$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft File: 48M322aHKgqTXJ1VXltt01MHLHQ.mft (raw, json) Hash identifier: IV2IgXebart06vofEaAgakiBFdAOuF3rUTCGuDaWGV8= Subject key identifier: 1F:06:21:38:2B:2D:C7:E4:80:C4:D1:AD:57:A6:8F:6F:64:89:EA:6B Authority key identifier: E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74 Certificate issuer: /CN=A912B0A3/serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74 Certificate serial: 0799 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft Manifest number: 0799 Signing time: Thu 24 Apr 2025 21:07:58 +0000 Manifest this update: Thu 24 Apr 2025 21:07:57 +0000 Manifest next update: Thu 01 May 2025 21:07:57 +0000 Files and hashes: 1: 48M322aHKgqTXJ1VXltt01MHLHQ.crl (hash: E0KkqIZnKAjD3HKvdCK6QrCfUZR9Xeb0NA8SWW1gv0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1945 (0x799) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B0A3, serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74 Validity Not Before: Apr 24 21:07:57 2025 GMT Not After : May 1 21:07:57 2025 GMT Subject: CN=680aa82e-8940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:65:2b:8d:89:4a:76:6e:d3:ca:19:5f:5f:74: 61:7e:bb:ac:bf:0b:94:6a:b6:cd:7a:fb:e4:0a:0b: 13:ab:63:dd:00:ab:f5:bc:74:e2:ff:1d:56:e9:12: 19:fe:0f:7e:b8:d0:b7:78:ce:58:83:0b:e6:eb:0e: e6:fe:31:b0:0a:80:19:32:23:9e:a8:59:4f:e5:35: 1f:46:33:41:9f:09:f4:9d:bd:ca:ac:76:2c:57:b2: f7:50:f2:35:cb:09:b5:ec:d3:69:ff:71:96:92:8c: bc:ee:19:bf:67:1a:c6:fb:83:da:41:1b:3a:b3:1e: 02:76:9b:ad:7e:95:d9:b6:4c:2c:00:2f:b1:c0:19: 57:2f:b8:e0:88:26:65:4e:cf:60:a2:dd:dd:d1:c0: a7:c9:f0:8a:c7:6c:ca:b0:f8:e3:e9:46:0a:71:4c: 21:1e:92:4b:59:54:34:54:95:dc:2a:ac:05:c1:16: a7:e9:a3:c9:1a:c7:e2:83:81:ca:d7:2d:e6:9e:1c: 36:20:16:98:b4:e5:45:80:d0:a4:4f:10:6e:ae:70: 8b:c6:bd:b1:1f:bc:42:20:96:50:4b:62:82:cc:9f: fc:ba:21:36:8e:0b:17:80:bf:57:a5:4f:57:a9:c2: f1:4a:a9:9c:0d:55:cd:65:83:47:8f:26:e3:35:1a: c8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:06:21:38:2B:2D:C7:E4:80:C4:D1:AD:57:A6:8F:6F:64:89:EA:6B X509v3 Authority Key Identifier: keyid:E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:85:38:eb:11:9f:f2:5b:f1:e1:a0:4f:0e:08:f8:69:f3:9d: a6:51:e1:2e:82:eb:8e:12:de:96:34:05:be:bd:f8:8c:4a:ae: bf:53:b2:95:f0:1e:0d:1f:f9:96:bc:ef:a6:a8:20:b2:38:37: 9c:d7:03:ab:88:01:39:88:40:0c:bf:75:5c:48:e1:b3:6f:4e: ae:26:aa:a8:1c:40:76:37:9f:ce:14:b1:86:63:b2:01:21:db: c4:aa:36:79:b6:76:35:f2:14:92:2a:d5:5c:d4:32:f5:e1:64: 3f:a5:bd:f1:63:f5:cc:b3:05:fd:89:5f:79:3e:18:25:9e:23: 7e:82:c6:cd:5a:87:23:4a:28:8d:f5:da:da:3a:9b:21:dd:8a: f7:62:53:47:41:3e:ea:35:02:2a:c7:7c:f9:08:cb:39:8c:a4: 41:23:f5:12:8e:b3:e4:72:88:33:52:c1:db:b9:6b:70:cc:8b: 57:d5:2c:93:1a:36:2d:9a:06:ab:44:0e:4a:a5:b5:f7:eb:5a: f0:78:45:d1:b7:70:65:14:b6:7b:5e:26:0e:7e:4d:97:52:50: 7f:47:15:f0:0c:91:a5:37:2d:a9:94:6c:8d:82:44:2f:c9:41: 4e:db:e0:c9:da:02:64:a3:cf:d3:04:ba:9d:7b:f2:21:80:c5: 0a:2b:b1:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwQTMxMTAvBgNVBAUTKEUzQzMzN0RCNjY4NzJBMEE5MzVDOUQ1NTVFNUI2REQz NTMwNzJDNzQwHhcNMjUwNDI0MjEwNzU3WhcNMjUwNTAxMjEwNzU3WjAYMRYwFAYD VQQDEw02ODBhYTgyZS04OTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02UrjYlKdm7TyhlfX3RhfrusvwuUarbNevvkCgsTq2PdAKv1vHTi/x1W6RIZ /g9+uNC3eM5Ygwvm6w7m/jGwCoAZMiOeqFlP5TUfRjNBnwn0nb3KrHYsV7L3UPI1 ywm17NNp/3GWkoy87hm/ZxrG+4PaQRs6sx4CdputfpXZtkwsAC+xwBlXL7jgiCZl Ts9got3d0cCnyfCKx2zKsPjj6UYKcUwhHpJLWVQ0VJXcKqwFwRan6aPJGsfig4HK 1y3mnhw2IBaYtOVFgNCkTxBurnCLxr2xH7xCIJZQS2KCzJ/8uiE2jgsXgL9XpU9X qcLxSqmcDVXNZYNHjybjNRrI6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8GITgr LcfkgMTRrVemj29kieprMB8GA1UdIwQYMBaAFOPDN9tmhyoKk1ydVV5bbdNTByx0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjBBMy82RTJGRkVERTAz QjcxMUVCOTdGQkU1NjhDNEY5QUUwMi80OE0zMjJhSEtncVRYSjFWWGx0dDAxTUhM SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzQ4TTMyMmFIS2dxVFhKMVZYbHR0MDFNSExIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjBBMy82RTJGRkVERTAzQjcxMUVCOTdGQkU1NjhDNEY5QUUwMi80OE0zMjJhSEtn cVRYSjFWWGx0dDAxTUhMSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIhTjrEZ/yW/HhoE8OCPhp852mUeEuguuOEt6WNAW+vfiMSq6/U7KV 8B4NH/mWvO+mqCCyODec1wOriAE5iEAMv3VcSOGzb06uJqqoHEB2N5/OFLGGY7IB IdvEqjZ5tnY18hSSKtVc1DL14WQ/pb3xY/XMswX9iV95PhglniN+gsbNWocjSiiN 9draOpsh3Yr3YlNHQT7qNQIqx3z5CMs5jKRBI/USjrPkcogzUsHbuWtwzItX1SyT GjYtmgarRA5KpbX361rweEXRt3BlFLZ7XiYOfk2XUlB/RxXwDJGlNy2plGyNgkQv yUFO2+DJ2gJko8/TBLqde/IhgMUKK7GP -----END CERTIFICATE-----Generated at Sat Apr 26 17:07:06 2025 by rpki-client