$ rpki-client -vvf rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft File: 0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft (raw, json) Hash identifier: roIjCOVVvkv3nKAR6DGLlGBOnu9HxssjDqZR5tCXbgk= Subject key identifier: 29:CC:29:52:F5:7B:DE:C9:55:49:17:A6:7E:EB:93:FC:9F:60:D3:FC Authority key identifier: D1:8F:FC:C5:04:D3:69:3D:7F:8A:38:D8:6D:C1:2E:88:CD:96:0E:56 Certificate issuer: /CN=A91443DC/serialNumber=D18FFCC504D3693D7F8A38D86DC12E88CD960E56 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft Manifest number: 9E Signing time: Fri 25 Apr 2025 05:14:01 +0000 Manifest this update: Fri 25 Apr 2025 05:14:00 +0000 Manifest next update: Fri 02 May 2025 05:14:00 +0000 Files and hashes: 1: 0Y_8xQTTaT1_ijjYbcEuiM2WDlY.crl (hash: zGWccEaKmEdRXynduKld8dOMAOEz8vZeGw3fN3wbOLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.crl rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443DC, serialNumber=D18FFCC504D3693D7F8A38D86DC12E88CD960E56 Validity Not Before: Apr 25 05:14:00 2025 GMT Not After : May 2 05:14:00 2025 GMT Subject: CN=680b1a18-d863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:aa:d8:ec:d9:cc:36:93:af:73:b8:32:6b:43: de:bf:98:f0:df:ae:ad:26:63:32:be:f3:57:9d:d9: 7e:5a:cb:44:2e:9d:de:5c:df:fa:6a:e8:fe:2e:65: aa:05:bc:f7:8d:db:0d:9d:11:bb:8d:1b:ab:32:f8: 6f:06:13:ea:79:ef:58:95:fd:2c:58:f0:4f:11:d8: 64:19:f2:f5:e8:60:91:87:64:69:72:cc:39:d9:85: 29:8d:ea:27:b9:b6:a0:3f:65:3e:69:ef:fc:20:42: 35:e5:9c:1e:63:d6:6f:71:21:bf:28:8b:53:60:b9: d9:90:3e:dd:f7:b9:80:49:23:57:5f:8f:0c:27:3d: 5d:72:c7:7a:31:43:32:61:3c:50:da:f7:b6:ea:ff: 76:1c:f2:f8:51:ef:6c:c0:9d:1b:bb:dd:fe:2b:6d: 4d:56:07:db:cd:1d:f5:5e:33:3f:5b:49:99:b2:82: eb:4e:f2:e5:09:6d:86:df:7e:a5:7a:07:cd:59:97: 36:04:7f:53:1f:26:e0:4a:a9:a6:96:bf:63:4f:c9: 45:8a:23:e3:bc:2f:39:29:31:2a:a7:7b:f7:fa:98: 1d:34:49:96:ba:9d:92:da:0a:49:4b:8e:1f:b7:85: 66:16:49:fe:8d:70:63:e9:57:ec:b3:01:c8:a3:1b: 3e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:CC:29:52:F5:7B:DE:C9:55:49:17:A6:7E:EB:93:FC:9F:60:D3:FC X509v3 Authority Key Identifier: keyid:D1:8F:FC:C5:04:D3:69:3D:7F:8A:38:D8:6D:C1:2E:88:CD:96:0E:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e5:1b:dd:19:09:0e:79:89:14:cf:57:a4:46:f2:11:7d:8c: f0:d4:58:6e:8a:56:e3:3b:07:5e:49:58:94:03:76:a3:b6:61: 2c:14:5a:c0:8c:9f:08:4a:f0:d9:34:c0:8a:fa:0c:15:c5:fb: 31:84:96:1a:18:92:01:13:3c:13:57:57:97:ba:8b:03:7a:0e: 01:08:34:23:e1:4a:3c:7a:b0:f1:84:39:83:05:1e:3e:1f:0b: 1b:0e:7c:4e:db:30:ef:fa:f0:d8:ad:aa:2b:25:61:47:14:68: f2:db:e7:d8:43:d3:41:c3:73:f5:0e:9b:60:e9:3f:00:b6:be: ec:fc:d1:51:bd:84:7a:31:73:3b:f5:dc:31:df:a9:c3:27:11: f7:8b:8f:21:67:aa:be:4f:00:0b:70:f0:b8:ec:89:af:ba:c8: 0c:cd:2c:b6:6b:4a:16:73:58:6b:ef:4e:6c:be:b9:9d:60:73: 49:ee:c4:b6:a7:41:d8:26:81:b5:1f:59:75:d4:e0:dc:98:5e: 89:0a:41:01:40:ce:99:e1:01:dc:fc:49:a7:df:75:0b:d9:19: 8c:21:fd:4c:47:ba:d8:3c:3f:d7:56:ad:20:8c:b6:bc:68:60: 5b:97:7b:92:ec:88:54:43:08:93:3d:b2:bb:7d:62:d0:72:2d: db:ea:47:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQzREMxMTAvBgNVBAUTKEQxOEZGQ0M1MDREMzY5M0Q3RjhBMzhEODZEQzEyRTg4 Q0Q5NjBFNTYwHhcNMjUwNDI1MDUxNDAwWhcNMjUwNTAyMDUxNDAwWjAYMRYwFAYD VQQDEw02ODBiMWExOC1kODYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KrY7NnMNpOvc7gya0Pev5jw366tJmMyvvNXndl+WstELp3eXN/6auj+LmWq Bbz3jdsNnRG7jRurMvhvBhPqee9Ylf0sWPBPEdhkGfL16GCRh2Rpcsw52YUpjeon ubagP2U+ae/8IEI15ZweY9ZvcSG/KItTYLnZkD7d97mASSNXX48MJz1dcsd6MUMy YTxQ2ve26v92HPL4Ue9swJ0bu93+K21NVgfbzR31XjM/W0mZsoLrTvLlCW2G336l egfNWZc2BH9THybgSqmmlr9jT8lFiiPjvC85KTEqp3v3+pgdNEmWup2S2gpJS44f t4VmFkn+jXBj6VfsswHIoxs+VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnMKVL1 e97JVUkXpn7rk/yfYNP8MB8GA1UdIwQYMBaAFNGP/MUE02k9f4o42G3BLojNlg5W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDNEQy9BMDY1RDFFQTMw NjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi8wWV84eFFUVGFUMV9pampZYmNFdWlNMldE bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBZXzh4UVRUYVQxX2lqalliY0V1aU0yV0RsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDNEQy9BMDY1RDFFQTMwNjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi8wWV84eFFUVGFU MV9pampZYmNFdWlNMldEbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd5RvdGQkOeYkUz1ekRvIRfYzw1FhuilbjOwdeSViUA3ajtmEsFFrA jJ8ISvDZNMCK+gwVxfsxhJYaGJIBEzwTV1eXuosDeg4BCDQj4Uo8erDxhDmDBR4+ HwsbDnxO2zDv+vDYraorJWFHFGjy2+fYQ9NBw3P1Dptg6T8Atr7s/NFRvYR6MXM7 9dwx36nDJxH3i48hZ6q+TwALcPC47ImvusgMzSy2a0oWc1hr705svrmdYHNJ7sS2 p0HYJoG1H1l11ODcmF6JCkEBQM6Z4QHc/Emn33UL2RmMIf1MR7rYPD/XVq0gjLa8 aGBbl3uS7IhUQwiTPbK7fWLQci3b6kf4 -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:55 2025 by rpki-client