$ rpki-client -vvf rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft File: cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft (raw, json) Hash identifier: yrL/HonlCO8W7/Rkje9A0Aif6SE7KE8gTDb7E/fVJNg= Subject key identifier: 51:1B:59:7E:AA:CD:17:CB:A1:50:A3:3A:B0:77:51:E5:8E:3B:C0:32 Authority key identifier: 70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E Certificate issuer: /CN=A918B936/serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E Certificate serial: 20F2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft Manifest number: 20F2 Signing time: Thu 24 Apr 2025 15:57:47 +0000 Manifest this update: Thu 24 Apr 2025 15:57:46 +0000 Manifest next update: Thu 01 May 2025 15:57:46 +0000 Files and hashes: 1: cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl (hash: pjKr5Bhr3FfBGSs+vVHWE1ylZRdygHgS49k4MbxJ718=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8434 (0x20f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B936, serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E Validity Not Before: Apr 24 15:57:46 2025 GMT Not After : May 1 15:57:46 2025 GMT Subject: CN=680a5f7a-8542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:58:b5:41:be:6d:cd:b9:57:32:af:98:4f:c8: df:2c:c7:9f:db:cc:8f:4f:be:f5:61:13:57:ed:c2: b9:a1:6f:09:81:b6:e8:6c:39:1c:a0:12:29:17:ee: d1:8a:31:bd:3f:06:d3:53:ad:01:fc:8f:19:a0:b7: 34:2c:52:a8:ce:e4:c4:53:47:a5:b7:06:5f:f0:3d: 25:f1:c2:d6:92:57:c4:c8:3c:b9:4e:b7:08:ae:60: a9:f0:87:c2:eb:65:fb:84:f9:2b:6c:e1:4c:7f:9c: 12:31:70:5d:cb:f2:2a:c9:8a:98:01:4c:ed:7c:06: 08:c0:3f:2d:59:cf:6a:a8:fe:6e:b7:b5:13:f0:0b: eb:9e:be:8a:06:14:68:39:12:44:93:36:1b:68:47: 20:b6:ae:23:4d:6a:16:f8:3c:9c:77:f2:80:74:73: f7:8e:55:57:04:4b:86:2c:41:3c:8e:db:34:d3:e4: 5b:5e:c4:48:0c:73:09:8d:e5:46:d5:0d:78:a5:56: 3e:f0:a0:dd:a0:a8:7d:47:a5:e4:0e:68:03:92:fb: 64:1a:4f:9c:b9:b5:bf:fb:52:92:45:2b:c1:ee:9c: d9:a8:6c:99:05:bb:ea:de:dd:10:19:5a:57:5f:da: 60:f1:d6:e3:6b:9c:6c:1d:4f:d3:8a:c0:e4:fd:72: 94:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:1B:59:7E:AA:CD:17:CB:A1:50:A3:3A:B0:77:51:E5:8E:3B:C0:32 X509v3 Authority Key Identifier: keyid:70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:3c:d7:95:2a:3d:5b:98:8d:1b:7c:66:e5:64:ba:33:1e:49: 8e:f9:d2:cf:49:3d:99:d4:4d:65:24:f7:d2:15:de:c9:26:37: ed:13:d1:52:04:7e:c2:34:0f:47:1d:44:2d:f5:99:ea:32:00: be:4e:6d:1f:3f:cd:51:16:c2:94:1a:a9:d5:44:9f:2b:98:7d: ff:ce:c1:2d:a8:a6:3e:3d:45:fd:60:b1:02:a7:3f:9a:4a:17: fb:8d:35:1e:de:8b:80:34:7b:7e:99:87:33:13:e5:ee:0b:aa: 8f:1f:2f:46:93:ef:62:45:a3:2b:8c:db:58:d1:be:63:c8:1c: 7a:49:5d:af:69:be:32:71:0b:01:58:3d:a5:e9:fc:0e:e2:8c: 5f:9f:2f:31:09:07:ed:aa:3e:7e:cf:85:02:ca:2a:37:eb:a1: c8:6f:f3:02:f9:17:8f:6b:98:93:2e:51:9e:de:94:64:ee:ca: 2c:21:a2:22:1f:41:07:1a:2a:08:fd:35:4f:6c:2b:c9:89:4d: db:3f:d0:f5:0f:ff:34:18:84:1b:e9:54:0d:fb:11:38:92:da: 5a:5b:d3:a1:56:07:fb:65:7b:84:23:59:4a:57:9d:3e:20:d0: 1f:68:c1:2b:a3:95:ed:0d:66:ed:1a:c5:b5:f0:45:dd:24:3e: a7:a9:8d:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI5MzYxMTAvBgNVBAUTKDcwNDVBNzE4QkJFQjI4OUYxOEQxRjkzMEZBMzMyRDYz MzJEOTU1NUUwHhcNMjUwNDI0MTU1NzQ2WhcNMjUwNTAxMTU1NzQ2WjAYMRYwFAYD VQQDEw02ODBhNWY3YS04NTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtli1Qb5tzblXMq+YT8jfLMef28yPT771YRNX7cK5oW8JgbbobDkcoBIpF+7R ijG9PwbTU60B/I8ZoLc0LFKozuTEU0eltwZf8D0l8cLWklfEyDy5TrcIrmCp8IfC 62X7hPkrbOFMf5wSMXBdy/IqyYqYAUztfAYIwD8tWc9qqP5ut7UT8Avrnr6KBhRo ORJEkzYbaEcgtq4jTWoW+Dycd/KAdHP3jlVXBEuGLEE8jts00+RbXsRIDHMJjeVG 1Q14pVY+8KDdoKh9R6XkDmgDkvtkGk+cubW/+1KSRSvB7pzZqGyZBbvq3t0QGVpX X9pg8dbja5xsHU/TisDk/XKUZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEbWX6q zRfLoVCjOrB3UeWOO8AyMB8GA1UdIwQYMBaAFHBFpxi76yifGNH5MPozLWMy2VVe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjkzNi80MDc1MTIxQUYw Q0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9jRVduR0x2cktKOFkwZmt3LWpNdFl6TFpW VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NFV25HTHZyS0o4WTBma3ctak10WXpMWlZWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjkzNi80MDc1MTIxQUYwQ0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9jRVduR0x2cktK OFkwZmt3LWpNdFl6TFpWVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzPNeVKj1bmI0bfGblZLozHkmO+dLPST2Z1E1lJPfSFd7JJjftE9FS BH7CNA9HHUQt9ZnqMgC+Tm0fP81RFsKUGqnVRJ8rmH3/zsEtqKY+PUX9YLECpz+a Shf7jTUe3ouANHt+mYczE+XuC6qPHy9Gk+9iRaMrjNtY0b5jyBx6SV2vab4ycQsB WD2l6fwO4oxfny8xCQftqj5+z4UCyio366HIb/MC+RePa5iTLlGe3pRk7sosIaIi H0EHGioI/TVPbCvJiU3bP9D1D/80GIQb6VQN+xE4ktpaW9OhVgf7ZXuEI1lKV50+ INAfaMEro5XtDWbtGsW18EXdJD6nqY3l -----END CERTIFICATE-----Generated at Sat Apr 26 12:28:15 2025 by rpki-client