$ rpki-client -vvf rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft File: pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft (raw, json) Hash identifier: l+5EfiRkDC9dlG3hwO+2p91t1Ij7ci+Wct0hqSQvGOo= Subject key identifier: 3B:44:BB:AD:5C:08:3F:91:CE:B0:33:CB:DA:E1:15:D6:22:19:5F:19 Authority key identifier: A4:EC:17:B5:FD:2D:44:CD:2D:DD:05:5B:F5:34:13:9F:68:FC:69:90 Certificate issuer: /CN=A9138506/serialNumber=A4EC17B5FD2D44CD2DDD055BF534139F68FC6990 Certificate serial: 05C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft Manifest number: 05C3 Signing time: Thu 24 Apr 2025 22:49:23 +0000 Manifest this update: Thu 24 Apr 2025 22:49:22 +0000 Manifest next update: Thu 01 May 2025 22:49:22 +0000 Files and hashes: 1: pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl (hash: uJvOdhf5sy91XtiEPPRZj/0KuzfYQ5NVCJcXCKvfgeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:49:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1475 (0x5c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138506, serialNumber=A4EC17B5FD2D44CD2DDD055BF534139F68FC6990 Validity Not Before: Apr 24 22:49:22 2025 GMT Not After : May 1 22:49:22 2025 GMT Subject: CN=680abff2-ebc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f3:f9:5b:d2:b2:1b:9a:6a:22:a8:9f:e2:c0: ec:5b:e3:73:01:f2:d3:bf:7b:39:94:00:36:05:33: 80:39:a5:a3:51:62:57:52:7d:be:56:6f:f0:97:c8: 55:b4:d2:30:ed:a4:e3:45:74:aa:bc:a9:36:70:7f: 8d:e7:68:83:fa:ae:b7:24:47:e7:92:d3:3d:9b:42: 75:97:c3:a7:e5:a7:0d:14:c9:bc:a2:74:50:74:a8: c5:70:89:ee:70:1f:13:34:74:a8:30:e8:0b:cc:9c: fc:15:ed:22:ab:15:c9:e4:3d:f1:ac:f7:88:03:e8: 38:a5:26:b8:a1:b5:fc:1a:81:e4:69:9f:38:98:97: 1c:33:53:ea:0d:44:26:3f:c4:4f:25:02:44:12:33: 53:a4:8b:ca:69:59:4c:a5:21:a6:58:fe:ca:5c:30: 23:21:10:ff:0d:ad:14:ab:f6:c4:d2:77:a4:e7:e0: 20:e9:cf:81:07:31:a7:7e:45:9d:9b:fb:53:20:fc: 8c:ab:dc:28:7d:ae:85:06:8f:04:c9:c2:39:ef:cc: 5b:72:5c:ce:99:1a:42:83:d3:00:05:89:52:2d:d3: 8f:31:e7:70:07:79:2b:a1:4b:2e:4f:56:27:38:24: d6:fa:3e:94:48:d2:a9:91:22:76:22:a4:6e:3c:b7: 7c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:44:BB:AD:5C:08:3F:91:CE:B0:33:CB:DA:E1:15:D6:22:19:5F:19 X509v3 Authority Key Identifier: keyid:A4:EC:17:B5:FD:2D:44:CD:2D:DD:05:5B:F5:34:13:9F:68:FC:69:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:7f:24:09:a6:92:2f:66:ff:78:dd:6f:b2:18:3b:13:37:f1: e7:c2:8c:51:42:2a:c8:ce:a7:4a:1a:cc:6d:70:9d:64:ff:ec: 95:16:bf:f2:79:2f:64:7c:99:51:a9:97:1d:91:01:d9:6b:8b: 4d:fc:b8:54:55:94:0d:67:c0:ba:fa:3b:e1:fa:4a:3a:f9:ab: 2b:37:48:f4:46:bc:7a:c7:a6:c4:f0:f3:36:7d:c2:0b:8a:c6: f3:87:a7:71:67:b2:b4:8d:f6:8f:b3:45:14:bb:45:8a:c8:b7: c5:96:b8:45:34:3e:e5:06:ec:41:e0:8d:5e:04:b7:95:93:25: 86:a9:26:1c:d0:5b:91:ec:ee:d2:b0:c2:fd:ed:86:e1:2a:a4: b8:e1:68:81:7a:92:85:bd:9c:e5:15:07:56:03:5c:dd:8e:5c: cf:de:4c:bb:c4:df:e2:fb:f7:08:63:60:87:a8:ea:e0:e6:6c: a0:f9:20:0f:5b:3a:2e:dc:9c:93:33:5a:e3:52:bf:96:b4:16: d3:df:67:0e:77:68:1a:56:e9:fc:eb:f6:6c:90:2e:dd:ca:d3: 7f:c1:b5:82:bd:be:9b:f2:f7:5b:ac:ff:19:60:c1:b2:ac:0b: 9c:f3:c8:1f:72:0b:c3:e6:1b:b7:6b:c1:c8:b1:f7:ea:08:6f: 1f:32:cf:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg1MDYxMTAvBgNVBAUTKEE0RUMxN0I1RkQyRDQ0Q0QyREREMDU1QkY1MzQxMzlG NjhGQzY5OTAwHhcNMjUwNDI0MjI0OTIyWhcNMjUwNTAxMjI0OTIyWjAYMRYwFAYD VQQDEw02ODBhYmZmMi1lYmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/P5W9KyG5pqIqif4sDsW+NzAfLTv3s5lAA2BTOAOaWjUWJXUn2+Vm/wl8hV tNIw7aTjRXSqvKk2cH+N52iD+q63JEfnktM9m0J1l8On5acNFMm8onRQdKjFcInu cB8TNHSoMOgLzJz8Fe0iqxXJ5D3xrPeIA+g4pSa4obX8GoHkaZ84mJccM1PqDUQm P8RPJQJEEjNTpIvKaVlMpSGmWP7KXDAjIRD/Da0Uq/bE0nek5+Ag6c+BBzGnfkWd m/tTIPyMq9wofa6FBo8EycI578xbclzOmRpCg9MABYlSLdOPMedwB3kroUsuT1Yn OCTW+j6USNKpkSJ2IqRuPLd86wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDtEu61c CD+RzrAzy9rhFdYiGV8ZMB8GA1UdIwQYMBaAFKTsF7X9LUTNLd0FW/U0E59o/GmQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODUwNi8xNTlFQjY5MkI3 QzIxMUVCQkFGQjdFNjVDNEY5QUUwMi9wT3dYdGYwdFJNMHQzUVZiOVRRVG4yajhh WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BPd1h0ZjB0Uk0wdDNRVmI5VFFUbjJqOGFaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODUwNi8xNTlFQjY5MkI3QzIxMUVCQkFGQjdFNjVDNEY5QUUwMi9wT3dYdGYwdFJN MHQzUVZiOVRRVG4yajhhWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADfyQJppIvZv943W+yGDsTN/HnwoxRQirIzqdKGsxtcJ1k/+yVFr/y eS9kfJlRqZcdkQHZa4tN/LhUVZQNZ8C6+jvh+ko6+asrN0j0Rrx6x6bE8PM2fcIL isbzh6dxZ7K0jfaPs0UUu0WKyLfFlrhFND7lBuxB4I1eBLeVkyWGqSYc0FuR7O7S sML97YbhKqS44WiBepKFvZzlFQdWA1zdjlzP3ky7xN/i+/cIY2CHqOrg5myg+SAP Wzou3JyTM1rjUr+WtBbT32cOd2gaVun86/ZskC7dytN/wbWCvb6b8vdbrP8ZYMGy rAuc88gfcgvD5hu3a8HIsffqCG8fMs8K -----END CERTIFICATE-----Generated at Sat Apr 26 12:32:08 2025 by rpki-client