$ rpki-client -vvf rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft File: PM59J4idCNUwg0kqqJygm2jw5fA.mft (raw, json) Hash identifier: 7h1MJIeoPc4aY9AFdH1n9W2CYvnMWcHlc8IMbYlbhMI= Subject key identifier: 28:D3:21:7F:F5:03:D2:4A:2E:03:C4:CD:EF:F9:2D:F4:57:30:D2:C9 Authority key identifier: 3C:CE:7D:27:88:9D:08:D5:30:83:49:2A:A8:9C:A0:9B:68:F0:E5:F0 Certificate issuer: /CN=A9173161/serialNumber=3CCE7D27889D08D53083492AA89CA09B68F0E5F0 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft Manifest number: 31 Signing time: Fri 25 Apr 2025 06:39:08 +0000 Manifest this update: Fri 25 Apr 2025 06:39:07 +0000 Manifest next update: Fri 02 May 2025 06:39:07 +0000 Files and hashes: 1: PM59J4idCNUwg0kqqJygm2jw5fA.crl (hash: 5P280y3WPpitDQ5d8mPZ+QUuN19xEQF0xJe5ubPGdWw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.crl rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:39:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173161, serialNumber=3CCE7D27889D08D53083492AA89CA09B68F0E5F0 Validity Not Before: Apr 25 06:39:07 2025 GMT Not After : May 2 06:39:07 2025 GMT Subject: CN=680b2e0b-0182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1c:0a:3a:91:54:bc:b4:81:7e:32:d2:1b:da: 11:23:74:5a:10:75:32:ec:f1:88:f5:12:fb:78:ef: 2c:02:c0:c0:0d:7e:89:5c:08:62:c7:5a:55:63:1b: 64:52:57:98:66:a0:c7:29:de:35:35:ed:b3:b3:58: 46:64:7f:51:c5:88:24:33:97:3a:4b:57:29:01:a8: 78:ea:59:32:09:cc:11:ee:8f:7c:1b:8f:82:26:74: 16:e8:ff:e4:23:10:2d:71:a1:54:2d:6d:fa:51:c8: e0:07:e5:09:34:99:82:c2:23:91:9b:0c:bd:82:d8: 20:e6:90:8b:5c:01:79:89:82:8d:3f:49:25:38:6c: 0f:b3:c6:e6:a8:29:68:71:c2:c8:d2:a4:f8:be:7c: d7:56:56:91:9f:14:fe:36:9f:ce:38:ff:ac:cb:c3: 59:a8:08:b2:d9:76:6c:13:0d:50:61:fc:35:f3:ee: 62:0d:e8:9f:05:a9:48:57:96:39:9e:5b:fe:c4:75: 74:41:ce:ba:74:e8:e2:58:ae:cf:3a:1a:d8:27:e9: 85:b7:a6:6c:1b:c3:c7:b5:2c:62:4f:7f:c3:54:1e: 83:0c:f6:f4:00:a2:9f:31:c7:4f:21:a0:f9:5a:af: 5a:1c:7b:45:d6:92:8e:a1:e9:26:d0:8a:a1:eb:13: d5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D3:21:7F:F5:03:D2:4A:2E:03:C4:CD:EF:F9:2D:F4:57:30:D2:C9 X509v3 Authority Key Identifier: keyid:3C:CE:7D:27:88:9D:08:D5:30:83:49:2A:A8:9C:A0:9B:68:F0:E5:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:6b:0e:d8:fb:40:d5:b4:7e:2f:78:ba:49:f3:83:24:23:37: cc:82:16:e3:b4:55:32:63:33:3c:85:3e:bc:6e:83:e3:e5:70: 6b:66:00:16:f0:49:41:d3:c2:0b:0e:44:50:13:e7:c6:f2:02: 10:44:5e:d1:09:35:a1:3a:30:16:ef:4d:0e:9a:fd:99:fa:68: 9e:35:20:bb:92:28:c6:50:7e:b4:5c:00:2e:9b:35:62:bc:27: 0c:5b:10:c0:04:64:0f:b1:cb:f9:da:3c:35:77:aa:4d:8d:dd: 1d:8c:a6:7b:aa:02:b6:c7:62:2f:5c:25:5a:27:5a:3a:ab:38: 62:93:7f:c9:5b:53:f0:83:02:f0:11:a7:ff:45:ce:73:04:66: 31:38:4a:a7:22:53:8c:88:26:3a:e2:dd:40:a7:e0:0b:d2:fc: 91:c8:02:ed:1f:c2:b5:ac:92:b7:6a:e9:ec:af:09:52:b1:fa: a0:90:f2:b3:43:17:e6:39:9a:f0:06:89:df:be:90:8d:90:14: 9f:d8:29:67:f1:3f:8c:54:9d:7d:a8:2c:cc:c3:3a:05:eb:2f: e0:88:0d:b0:60:f7:f9:ed:4b:48:00:77:5d:c2:c9:19:11:b1: ee:d8:65:12:39:1b:46:90:f3:ee:8d:98:64:5b:97:ed:3d:bc: 72:93:3d:90 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MzE2MTExMC8GA1UEBRMoM0NDRTdEMjc4ODlEMDhENTMwODM0OTJBQTg5Q0EwOUI2 OEYwRTVGMDAeFw0yNTA0MjUwNjM5MDdaFw0yNTA1MDIwNjM5MDdaMBgxFjAUBgNV BAMTDTY4MGIyZTBiLTAxODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEHAo6kVS8tIF+MtIb2hEjdFoQdTLs8Yj1Evt47ywCwMANfolcCGLHWlVjG2RS V5hmoMcp3jU17bOzWEZkf1HFiCQzlzpLVykBqHjqWTIJzBHuj3wbj4ImdBbo/+Qj EC1xoVQtbfpRyOAH5Qk0mYLCI5GbDL2C2CDmkItcAXmJgo0/SSU4bA+zxuaoKWhx wsjSpPi+fNdWVpGfFP42n844/6zLw1moCLLZdmwTDVBh/DXz7mIN6J8FqUhXljme W/7EdXRBzrp06OJYrs86Gtgn6YW3pmwbw8e1LGJPf8NUHoMM9vQAop8xx08hoPla r1oce0XWko6h6SbQiqHrE9UBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKNMhf/UD 0kouA8TN7/kt9Fcw0skwHwYDVR0jBBgwFoAUPM59J4idCNUwg0kqqJygm2jw5fAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczMTYxLzc5QjVGQ0Q0RDkw NzExRUZCMjdGNzg1N0M0RjlBRTAyL1BNNTlKNGlkQ05Vd2cwa3FxSnlnbTJqdzVm QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUE01OUo0aWRDTlV3ZzBrcXFKeWdtMmp3NWZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz MTYxLzc5QjVGQ0Q0RDkwNzExRUZCMjdGNzg1N0M0RjlBRTAyL1BNNTlKNGlkQ05V d2cwa3FxSnlnbTJqdzVmQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFJrDtj7QNW0fi94uknzgyQjN8yCFuO0VTJjMzyFPrxug+PlcGtmABbw SUHTwgsORFAT58byAhBEXtEJNaE6MBbvTQ6a/Zn6aJ41ILuSKMZQfrRcAC6bNWK8 JwxbEMAEZA+xy/naPDV3qk2N3R2MpnuqArbHYi9cJVonWjqrOGKTf8lbU/CDAvAR p/9FznMEZjE4SqciU4yIJjri3UCn4AvS/JHIAu0fwrWskrdq6eyvCVKx+qCQ8rND F+Y5mvAGid++kI2QFJ/YKWfxP4xUnX2oLMzDOgXrL+CIDbBg9/ntS0gAd13CyRkR se7YZRI5G0aQ8+6NmGRbl+09vHKTPZA= -----END CERTIFICATE-----Generated at Sat Apr 26 14:59:17 2025 by rpki-client