$ rpki-client -vvf rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft File: SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft (raw, json) Hash identifier: +8pCuy8tm1CL4dhFewxmewxh8srulKChZYJuc/uFqOg= Subject key identifier: 04:2F:C7:2A:E9:CD:26:90:2E:DF:9F:3B:02:6E:18:07:9E:0F:B8:BC Authority key identifier: 48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E Certificate issuer: /CN=A918387F/serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E Certificate serial: 0620 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft Manifest number: 0620 Signing time: Thu 24 Apr 2025 22:31:41 +0000 Manifest this update: Thu 24 Apr 2025 22:31:41 +0000 Manifest next update: Thu 01 May 2025 22:31:41 +0000 Files and hashes: 1: SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl (hash: 5gLZeUSeWQIIZQKd7TS1xsR8OLXKW3mX4nSlRnuU6qQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1568 (0x620) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918387F, serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E Validity Not Before: Apr 24 22:31:41 2025 GMT Not After : May 1 22:31:41 2025 GMT Subject: CN=680abbcd-4af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:81:3b:61:0e:c9:1f:2b:9f:8d:67:ae:65:57: 18:a3:8c:cb:5a:c7:20:8a:20:d8:0c:91:a5:1a:d5: cf:28:f8:1a:29:b0:ee:1d:f1:78:6c:67:87:49:cd: 29:e6:6f:f0:86:4c:1f:01:9a:b7:2f:82:a2:90:d9: fb:c5:a1:bc:1c:6b:6f:09:fd:4b:09:06:96:f4:1c: 26:30:db:9c:5c:92:27:03:fe:47:fc:de:fa:81:1c: d3:79:c1:ea:9a:bd:f9:1a:b6:ea:5e:e2:1d:02:61: 50:8c:d3:ee:5d:04:24:94:2e:2b:27:89:55:e3:6d: 64:6b:7d:f5:6b:7c:2a:fb:8e:f5:a7:35:84:6a:7d: 96:3d:32:73:b6:a8:92:49:2b:6e:93:00:1b:3c:e9: 52:36:c8:88:26:b5:b8:b4:f4:94:53:b1:e2:22:66: 12:68:cc:a0:ea:85:95:0d:37:f8:c1:42:2b:d3:f1: 9b:12:93:ec:02:6d:3a:73:d5:82:c8:c4:9e:12:df: 91:ed:7d:2e:4d:e4:35:02:5d:81:c7:9f:ed:40:a8: 2a:84:75:ad:35:53:89:0c:15:45:5e:68:43:d1:77: 8b:2c:38:82:2b:b8:22:11:89:f5:f3:f7:f5:60:0e: d7:e3:51:1e:f1:53:5d:36:10:fe:18:53:70:c1:ee: df:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:2F:C7:2A:E9:CD:26:90:2E:DF:9F:3B:02:6E:18:07:9E:0F:B8:BC X509v3 Authority Key Identifier: keyid:48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:c4:e3:a5:ea:c9:7d:aa:7a:e9:4a:82:c8:d4:a4:26:18:71: c3:5f:71:5f:d6:60:a6:25:97:02:95:84:91:db:6a:83:00:cf: bc:8b:10:a1:e4:02:83:42:d1:12:e4:65:c8:1c:5b:74:b9:9a: e7:3f:bd:de:17:ee:0a:93:d6:c4:b6:d2:aa:6b:b7:be:94:64: 38:18:b9:c8:ad:8f:a6:77:66:9a:74:40:7f:29:96:19:ee:15: 9f:ee:25:aa:a3:de:96:a0:cc:cd:c8:d3:c1:6d:e3:0c:ed:5b: a4:3d:d2:98:eb:9e:37:16:40:21:0b:a7:46:b3:be:12:3c:fa: 47:bd:7f:89:31:ae:ef:fc:29:15:3e:70:f2:8e:11:4e:25:d3: 8a:83:85:ea:bc:1b:55:3c:f6:42:dd:c2:9d:77:ca:6e:03:bf: 59:76:74:15:24:1c:8f:fe:8e:cb:86:83:a5:74:dd:0c:90:2e: 5c:59:43:25:c4:e3:cd:84:8f:fe:b4:30:fd:41:cc:98:97:74: 82:9a:4a:b9:64:1d:00:5d:1f:f8:ee:eb:fe:e8:06:6c:86:2e: 9e:5c:e8:1d:20:ed:bd:62:7d:2a:25:5e:56:50:6e:0a:35:15: d6:82:98:aa:96:be:c6:ed:a9:3e:5d:f5:dc:85:e4:8c:8b:db: cd:a0:7c:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4N0YxMTAvBgNVBAUTKDQ4MEJDRDlFRUE4OEYwQTZEQTE3REY5ODQzQjlCQTZG NTlDMjdFOUUwHhcNMjUwNDI0MjIzMTQxWhcNMjUwNTAxMjIzMTQxWjAYMRYwFAYD VQQDEw02ODBhYmJjZC00YWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4E7YQ7JHyufjWeuZVcYo4zLWscgiiDYDJGlGtXPKPgaKbDuHfF4bGeHSc0p 5m/whkwfAZq3L4KikNn7xaG8HGtvCf1LCQaW9BwmMNucXJInA/5H/N76gRzTecHq mr35GrbqXuIdAmFQjNPuXQQklC4rJ4lV421ka331a3wq+471pzWEan2WPTJztqiS SStukwAbPOlSNsiIJrW4tPSUU7HiImYSaMyg6oWVDTf4wUIr0/GbEpPsAm06c9WC yMSeEt+R7X0uTeQ1Al2Bx5/tQKgqhHWtNVOJDBVFXmhD0XeLLDiCK7giEYn18/f1 YA7X41Ee8VNdNhD+GFNwwe7fWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQvxyrp zSaQLt+fOwJuGAeeD7i8MB8GA1UdIwQYMBaAFEgLzZ7qiPCm2hffmEO5um9Zwn6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg3Ri9BQkEyMTk2Qzkz NDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9TQXZObnVxSThLYmFGOS1ZUTdtNmIxbkNm cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1NBdk5udXFJOEtiYUY5LVlRN202YjFuQ2ZwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzg3Ri9BQkEyMTk2QzkzNDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9TQXZObnVxSThL YmFGOS1ZUTdtNmIxbkNmcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBExOOl6sl9qnrpSoLI1KQmGHHDX3Ff1mCmJZcClYSR22qDAM+8ixCh 5AKDQtES5GXIHFt0uZrnP73eF+4Kk9bEttKqa7e+lGQ4GLnIrY+md2aadEB/KZYZ 7hWf7iWqo96WoMzNyNPBbeMM7VukPdKY6543FkAhC6dGs74SPPpHvX+JMa7v/CkV PnDyjhFOJdOKg4XqvBtVPPZC3cKdd8puA79ZdnQVJByP/o7LhoOldN0MkC5cWUMl xOPNhI/+tDD9QcyYl3SCmkq5ZB0AXR/47uv+6AZshi6eXOgdIO29Yn0qJV5WUG4K NRXWgpiqlr7G7ak+XfXcheSMi9vNoHy3 -----END CERTIFICATE-----Generated at Sat Apr 26 17:05:08 2025 by rpki-client