$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft File: lAiiAfAOWP6SWY7gOTkHi673d5U.mft (raw, json) Hash identifier: WoOH+tpnXCaY4zZWYCDTcjopmnfK78q42GBjv4E2uwc= Subject key identifier: D3:30:C7:04:0F:C7:73:EC:0B:79:5F:ED:EB:95:32:A4:B2:18:03:AE Authority key identifier: 94:08:A2:01:F0:0E:58:FE:92:59:8E:E0:39:39:07:8B:AE:F7:77:95 Certificate issuer: /CN=A91A6F68/serialNumber=9408A201F00E58FE92598EE03939078BAEF77795 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft Manifest number: 32 Signing time: Sat 03 May 2025 06:57:19 +0000 Manifest this update: Sat 03 May 2025 06:57:18 +0000 Manifest next update: Sat 10 May 2025 06:57:18 +0000 Files and hashes: 1: lAiiAfAOWP6SWY7gOTkHi673d5U.crl (hash: 0iKsBAnYFT9uSPB6tB+PIQXJNae9uDuStp2mFByOlNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.crl rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 06:57:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F68, serialNumber=9408A201F00E58FE92598EE03939078BAEF77795 Validity Not Before: May 3 06:57:18 2025 GMT Not After : May 10 06:57:18 2025 GMT Subject: CN=6815be4e-26f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:52:e1:4f:8d:09:e1:f7:6e:72:47:f1:ed:85: 2b:0e:d5:a1:26:6c:ef:ee:a3:b2:1a:ae:86:58:d4: ab:de:24:d5:50:e4:c5:c6:35:01:8c:35:89:69:4d: fc:4f:19:95:ab:3b:b1:33:56:27:47:9a:da:40:17: 39:34:bd:c8:64:f4:ac:cc:52:61:9a:dd:ee:58:99: 41:5b:5b:37:e4:2b:ba:4b:20:dc:86:e5:72:86:d8: 6f:89:10:5a:d2:6a:9b:e6:d1:64:95:95:57:3a:f9: ab:5c:a0:25:75:58:ef:d1:1a:a8:2c:f5:dd:43:e4: 24:f4:c1:ab:00:4d:7f:b0:a0:74:32:34:22:af:09: af:c1:e1:8c:56:ff:90:3f:bd:65:06:b7:6d:6d:d2: d3:20:4e:9f:06:52:2d:41:94:2d:13:9f:d3:4a:cd: 21:9e:74:23:83:0f:6b:09:07:cf:1f:bf:49:f6:07: 88:50:c8:e4:b9:39:6e:a5:95:d8:9d:f5:6e:ca:e3: 8b:1e:3a:27:c4:72:06:cd:01:59:62:37:b3:8c:0c: 40:39:0a:7c:7c:91:00:a4:a0:b4:7e:f6:60:51:4f: 78:a8:73:d2:24:1e:d2:9d:97:29:31:1b:88:25:f4: 18:71:63:79:82:bd:d8:0d:dc:e0:60:c2:91:40:10: 40:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:30:C7:04:0F:C7:73:EC:0B:79:5F:ED:EB:95:32:A4:B2:18:03:AE X509v3 Authority Key Identifier: keyid:94:08:A2:01:F0:0E:58:FE:92:59:8E:E0:39:39:07:8B:AE:F7:77:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:14:ab:02:f1:75:66:34:a1:d4:aa:01:81:4f:7b:82:00:72: cf:d9:1b:d6:01:03:e1:d4:02:e3:44:d1:ff:47:9b:e8:72:c1: 5c:b9:db:01:e3:20:f4:28:0d:5a:e0:af:37:03:3d:5d:b4:a3: 29:6f:04:02:eb:24:b2:c4:aa:0b:c3:ea:c4:40:f6:5c:7a:50: 50:99:46:01:6e:ca:4e:50:ac:6f:46:89:64:2a:4a:db:ea:9b: f1:b5:3d:d0:c8:14:1d:dc:3b:ba:8a:b9:cd:d5:b3:33:91:de: 32:f3:3f:19:fc:d1:88:7c:90:45:7c:92:45:67:50:fe:af:52: 47:16:22:d7:ab:29:f4:12:0c:2a:da:e7:28:40:8b:77:6e:80: 4d:9f:a2:b9:21:ce:f2:3e:e5:69:72:69:af:91:0b:e6:13:ff: 02:68:b1:9e:f3:7d:38:4d:c2:7c:8d:d2:0a:81:24:a7:62:42: db:79:57:d7:72:0d:05:b6:b5:be:d3:bb:46:21:11:73:08:13: 95:76:87:c8:2f:6e:00:dc:18:81:79:78:e2:a4:81:01:ed:ff: d2:17:62:ef:a2:5e:d1:bc:37:f8:10:d9:47:1f:e4:08:1f:8a: 13:9b:2e:06:d7:f5:7b:38:19:0e:6b:97:fd:54:84:89:06:5a: 7f:a3:47:00 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkY2ODExMC8GA1UEBRMoOTQwOEEyMDFGMDBFNThGRTkyNTk4RUUwMzkzOTA3OEJB RUY3Nzc5NTAeFw0yNTA1MDMwNjU3MThaFw0yNTA1MTAwNjU3MThaMBgxFjAUBgNV BAMTDTY4MTViZTRlLTI2ZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvUuFPjQnh925yR/HthSsO1aEmbO/uo7IaroZY1KveJNVQ5MXGNQGMNYlpTfxP GZWrO7EzVidHmtpAFzk0vchk9KzMUmGa3e5YmUFbWzfkK7pLINyG5XKG2G+JEFrS apvm0WSVlVc6+atcoCV1WO/RGqgs9d1D5CT0wasATX+woHQyNCKvCa/B4YxW/5A/ vWUGt21t0tMgTp8GUi1BlC0Tn9NKzSGedCODD2sJB88fv0n2B4hQyOS5OW6lldid 9W7K44seOifEcgbNAVliN7OMDEA5Cnx8kQCkoLR+9mBRT3ioc9IkHtKdlykxG4gl 9BhxY3mCvdgN3OBgwpFAEEDRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0zDHBA/H c+wLeV/t65UypLIYA64wHwYDVR0jBBgwFoAUlAiiAfAOWP6SWY7gOTkHi673d5Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2RjY4L0JBNTY1RjVDREYy MTExRUY4MzNGNEYyQ0M0RjlBRTAyL2xBaWlBZkFPV1A2U1dZN2dPVGtIaTY3M2Q1 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvbEFpaUFmQU9XUDZTV1k3Z09Ua0hpNjczZDVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 RjY4L0JBNTY1RjVDREYyMTExRUY4MzNGNEYyQ0M0RjlBRTAyL2xBaWlBZkFPV1A2 U1dZN2dPVGtIaTY3M2Q1VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGAUqwLxdWY0odSqAYFPe4IAcs/ZG9YBA+HUAuNE0f9Hm+hywVy52wHj IPQoDVrgrzcDPV20oylvBALrJLLEqgvD6sRA9lx6UFCZRgFuyk5QrG9GiWQqStvq m/G1PdDIFB3cO7qKuc3VszOR3jLzPxn80Yh8kEV8kkVnUP6vUkcWIterKfQSDCra 5yhAi3dugE2forkhzvI+5Wlyaa+RC+YT/wJosZ7zfThNwnyN0gqBJKdiQtt5V9dy DQW2tb7Tu0YhEXMIE5V2h8gvbgDcGIF5eOKkgQHt/9IXYu+iXtG8N/gQ2Ucf5Agf ihObLgbX9Xs4GQ5rl/1UhIkGWn+jRwA= -----END CERTIFICATE-----Generated at Sun May 4 18:45:57 2025 by rpki-client