$ rpki-client -vvf rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft File: rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft (raw, json) Hash identifier: WIi3JTrpo1RB0Yq5WQcwWORC/WyxIJxpy/sQ/FANplo= Subject key identifier: 24:E2:87:BF:55:69:D0:F0:A9:B6:3A:56:06:CE:4F:E6:79:36:16:F9 Authority key identifier: AC:5F:6F:EF:08:B2:2E:F5:FF:64:73:DB:3D:56:C8:EB:26:E5:50:38 Certificate issuer: /CN=A91580A1/serialNumber=AC5F6FEF08B22EF5FF6473DB3D56C8EB26E55038 Certificate serial: 0B35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rF9v7wiyLvX_ZHPbPVbI6yblUDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft Manifest number: 1318 Signing time: Thu 24 Apr 2025 19:05:00 +0000 Manifest this update: Thu 24 Apr 2025 19:05:00 +0000 Manifest next update: Thu 01 May 2025 19:05:00 +0000 Files and hashes: 1: rF9v7wiyLvX_ZHPbPVbI6yblUDg.crl (hash: vv1XOkMSIEqdhq7M1fXkPr6wGgV6XW5k+82xqYqRrqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.crl rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rF9v7wiyLvX_ZHPbPVbI6yblUDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2869 (0xb35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91580A1, serialNumber=AC5F6FEF08B22EF5FF6473DB3D56C8EB26E55038 Validity Not Before: Apr 24 19:05:00 2025 GMT Not After : May 1 19:05:00 2025 GMT Subject: CN=680a8b5c-0f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b9:6c:9a:ec:c5:21:1c:c6:78:df:c7:05:77: 49:0b:6c:3c:4e:c4:f5:33:38:80:54:e3:c5:66:4d: 9b:5c:d9:e0:4c:d7:8c:90:95:50:eb:6b:a1:9f:c0: 20:85:d2:c5:aa:a6:3c:97:9e:ee:dd:97:31:72:4a: 07:ac:af:c3:90:75:2b:7f:07:4c:f6:89:25:b0:b9: 0e:02:ce:be:6a:be:0e:ef:6a:f5:ab:fc:39:55:5d: 89:93:59:bb:fb:8d:83:53:1d:e6:50:28:9e:6d:db: f8:c6:0f:a2:5a:24:c0:bc:f8:85:8c:41:f0:c7:5f: 35:c4:26:8f:d2:a4:b8:da:bb:bb:36:aa:c9:f8:f1: b9:6b:ce:28:68:97:88:fa:55:0c:15:b6:31:3b:08: 1b:6a:b4:50:4b:4a:1e:80:bf:9b:17:4c:0d:e5:87: 70:ae:77:06:b5:18:0e:b9:2c:2d:ac:8b:d3:fb:06: 06:6d:c6:8a:3a:13:04:e7:a3:52:cd:b1:94:fd:18: ac:73:8b:c7:66:a0:7c:0c:5a:1a:7f:23:85:4c:be: 47:8a:b5:9e:b1:05:d7:5c:89:be:bc:6d:bb:5d:2a: cc:0a:e9:74:6f:75:27:ee:15:47:06:70:e2:54:e7: e9:b8:b2:de:7b:63:65:08:63:63:b3:49:64:60:1a: fc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E2:87:BF:55:69:D0:F0:A9:B6:3A:56:06:CE:4F:E6:79:36:16:F9 X509v3 Authority Key Identifier: keyid:AC:5F:6F:EF:08:B2:2E:F5:FF:64:73:DB:3D:56:C8:EB:26:E5:50:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rF9v7wiyLvX_ZHPbPVbI6yblUDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ca:ea:ff:82:9c:5e:ef:1e:9f:14:2f:46:83:9e:ca:fb:fd: f3:ab:a1:98:97:9e:f3:00:95:d9:b3:36:e9:23:42:a1:78:b8: 83:42:15:ba:f5:49:d4:37:6c:4c:02:d4:51:be:57:56:0e:ba: e0:a8:d0:a1:40:d7:cf:c6:17:e7:f1:b9:a0:6a:07:db:2a:f9: a7:9f:4f:58:75:1d:f6:16:e2:ca:dd:2d:cc:f0:32:cb:08:50: ca:2e:e6:be:e2:f2:5e:c7:02:50:f1:5c:b2:42:6e:60:e7:30: f1:ea:5f:09:89:32:f2:3b:bc:a0:2f:c3:66:12:b1:61:bd:84: 94:35:7c:36:fb:28:64:d6:07:7e:c1:02:44:58:e4:1e:7a:f4: bd:5e:af:86:a9:69:40:64:5d:99:b7:b2:5d:aa:d8:be:52:0f: 61:0a:a0:13:7d:26:63:df:b3:cd:4e:5f:bd:09:dd:46:ae:97: 8e:5c:61:a7:c4:a3:bd:be:bb:d2:8f:cf:b8:7e:6c:ee:16:75: 3b:67:9c:36:b5:ce:ac:c3:98:c7:bc:0d:37:c5:79:46:c0:fc: b8:cb:a0:23:51:0c:77:a3:30:ce:9b:22:99:cf:c7:16:fb:c7: 2f:bd:2c:3a:3a:46:ac:c9:9c:fd:a2:33:7e:36:7a:98:03:73: 9d:9c:e3:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwQTExMTAvBgNVBAUTKEFDNUY2RkVGMDhCMjJFRjVGRjY0NzNEQjNENTZDOEVC MjZFNTUwMzgwHhcNMjUwNDI0MTkwNTAwWhcNMjUwNTAxMTkwNTAwWjAYMRYwFAYD VQQDEw02ODBhOGI1Yy0wZjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm7lsmuzFIRzGeN/HBXdJC2w8TsT1MziAVOPFZk2bXNngTNeMkJVQ62uhn8Ag hdLFqqY8l57u3ZcxckoHrK/DkHUrfwdM9oklsLkOAs6+ar4O72r1q/w5VV2Jk1m7 +42DUx3mUCiebdv4xg+iWiTAvPiFjEHwx181xCaP0qS42ru7NqrJ+PG5a84oaJeI +lUMFbYxOwgbarRQS0oegL+bF0wN5YdwrncGtRgOuSwtrIvT+wYGbcaKOhME56NS zbGU/Risc4vHZqB8DFoafyOFTL5HirWesQXXXIm+vG27XSrMCul0b3Un7hVHBnDi VOfpuLLee2NlCGNjs0lkYBr83QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTih79V adDwqbY6VgbOT+Z5Nhb5MB8GA1UdIwQYMBaAFKxfb+8Isi71/2Rz2z1WyOsm5VA4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBBMS85MjU2MEE2QTM3 NEQxMUVBQTBBM0JFNTVDNEY5QUUwMi9yRjl2N3dpeUx2WF9aSFBiUFZiSTZ5YmxV RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JGOXY3d2l5THZYX1pIUGJQVmJJNnlibFVEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODBBMS85MjU2MEE2QTM3NEQxMUVBQTBBM0JFNTVDNEY5QUUwMi9yRjl2N3dpeUx2 WF9aSFBiUFZiSTZ5YmxVRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNyur/gpxe7x6fFC9Gg57K+/3zq6GYl57zAJXZszbpI0KheLiDQhW6 9UnUN2xMAtRRvldWDrrgqNChQNfPxhfn8bmgagfbKvmnn09YdR32FuLK3S3M8DLL CFDKLua+4vJexwJQ8VyyQm5g5zDx6l8JiTLyO7ygL8NmErFhvYSUNXw2+yhk1gd+ wQJEWOQeevS9Xq+GqWlAZF2Zt7Jdqti+Ug9hCqATfSZj37PNTl+9Cd1GrpeOXGGn xKO9vrvSj8+4fmzuFnU7Z5w2tc6sw5jHvA03xXlGwPy4y6AjUQx3ozDOmyKZz8cW +8cvvSw6OkasyZz9ojN+NnqYA3OdnOPg -----END CERTIFICATE-----Generated at Sat Apr 26 04:32:24 2025 by rpki-client