$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F34/56424A0CBDE911EFBFD53882C4F9AE02/d6V15x8FqSPAyxKXxZzmW0u90z0.mft File: d6V15x8FqSPAyxKXxZzmW0u90z0.mft (raw, json) Hash identifier: 5qoTufgMMPjWpG/0Nc2IT087sLWLVgJFHAwkeWR/QwI= Subject key identifier: C2:8E:BF:4A:A2:B2:A2:B6:46:B3:1A:89:47:5A:EC:06:23:E0:A0:04 Authority key identifier: 77:A5:75:E7:1F:05:A9:23:C0:CB:12:97:C5:9C:E6:5B:4B:BD:D3:3D Certificate issuer: /CN=A9144F34/serialNumber=77A575E71F05A923C0CB1297C59CE65B4BBDD33D Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6V15x8FqSPAyxKXxZzmW0u90z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F34/56424A0CBDE911EFBFD53882C4F9AE02/d6V15x8FqSPAyxKXxZzmW0u90z0.mft Manifest number: 43 Signing time: Fri 25 Apr 2025 06:26:01 +0000 Manifest this update: Fri 25 Apr 2025 06:26:00 +0000 Manifest next update: Fri 02 May 2025 06:26:00 +0000 Files and hashes: 1: d6V15x8FqSPAyxKXxZzmW0u90z0.crl (hash: aSQRTOPfS9IQO6oZXnN2zXSfIIrfxo5XnNm/fh+QovU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F34/56424A0CBDE911EFBFD53882C4F9AE02/d6V15x8FqSPAyxKXxZzmW0u90z0.crl rsync://rpki.apnic.net/member_repository/A9144F34/56424A0CBDE911EFBFD53882C4F9AE02/d6V15x8FqSPAyxKXxZzmW0u90z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6V15x8FqSPAyxKXxZzmW0u90z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F34, serialNumber=77A575E71F05A923C0CB1297C59CE65B4BBDD33D Validity Not Before: Apr 25 06:26:00 2025 GMT Not After : May 2 06:26:00 2025 GMT Subject: CN=680b2af9-8c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:59:63:bc:53:0d:57:4c:a3:55:f8:c0:20:31: de:e9:a5:36:c4:25:aa:5b:13:ba:3a:6d:20:9a:fc: 50:ad:5d:a9:44:80:c9:d5:da:fc:d2:75:25:17:21: 7b:c8:68:2a:a7:c7:07:18:72:71:a2:2a:91:dd:45: c5:90:71:72:e9:97:d8:cb:d3:bf:80:ba:60:ff:73: eb:d2:77:1a:05:4a:ca:3d:8c:69:dd:aa:e5:5b:91: 15:c1:43:24:bb:87:c1:5a:41:b8:24:68:fd:ce:d6: ac:68:96:e9:02:3b:c0:8b:ca:6a:68:1e:e2:4b:99: 01:e9:4e:2a:fe:68:09:70:73:ad:6f:7e:0d:eb:a2: a5:48:75:57:a2:48:e6:bf:cd:12:5e:b9:75:53:53: a0:7c:7c:da:c2:e5:f1:9c:18:e8:3a:6f:dd:98:2c: 63:2a:82:ac:20:73:43:32:07:dc:39:45:2a:0d:75: 38:a2:93:ab:35:e1:7c:10:49:62:ca:38:0a:01:d3: 25:fc:c6:10:c3:57:8f:fb:5b:3d:f8:9d:7b:76:84: fd:ed:3b:ef:92:23:31:bd:2a:af:65:ff:31:24:7b: fb:14:48:82:fa:70:3f:5c:a5:92:96:7a:ba:d7:e3: 51:2d:c0:ee:bf:e7:c4:d7:b8:4d:19:8f:95:52:17: 78:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:8E:BF:4A:A2:B2:A2:B6:46:B3:1A:89:47:5A:EC:06:23:E0:A0:04 X509v3 Authority Key Identifier: keyid:77:A5:75:E7:1F:05:A9:23:C0:CB:12:97:C5:9C:E6:5B:4B:BD:D3:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F34/56424A0CBDE911EFBFD53882C4F9AE02/d6V15x8FqSPAyxKXxZzmW0u90z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6V15x8FqSPAyxKXxZzmW0u90z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F34/56424A0CBDE911EFBFD53882C4F9AE02/d6V15x8FqSPAyxKXxZzmW0u90z0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:53:0d:a0:ac:23:14:a0:e5:e5:7b:21:3e:ea:5b:c5:9d:6d: 10:6b:7d:0c:c1:cc:39:92:7a:c1:90:4a:51:00:bb:90:5a:e5: 0e:27:42:9f:cd:2c:51:c4:f7:5d:ec:52:93:f3:97:63:99:d5: 12:17:1f:b9:06:96:37:b6:a5:18:ef:5a:cc:07:75:38:00:ed: 95:8f:f0:66:1c:29:52:65:5a:b9:d7:d3:cd:51:9a:a8:b0:a0: 45:39:c1:c9:1d:c1:25:0f:12:94:c5:cb:10:fb:04:ac:70:fb: 64:df:4e:53:62:7c:18:17:4b:a9:dc:89:88:fd:f7:9d:b3:e5: ab:a3:2b:3d:76:4d:99:ff:41:a0:6b:aa:be:28:0c:52:f0:4b: ba:e3:32:85:bd:0c:16:56:ad:99:53:94:aa:35:15:64:85:a5: 48:6d:ea:97:50:ce:dc:37:38:21:a1:2e:88:f7:92:d7:4f:08: 16:7a:60:9a:b7:30:35:9c:cb:90:20:04:79:5e:79:5b:cc:87: 31:09:b0:a7:9b:68:57:10:91:79:c2:4e:bd:5d:0a:0f:28:82: 74:fc:a4:98:96:b2:8d:b3:b5:fe:5a:69:54:d3:85:28:9f:5c: 0c:d0:23:9a:80:67:a2:f7:38:1d:18:14:ed:e6:e7:1d:cf:ae: e2:9c:7b:12 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NEYzNDExMC8GA1UEBRMoNzdBNTc1RTcxRjA1QTkyM0MwQ0IxMjk3QzU5Q0U2NUI0 QkJERDMzRDAeFw0yNTA0MjUwNjI2MDBaFw0yNTA1MDIwNjI2MDBaMBgxFjAUBgNV BAMTDTY4MGIyYWY5LThjODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQWWO8Uw1XTKNV+MAgMd7ppTbEJapbE7o6bSCa/FCtXalEgMnV2vzSdSUXIXvI aCqnxwcYcnGiKpHdRcWQcXLpl9jL07+AumD/c+vSdxoFSso9jGndquVbkRXBQyS7 h8FaQbgkaP3O1qxolukCO8CLympoHuJLmQHpTir+aAlwc61vfg3roqVIdVeiSOa/ zRJeuXVTU6B8fNrC5fGcGOg6b92YLGMqgqwgc0MyB9w5RSoNdTiik6s14XwQSWLK OAoB0yX8xhDDV4/7Wz34nXt2hP3tO++SIzG9Kq9l/zEke/sUSIL6cD9cpZKWerrX 41EtwO6/58TXuE0Zj5VSF3h7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwo6/SqKy orZGsxqJR1rsBiPgoAQwHwYDVR0jBBgwFoAUd6V15x8FqSPAyxKXxZzmW0u90z0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0RjM0LzU2NDI0QTBDQkRF OTExRUZCRkQ1Mzg4MkM0RjlBRTAyL2Q2VjE1eDhGcVNQQXl4S1h4WnptVzB1OTB6 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZDZWMTV4OEZxU1BBeXhLWHhaem1XMHU5MHowLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 RjM0LzU2NDI0QTBDQkRFOTExRUZCRkQ1Mzg4MkM0RjlBRTAyL2Q2VjE1eDhGcVNQ QXl4S1h4WnptVzB1OTB6MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGVTDaCsIxSg5eV7IT7qW8WdbRBrfQzBzDmSesGQSlEAu5Ba5Q4nQp/N LFHE913sUpPzl2OZ1RIXH7kGlje2pRjvWswHdTgA7ZWP8GYcKVJlWrnX081Rmqiw oEU5wckdwSUPEpTFyxD7BKxw+2TfTlNifBgXS6nciYj9952z5aujKz12TZn/QaBr qr4oDFLwS7rjMoW9DBZWrZlTlKo1FWSFpUht6pdQztw3OCGhLoj3ktdPCBZ6YJq3 MDWcy5AgBHleeVvMhzEJsKebaFcQkXnCTr1dCg8ognT8pJiWso2ztf5aaVTThSif XAzQI5qAZ6L3OB0YFO3m5x3PruKcexI= -----END CERTIFICATE-----Generated at Sat Apr 26 16:54:42 2025 by rpki-client