 X509v3 Authority Key Identifier: keyid:07:FE:41:71:DD:50:DC:E7:B6:4F:76:99:89:67:A5:71:CF:93:C4:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ba:5d:52:1c:e5:07:21:86:76:ad:45:c6:e2:cf:c4:d1:22: 51:ea:08:22:1d:7f:d5:49:5f:e9:55:81:26:71:2f:49:eb:7a: 2e:98:2f:fb:f2:40:9b:ae:eb:e5:83:ec:c1:ca:6b:bb:03:d1: 04:ef:99:fa:d0:9b:a6:af:a1:7c:47:c5:e0:2d:22:bc:64:e1: e8:86:47:84:bd:b0:ad:c1:2d:55:a9:63:f6:3b:1a:97:b6:3f: 09:44:6f:e5:af:c0:e7:0f:d9:7d:2b:89:1b:bd:be:ee:80:ff: a0:a9:3d:15:99:b1:8d:39:8b:5c:0f:31:a5:cc:80:32:80:c8: 3b:78:87:8c:36:7b:30:e2:a5:76:23:74:d3:c0:eb:0c:9c:e5: f6:0d:d7:9f:94:2c:8a:b1:bc:a7:3b:99:03:55:0f:30:fe:8b: 94:e9:d2:98:bc:a7:ef:bc:a0:9c:3d:e8:f9:5e:c7:34:f2:4b: e5:46:af:93:16:20:fa:f9:5c:0e:23:b9:30:63:a1:33:18:d4: 72:db:2a:fa:2c:9d:5d:a7:12:1a:8b:81:8d:5b:1f:ab:01:c2: 66:89:3f:75:0e:70:10:ba:89:54:82:38:d2:75:3f:52:91:c3: 4e:3b:a6:74:06:e7:35:90:f0:31:1b:a8:91:00:0d:13:d0:79: 79:24:c7:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJGQjAxMTAvBgNVBAUTKDA3RkU0MTcxREQ1MERDRTdCNjRGNzY5OTg5NjdBNTcx Q0Y5M0M0MEIwHhcNMjUwNDI0MTczNTA5WhcNMjUwNTAxMTczNTA5WjAYMRYwFAYD VQQDEw02ODBhNzY0ZC1kMjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmmgzl+pd4b3P9NgeriEp3Jh4073XqB6zMXSnFEaLyyqW3Z9dRG4ZjJePnFUB U0vHBRFzdvbY/eDpzi0fSV4gx7Ox+pWF9I98+fzj2XegUWvRSMHyHQW4kTIh0QYf rlZ/jUKkJO0DwSP13hrBBvlPMr4v+jN/04Pxs0OC4bP6+SEQ8GJV1lNIwe1kw6Vk sxsAyDJUuusrA5cjAGfy3fmJ8zCdrDWQESSDOz/wXNKGgDrpOe0Dj4sxG8TTuJ76 Kd39kFHh2UMqCzNdzRuHeQd7WaEeuOiJRelm2A4IpUJW0vefOLYGM9R/jHi7bguN hdixuzIczdNRkNpd4ToWl5rIzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEA4N5rg MKZEVskAfsNsLq4uc134MB8GA1UdIwQYMBaAFAf+QXHdUNzntk92mYlnpXHPk8QL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkZCMC8yMkMyNTE0NjZD QzIxMUU5QTBENkFGNjdDNEY5QUUwMi9CXzVCY2QxUTNPZTJUM2FaaVdlbGNjLVR4 QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JfNUJjZDFRM09lMlQzYVppV2VsY2MtVHhBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkZCMC8yMkMyNTE0NjZDQzIxMUU5QTBENkFGNjdDNEY5QUUwMi9CXzVCY2QxUTNP ZTJUM2FaaVdlbGNjLVR4QXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAful1SHOUHIYZ2rUXG4s/E0SJR6ggiHX/VSV/pVYEmcS9J63oumC/7 8kCbruvlg+zBymu7A9EE75n60Jumr6F8R8XgLSK8ZOHohkeEvbCtwS1VqWP2OxqX tj8JRG/lr8DnD9l9K4kbvb7ugP+gqT0VmbGNOYtcDzGlzIAygMg7eIeMNnsw4qV2 I3TTwOsMnOX2DdeflCyKsbynO5kDVQ8w/ouU6dKYvKfvvKCcPej5Xsc08kvlRq+T FiD6+VwOI7kwY6EzGNRy2yr6LJ1dpxIai4GNWx+rAcJmiT91DnAQuolUgjjSdT9S kcNOO6Z0Buc1kPAxG6iRAA0T0Hl5JMfE -----END CERTIFICATE-----Generated at Sat Apr 26 16:50:35 2025 by rpki-client