$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft File: RevxDdQ0xSgZEpy5XhoT7ML81e0.mft (raw, json) Hash identifier: zTKNNng64mciNAw92ELgfT1zsXsyto207hsz1nWm1lw= Subject key identifier: 7F:5E:38:8E:6F:07:78:BC:98:5A:B8:4D:DB:5C:26:67:31:55:EB:90 Authority key identifier: 45:EB:F1:0D:D4:34:C5:28:19:12:9C:B9:5E:1A:13:EC:C2:FC:D5:ED Certificate issuer: /CN=A916ED2B/serialNumber=45EBF10DD434C52819129CB95E1A13ECC2FCD5ED Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RevxDdQ0xSgZEpy5XhoT7ML81e0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft Manifest number: 91 Signing time: Fri 25 Apr 2025 05:25:36 +0000 Manifest this update: Fri 25 Apr 2025 05:25:35 +0000 Manifest next update: Fri 02 May 2025 05:25:35 +0000 Files and hashes: 1: RevxDdQ0xSgZEpy5XhoT7ML81e0.crl (hash: TRQbOE6nQQLkI8al62FxV0oiqDjpM2sLwQKDhyqVVBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.crl rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RevxDdQ0xSgZEpy5XhoT7ML81e0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED2B, serialNumber=45EBF10DD434C52819129CB95E1A13ECC2FCD5ED Validity Not Before: Apr 25 05:25:35 2025 GMT Not After : May 2 05:25:35 2025 GMT Subject: CN=680b1ccf-c6aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:7c:94:69:b2:c0:59:e8:87:2d:a4:51:46:08: a4:85:90:8c:e0:4e:d5:db:9e:66:70:86:b7:83:42: 45:1e:de:50:2b:5a:9b:26:e1:30:d9:45:7c:c3:77: ad:75:f6:76:18:73:55:30:63:68:67:cc:32:83:f7: 15:e6:ef:c7:8f:9e:89:f6:93:a8:a6:46:60:10:7c: 26:80:f5:d7:3b:b2:6b:0f:cf:74:ff:e4:76:ce:36: 9b:cc:ed:37:90:b9:06:b7:f4:c9:19:47:fa:2b:1b: a6:1c:f1:4e:b5:c7:77:c3:d9:ce:ff:ad:db:15:e9: 4d:34:1d:2f:5a:c7:1c:28:81:22:30:8e:57:54:7d: 8c:0d:85:6b:92:3a:46:fe:2f:b2:db:db:c4:71:b1: dc:1d:76:64:a2:d3:df:f7:d8:df:ef:a7:9a:c2:d0: cc:02:59:25:57:75:25:76:2a:9b:8d:36:7a:20:e3: 0e:97:0d:35:a5:1e:e4:98:07:49:5e:7e:45:fa:15: 0e:c3:23:da:ce:2a:56:02:b8:0b:15:05:e8:81:24: 1b:21:d4:f9:4d:7c:cb:c7:ee:ed:9c:8c:4d:0d:a6: 18:4c:76:bc:4e:21:fc:c2:f9:34:ef:25:2c:67:00: 39:d8:0b:ed:d5:a1:69:dc:6a:e1:7c:03:b0:87:31: 3f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5E:38:8E:6F:07:78:BC:98:5A:B8:4D:DB:5C:26:67:31:55:EB:90 X509v3 Authority Key Identifier: keyid:45:EB:F1:0D:D4:34:C5:28:19:12:9C:B9:5E:1A:13:EC:C2:FC:D5:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RevxDdQ0xSgZEpy5XhoT7ML81e0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:b3:bf:58:09:77:8c:d4:cf:63:59:e0:95:75:66:da:af:92: 29:10:90:c1:29:c7:20:11:7e:90:9b:b3:52:05:d0:dc:56:5d: 0d:0e:9e:f4:1f:3e:fe:b0:09:b1:50:ed:2f:8a:26:3c:59:ca: 11:00:94:0d:3a:99:af:60:7d:86:aa:d6:0e:03:93:b3:e1:f9: 14:8e:5b:47:26:4a:c8:8f:77:96:d4:8d:02:83:01:2c:49:49: 13:90:57:aa:78:85:8d:f6:f8:e6:03:a4:cd:41:24:51:61:02: 56:ff:3d:d1:97:0e:ab:5a:3f:f8:73:03:26:04:9c:15:9d:9c: b6:7a:18:3c:e8:b5:4c:16:ba:0e:c0:6d:39:78:59:6d:ff:a1: c5:c2:1f:66:c6:c8:78:d1:53:39:2c:58:cf:d8:f7:90:5c:bb: 2b:38:09:e5:51:fc:2b:03:88:1d:4b:8d:24:c4:1a:b2:e8:ac: fb:5b:78:51:b8:63:df:98:5f:41:01:61:90:bb:20:7b:fd:d2: 21:32:ea:c2:2e:9e:76:01:c6:6b:37:40:56:98:02:07:51:b4: 99:36:70:c7:a1:82:8b:9f:ce:c6:14:81:94:61:1d:a0:a9:69: ab:ee:c3:98:d5:66:c7:9d:fe:0d:10:fb:3a:ca:2c:a1:32:9d: 35:fd:ad:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMkIxMTAvBgNVBAUTKDQ1RUJGMTBERDQzNEM1MjgxOTEyOUNCOTVFMUExM0VD QzJGQ0Q1RUQwHhcNMjUwNDI1MDUyNTM1WhcNMjUwNTAyMDUyNTM1WjAYMRYwFAYD VQQDEw02ODBiMWNjZi1jNmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6nyUabLAWeiHLaRRRgikhZCM4E7V255mcIa3g0JFHt5QK1qbJuEw2UV8w3et dfZ2GHNVMGNoZ8wyg/cV5u/Hj56J9pOopkZgEHwmgPXXO7JrD890/+R2zjabzO03 kLkGt/TJGUf6KxumHPFOtcd3w9nO/63bFelNNB0vWsccKIEiMI5XVH2MDYVrkjpG /i+y29vEcbHcHXZkotPf99jf76eawtDMAlklV3UldiqbjTZ6IOMOlw01pR7kmAdJ Xn5F+hUOwyPazipWArgLFQXogSQbIdT5TXzLx+7tnIxNDaYYTHa8TiH8wvk07yUs ZwA52Avt1aFp3GrhfAOwhzE/QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9eOI5v B3i8mFq4TdtcJmcxVeuQMB8GA1UdIwQYMBaAFEXr8Q3UNMUoGRKcuV4aE+zC/NXt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQyQi8wNEY3QTU4MDQ1 QjExMUVGQkQ1OThCNzdDNEY5QUUwMi9SZXZ4RGRRMHhTZ1pFcHk1WGhvVDdNTDgx ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JldnhEZFEweFNnWkVweTVYaG9UN01MODFlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQyQi8wNEY3QTU4MDQ1QjExMUVGQkQ1OThCNzdDNEY5QUUwMi9SZXZ4RGRRMHhT Z1pFcHk1WGhvVDdNTDgxZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgs79YCXeM1M9jWeCVdWbar5IpEJDBKccgEX6Qm7NSBdDcVl0NDp70 Hz7+sAmxUO0viiY8WcoRAJQNOpmvYH2GqtYOA5Oz4fkUjltHJkrIj3eW1I0CgwEs SUkTkFeqeIWN9vjmA6TNQSRRYQJW/z3Rlw6rWj/4cwMmBJwVnZy2ehg86LVMFroO wG05eFlt/6HFwh9mxsh40VM5LFjP2PeQXLsrOAnlUfwrA4gdS40kxBqy6Kz7W3hR uGPfmF9BAWGQuyB7/dIhMurCLp52AcZrN0BWmAIHUbSZNnDHoYKLn87GFIGUYR2g qWmr7sOY1WbHnf4NEPs6yiyhMp01/a1a -----END CERTIFICATE-----Generated at Sat Apr 26 05:01:31 2025 by rpki-client