$ rpki-client -vvf rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft File: mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft (raw, json) Hash identifier: wBpXBIetandwqxNHUNspbomBrM135M9KIRXaTyr974M= Subject key identifier: A2:AE:F8:F1:2F:52:18:DB:62:D5:C0:53:31:DF:55:EF:56:9F:FF:E9 Authority key identifier: 98:1F:A2:27:A2:A4:35:C2:B7:6E:06:C9:C4:52:D3:EC:75:19:84:D3 Certificate issuer: /CN=A91536B7/serialNumber=981FA227A2A435C2B76E06C9C452D3EC751984D3 Certificate serial: 071A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft Manifest number: 5001 Signing time: Thu 24 Apr 2025 16:25:11 +0000 Manifest this update: Thu 24 Apr 2025 16:25:10 +0000 Manifest next update: Thu 01 May 2025 16:25:10 +0000 Files and hashes: 1: mB-iJ6KkNcK3bgbJxFLT7HUZhNM.crl (hash: Zu7smb9y9PxxwdpnfhFhx6r/echg8Hyf7Bt0uHhJUik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.crl rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1818 (0x71a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91536B7, serialNumber=981FA227A2A435C2B76E06C9C452D3EC751984D3 Validity Not Before: Apr 24 16:25:10 2025 GMT Not After : May 1 16:25:10 2025 GMT Subject: CN=680a65e7-be0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f2:79:c3:c6:0c:39:10:22:1c:12:03:c3:37: e8:30:50:d3:54:77:8d:bc:f7:91:1b:ae:bb:2e:95: 14:51:c8:ac:32:9b:c2:0d:d4:74:0f:26:e0:98:85: 11:49:9b:53:25:68:27:57:23:47:fa:58:22:17:7a: e9:2f:99:3f:90:1b:18:31:14:77:5a:78:73:64:76: 7a:35:3b:ad:24:09:80:54:64:e9:0b:a2:b0:19:bc: 5d:48:9d:ff:61:5d:9c:ac:4b:d1:22:34:71:5e:db: 19:48:51:3d:05:c5:0a:a2:2c:c6:4f:0a:6d:1c:22: 28:cd:3f:db:67:ff:a7:85:df:36:e0:ce:0e:ce:db: 82:8d:20:a7:36:ef:4c:18:c7:43:8a:e3:00:12:3d: 9a:79:3a:ca:04:24:0f:a4:96:a6:8d:bf:e4:9c:64: 82:5c:d7:cf:32:b9:b3:c4:db:a7:c6:2b:fe:3c:d9: 6d:04:4b:70:21:b7:b6:cf:77:48:8c:46:83:bf:12: 1b:f1:f5:0e:70:8e:5a:03:88:2f:e1:0f:e0:a4:96: 2c:0f:66:63:8b:5a:b8:ac:8e:56:4b:5b:f0:dd:87: 29:67:c0:0e:a4:78:75:ff:56:ca:b7:66:06:5c:72: 1d:10:9c:35:70:74:24:a5:5b:94:38:d6:f3:6b:29: 7b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AE:F8:F1:2F:52:18:DB:62:D5:C0:53:31:DF:55:EF:56:9F:FF:E9 X509v3 Authority Key Identifier: keyid:98:1F:A2:27:A2:A4:35:C2:B7:6E:06:C9:C4:52:D3:EC:75:19:84:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:61:76:77:a0:cc:00:3f:6c:ec:a7:c2:1a:6b:ad:d7:39:4a: 74:11:2a:b5:6f:9b:82:48:59:41:6e:aa:90:6c:a5:7e:5d:c7: 89:3b:da:f1:6a:9d:e7:72:c1:6a:8b:58:cc:c2:29:fa:e8:ba: a1:ff:a9:2c:b2:bb:f8:e1:8d:36:75:2c:da:0f:37:c0:23:4c: d0:c3:6c:ef:f1:c2:d3:05:cd:9f:d7:c1:75:77:a6:19:1c:e6: 76:0f:74:62:84:56:89:16:55:ab:51:7b:37:b4:a8:0e:3a:07: 3d:b1:84:eb:78:37:ad:d9:72:5c:7a:9d:3a:e8:18:74:6d:d0: 6d:64:a4:11:bf:f7:14:cf:da:02:92:25:88:82:ab:5b:7d:05: 55:c9:d2:d8:33:43:ac:a0:96:f8:9c:7e:32:9f:0b:5f:7c:95: 39:3f:a1:08:da:a3:fb:91:93:df:eb:02:70:27:03:76:cf:15: 5b:45:75:e0:65:a2:ff:4e:d3:09:29:8c:93:e9:ac:c7:e8:2b: 07:52:d6:8c:38:76:8c:d1:36:40:ff:15:5d:31:3a:c9:ed:ec: 1a:00:58:23:fe:fa:f3:0d:b8:65:8f:1f:14:92:30:d2:4c:8f: d3:40:7d:84:7d:27:89:24:26:62:d1:7d:27:3c:bf:7c:95:49: b4:be:73:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM2QjcxMTAvBgNVBAUTKDk4MUZBMjI3QTJBNDM1QzJCNzZFMDZDOUM0NTJEM0VD NzUxOTg0RDMwHhcNMjUwNDI0MTYyNTEwWhcNMjUwNTAxMTYyNTEwWjAYMRYwFAYD VQQDEw02ODBhNjVlNy1iZTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPJ5w8YMORAiHBIDwzfoMFDTVHeNvPeRG667LpUUUcisMpvCDdR0DybgmIUR SZtTJWgnVyNH+lgiF3rpL5k/kBsYMRR3WnhzZHZ6NTutJAmAVGTpC6KwGbxdSJ3/ YV2crEvRIjRxXtsZSFE9BcUKoizGTwptHCIozT/bZ/+nhd824M4OztuCjSCnNu9M GMdDiuMAEj2aeTrKBCQPpJamjb/knGSCXNfPMrmzxNunxiv+PNltBEtwIbe2z3dI jEaDvxIb8fUOcI5aA4gv4Q/gpJYsD2Zji1q4rI5WS1vw3YcpZ8AOpHh1/1bKt2YG XHIdEJw1cHQkpVuUONbzayl7ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKu+PEv UhjbYtXAUzHfVe9Wn//pMB8GA1UdIwQYMBaAFJgfoieipDXCt24GycRS0+x1GYTT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzZCNy9GMUNEMjdCNDcz QUQxMUU3QUNCRDAyNUVDNEY5QUUwMi9tQi1pSjZLa05jSzNiZ2JKeEZMVDdIVVpo Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21CLWlKNktrTmNLM2JnYkp4RkxUN0hVWmhOTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzZCNy9GMUNEMjdCNDczQUQxMUU3QUNCRDAyNUVDNEY5QUUwMi9tQi1pSjZLa05j SzNiZ2JKeEZMVDdIVVpoTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVYXZ3oMwAP2zsp8Iaa63XOUp0ESq1b5uCSFlBbqqQbKV+XceJO9rx ap3ncsFqi1jMwin66Lqh/6kssrv44Y02dSzaDzfAI0zQw2zv8cLTBc2f18F1d6YZ HOZ2D3RihFaJFlWrUXs3tKgOOgc9sYTreDet2XJcep066Bh0bdBtZKQRv/cUz9oC kiWIgqtbfQVVydLYM0OsoJb4nH4ynwtffJU5P6EI2qP7kZPf6wJwJwN2zxVbRXXg ZaL/TtMJKYyT6azH6CsHUtaMOHaM0TZA/xVdMTrJ7ewaAFgj/vrzDbhljx8UkjDS TI/TQH2EfSeJJCZi0X0nPL98lUm0vnNk -----END CERTIFICATE-----Generated at Sat Apr 26 08:01:22 2025 by rpki-client