$ rpki-client -vvf rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft File: rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft (raw, json) Hash identifier: 4ldPmphNxoZUgdbEI18fqsLn56Ir344oM//Hf0rS6ho= Subject key identifier: 40:98:D2:FC:2A:64:50:76:4C:04:B7:B6:D9:E9:82:1F:D5:FA:B2:D3 Authority key identifier: AE:59:C7:1F:D6:3B:D2:6B:46:30:26:E0:74:90:46:97:04:A8:FB:9B Certificate issuer: /CN=A914530B/serialNumber=AE59C71FD63BD26B463026E07490469704A8FB9B Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft Manifest number: 48 Signing time: Fri 25 Apr 2025 06:24:19 +0000 Manifest this update: Fri 25 Apr 2025 06:24:19 +0000 Manifest next update: Fri 02 May 2025 06:24:19 +0000 Files and hashes: 1: rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl (hash: bd/e3O0sVkH4aNSLrLC8gC1r7bT9WqV1JOapKHT38KI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914530B, serialNumber=AE59C71FD63BD26B463026E07490469704A8FB9B Validity Not Before: Apr 25 06:24:19 2025 GMT Not After : May 2 06:24:19 2025 GMT Subject: CN=680b2a93-eda0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:31:99:a0:e9:8c:a2:52:2f:4c:1a:97:a6:6f: 4d:c1:20:c5:ce:3e:29:38:b0:4d:19:ce:93:22:aa: c2:40:e8:a5:21:50:de:70:db:99:a6:92:6b:99:81: 93:9f:e9:db:23:10:c3:69:85:8a:57:0e:b8:a3:36: 92:56:b6:fd:9f:26:e5:cb:b6:ce:d7:e9:6d:9f:21: 57:46:37:61:05:01:fd:ca:4d:9d:eb:1d:8d:ec:32: 45:08:db:33:2f:15:cc:3c:9a:e1:95:d4:63:d4:c4: 10:03:2d:79:8f:fa:19:9c:83:e5:f5:f1:ad:37:52: 5b:cc:16:6a:73:2b:bb:65:98:3d:6b:ad:3a:9f:98: a5:04:bc:50:ba:fa:d5:69:ad:e0:dc:96:78:8b:8f: d2:ed:0d:fa:b1:e3:90:df:03:ef:1b:d7:fb:4d:45: 34:0f:9d:a0:9c:c2:16:b5:22:fe:30:94:73:b1:eb: 47:5a:14:ae:2d:31:7a:13:31:a2:f8:b8:b7:cf:7c: b4:de:9b:29:d7:a3:c5:80:cb:26:d4:7f:c7:8e:7b: 3f:30:03:0b:f1:73:bf:76:85:63:2e:a9:cb:a4:be: ad:80:02:15:43:59:e8:9b:33:31:93:83:2d:0b:e4: bb:9a:a5:68:bc:54:8e:ff:70:df:f3:c4:88:a7:ca: 5a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:98:D2:FC:2A:64:50:76:4C:04:B7:B6:D9:E9:82:1F:D5:FA:B2:D3 X509v3 Authority Key Identifier: keyid:AE:59:C7:1F:D6:3B:D2:6B:46:30:26:E0:74:90:46:97:04:A8:FB:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:8b:cc:9c:fb:75:ac:db:fe:55:d3:e6:f9:c9:fb:6a:c4:33: ab:77:64:06:01:e5:58:35:65:ff:91:2a:d0:f1:50:80:26:95: 86:65:14:dc:24:30:88:be:99:77:1d:5a:38:58:be:cd:53:7f: 1e:ed:44:d3:8a:72:90:aa:5c:30:72:19:c4:80:3d:81:35:f9: 70:5d:f1:1d:bc:89:42:89:68:55:f4:73:e6:65:a5:a6:6a:b3: 63:f5:69:10:28:2d:5c:51:b9:25:7c:30:83:4a:c1:22:a1:8d: 96:b1:b5:a4:28:e7:a6:52:d5:6e:62:e5:51:bd:c4:9b:5b:6b: 57:3e:37:0c:63:77:7b:10:57:ca:a3:67:76:4c:56:b8:47:96: fa:e1:62:67:3b:c7:ff:45:55:fe:10:5e:15:38:d8:35:65:b7: 86:ec:36:81:87:9f:85:94:9b:b5:fa:87:06:ae:a5:11:e8:3d: 52:58:30:75:1d:ab:70:f4:62:ca:7a:63:74:f5:85:a7:7a:4b: 1e:b2:86:f2:89:55:94:68:de:d3:65:9a:f8:25:63:df:5c:69: 29:bc:9e:54:15:af:74:5a:8f:ae:4e:8c:42:a9:cf:6a:7b:21: 02:e6:c4:9a:af:c7:ee:52:76:bc:dc:7a:e2:62:a8:a9:45:0f: 4b:ef:fb:ba -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NTMwQjExMC8GA1UEBRMoQUU1OUM3MUZENjNCRDI2QjQ2MzAyNkUwNzQ5MDQ2OTcw NEE4RkI5QjAeFw0yNTA0MjUwNjI0MTlaFw0yNTA1MDIwNjI0MTlaMBgxFjAUBgNV BAMTDTY4MGIyYTkzLWVkYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8MZmg6YyiUi9MGpemb03BIMXOPik4sE0ZzpMiqsJA6KUhUN5w25mmkmuZgZOf 6dsjEMNphYpXDrijNpJWtv2fJuXLts7X6W2fIVdGN2EFAf3KTZ3rHY3sMkUI2zMv Fcw8muGV1GPUxBADLXmP+hmcg+X18a03UlvMFmpzK7tlmD1rrTqfmKUEvFC6+tVp reDclniLj9LtDfqx45DfA+8b1/tNRTQPnaCcwha1Iv4wlHOx60daFK4tMXoTMaL4 uLfPfLTemynXo8WAyybUf8eOez8wAwvxc792hWMuqcukvq2AAhVDWeibMzGTgy0L 5LuapWi8VI7/cN/zxIinylorAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQJjS/Cpk UHZMBLe22emCH9X6stMwHwYDVR0jBBgwFoAUrlnHH9Y70mtGMCbgdJBGlwSo+5sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1MzBCL0E2QTU0NEUwQjc5 QTExRUZBMEQ2OTc1REM0RjlBRTAyL3JsbkhIOVk3MG10R01DYmdkSkJHbHdTby01 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcmxuSEg5WTcwbXRHTUNiZ2RKQkdsd1NvLTVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 MzBCL0E2QTU0NEUwQjc5QTExRUZBMEQ2OTc1REM0RjlBRTAyL3JsbkhIOVk3MG10 R01DYmdkSkJHbHdTby01cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAWLzJz7dazb/lXT5vnJ+2rEM6t3ZAYB5Vg1Zf+RKtDxUIAmlYZlFNwk MIi+mXcdWjhYvs1Tfx7tRNOKcpCqXDByGcSAPYE1+XBd8R28iUKJaFX0c+ZlpaZq s2P1aRAoLVxRuSV8MINKwSKhjZaxtaQo56ZS1W5i5VG9xJtba1c+Nwxjd3sQV8qj Z3ZMVrhHlvrhYmc7x/9FVf4QXhU42DVlt4bsNoGHn4WUm7X6hwaupRHoPVJYMHUd q3D0Ysp6Y3T1had6Sx6yhvKJVZRo3tNlmvglY99caSm8nlQVr3Raj65OjEKpz2p7 IQLmxJqvx+5SdrzceuJiqKlFD0vv+7o= -----END CERTIFICATE-----Generated at Sat Apr 26 04:33:25 2025 by rpki-client