$ rpki-client -vvf rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft File: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft (raw, json) Hash identifier: UBxDwu/h8glyWTIIrYWAYDM/8lpcfd9wYyK57Rm26js= Subject key identifier: 16:6B:FB:B2:0E:51:99:70:0A:C0:53:7F:91:9E:C1:32:D6:12:DB:E5 Authority key identifier: 4E:27:6F:E9:48:13:A5:D7:08:AF:86:6D:61:D6:21:34:0F:C0:51:B2 Certificate issuer: /CN=A91733A8/serialNumber=4E276FE94813A5D708AF866D61D621340FC051B2 Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft Manifest number: 0172 Signing time: Thu 24 Apr 2025 20:12:34 +0000 Manifest this update: Thu 24 Apr 2025 20:12:34 +0000 Manifest next update: Thu 01 May 2025 20:12:34 +0000 Files and hashes: 1: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl (hash: 06FbwQ1u71fVdn/QTBPs75WBQc8dZAgJY4EyiW3fQd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:12:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91733A8, serialNumber=4E276FE94813A5D708AF866D61D621340FC051B2 Validity Not Before: Apr 24 20:12:34 2025 GMT Not After : May 1 20:12:34 2025 GMT Subject: CN=680a9b32-85ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:44:ce:24:90:d9:6d:44:db:11:bd:b3:5b:a4: b4:9a:ba:f6:65:40:cd:83:a5:94:6c:21:55:78:09: 53:fd:84:64:2f:7e:2c:b9:6a:7d:54:0a:fb:75:01: 9d:42:83:0f:d4:b5:4c:59:36:69:19:5b:de:e3:08: 06:5a:ff:b7:c4:f0:87:36:89:d2:59:33:09:a4:84: 98:f8:97:66:df:4e:fb:bd:e4:64:5d:dc:17:88:fd: 79:aa:2a:6b:20:68:1a:c0:24:48:61:a8:6c:ed:a1: c5:98:43:11:67:84:b4:5f:b4:38:98:4f:85:6a:bb: e8:03:7d:6e:64:05:28:8e:f0:36:15:71:31:70:22: a3:11:f0:67:20:27:66:4e:fe:5f:18:bf:70:b8:8c: 36:9a:a1:35:79:ed:0a:f1:75:14:99:26:a6:46:a1: da:2a:61:08:48:d9:a5:e9:20:39:9e:f5:9d:d4:1a: 8f:c5:7e:45:60:13:a1:4f:e4:8d:f8:66:8b:41:67: de:e2:6d:7e:ac:6d:c0:b9:4f:31:5d:e2:d2:49:12: ab:70:e9:b3:0d:ca:f8:02:23:bd:01:88:02:51:d4: 6b:b0:38:a5:fe:0d:74:dd:0c:4c:3e:61:8c:e3:86: 69:de:d3:71:eb:ef:ee:01:87:a2:95:07:13:68:6f: 66:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:6B:FB:B2:0E:51:99:70:0A:C0:53:7F:91:9E:C1:32:D6:12:DB:E5 X509v3 Authority Key Identifier: keyid:4E:27:6F:E9:48:13:A5:D7:08:AF:86:6D:61:D6:21:34:0F:C0:51:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:65:7b:f0:2c:fa:e0:07:04:57:0b:ff:25:05:4a:72:4e:dc: 0d:4d:0d:aa:b0:53:18:ef:44:9e:bb:26:14:cd:ff:91:87:27: 20:2d:17:a1:c4:c6:69:d6:73:fc:0d:d7:2a:19:b5:56:d9:1e: 85:83:b2:55:37:80:e3:b8:8c:c6:33:e9:09:b6:f3:46:6f:2d: b6:3e:ec:ca:00:5d:27:a5:53:96:bf:f7:53:75:22:0c:79:a9: 7b:30:df:c7:d9:8e:03:3c:95:a8:1b:dc:15:2e:bb:43:48:f0: ca:85:c5:c2:58:d5:07:69:c5:30:a7:8a:08:12:95:5a:23:6c: bb:ba:d6:a4:55:4b:8a:dc:79:47:37:d9:79:3d:6a:9e:63:04: 8f:9a:b9:ed:7a:65:83:b8:df:57:51:1b:ee:1c:ff:2f:bb:e2: 1b:cf:10:95:ff:60:80:22:e3:ef:a5:c9:73:14:64:7f:15:aa: 6f:d4:6e:ca:d4:3c:e2:86:0e:38:e4:12:b4:44:5e:aa:94:cb: 5d:04:db:a9:0f:67:d5:ed:fc:b9:f7:26:c8:0d:8a:7e:5b:46: 3c:0f:cf:00:a3:0f:81:27:0e:72:3f:22:9b:c8:6e:59:53:0c: fc:01:df:a3:b2:24:e2:5d:27:4b:fb:f7:07:d1:ee:f1:18:f1: 08:4e:02:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMzQTgxMTAvBgNVBAUTKDRFMjc2RkU5NDgxM0E1RDcwOEFGODY2RDYxRDYyMTM0 MEZDMDUxQjIwHhcNMjUwNDI0MjAxMjM0WhcNMjUwNTAxMjAxMjM0WjAYMRYwFAYD VQQDEw02ODBhOWIzMi04NWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0TOJJDZbUTbEb2zW6S0mrr2ZUDNg6WUbCFVeAlT/YRkL34suWp9VAr7dQGd QoMP1LVMWTZpGVve4wgGWv+3xPCHNonSWTMJpISY+Jdm3077veRkXdwXiP15qipr IGgawCRIYahs7aHFmEMRZ4S0X7Q4mE+FarvoA31uZAUojvA2FXExcCKjEfBnICdm Tv5fGL9wuIw2mqE1ee0K8XUUmSamRqHaKmEISNml6SA5nvWd1BqPxX5FYBOhT+SN +GaLQWfe4m1+rG3AuU8xXeLSSRKrcOmzDcr4AiO9AYgCUdRrsDil/g103QxMPmGM 44Zp3tNx6+/uAYeilQcTaG9m2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZr+7IO UZlwCsBTf5GewTLWEtvlMB8GA1UdIwQYMBaAFE4nb+lIE6XXCK+GbWHWITQPwFGy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzNBOC9FODY0NDBEOEVG QzQxMUVEQTBGMTYzNDhDNEY5QUUwMi9UaWR2NlVnVHBkY0lyNFp0WWRZaE5BX0FV YkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL1RpZHY2VWdUcGRjSXI0WnRZZFloTkFfQVViSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzNBOC9FODY0NDBEOEVGQzQxMUVEQTBGMTYzNDhDNEY5QUUwMi9UaWR2NlVnVHBk Y0lyNFp0WWRZaE5BX0FVYkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHZXvwLPrgBwRXC/8lBUpyTtwNTQ2qsFMY70SeuyYUzf+RhycgLReh xMZp1nP8DdcqGbVW2R6Fg7JVN4DjuIzGM+kJtvNGby22PuzKAF0npVOWv/dTdSIM eal7MN/H2Y4DPJWoG9wVLrtDSPDKhcXCWNUHacUwp4oIEpVaI2y7utakVUuK3HlH N9l5PWqeYwSPmrntemWDuN9XURvuHP8vu+IbzxCV/2CAIuPvpclzFGR/Fapv1G7K 1Dzihg445BK0RF6qlMtdBNupD2fV7fy59ybIDYp+W0Y8D88Aow+BJw5yPyKbyG5Z Uwz8Ad+jsiTiXSdL+/cH0e7xGPEITgIs -----END CERTIFICATE-----Generated at Sat Apr 26 16:50:31 2025 by rpki-client