$ rpki-client -vvf rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft File: MfrsXjAsGCKfmftHpyPypHmHF6w.mft (raw, json) Hash identifier: a5FuDAok75ItCPYcWnhK1qzCSIBZF7BzJlzcpx6RHLA= Subject key identifier: 39:63:A2:0E:27:CD:20:9B:B0:63:7F:86:28:66:2E:E0:C2:F4:E1:5B Authority key identifier: 31:FA:EC:5E:30:2C:18:22:9F:99:FB:47:A7:23:F2:A4:79:87:17:AC Certificate issuer: /CN=A91417B0/serialNumber=31FAEC5E302C18229F99FB47A723F2A4798717AC Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft Manifest number: 32 Signing time: Fri 25 Apr 2025 06:38:50 +0000 Manifest this update: Fri 25 Apr 2025 06:38:49 +0000 Manifest next update: Fri 02 May 2025 06:38:49 +0000 Files and hashes: 1: MfrsXjAsGCKfmftHpyPypHmHF6w.crl (hash: Zfb21eAhM/neljBpgOSxW3U6B9QwqFfmbPS5BdG1DVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.crl rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91417B0, serialNumber=31FAEC5E302C18229F99FB47A723F2A4798717AC Validity Not Before: Apr 25 06:38:49 2025 GMT Not After : May 2 06:38:49 2025 GMT Subject: CN=680b2df9-3232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:43:27:b4:4c:5d:30:08:d4:ee:9b:d7:54:ca: 46:60:93:d0:58:41:78:fc:fb:29:26:b9:d6:60:a1: 5d:3f:08:97:5c:54:28:e5:ba:01:8a:98:dd:74:06: c8:53:e9:46:39:e0:c0:ae:93:af:2f:a6:5d:08:2d: 44:dd:06:9d:04:c9:af:0e:d5:5b:2f:6e:2e:16:6f: 8e:11:ac:61:56:5d:3b:80:20:d6:94:7d:fd:99:70: 13:58:8c:bf:2c:5d:44:43:fb:c8:85:ad:d8:00:08: 27:fe:8d:2f:33:8a:97:32:d4:15:0b:d6:62:5f:dc: c9:56:f1:3b:dd:8b:94:ec:0c:df:3c:9b:94:9b:9d: 7a:a8:5c:fa:d0:f5:90:16:64:9e:5c:ea:a5:c0:a1: 7a:a0:de:a0:3b:be:c0:e6:fb:7f:54:bc:47:fe:d7: a9:09:d5:0f:21:ef:37:d5:64:72:a5:b7:65:20:12: 7c:b5:45:43:57:e7:e5:83:6a:ae:cf:57:d6:03:9b: 47:f2:5b:c2:e1:13:70:b5:d5:02:65:5d:65:78:a9: 0f:38:5e:bb:c4:6d:32:ac:30:37:f2:be:bc:71:10: 0b:11:69:45:d6:e5:2a:1d:65:d1:b0:44:0a:24:a3: 3a:bf:93:d4:ea:ce:e1:1e:6d:92:f6:75:0e:c0:4a: 0a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:63:A2:0E:27:CD:20:9B:B0:63:7F:86:28:66:2E:E0:C2:F4:E1:5B X509v3 Authority Key Identifier: keyid:31:FA:EC:5E:30:2C:18:22:9F:99:FB:47:A7:23:F2:A4:79:87:17:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:4b:52:a2:35:56:a8:71:24:3e:7c:36:0f:12:78:46:e3:4f: 81:22:16:74:ea:2e:c9:1b:8e:92:cd:a4:9a:2c:cf:7b:1f:64: e8:65:a6:9c:69:76:02:2f:68:0b:71:23:35:40:d5:b3:3a:ba: a2:58:56:04:9f:17:1a:ba:8d:75:dd:4e:0b:6e:14:01:aa:54: 6b:29:a5:c3:f9:a5:41:54:7e:99:0a:b0:da:fb:32:bb:b9:d2: c1:39:b3:80:3d:24:03:43:87:f5:6e:34:67:cc:74:27:91:bc: 62:a4:0b:2c:01:3d:3e:06:3a:10:20:59:92:3b:e2:54:25:88: c1:35:71:55:5c:58:28:aa:87:84:f7:4e:82:d6:32:62:9d:6a: df:48:71:ee:16:57:b0:df:46:10:b3:d0:eb:fc:fe:c1:77:7f: e9:93:15:fa:12:ea:55:ce:ab:96:42:6d:9b:0d:c3:0d:73:73: 1b:af:44:9a:ce:b7:3a:c5:21:52:d2:58:25:f8:8d:4c:a5:9d: cf:25:4e:68:9a:cd:27:45:61:e3:d4:c3:51:d2:ad:72:3d:b2: cb:d9:70:9a:8b:6b:97:dc:4e:a2:04:57:62:e9:d9:52:05:8e: a3:a8:b8:6d:cf:93:1c:0a:ae:86:41:65:c8:de:2f:f5:96:2e: 8e:fb:07:1d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTdCMDExMC8GA1UEBRMoMzFGQUVDNUUzMDJDMTgyMjlGOTlGQjQ3QTcyM0YyQTQ3 OTg3MTdBQzAeFw0yNTA0MjUwNjM4NDlaFw0yNTA1MDIwNjM4NDlaMBgxFjAUBgNV BAMTDTY4MGIyZGY5LTMyMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkQye0TF0wCNTum9dUykZgk9BYQXj8+ykmudZgoV0/CJdcVCjlugGKmN10BshT 6UY54MCuk68vpl0ILUTdBp0Eya8O1Vsvbi4Wb44RrGFWXTuAINaUff2ZcBNYjL8s XURD+8iFrdgACCf+jS8zipcy1BUL1mJf3MlW8Tvdi5TsDN88m5SbnXqoXPrQ9ZAW ZJ5c6qXAoXqg3qA7vsDm+39UvEf+16kJ1Q8h7zfVZHKlt2UgEny1RUNX5+WDaq7P V9YDm0fyW8LhE3C11QJlXWV4qQ84XrvEbTKsMDfyvrxxEAsRaUXW5SodZdGwRAok ozq/k9TqzuEebZL2dQ7ASgopAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOWOiDifN IJuwY3+GKGYu4ML04VswHwYDVR0jBBgwFoAUMfrsXjAsGCKfmftHpyPypHmHF6ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxN0IwL0VCMDgyNDcyRDg4 MzExRUY5NTRBM0Q3MEM0RjlBRTAyL01mcnNYakFzR0NLZm1mdEhweVB5cEhtSEY2 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTWZyc1hqQXNHQ0tmbWZ0SHB5UHlwSG1IRjZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx N0IwL0VCMDgyNDcyRDg4MzExRUY5NTRBM0Q3MEM0RjlBRTAyL01mcnNYakFzR0NL Zm1mdEhweVB5cEhtSEY2dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC9LUqI1VqhxJD58Ng8SeEbjT4EiFnTqLskbjpLNpJosz3sfZOhlppxp dgIvaAtxIzVA1bM6uqJYVgSfFxq6jXXdTgtuFAGqVGsppcP5pUFUfpkKsNr7Mru5 0sE5s4A9JANDh/VuNGfMdCeRvGKkCywBPT4GOhAgWZI74lQliME1cVVcWCiqh4T3 ToLWMmKdat9Ice4WV7DfRhCz0Ov8/sF3f+mTFfoS6lXOq5ZCbZsNww1zcxuvRJrO tzrFIVLSWCX4jUylnc8lTmiazSdFYePUw1HSrXI9ssvZcJqLa5fcTqIEV2Lp2VIF jqOouG3PkxwKroZBZcjeL/WWLo77Bx0= -----END CERTIFICATE-----Generated at Sat Apr 26 13:06:31 2025 by rpki-client