$ rpki-client -vvf rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft File: MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft (raw, json) Hash identifier: AFyaSq1YQ9PMWixrO/KItWPEw9q6fNydGj3/wijZHYk= Subject key identifier: 66:9F:BC:17:02:8B:09:EB:9E:9F:0F:F9:4C:B2:9B:DA:30:9D:05:0D Authority key identifier: 31:B3:D9:04:57:D1:FD:F8:3C:35:74:CB:D1:7F:C2:8B:2C:DD:56:EF Certificate issuer: /CN=A91222CD/serialNumber=31B3D90457D1FDF83C3574CBD17FC28B2CDD56EF Certificate serial: 1B17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft Manifest number: 1B16 Signing time: Thu 24 Apr 2025 16:18:15 +0000 Manifest this update: Thu 24 Apr 2025 16:18:15 +0000 Manifest next update: Thu 01 May 2025 16:18:15 +0000 Files and hashes: 1: MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl (hash: Bj5TcAzgYZWoFSr4xSbvYkhJ2Q65nMCfEacgqSzmWSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6935 (0x1b17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91222CD, serialNumber=31B3D90457D1FDF83C3574CBD17FC28B2CDD56EF Validity Not Before: Apr 24 16:18:15 2025 GMT Not After : May 1 16:18:15 2025 GMT Subject: CN=680a6447-d69b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:56:bc:d8:66:01:de:c8:2c:77:ec:92:e8:63: 32:a3:37:47:6c:db:85:37:42:a6:b9:52:ee:b2:eb: dc:02:81:7b:77:16:e5:f6:de:95:d5:fa:34:f5:2f: 41:89:1a:eb:2f:be:85:1e:fa:e2:df:d3:73:55:12: 5a:cc:53:d5:ed:a7:0f:b6:54:a9:12:34:d0:dc:4b: ce:4c:c1:bb:5a:fd:39:53:25:4a:60:88:96:78:f1: 28:f0:dd:62:44:c4:05:c7:61:58:93:b2:44:05:e6: ea:ce:62:82:a8:9d:5f:68:ae:28:b2:e2:7b:e5:d9: c3:8a:a6:76:71:14:e4:d0:cd:6a:d1:af:06:c6:77: 39:75:de:da:c4:12:96:57:d1:35:e6:e0:25:eb:b8: fc:b5:77:1d:0f:87:b4:c5:5d:d6:cb:5d:bc:fa:41: 9e:e8:29:2c:97:ef:94:1f:50:32:f6:5c:cf:16:c4: 1e:28:40:b2:b9:3f:45:6f:47:37:fd:0b:4c:6c:45: 3a:26:90:00:5a:f0:f7:14:12:11:6b:88:82:e2:0c: d9:c0:6c:3f:49:ce:2e:19:28:85:db:2f:9d:17:7b: 76:aa:76:af:ca:2d:93:af:74:f5:01:33:1e:d8:e1: 60:9b:de:65:f9:ef:74:5c:b0:d1:d9:86:ed:0d:c8: 64:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9F:BC:17:02:8B:09:EB:9E:9F:0F:F9:4C:B2:9B:DA:30:9D:05:0D X509v3 Authority Key Identifier: keyid:31:B3:D9:04:57:D1:FD:F8:3C:35:74:CB:D1:7F:C2:8B:2C:DD:56:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:c9:aa:bf:44:f3:11:33:d2:fd:4e:2f:ea:ee:25:76:01:d2: 38:bf:3d:a5:e3:ef:43:5e:9f:e2:4d:95:5a:ea:18:b4:cf:bc: 64:84:bd:0a:cf:9d:ed:19:10:4b:5c:f0:8a:af:18:41:3d:91: de:8b:51:82:60:73:7e:6f:81:4d:8c:99:af:8d:45:01:99:fa: 57:d1:b8:8f:6f:4e:95:25:97:11:6b:18:2d:b4:1b:53:38:1a: 6b:b0:ba:d8:5b:01:b4:6b:11:0b:8b:41:f6:cf:78:9d:b8:cb: 3b:87:70:27:f2:49:69:6f:dd:89:cb:0d:23:e6:29:30:08:ac: a0:e5:8a:1a:25:15:28:96:c7:6f:55:55:29:48:88:7f:86:7c: a1:b2:6d:22:8e:5c:66:af:e2:44:b0:a4:b3:e2:88:75:07:60: 3b:28:90:bf:d2:8e:d9:a1:ba:a6:26:97:40:5d:6e:4f:27:5a: 3b:dd:1a:70:c4:c1:b3:df:cb:b8:f0:ed:09:89:62:1a:1b:6a: 93:8c:f5:04:84:e2:a2:8a:4d:6a:43:5e:30:0a:15:fa:aa:5b: e7:f7:50:2d:da:69:f6:20:ad:a5:4d:e3:d8:7d:a6:5d:fb:95: e2:78:30:53:89:ed:2a:54:16:79:37:d0:e1:90:fd:fd:7c:cd: c6:98:38:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIyQ0QxMTAvBgNVBAUTKDMxQjNEOTA0NTdEMUZERjgzQzM1NzRDQkQxN0ZDMjhC MkNERDU2RUYwHhcNMjUwNDI0MTYxODE1WhcNMjUwNTAxMTYxODE1WjAYMRYwFAYD VQQDEw02ODBhNjQ0Ny1kNjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1a82GYB3sgsd+yS6GMyozdHbNuFN0KmuVLusuvcAoF7dxbl9t6V1fo09S9B iRrrL76FHvri39NzVRJazFPV7acPtlSpEjTQ3EvOTMG7Wv05UyVKYIiWePEo8N1i RMQFx2FYk7JEBebqzmKCqJ1faK4osuJ75dnDiqZ2cRTk0M1q0a8Gxnc5dd7axBKW V9E15uAl67j8tXcdD4e0xV3Wy128+kGe6Cksl++UH1Ay9lzPFsQeKECyuT9Fb0c3 /QtMbEU6JpAAWvD3FBIRa4iC4gzZwGw/Sc4uGSiF2y+dF3t2qnavyi2Tr3T1ATMe 2OFgm95l+e90XLDR2YbtDchksQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGafvBcC iwnrnp8P+Uyym9ownQUNMB8GA1UdIwQYMBaAFDGz2QRX0f34PDV0y9F/woss3Vbv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjJDRC83RTMxMTVDODE2 NUExMUU3QjI3RjlCNDZDNEY5QUUwMi9NYlBaQkZmUl9mZzhOWFRMMFhfQ2l5emRW dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01iUFpCRmZSX2ZnOE5YVEwwWF9DaXl6ZFZ1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjJDRC83RTMxMTVDODE2NUExMUU3QjI3RjlCNDZDNEY5QUUwMi9NYlBaQkZmUl9m ZzhOWFRMMFhfQ2l5emRWdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkyaq/RPMRM9L9Ti/q7iV2AdI4vz2l4+9DXp/iTZVa6hi0z7xkhL0K z53tGRBLXPCKrxhBPZHei1GCYHN+b4FNjJmvjUUBmfpX0biPb06VJZcRaxgttBtT OBprsLrYWwG0axELi0H2z3iduMs7h3An8klpb92Jyw0j5ikwCKyg5YoaJRUolsdv VVUpSIh/hnyhsm0ijlxmr+JEsKSz4oh1B2A7KJC/0o7ZobqmJpdAXW5PJ1o73Rpw xMGz38u48O0JiWIaG2qTjPUEhOKiik1qQ14wChX6qlvn91At2mn2IK2lTePYfaZd +5XieDBTie0qVBZ5N9DhkP39fM3GmDhb -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:29 2025 by rpki-client