$ rpki-client -vvf rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft File: 8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft (raw, json) Hash identifier: tS/u7e9VY/B1qGRS5y2OMlvGJKo1nvknUmSqWlG4D4M= Subject key identifier: 36:81:66:38:AA:09:B2:54:4B:D7:B4:BD:E9:EC:8B:2D:C7:90:57:45 Authority key identifier: F3:36:7D:74:44:83:99:C1:8E:F6:7C:7C:98:61:07:B8:14:B1:2D:64 Certificate issuer: /CN=A911F536/serialNumber=F3367D74448399C18EF67C7C986107B814B12D64 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft Manifest number: 3B Signing time: Fri 25 Apr 2025 06:29:19 +0000 Manifest this update: Fri 25 Apr 2025 06:29:19 +0000 Manifest next update: Fri 02 May 2025 06:29:19 +0000 Files and hashes: 1: 8zZ9dESDmcGO9nx8mGEHuBSxLWQ.crl (hash: 3QbDHTTYWmAhz4SP+e+vk3q2qL5k+S4fLpWSy2mocdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.crl rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:29:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F536, serialNumber=F3367D74448399C18EF67C7C986107B814B12D64 Validity Not Before: Apr 25 06:29:19 2025 GMT Not After : May 2 06:29:19 2025 GMT Subject: CN=680b2bbf-3064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:95:ab:ac:5a:1c:07:89:10:17:18:6c:ba:2e: b7:24:81:e0:fa:4d:0a:f5:87:9e:18:83:05:e3:ad: 54:7d:ee:4e:88:03:7a:11:83:d5:dc:d4:a1:f5:e2: b0:a6:f1:65:57:16:3c:da:6f:fb:0c:96:ad:a1:c4: 7a:42:e5:81:d0:f7:88:17:f5:7b:3a:ad:48:ba:9f: ae:29:5c:9e:79:33:0d:0a:43:ae:a4:f8:eb:7e:d9: 67:34:a3:0e:45:9a:1a:fe:df:f2:f3:3a:58:be:50: 5f:39:04:70:14:ea:4b:51:52:c1:4c:73:63:3c:50: 62:6a:2e:5c:a8:25:11:d9:2d:0c:c1:41:4f:d8:82: a4:0a:69:f8:d4:6b:53:58:9c:66:02:6b:02:38:7d: 2a:d5:aa:58:38:cb:f2:1f:b8:1b:fe:4d:8c:50:e9: c4:65:7f:2a:26:56:45:7d:cb:b9:22:5d:0d:36:df: 1a:bf:c4:ea:41:7f:52:5f:2e:03:d4:6c:31:c8:90: a1:49:56:a7:b2:66:57:b3:a1:8d:09:90:5f:6e:78: 29:7d:d3:7b:dd:e1:91:7d:28:47:e1:f1:9e:43:51: f8:a1:83:16:17:31:86:89:87:20:b6:55:39:e1:26: 34:44:a9:7c:2b:99:60:c4:a8:e5:c3:3e:7a:b8:f7: 17:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:81:66:38:AA:09:B2:54:4B:D7:B4:BD:E9:EC:8B:2D:C7:90:57:45 X509v3 Authority Key Identifier: keyid:F3:36:7D:74:44:83:99:C1:8E:F6:7C:7C:98:61:07:B8:14:B1:2D:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:69:a8:ae:75:e9:90:a5:29:dc:da:19:6c:a7:e5:35:21:e0: 2f:aa:73:af:af:69:fe:e7:1e:67:17:fb:5d:58:d1:5e:a5:71: 9f:bb:3b:6b:d3:0f:00:75:67:e1:56:f3:49:58:70:33:d5:97: 50:ca:62:54:1e:ab:2e:e9:b6:db:9b:c4:a9:a8:29:e7:04:a9: c0:f3:f6:94:0e:c5:0e:e6:99:34:72:73:c3:b0:4a:5b:06:eb: 6b:d0:b8:39:06:f9:d4:91:cd:2f:78:f1:bf:f7:ba:0f:84:b0: 60:7a:96:f6:9d:80:5f:50:df:78:46:9e:fb:60:20:0c:08:ce: d1:f3:5a:42:09:8a:2d:57:f6:53:f5:18:13:8f:72:50:58:31: de:f3:ad:b0:cb:79:d8:60:f9:7c:5b:6d:d9:80:81:20:3a:f4: 69:84:b6:60:42:61:f6:ac:eb:b6:80:ec:14:33:7b:12:4f:23: 0c:98:bb:08:0d:b1:24:da:71:dc:60:69:75:43:f6:0d:eb:42: 03:c7:bc:59:d3:2b:eb:3b:6f:0f:4d:cb:31:72:20:29:f9:47: 4f:8a:ea:c8:2c:16:47:45:88:e8:81:e8:ea:05:a3:8d:50:40: a9:99:ff:c6:ea:ed:b9:de:b6:d8:ba:cb:a4:b3:f4:84:bc:f9: ad:6f:18:20 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjUzNjExMC8GA1UEBRMoRjMzNjdENzQ0NDgzOTlDMThFRjY3QzdDOTg2MTA3Qjgx NEIxMkQ2NDAeFw0yNTA0MjUwNjI5MTlaFw0yNTA1MDIwNjI5MTlaMBgxFjAUBgNV BAMTDTY4MGIyYmJmLTMwNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDElausWhwHiRAXGGy6LrckgeD6TQr1h54YgwXjrVR97k6IA3oRg9Xc1KH14rCm 8WVXFjzab/sMlq2hxHpC5YHQ94gX9Xs6rUi6n64pXJ55Mw0KQ66k+Ot+2Wc0ow5F mhr+3/LzOli+UF85BHAU6ktRUsFMc2M8UGJqLlyoJRHZLQzBQU/YgqQKafjUa1NY nGYCawI4fSrVqlg4y/IfuBv+TYxQ6cRlfyomVkV9y7kiXQ023xq/xOpBf1JfLgPU bDHIkKFJVqeyZlezoY0JkF9ueCl903vd4ZF9KEfh8Z5DUfihgxYXMYaJhyC2VTnh JjREqXwrmWDEqOXDPnq49xeXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNoFmOKoJ slRL17S96eyLLceQV0UwHwYDVR0jBBgwFoAU8zZ9dESDmcGO9nx8mGEHuBSxLWQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNTM2L0EzMDVGNEU0Qzk5 QTExRUZCNENFRUYxRUM0RjlBRTAyLzh6WjlkRVNEbWNHTzlueDhtR0VIdUJTeExX US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOHpaOWRFU0RtY0dPOW54OG1HRUh1QlN4TFdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG NTM2L0EzMDVGNEU0Qzk5QTExRUZCNENFRUYxRUM0RjlBRTAyLzh6WjlkRVNEbWNH TzlueDhtR0VIdUJTeExXUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALhpqK516ZClKdzaGWyn5TUh4C+qc6+vaf7nHmcX+11Y0V6lcZ+7O2vT DwB1Z+FW80lYcDPVl1DKYlQeqy7pttubxKmoKecEqcDz9pQOxQ7mmTRyc8OwSlsG 62vQuDkG+dSRzS948b/3ug+EsGB6lvadgF9Q33hGnvtgIAwIztHzWkIJii1X9lP1 GBOPclBYMd7zrbDLedhg+XxbbdmAgSA69GmEtmBCYfas67aA7BQzexJPIwyYuwgN sSTacdxgaXVD9g3rQgPHvFnTK+s7bw9NyzFyICn5R0+K6sgsFkdFiOiB6OoFo41Q QKmZ/8bq7bnetti6y6Sz9IS8+a1vGCA= -----END CERTIFICATE-----Generated at Sat Apr 26 04:27:59 2025 by rpki-client