$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft File: AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft (raw, json) Hash identifier: pAlAsFNOUpeqfJCa+iG9OVSlZ0leSc3bSK0h6MppYoA= Subject key identifier: 09:9D:C4:22:F5:BC:CF:56:9D:76:1A:A1:3E:52:85:63:10:12:46:61 Authority key identifier: 01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E Certificate issuer: /CN=A917AB5E/serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E Certificate serial: 3473 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft Manifest number: 3473 Signing time: Thu 24 Apr 2025 15:11:36 +0000 Manifest this update: Thu 24 Apr 2025 15:11:36 +0000 Manifest next update: Thu 01 May 2025 15:11:36 +0000 Files and hashes: 1: AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl (hash: PIIW3R9d0rn4bHtpOr04IIhER1j78JCPWNo8dPvWb+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13427 (0x3473) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AB5E, serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E Validity Not Before: Apr 24 15:11:36 2025 GMT Not After : May 1 15:11:36 2025 GMT Subject: CN=680a54a8-7c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2a:31:1a:ee:a2:64:d6:9c:9e:37:2f:fc:76: 20:ed:59:02:dd:1f:14:94:89:10:81:a6:d2:83:1c: ea:a7:35:39:7e:66:24:5d:c0:6b:27:f3:14:0a:ed: 81:32:e2:18:4c:c7:92:b4:2b:94:98:2f:66:65:31: 25:a5:ea:a3:8c:fa:6b:65:6a:72:cb:1d:6f:db:95: 35:0d:fd:77:9d:ba:42:80:3d:67:a0:d5:01:20:65: 14:de:e7:f7:e1:3b:a1:d4:75:9d:a7:6d:b7:27:67: 48:c3:6d:50:49:4c:d8:bb:4a:37:2c:d7:47:5f:5d: 20:01:dd:cd:dd:dd:02:d4:8a:eb:7e:69:66:ce:78: e4:92:39:ea:38:03:8e:d0:66:25:53:e9:df:41:6e: 39:53:6c:76:30:33:4f:de:3c:7f:f5:d6:f1:92:2a: 5a:e2:fb:13:4e:62:c5:1f:f5:a2:79:b6:49:60:b3: 17:84:9f:8c:f5:2c:dd:7d:e6:79:2d:b2:98:ff:3a: 9a:19:48:81:fa:81:b7:09:b7:05:68:73:12:c0:1a: 21:ad:24:50:5b:f7:91:eb:17:f4:c8:e3:0e:6e:59: f5:27:8a:ab:e0:1d:e9:42:30:2e:44:82:fc:d3:a6: f8:af:35:0f:78:d1:e3:91:6d:0b:da:31:e0:51:f0: e4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:9D:C4:22:F5:BC:CF:56:9D:76:1A:A1:3E:52:85:63:10:12:46:61 X509v3 Authority Key Identifier: keyid:01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:36:9a:d2:b5:2f:2c:ec:c4:39:6b:dc:02:a7:81:da:a7:33: 43:9e:e9:e8:a1:04:73:b4:98:9c:e6:a5:96:30:91:d7:1e:d3: cd:11:5a:c6:1d:a2:47:ef:69:05:01:c6:0d:d3:d5:de:b3:15: 1e:74:e6:a8:7b:88:91:a2:dd:eb:5b:38:38:a5:29:be:ca:16: c0:5f:5e:59:7b:f7:0f:dc:2c:8b:ea:44:be:49:02:10:ad:66: 19:fc:06:40:b4:73:a4:b2:4f:d0:ce:f3:7f:a7:6d:3a:bd:2e: 9b:6c:12:5a:80:ad:c6:8e:91:54:cc:58:40:eb:5a:a9:3c:b7: fd:d0:f0:09:3b:49:46:cc:7b:2b:c5:d4:49:8b:f0:c9:77:60: fd:db:61:16:27:22:55:4e:d0:1d:dc:68:7b:d8:ff:74:84:c6: 37:83:af:f1:d0:9c:d8:10:8f:e5:65:bd:21:a9:1a:d4:ac:07: e1:51:b8:e7:fb:7c:8c:a2:15:80:e6:09:33:06:72:9d:1d:d9: 98:b7:1d:ae:d9:a7:b4:5e:2a:23:f3:4c:22:95:30:84:53:e1: c1:0d:98:b7:d4:01:69:1e:e1:7d:6e:0e:0c:b8:48:ed:42:ff: de:82:c6:64:05:e2:9c:fc:fd:96:af:9b:e8:9d:7f:da:66:75: be:d3:92:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FCNUUxMTAvBgNVBAUTKDAxMUQ2MUIyMzNBREYzMENEMjQ3NTYyMTI0QkI3MThC QzYzQUQ2NEUwHhcNMjUwNDI0MTUxMTM2WhcNMjUwNTAxMTUxMTM2WjAYMRYwFAYD VQQDEw02ODBhNTRhOC03YzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCoxGu6iZNacnjcv/HYg7VkC3R8UlIkQgabSgxzqpzU5fmYkXcBrJ/MUCu2B MuIYTMeStCuUmC9mZTElpeqjjPprZWpyyx1v25U1Df13nbpCgD1noNUBIGUU3uf3 4Tuh1HWdp223J2dIw21QSUzYu0o3LNdHX10gAd3N3d0C1IrrfmlmznjkkjnqOAOO 0GYlU+nfQW45U2x2MDNP3jx/9dbxkipa4vsTTmLFH/WiebZJYLMXhJ+M9SzdfeZ5 LbKY/zqaGUiB+oG3CbcFaHMSwBohrSRQW/eR6xf0yOMObln1J4qr4B3pQjAuRIL8 06b4rzUPeNHjkW0L2jHgUfDk8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmdxCL1 vM9WnXYaoT5ShWMQEkZhMB8GA1UdIwQYMBaAFAEdYbIzrfMM0kdWISS7cYvGOtZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUI1RS9GNTY1QUREMjFE QTUxMUUyODNEM0VGOUMwOEIwMkNEMi9BUjFoc2pPdDh3elNSMVloSkx0eGk4WTYx azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FSMWhzak90OHd6U1IxWWhKTHR4aThZNjFrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUI1RS9GNTY1QUREMjFEQTUxMUUyODNEM0VGOUMwOEIwMkNEMi9BUjFoc2pPdDh3 elNSMVloSkx0eGk4WTYxazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGNprStS8s7MQ5a9wCp4HapzNDnunooQRztJic5qWWMJHXHtPNEVrG HaJH72kFAcYN09XesxUedOaoe4iRot3rWzg4pSm+yhbAX15Ze/cP3CyL6kS+SQIQ rWYZ/AZAtHOksk/QzvN/p206vS6bbBJagK3GjpFUzFhA61qpPLf90PAJO0lGzHsr xdRJi/DJd2D922EWJyJVTtAd3Gh72P90hMY3g6/x0JzYEI/lZb0hqRrUrAfhUbjn +3yMohWA5gkzBnKdHdmYtx2u2ae0Xioj80wilTCEU+HBDZi31AFpHuF9bg4MuEjt Qv/egsZkBeKc/P2Wr5vonX/aZnW+05I5 -----END CERTIFICATE-----Generated at Sat Apr 26 14:58:40 2025 by rpki-client