$ rpki-client -vvf rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.mft File: inZEBFIzrjjTDTW4JtlbLntDfZw.mft (raw, json) Hash identifier: MGiLpkWgZtEYyy4D0LuEhfCbSiFD6GnImft7lbP6vm8= Subject key identifier: 8A:56:D2:28:6B:B5:58:F4:6B:4A:A8:BC:4F:0C:64:38:7E:20:E7:B1 Authority key identifier: 8A:76:44:04:52:33:AE:38:D3:0D:35:B8:26:D9:5B:2E:7B:43:7D:9C Certificate issuer: /CN=A919BC3B/serialNumber=8A7644045233AE38D30D35B826D95B2E7B437D9C Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inZEBFIzrjjTDTW4JtlbLntDfZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.mft Manifest number: 9D Signing time: Mon 05 May 2025 05:05:16 +0000 Manifest this update: Mon 05 May 2025 05:05:15 +0000 Manifest next update: Mon 12 May 2025 05:05:15 +0000 Files and hashes: 1: inZEBFIzrjjTDTW4JtlbLntDfZw.crl (hash: N+POrJUyGdLSAblpjoGDUjKyXz/licEBlU7M6FznUbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.crl rsync://rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inZEBFIzrjjTDTW4JtlbLntDfZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 05:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BC3B, serialNumber=8A7644045233AE38D30D35B826D95B2E7B437D9C Validity Not Before: May 5 05:05:15 2025 GMT Not After : May 12 05:05:15 2025 GMT Subject: CN=6818470c-2db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:06:bb:ca:7a:24:c7:9e:e8:59:ee:dc:e0:7c: 33:2a:9c:eb:3d:78:68:66:23:12:cb:eb:10:22:da: e8:e8:78:99:7d:7e:7a:25:6a:e7:29:d3:23:1a:b5: d8:b8:ad:9e:f2:e2:87:17:8b:6a:2f:07:ca:c1:61: 51:8f:99:61:33:62:87:b3:93:86:39:d3:8c:0f:55: 8d:f9:c3:78:68:36:52:4c:bb:f1:27:6f:36:c7:e6: 84:a8:e9:f0:46:3d:0a:65:d5:87:cd:51:f4:f8:a1: 48:b4:d2:47:7d:7b:b3:4a:63:fd:5b:69:d4:cf:62: b2:a0:52:d1:e0:c0:1e:11:ed:96:a5:c6:70:bb:fd: 85:94:87:da:d7:ae:f6:fe:2c:ed:f0:18:eb:de:f2: 51:04:87:1a:c4:87:a1:89:cc:08:f1:93:d0:c8:2f: ac:ca:17:5f:44:91:5a:8e:6a:e3:50:2a:c4:3f:e3: dc:31:2e:d6:08:de:3d:4d:ab:45:fa:a7:5c:0c:15: d3:aa:78:0d:09:94:44:fa:83:75:b9:c1:10:a0:4c: 69:c4:da:ec:cd:b2:85:8f:79:99:22:31:e4:4c:17: 80:6a:08:0e:ea:fe:24:21:94:d6:4c:37:2c:01:9f: 32:df:15:b5:e8:3b:96:2a:f8:26:c1:f5:ba:48:81: a8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:56:D2:28:6B:B5:58:F4:6B:4A:A8:BC:4F:0C:64:38:7E:20:E7:B1 X509v3 Authority Key Identifier: keyid:8A:76:44:04:52:33:AE:38:D3:0D:35:B8:26:D9:5B:2E:7B:43:7D:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inZEBFIzrjjTDTW4JtlbLntDfZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:83:ad:72:31:ab:e1:74:e9:e3:6d:b9:c4:b8:36:34:8a:0f: ee:54:0a:7c:36:bc:a6:fb:71:d9:7a:62:25:1e:cc:4c:05:7c: 56:18:eb:d7:7d:aa:6f:a0:b9:dd:5f:38:b9:97:23:25:46:28: a4:30:8e:6b:43:a6:04:80:9a:98:ef:2a:eb:bc:0b:b2:98:33: eb:bb:b7:36:70:4f:e0:35:0e:a2:ec:fb:12:1f:76:79:77:ca: 50:9f:8a:f3:7f:2a:f9:bd:82:7e:a2:d2:2e:7a:40:d1:89:a3: 4c:a6:f0:50:3d:b7:4a:6b:0e:b1:2e:3a:68:48:57:f9:9a:38: d4:17:cd:59:b8:44:e3:01:80:db:64:b9:09:22:fb:fe:2f:b3: 5c:a5:64:77:71:2b:08:23:a1:8d:da:99:48:a9:e3:4d:54:9b: e2:3c:bf:0d:89:bd:1d:07:3c:ea:96:d8:41:8b:37:9d:1a:29: 45:cb:ae:3d:03:14:c5:c4:aa:2c:0a:dc:ef:b4:34:19:ee:09: 17:35:61:ca:bf:b0:e8:0c:51:37:03:67:48:b4:84:7f:6e:dd: e5:5c:7f:7b:76:f7:fd:b6:67:9e:e8:b6:e2:d2:13:a0:cc:90: a1:ad:f4:f4:fc:8a:d5:88:10:01:c5:b3:36:59:af:77:a3:5b: 4b:26:1e:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJDM0IxMTAvBgNVBAUTKDhBNzY0NDA0NTIzM0FFMzhEMzBEMzVCODI2RDk1QjJF N0I0MzdEOUMwHhcNMjUwNTA1MDUwNTE1WhcNMjUwNTEyMDUwNTE1WjAYMRYwFAYD VQQDEw02ODE4NDcwYy0yZGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Qa7ynokx57oWe7c4HwzKpzrPXhoZiMSy+sQItro6HiZfX56JWrnKdMjGrXY uK2e8uKHF4tqLwfKwWFRj5lhM2KHs5OGOdOMD1WN+cN4aDZSTLvxJ282x+aEqOnw Rj0KZdWHzVH0+KFItNJHfXuzSmP9W2nUz2KyoFLR4MAeEe2WpcZwu/2FlIfa1672 /izt8Bjr3vJRBIcaxIehicwI8ZPQyC+syhdfRJFajmrjUCrEP+PcMS7WCN49TatF +qdcDBXTqngNCZRE+oN1ucEQoExpxNrszbKFj3mZIjHkTBeAaggO6v4kIZTWTDcs AZ8y3xW16DuWKvgmwfW6SIGokQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpW0ihr tVj0a0qovE8MZDh+IOexMB8GA1UdIwQYMBaAFIp2RARSM6440w01uCbZWy57Q32c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkMzQi9DRjM0QzFFRTM5 RUUxMUVGQTQzRDY1ODZDNEY5QUUwMi9pblpFQkZJenJqalREVFc0SnRsYkxudERm WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2luWkVCRkl6cmpqVERUVzRKdGxiTG50RGZady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkMzQi9DRjM0QzFFRTM5RUUxMUVGQTQzRDY1ODZDNEY5QUUwMi9pblpFQkZJenJq alREVFc0SnRsYkxudERmWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASg61yMavhdOnjbbnEuDY0ig/uVAp8Nrym+3HZemIlHsxMBXxWGOvX fapvoLndXzi5lyMlRiikMI5rQ6YEgJqY7yrrvAuymDPru7c2cE/gNQ6i7PsSH3Z5 d8pQn4rzfyr5vYJ+otIuekDRiaNMpvBQPbdKaw6xLjpoSFf5mjjUF81ZuETjAYDb ZLkJIvv+L7NcpWR3cSsII6GN2plIqeNNVJviPL8Nib0dBzzqlthBizedGilFy649 AxTFxKosCtzvtDQZ7gkXNWHKv7DoDFE3A2dItIR/bt3lXH97dvf9tmee6Lbi0hOg zJChrfT0/IrViBABxbM2Wa93o1tLJh5W -----END CERTIFICATE-----Generated at Mon May 5 09:02:14 2025 by rpki-client