$ rpki-client -vvf rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft File: mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft (raw, json) Hash identifier: 9c4B6ybgX5XbnTnCrPNZDE8i6VfVZ1EAwaWhpvZ0NYk= Subject key identifier: AA:74:6D:45:AB:58:4B:F9:01:E9:FF:D1:B4:31:0D:9B:C2:4F:2B:63 Authority key identifier: 99:76:FB:71:6D:2F:A3:9B:BD:47:3C:6B:34:F1:F3:BD:68:1A:53:E7 Certificate issuer: /CN=A915F598/serialNumber=9976FB716D2FA39BBD473C6B34F1F3BD681A53E7 Certificate serial: 3451 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft Manifest number: 3450 Signing time: Thu 24 Apr 2025 15:19:56 +0000 Manifest this update: Thu 24 Apr 2025 15:19:55 +0000 Manifest next update: Thu 01 May 2025 15:19:55 +0000 Files and hashes: 1: mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl (hash: KmZgMkKnoRLuZUrpF4w7AQZMrUBU8iA6Nwabwv4rQGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13393 (0x3451) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F598, serialNumber=9976FB716D2FA39BBD473C6B34F1F3BD681A53E7 Validity Not Before: Apr 24 15:19:55 2025 GMT Not After : May 1 15:19:55 2025 GMT Subject: CN=680a569c-4002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:27:34:ba:99:49:98:60:cf:05:01:b9:54:af: 30:83:70:92:e7:6c:42:03:86:3d:e8:09:33:03:93: f4:ae:1c:0c:ef:18:cd:18:36:7a:d8:70:be:eb:35: e1:5d:62:89:33:8a:17:b3:60:31:88:19:2e:81:47: bd:4c:65:5f:8d:94:62:4b:c3:68:79:1d:27:cd:b7: 5f:16:c6:10:9d:4a:c9:6f:f4:2f:6f:22:64:9a:77: 9c:7e:5e:4b:70:22:9f:7d:03:2f:0b:ba:23:3a:44: ec:46:44:28:81:b1:be:3b:e2:a7:0d:7e:ca:28:2e: fd:aa:db:4c:4c:1a:9a:21:7d:8c:15:95:2a:47:d2: af:98:7f:73:02:ea:54:a3:37:ba:c5:ec:3e:87:31: 2e:c5:ab:28:7e:11:50:d1:c7:bd:99:5e:e2:da:53: 9e:95:ac:49:17:a4:b3:12:94:c5:aa:82:43:b4:3a: 11:f3:d1:56:c6:9d:0a:bf:54:c9:16:7e:50:d3:94: 84:22:25:c5:41:c5:c0:8f:00:8a:d8:c3:7e:1b:92: 84:c6:d6:f3:39:12:eb:13:58:33:d7:91:3e:34:08: 4d:e4:51:19:f8:7b:f5:c1:d8:e8:bc:62:7a:d3:1d: aa:15:8f:e2:93:c9:fa:4f:c0:05:76:fa:b1:a1:43: f5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:74:6D:45:AB:58:4B:F9:01:E9:FF:D1:B4:31:0D:9B:C2:4F:2B:63 X509v3 Authority Key Identifier: keyid:99:76:FB:71:6D:2F:A3:9B:BD:47:3C:6B:34:F1:F3:BD:68:1A:53:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:db:f7:5c:6e:19:99:a6:e6:b0:d9:6f:44:98:bb:f6:45:cc: 74:b1:84:ab:31:ee:31:7f:80:e7:a6:e0:dd:08:22:70:9d:e2: 37:14:b9:7a:d1:52:9a:ab:1b:d9:c5:44:8a:b6:61:c8:d4:f3: 95:09:b6:4c:11:ef:88:70:31:04:fa:dd:ba:0a:bb:84:a1:ce: b5:e9:a5:70:1d:cf:14:2a:07:76:14:1a:5f:72:5b:39:08:d6: 09:0f:80:66:0c:f6:a8:24:50:b9:4a:e0:1a:29:63:e2:ea:34: ba:f5:4c:8c:86:bc:0c:be:e2:6e:1d:89:c3:06:a7:a5:3d:2f: aa:df:0e:65:93:5c:52:70:4a:56:77:52:ae:14:6a:6f:8a:42: 6e:83:f0:6d:a9:7f:60:e3:c0:18:40:dd:6e:2c:21:ea:da:08: b1:81:a6:c8:d9:de:d4:50:5f:cd:ba:28:da:d4:f2:2c:c6:04: 65:f9:68:f4:e5:7a:32:9e:e4:d3:16:34:43:91:ac:f7:cd:48: 76:18:16:07:c4:ce:01:ef:53:2b:b3:57:35:29:38:45:6d:d9: ae:ab:36:ea:fa:22:68:fa:16:90:78:8b:6a:50:99:5c:7f:3d: 40:f8:4a:27:e0:94:7a:a4:53:a0:42:aa:e0:62:0e:9b:d6:c7: f5:56:8e:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY1OTgxMTAvBgNVBAUTKDk5NzZGQjcxNkQyRkEzOUJCRDQ3M0M2QjM0RjFGM0JE NjgxQTUzRTcwHhcNMjUwNDI0MTUxOTU1WhcNMjUwNTAxMTUxOTU1WjAYMRYwFAYD VQQDEw02ODBhNTY5Yy00MDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Sc0uplJmGDPBQG5VK8wg3CS52xCA4Y96AkzA5P0rhwM7xjNGDZ62HC+6zXh XWKJM4oXs2AxiBkugUe9TGVfjZRiS8NoeR0nzbdfFsYQnUrJb/QvbyJkmnecfl5L cCKffQMvC7ojOkTsRkQogbG+O+KnDX7KKC79qttMTBqaIX2MFZUqR9KvmH9zAupU oze6xew+hzEuxasofhFQ0ce9mV7i2lOelaxJF6SzEpTFqoJDtDoR89FWxp0Kv1TJ Fn5Q05SEIiXFQcXAjwCK2MN+G5KExtbzORLrE1gz15E+NAhN5FEZ+Hv1wdjovGJ6 0x2qFY/ik8n6T8AFdvqxoUP1uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKp0bUWr WEv5Aen/0bQxDZvCTytjMB8GA1UdIwQYMBaAFJl2+3FtL6ObvUc8azTx871oGlPn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjU5OC8zRTFEMUIyMjIz MzMxMUUyODU4Q0JDQzUwOEIwMkNEMi9tWGI3Y1cwdm81dTlSenhyTlBIenZXZ2FV LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21YYjdjVzB2bzV1OVJ6eHJOUEh6dldnYVUtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjU5OC8zRTFEMUIyMjIzMzMxMUUyODU4Q0JDQzUwOEIwMkNEMi9tWGI3Y1cwdm81 dTlSenhyTlBIenZXZ2FVLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA2/dcbhmZpuaw2W9EmLv2Rcx0sYSrMe4xf4DnpuDdCCJwneI3FLl6 0VKaqxvZxUSKtmHI1POVCbZMEe+IcDEE+t26CruEoc616aVwHc8UKgd2FBpfcls5 CNYJD4BmDPaoJFC5SuAaKWPi6jS69UyMhrwMvuJuHYnDBqelPS+q3w5lk1xScEpW d1KuFGpvikJug/BtqX9g48AYQN1uLCHq2gixgabI2d7UUF/Nuija1PIsxgRl+Wj0 5XoynuTTFjRDkaz3zUh2GBYHxM4B71Mrs1c1KThFbdmuqzbq+iJo+haQeItqUJlc fz1A+Eon4JR6pFOgQqrgYg6b1sf1Vo4T -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:57 2025 by rpki-client