$ rpki-client -vvf rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft File: CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft (raw, json) Hash identifier: pTmwZGXYk7MLVnwiXO0mKerZFWSIMNdokEVtO40yFCc= Subject key identifier: F3:2B:33:DE:8F:51:8D:DB:EC:EC:0C:49:ED:81:CD:47:11:E1:EF:DF Authority key identifier: 09:11:E9:9A:AD:F6:64:F0:39:92:9C:AB:BB:48:74:A3:A1:61:CA:AD Certificate issuer: /CN=A91937EA/serialNumber=0911E99AADF664F039929CABBB4874A3A161CAAD Certificate serial: 068B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRHpmq32ZPA5kpyru0h0o6Fhyq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft Manifest number: 0689 Signing time: Thu 24 Apr 2025 22:02:33 +0000 Manifest this update: Thu 24 Apr 2025 22:02:32 +0000 Manifest next update: Thu 01 May 2025 22:02:32 +0000 Files and hashes: 1: CRHpmq32ZPA5kpyru0h0o6Fhyq0.crl (hash: graDjhrbqeGL62oi1zXCt8eZNCDeIKnvnH6b5aeXUo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.crl rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRHpmq32ZPA5kpyru0h0o6Fhyq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1675 (0x68b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91937EA, serialNumber=0911E99AADF664F039929CABBB4874A3A161CAAD Validity Not Before: Apr 24 22:02:32 2025 GMT Not After : May 1 22:02:32 2025 GMT Subject: CN=680ab4f9-6c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0b:ba:5e:9c:9f:b8:52:cc:5e:a8:7e:5c:32: 8b:ac:f9:c7:4a:c3:f3:46:ef:20:22:18:7f:36:74: 3e:f1:bf:49:c2:e9:77:f5:d2:45:f9:0c:1e:30:9e: b2:e3:23:ac:20:be:ba:5e:37:07:0a:04:7f:dc:c4: f5:ad:35:7c:4a:92:7d:d1:68:fd:be:62:f1:11:58: 92:55:53:f8:6e:17:b0:3e:38:87:11:b2:13:7c:4a: c4:21:15:42:be:f6:e0:32:e6:a2:b9:72:c4:f1:64: 0a:7c:42:9a:f0:d0:7c:92:7e:b4:2b:21:c6:d2:71: ac:24:b6:e3:0c:21:05:79:70:51:a5:96:81:e0:0a: c4:9a:c0:4e:6f:f0:89:2d:bb:aa:ea:29:d5:03:70: 32:41:a3:a7:f7:3e:82:51:69:3c:e4:9c:75:27:07: 76:f2:01:dd:f4:7b:a3:36:08:85:38:e9:db:36:0f: 2e:20:f1:49:13:9a:34:a4:51:f8:f6:20:46:27:21: e7:c2:c6:b0:5b:92:52:1b:05:c0:a3:b7:0b:40:e0: 58:ed:dc:e2:f5:03:12:0c:0b:e9:6a:20:41:22:43: df:1b:1c:d6:b7:99:3e:01:01:bc:6a:45:c2:9f:5b: dd:31:9c:12:84:0f:7e:58:1d:c1:7c:2c:65:ed:e8: 95:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:2B:33:DE:8F:51:8D:DB:EC:EC:0C:49:ED:81:CD:47:11:E1:EF:DF X509v3 Authority Key Identifier: keyid:09:11:E9:9A:AD:F6:64:F0:39:92:9C:AB:BB:48:74:A3:A1:61:CA:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRHpmq32ZPA5kpyru0h0o6Fhyq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:32:05:12:e2:20:f7:44:78:13:0d:d8:1c:85:a3:7c:24:2b: 0a:98:07:d1:d3:84:33:34:23:a2:61:c8:82:94:5f:26:72:6c: 5b:7f:06:55:b6:0c:d0:1e:f5:a1:87:a7:82:92:4b:4c:4e:bb: cd:56:9c:60:d7:b2:8a:c1:25:61:df:f2:d4:ce:53:79:51:86: 40:ee:38:74:da:a7:f8:ad:9a:8c:5c:e8:18:fe:34:b1:bb:af: 8f:2e:2f:cd:3b:01:2a:6b:91:34:8f:85:61:2b:b8:5d:86:65: 79:df:5f:b4:4c:aa:3e:32:50:22:6e:0e:f0:c1:8a:49:64:5f: 46:43:09:3a:25:7f:e5:0f:d8:f4:b0:e9:e8:1d:c6:89:fb:3d: 95:1b:fa:29:9d:51:d0:07:30:38:e4:99:60:fc:2a:b1:e2:89: a6:3f:ad:69:c7:9b:f3:d0:a7:68:5f:68:f6:22:c3:6d:39:2a: 7e:74:03:53:4a:73:9c:cd:89:fd:06:88:e2:0e:e7:f3:2f:24: ba:24:9c:49:7d:dd:6a:e7:dc:70:a3:44:23:cc:b1:a2:e2:cd: 28:33:32:5c:29:d7:ae:2c:40:55:ec:41:9a:2d:e9:6b:43:89: 6e:de:09:c0:f1:e5:f5:da:29:f0:40:ad:1f:0a:f3:0b:2a:ac: 91:5f:60:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM3RUExMTAvBgNVBAUTKDA5MTFFOTlBQURGNjY0RjAzOTkyOUNBQkJCNDg3NEEz QTE2MUNBQUQwHhcNMjUwNDI0MjIwMjMyWhcNMjUwNTAxMjIwMjMyWjAYMRYwFAYD VQQDEw02ODBhYjRmOS02YzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwu6XpyfuFLMXqh+XDKLrPnHSsPzRu8gIhh/NnQ+8b9Jwul39dJF+QweMJ6y 4yOsIL66XjcHCgR/3MT1rTV8SpJ90Wj9vmLxEViSVVP4bhewPjiHEbITfErEIRVC vvbgMuaiuXLE8WQKfEKa8NB8kn60KyHG0nGsJLbjDCEFeXBRpZaB4ArEmsBOb/CJ Lbuq6inVA3AyQaOn9z6CUWk85Jx1Jwd28gHd9HujNgiFOOnbNg8uIPFJE5o0pFH4 9iBGJyHnwsawW5JSGwXAo7cLQOBY7dzi9QMSDAvpaiBBIkPfGxzWt5k+AQG8akXC n1vdMZwShA9+WB3BfCxl7eiVjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMrM96P UY3b7OwMSe2BzUcR4e/fMB8GA1UdIwQYMBaAFAkR6Zqt9mTwOZKcq7tIdKOhYcqt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzdFQS8xRTk2NTYzMDZB NTkxMUVCQTM2NDFDM0RDNEY5QUUwMi9DUkhwbXEzMlpQQTVrcHlydTBoMG82Rmh5 cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NSSHBtcTMyWlBBNWtweXJ1MGgwbzZGaHlxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzdFQS8xRTk2NTYzMDZBNTkxMUVCQTM2NDFDM0RDNEY5QUUwMi9DUkhwbXEzMlpQ QTVrcHlydTBoMG82Rmh5cTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4MgUS4iD3RHgTDdgchaN8JCsKmAfR04QzNCOiYciClF8mcmxbfwZV tgzQHvWhh6eCkktMTrvNVpxg17KKwSVh3/LUzlN5UYZA7jh02qf4rZqMXOgY/jSx u6+PLi/NOwEqa5E0j4VhK7hdhmV531+0TKo+MlAibg7wwYpJZF9GQwk6JX/lD9j0 sOnoHcaJ+z2VG/opnVHQBzA45Jlg/Cqx4ommP61px5vz0KdoX2j2IsNtOSp+dANT SnOczYn9BojiDufzLyS6JJxJfd1q59xwo0QjzLGi4s0oMzJcKdeuLEBV7EGaLelr Q4lu3gnA8eX12inwQK0fCvMLKqyRX2Bd -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:39 2025 by rpki-client