$ rpki-client -vvf rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft File: MfW8lHJxAkr0efYTZGbay_FDhsI.mft (raw, json) Hash identifier: ljpDmit+wP1lvPD8gEwOtK0++dnhC1WVbpq4yWDdk2w= Subject key identifier: EC:2A:E2:91:5C:06:72:C9:13:38:B9:EB:CB:93:AF:CA:1F:B0:B7:4A Authority key identifier: 31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2 Certificate issuer: /CN=A914F4AA/serialNumber=31F5BC947271024AF479F6136466DACBF14386C2 Certificate serial: 3474 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft Manifest number: 3474 Signing time: Thu 24 Apr 2025 14:33:31 +0000 Manifest this update: Thu 24 Apr 2025 14:33:30 +0000 Manifest next update: Thu 01 May 2025 14:33:30 +0000 Files and hashes: 1: MfW8lHJxAkr0efYTZGbay_FDhsI.crl (hash: 0joBFUfybBEb9YqJRP0TbeWkRuvU0YObJJ8pebD75LQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:33:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13428 (0x3474) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F4AA, serialNumber=31F5BC947271024AF479F6136466DACBF14386C2 Validity Not Before: Apr 24 14:33:30 2025 GMT Not After : May 1 14:33:30 2025 GMT Subject: CN=680a4bbb-6f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bc:27:92:0d:bc:05:25:62:ac:5b:2d:84:9e: c6:16:1b:6f:8f:15:96:16:72:c5:74:85:8b:2d:2f: c3:e4:e1:da:db:fa:3d:b7:0a:f0:c9:ad:f2:8a:de: 46:8a:31:68:5f:b1:12:46:b6:a1:5a:ec:62:9a:a6: 24:6b:06:14:ec:4f:93:37:f8:ea:b9:6f:4f:df:28: 22:5e:c6:8b:12:39:9c:b5:ad:b0:cc:c7:c4:fd:b9: 93:fd:2f:49:fc:57:a3:56:e3:ca:91:f5:2e:2c:ec: b3:16:50:ee:d6:03:5c:ec:92:c3:93:d0:11:1a:41: 20:f4:13:d8:af:27:31:f1:7b:34:de:4e:1c:58:2e: 2a:83:1f:81:1c:20:a5:84:a7:89:df:7a:bd:24:47: 3b:f9:04:c8:bc:96:6e:8a:07:56:06:6f:04:28:07: bc:43:74:7a:53:a8:d5:98:a7:c0:08:40:67:70:b7: da:a0:aa:84:18:14:aa:68:66:47:6c:cc:0d:e0:a3: 38:31:d2:fd:6e:99:cb:bd:35:60:42:6e:a4:a9:17: 43:7a:48:23:67:f7:4d:43:4d:3a:6b:f5:c0:de:1a: a4:7a:fd:9a:07:f4:69:ec:29:29:43:3a:fa:50:dd: 0c:3d:d3:c9:41:5e:0f:8d:38:11:3a:35:a6:49:f8: b1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:2A:E2:91:5C:06:72:C9:13:38:B9:EB:CB:93:AF:CA:1F:B0:B7:4A X509v3 Authority Key Identifier: keyid:31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:34:5b:e4:85:cc:24:c8:0d:c1:5f:8f:e9:a2:24:64:42:8e: 2b:8d:2a:5d:ec:81:99:a8:e3:97:64:29:d0:c2:a2:0a:30:55: 5f:8e:6d:38:6e:79:65:49:12:3b:b8:03:c8:68:99:71:36:e7: 9d:4b:f9:67:9d:0b:77:0f:e1:51:fa:06:9c:69:0f:5f:fd:6f: 5c:13:b2:86:97:d1:32:e0:38:eb:ee:7e:5c:ea:00:d1:11:c6: 8d:62:4f:12:85:06:57:57:1c:34:ea:1f:97:be:31:c4:08:fd: e8:b6:16:3e:1f:ee:ec:b7:b0:7e:dd:46:23:5b:df:d6:c5:42: 12:fa:18:07:fa:3d:02:3d:9b:78:8a:24:f3:ab:fa:1e:d5:f7: e3:42:76:27:6a:8e:fd:0b:ad:40:4c:dc:e2:d6:eb:d3:06:cc: 5a:98:5e:45:1b:15:18:f9:4a:56:b8:fd:b6:63:65:21:59:d4: 3e:49:ad:e3:2f:22:26:4c:57:fc:0e:c1:4c:ab:36:04:33:11: 4d:d6:dd:e5:6a:25:fb:85:bc:48:81:96:21:b4:94:d6:c8:81: 98:75:6d:78:13:39:9b:b6:42:27:e8:11:4e:2c:f5:98:ec:b3: d5:bb:2d:6a:cc:90:eb:c8:1d:8e:2d:38:e2:b8:d7:d5:5b:86: f0:3f:46:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY0QUExMTAvBgNVBAUTKDMxRjVCQzk0NzI3MTAyNEFGNDc5RjYxMzY0NjZEQUNC RjE0Mzg2QzIwHhcNMjUwNDI0MTQzMzMwWhcNMjUwNTAxMTQzMzMwWjAYMRYwFAYD VQQDEw02ODBhNGJiYi02ZjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7wnkg28BSVirFsthJ7GFhtvjxWWFnLFdIWLLS/D5OHa2/o9twrwya3yit5G ijFoX7ESRrahWuximqYkawYU7E+TN/jquW9P3ygiXsaLEjmcta2wzMfE/bmT/S9J /FejVuPKkfUuLOyzFlDu1gNc7JLDk9ARGkEg9BPYrycx8Xs03k4cWC4qgx+BHCCl hKeJ33q9JEc7+QTIvJZuigdWBm8EKAe8Q3R6U6jVmKfACEBncLfaoKqEGBSqaGZH bMwN4KM4MdL9bpnLvTVgQm6kqRdDekgjZ/dNQ006a/XA3hqkev2aB/Rp7CkpQzr6 UN0MPdPJQV4PjTgROjWmSfixnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwq4pFc BnLJEzi568uTr8ofsLdKMB8GA1UdIwQYMBaAFDH1vJRycQJK9Hn2E2Rm2svxQ4bC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjRBQS9FOUYyQ0E0MDFE OEExMUUyODM0RDNFRTUwOEIwMkNEMi9NZlc4bEhKeEFrcjBlZllUWkdiYXlfRkRo c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01mVzhsSEp4QWtyMGVmWVRaR2JheV9GRGhzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjRBQS9FOUYyQ0E0MDFEOEExMUUyODM0RDNFRTUwOEIwMkNEMi9NZlc4bEhKeEFr cjBlZllUWkdiYXlfRkRoc0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwNFvkhcwkyA3BX4/poiRkQo4rjSpd7IGZqOOXZCnQwqIKMFVfjm04 bnllSRI7uAPIaJlxNuedS/lnnQt3D+FR+gacaQ9f/W9cE7KGl9Ey4Djr7n5c6gDR EcaNYk8ShQZXVxw06h+XvjHECP3othY+H+7st7B+3UYjW9/WxUIS+hgH+j0CPZt4 iiTzq/oe1ffjQnYnao79C61ATNzi1uvTBsxamF5FGxUY+UpWuP22Y2UhWdQ+Sa3j LyImTFf8DsFMqzYEMxFN1t3laiX7hbxIgZYhtJTWyIGYdW14EzmbtkIn6BFOLPWY 7LPVuy1qzJDryB2OLTjiuNfVW4bwP0Y1 -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:44 2025 by rpki-client