$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft File: FzXLqe4W_oXz0oP6W7lHnZryzIY.mft (raw, json) Hash identifier: PByiIRLR39IDX0+spGDUrrvDuUehJETkPezZG60xULI= Subject key identifier: B7:CF:D7:77:C8:D3:BE:C9:71:10:49:CF:42:B7:54:FD:90:56:E7:D2 Authority key identifier: 17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86 Certificate issuer: /CN=A91757CB/serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86 Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft Manifest number: C4 Signing time: Fri 25 Apr 2025 04:49:32 +0000 Manifest this update: Fri 25 Apr 2025 04:49:31 +0000 Manifest next update: Fri 02 May 2025 04:49:31 +0000 Files and hashes: 1: FzXLqe4W_oXz0oP6W7lHnZryzIY.crl (hash: RoEXvQwrxyWz/oKE9Kv0fuSc/1beyB22J+L0bDDJztM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:49:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91757CB, serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86 Validity Not Before: Apr 25 04:49:31 2025 GMT Not After : May 2 04:49:31 2025 GMT Subject: CN=680b145b-280c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:09:a6:23:a2:77:5f:cb:3d:8a:5c:e1:d3:7a: 23:0b:69:90:51:b5:96:06:5e:53:a6:17:34:02:1a: ee:75:8e:ef:a5:9b:29:b3:9f:70:64:3d:b1:3a:9c: 50:3f:dd:4c:59:59:b2:e3:29:85:4c:81:85:61:6d: ae:ea:28:fb:4d:eb:1b:f4:02:25:e8:24:71:8c:43: 6d:04:d3:83:59:bc:09:75:a9:be:5f:96:8c:e4:a6: 0b:f9:12:7e:42:15:a9:f5:57:fc:89:07:40:c9:76: 0a:05:a1:45:73:52:8d:ed:42:48:c5:fb:53:08:8e: 10:6f:de:6d:77:83:44:30:81:c3:c6:b5:1f:45:e9: 5e:db:0c:0c:dd:83:1b:50:bf:c5:ca:6b:da:2d:d0: 28:3f:97:46:00:94:d5:f3:d0:7f:92:2a:64:22:3f: 3e:2c:de:31:6d:5b:5c:eb:42:04:b8:52:83:3c:d9: f7:4d:f6:a6:d8:3f:69:cc:ef:f0:03:47:a9:48:d4: 12:6b:18:76:b4:0a:3f:f6:6e:44:ef:a9:20:a2:78: 35:df:ab:3c:e2:cf:e2:8c:13:00:95:d8:17:85:85: 25:38:41:3b:0e:a7:8f:5b:9d:85:7f:09:b0:7e:c1: a4:06:60:07:0e:ba:10:0f:90:ed:6e:72:93:ba:05: 86:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:CF:D7:77:C8:D3:BE:C9:71:10:49:CF:42:B7:54:FD:90:56:E7:D2 X509v3 Authority Key Identifier: keyid:17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:48:80:26:cd:42:b6:70:78:7e:c1:98:e8:a9:89:7e:4e:3a: f3:6a:18:66:db:db:f1:7e:27:c2:e1:26:5a:a0:b5:d5:15:0f: c2:bb:d3:2a:37:f5:b4:35:00:51:d5:f3:d2:d5:d2:3e:f1:3d: 08:91:23:62:25:10:72:e2:5f:7e:78:fd:1e:31:12:31:bf:99: 2e:25:66:7c:4b:9c:34:33:da:a0:4b:e2:83:2b:32:15:36:e5: 65:2d:8d:48:42:0e:8e:e0:4f:a3:5f:e6:5d:e5:9c:df:99:57: 4b:6a:00:b4:37:51:ba:e1:47:99:49:01:2a:9d:aa:3a:1a:f7: 60:bb:9e:b8:3d:33:8d:7e:87:41:28:6f:ac:af:69:0b:06:b0: f3:b6:0d:fc:7a:bc:10:ed:bb:82:2e:fc:1a:3d:27:e5:91:9a: ec:75:4a:06:c7:72:39:1b:6a:db:ef:27:d8:b4:d7:42:a1:c3: 81:f6:e1:5d:21:85:19:ba:0f:6c:22:f0:a1:66:39:9b:8e:4b: 05:28:7c:b9:bd:0a:88:54:34:23:26:7c:97:79:17:9b:d1:01: e9:84:7c:e5:d4:4f:a3:a6:e1:a6:85:44:53:be:aa:96:9b:ee: 4b:19:e2:fe:16:83:42:23:ff:21:ab:0f:53:24:38:ed:b4:74: 2d:53:48:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3Q0IxMTAvBgNVBAUTKDE3MzVDQkE5RUUxNkZFODVGM0QyODNGQTVCQjk0NzlE OUFGMkNDODYwHhcNMjUwNDI1MDQ0OTMxWhcNMjUwNTAyMDQ0OTMxWjAYMRYwFAYD VQQDEw02ODBiMTQ1Yi0yODBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlgmmI6J3X8s9ilzh03ojC2mQUbWWBl5Tphc0AhrudY7vpZsps59wZD2xOpxQ P91MWVmy4ymFTIGFYW2u6ij7Tesb9AIl6CRxjENtBNODWbwJdam+X5aM5KYL+RJ+ QhWp9Vf8iQdAyXYKBaFFc1KN7UJIxftTCI4Qb95td4NEMIHDxrUfRele2wwM3YMb UL/FymvaLdAoP5dGAJTV89B/kipkIj8+LN4xbVtc60IEuFKDPNn3Tfam2D9pzO/w A0epSNQSaxh2tAo/9m5E76kgong136s84s/ijBMAldgXhYUlOEE7DqePW52Ffwmw fsGkBmAHDroQD5DtbnKTugWGLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfP13fI 077JcRBJz0K3VP2QVufSMB8GA1UdIwQYMBaAFBc1y6nuFv6F89KD+lu5R52a8syG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTdDQi80RUQyMTJEQ0Yy RjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9GelhMcWU0V19vWHowb1A2VzdsSG5acnl6 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z6WExxZTRXX29YejBvUDZXN2xIblpyeXpJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTdDQi80RUQyMTJEQ0YyRjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9GelhMcWU0V19v WHowb1A2VzdsSG5acnl6SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsSIAmzUK2cHh+wZjoqYl+Tjrzahhm29vxfifC4SZaoLXVFQ/Cu9Mq N/W0NQBR1fPS1dI+8T0IkSNiJRBy4l9+eP0eMRIxv5kuJWZ8S5w0M9qgS+KDKzIV NuVlLY1IQg6O4E+jX+Zd5ZzfmVdLagC0N1G64UeZSQEqnao6Gvdgu564PTONfodB KG+sr2kLBrDztg38erwQ7buCLvwaPSflkZrsdUoGx3I5G2rb7yfYtNdCocOB9uFd IYUZug9sIvChZjmbjksFKHy5vQqIVDQjJnyXeReb0QHphHzl1E+jpuGmhURTvqqW m+5LGeL+FoNCI/8hqw9TJDjttHQtU0il -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:53 2025 by rpki-client