$ rpki-client -vvf rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft File: 0xR9jSeprR3LgjR_FEsIVeBV4aA.mft (raw, json) Hash identifier: bccE6TEwN/bLSTzeTJts4K+0xbYPRa1CHWiWBoc0JjM= Subject key identifier: 4D:58:23:DB:A8:77:D3:36:75:53:1C:D5:4B:C9:D0:C6:2A:59:24:FD Authority key identifier: D3:14:7D:8D:27:A9:AD:1D:CB:82:34:7F:14:4B:08:55:E0:55:E1:A0 Certificate issuer: /CN=A91402E0/serialNumber=D3147D8D27A9AD1DCB82347F144B0855E055E1A0 Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft Manifest number: 0148 Signing time: Fri 25 Apr 2025 03:20:29 +0000 Manifest this update: Fri 25 Apr 2025 03:20:28 +0000 Manifest next update: Fri 02 May 2025 03:20:28 +0000 Files and hashes: 1: 0xR9jSeprR3LgjR_FEsIVeBV4aA.crl (hash: dk5iawvLtc/eTOp7NnChFqDCaAof0b5LW18EqKya8zY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.crl rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91402E0, serialNumber=D3147D8D27A9AD1DCB82347F144B0855E055E1A0 Validity Not Before: Apr 25 03:20:28 2025 GMT Not After : May 2 03:20:28 2025 GMT Subject: CN=680aff7d-b30f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1f:fe:1f:8a:a8:09:47:f7:55:4a:c7:35:04: 48:cc:c4:0b:f0:e0:c2:48:ce:2c:0b:92:a2:ed:e9: 35:0f:19:04:f2:a4:a4:08:b0:b6:2a:53:fa:b5:8f: 52:fd:cb:57:f4:b0:ff:68:a8:2c:31:49:ed:68:80: 57:7d:c9:4a:1d:df:20:ac:a9:05:da:a0:2b:4a:60: de:1e:37:c9:c4:f1:0e:82:e5:d6:6e:c1:d2:67:af: 0b:0a:7a:ac:0b:0b:ad:00:60:98:26:5b:c1:d3:40: a8:32:27:53:7b:e3:0a:3c:ee:50:57:41:5a:9d:76: f5:8a:ba:35:27:32:58:3a:86:94:f6:f5:6c:50:07: d8:d2:f4:53:9d:93:bf:64:48:14:4a:fd:c9:8e:cd: 1f:06:56:86:7d:75:c1:23:43:2f:18:30:bf:fd:2b: e9:a0:a4:5b:ec:88:46:af:56:2c:d4:58:c9:1c:bf: 39:9f:ef:42:23:26:dd:20:9d:21:ac:d8:e1:74:1e: ae:72:ee:1d:ff:21:85:b1:69:7f:62:67:65:71:fb: 56:76:06:7b:a8:15:95:1c:cc:4d:53:62:83:44:c2: d0:f8:c9:ad:db:4b:d5:b2:76:dd:77:ea:66:8c:d6: ad:3a:87:6c:bd:47:93:cc:97:65:ab:eb:d4:cf:76: 8f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:58:23:DB:A8:77:D3:36:75:53:1C:D5:4B:C9:D0:C6:2A:59:24:FD X509v3 Authority Key Identifier: keyid:D3:14:7D:8D:27:A9:AD:1D:CB:82:34:7F:14:4B:08:55:E0:55:E1:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:75:9a:3b:20:81:7d:69:19:0d:51:43:85:b8:13:8a:a2:2e: f3:c0:0b:d8:85:7d:c3:08:1b:c3:67:9b:3d:f3:18:70:a2:dc: 0a:8a:2c:82:13:71:16:58:83:1a:ca:b7:9d:d2:53:5f:8f:af: f6:3a:6c:b2:47:c0:cd:6b:26:41:72:bc:67:bc:ef:41:4a:6e: 95:fe:40:0b:48:9a:a3:aa:9f:b4:7e:28:74:bc:27:49:79:ca: 27:63:df:0f:d6:51:49:0e:96:95:be:3d:cd:7c:2e:bf:d9:e9: 87:a2:e1:5a:06:35:62:4c:6b:07:42:bd:41:b8:6c:67:4e:b7: e7:7b:b6:7a:45:ca:27:52:55:1a:28:53:b3:c3:7b:bf:24:89: 6e:42:e6:72:e9:7d:70:2e:90:b3:ab:52:fa:36:be:91:de:4b: 5b:fe:f7:32:f4:f3:85:eb:83:98:fe:74:d1:f2:d3:54:78:0a: 6c:de:e2:4e:4c:a9:2e:f8:6b:0e:e1:c7:ed:d1:4f:18:1f:9f: 72:a7:51:86:72:77:df:7a:71:1e:ac:e6:7a:c1:b5:1e:3c:6e: 36:4c:8c:9a:6d:f2:22:9c:b6:44:92:33:12:2b:52:7a:37:8c: 70:5f:2c:1a:59:1d:d7:ce:96:b0:70:ab:f2:6e:b4:fb:23:19: 3e:67:0b:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAyRTAxMTAvBgNVBAUTKEQzMTQ3RDhEMjdBOUFEMURDQjgyMzQ3RjE0NEIwODU1 RTA1NUUxQTAwHhcNMjUwNDI1MDMyMDI4WhcNMjUwNTAyMDMyMDI4WjAYMRYwFAYD VQQDEw02ODBhZmY3ZC1iMzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3R/+H4qoCUf3VUrHNQRIzMQL8ODCSM4sC5Ki7ek1DxkE8qSkCLC2KlP6tY9S /ctX9LD/aKgsMUntaIBXfclKHd8grKkF2qArSmDeHjfJxPEOguXWbsHSZ68LCnqs CwutAGCYJlvB00CoMidTe+MKPO5QV0FanXb1iro1JzJYOoaU9vVsUAfY0vRTnZO/ ZEgUSv3Jjs0fBlaGfXXBI0MvGDC//SvpoKRb7IhGr1Ys1FjJHL85n+9CIybdIJ0h rNjhdB6ucu4d/yGFsWl/YmdlcftWdgZ7qBWVHMxNU2KDRMLQ+Mmt20vVsnbdd+pm jNatOodsvUeTzJdlq+vUz3aPhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE1YI9uo d9M2dVMc1UvJ0MYqWST9MB8GA1UdIwQYMBaAFNMUfY0nqa0dy4I0fxRLCFXgVeGg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDJFMC9BQTZCRjQ0MDJC NTgxMUVFOUZEMkYwMUVDNEY5QUUwMi8weFI5alNlcHJSM0xnalJfRkVzSVZlQlY0 YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB4UjlqU2VwclIzTGdqUl9GRXNJVmVCVjRhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDJFMC9BQTZCRjQ0MDJCNTgxMUVFOUZEMkYwMUVDNEY5QUUwMi8weFI5alNlcHJS M0xnalJfRkVzSVZlQlY0YUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSdZo7IIF9aRkNUUOFuBOKoi7zwAvYhX3DCBvDZ5s98xhwotwKiiyC E3EWWIMayred0lNfj6/2OmyyR8DNayZBcrxnvO9BSm6V/kALSJqjqp+0fih0vCdJ econY98P1lFJDpaVvj3NfC6/2emHouFaBjViTGsHQr1BuGxnTrfne7Z6RconUlUa KFOzw3u/JIluQuZy6X1wLpCzq1L6Nr6R3ktb/vcy9POF64OY/nTR8tNUeAps3uJO TKku+GsO4cft0U8YH59yp1GGcnffenEerOZ6wbUePG42TIyabfIinLZEkjMSK1J6 N4xwXywaWR3XzpawcKvybrT7Ixk+Zwt0 -----END CERTIFICATE-----Generated at Sat Apr 26 12:56:37 2025 by rpki-client