$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft File: RLpWm_0uyBawaXNFE-C78tNOtwc.mft (raw, json) Hash identifier: fSY5KR1FZ9EySgt4gMM3/nzteGj1nEfsdgI/3viRX/U= Subject key identifier: 1C:7D:23:8D:DE:0D:0D:1B:39:F9:4E:B7:47:A0:93:43:1E:30:53:11 Authority key identifier: 44:BA:56:9B:FD:2E:C8:16:B0:69:73:45:13:E0:BB:F2:D3:4E:B7:07 Certificate issuer: /CN=A91AD0B2/serialNumber=44BA569BFD2EC816B069734513E0BBF2D34EB707 Certificate serial: 05B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft Manifest number: 05A0 Signing time: Thu 24 Apr 2025 23:00:59 +0000 Manifest this update: Thu 24 Apr 2025 23:00:58 +0000 Manifest next update: Thu 01 May 2025 23:00:58 +0000 Files and hashes: 1: RLpWm_0uyBawaXNFE-C78tNOtwc.crl (hash: cXx1gVNYI60X/iS5SQ5gQG+5IZ13lIwZf9uBsgPKYNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.crl rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1458 (0x5b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD0B2, serialNumber=44BA569BFD2EC816B069734513E0BBF2D34EB707 Validity Not Before: Apr 24 23:00:58 2025 GMT Not After : May 1 23:00:58 2025 GMT Subject: CN=680ac2aa-986d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e9:e7:a8:9e:f1:af:7b:79:39:96:54:d5:d1: 6b:d9:c2:91:f0:30:fa:dc:f1:1e:80:6d:19:a0:43: d7:09:e9:40:db:b5:fd:1d:32:c6:de:78:60:06:dc: 76:9f:78:39:6b:83:cc:ef:7a:57:d1:80:39:2c:8f: 49:3f:b7:d0:17:bc:e7:3e:17:63:5b:f0:13:48:d3: 0a:4f:bb:c8:14:4e:ee:4e:c0:a2:89:a8:e6:09:f5: 69:27:7b:f2:2b:99:f4:0d:ce:11:06:85:19:04:b5: 99:06:e0:a7:86:96:dc:f0:15:5a:88:c4:17:6a:e1: ad:74:e7:8f:f5:95:20:fc:37:10:55:e4:58:ad:9a: 07:2a:68:ed:fa:b2:a6:3f:4a:ae:02:c9:c5:95:09: df:69:96:06:24:dc:ac:47:76:65:95:88:d5:f8:00: c8:7c:66:72:24:d4:3a:94:d4:45:99:83:3d:0a:a9: 35:22:fd:87:77:b9:b7:39:f1:47:22:b8:f1:30:83: 4d:ae:2a:54:41:7c:7a:c2:62:29:59:2c:e4:67:7b: 20:77:f2:93:bb:57:9b:88:a2:6f:a6:3e:2f:29:6c: 7b:09:d2:b7:5a:10:17:19:2d:61:04:5d:60:8d:b1: c5:02:e4:34:fc:0e:f0:9e:9f:86:2f:7c:9f:4d:a5: a4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:7D:23:8D:DE:0D:0D:1B:39:F9:4E:B7:47:A0:93:43:1E:30:53:11 X509v3 Authority Key Identifier: keyid:44:BA:56:9B:FD:2E:C8:16:B0:69:73:45:13:E0:BB:F2:D3:4E:B7:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:f8:e8:f3:de:dd:9d:d7:f5:30:d2:f1:b2:48:78:9a:e7:1b: 3f:7b:9d:25:95:44:3b:b0:22:ad:41:1b:ea:e0:91:b5:ad:aa: ea:a9:c7:c2:d2:9b:85:54:47:5b:0d:05:8b:d7:c7:65:38:d8: bd:e8:a3:1e:c8:cb:cb:07:ab:e2:20:59:fd:7e:20:d5:4f:b2: be:17:21:0f:be:88:a4:d9:ef:0d:93:4a:14:f2:0e:62:17:7c: 84:55:08:a4:4e:b4:7e:1e:ec:8f:2c:7f:63:d0:ec:c3:e6:de: e0:be:52:7a:ae:9d:62:5f:5f:ae:cc:ca:38:fd:fe:55:92:22: e4:20:b3:b0:6f:ef:a7:cf:44:71:08:cb:53:d7:bb:6b:1a:7a: a0:20:19:f4:de:12:27:a1:92:f6:18:f8:6a:82:3f:88:aa:14: 28:a5:5b:dc:7d:49:d0:ab:9e:5c:c1:df:70:e0:c7:5e:c6:0b: 7e:61:7d:90:47:b1:88:e4:38:62:d4:24:a9:eb:39:fe:bd:f3: b0:6d:69:c9:dd:e6:3f:cf:02:7d:f4:f6:67:3a:80:7c:39:c6: 64:e9:0f:0e:ff:19:5e:8a:fb:58:a9:2b:66:b7:0f:cc:0c:ca: 10:6d:03:8f:42:eb:80:c2:f5:0e:8a:65:39:8d:67:f6:0d:61: 6c:f1:26:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQwQjIxMTAvBgNVBAUTKDQ0QkE1NjlCRkQyRUM4MTZCMDY5NzM0NTEzRTBCQkYy RDM0RUI3MDcwHhcNMjUwNDI0MjMwMDU4WhcNMjUwNTAxMjMwMDU4WjAYMRYwFAYD VQQDEw02ODBhYzJhYS05ODZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ennqJ7xr3t5OZZU1dFr2cKR8DD63PEegG0ZoEPXCelA27X9HTLG3nhgBtx2 n3g5a4PM73pX0YA5LI9JP7fQF7znPhdjW/ATSNMKT7vIFE7uTsCiiajmCfVpJ3vy K5n0Dc4RBoUZBLWZBuCnhpbc8BVaiMQXauGtdOeP9ZUg/DcQVeRYrZoHKmjt+rKm P0quAsnFlQnfaZYGJNysR3ZllYjV+ADIfGZyJNQ6lNRFmYM9Cqk1Iv2Hd7m3OfFH IrjxMINNripUQXx6wmIpWSzkZ3sgd/KTu1ebiKJvpj4vKWx7CdK3WhAXGS1hBF1g jbHFAuQ0/A7wnp+GL3yfTaWkdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBx9I43e DQ0bOflOt0egk0MeMFMRMB8GA1UdIwQYMBaAFES6Vpv9LsgWsGlzRRPgu/LTTrcH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDBCMi8yMjEzRTVCQ0NC MkUxMUVCQjJEMzk3NDhDNEY5QUUwMi9STHBXbV8wdXlCYXdhWE5GRS1DNzh0Tk90 d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JMcFdtXzB1eUJhd2FYTkZFLUM3OHROT3R3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDBCMi8yMjEzRTVCQ0NCMkUxMUVCQjJEMzk3NDhDNEY5QUUwMi9STHBXbV8wdXlC YXdhWE5GRS1DNzh0Tk90d2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb+Ojz3t2d1/Uw0vGySHia5xs/e50llUQ7sCKtQRvq4JG1rarqqcfC 0puFVEdbDQWL18dlONi96KMeyMvLB6viIFn9fiDVT7K+FyEPvoik2e8Nk0oU8g5i F3yEVQikTrR+HuyPLH9j0OzD5t7gvlJ6rp1iX1+uzMo4/f5VkiLkILOwb++nz0Rx CMtT17trGnqgIBn03hInoZL2GPhqgj+IqhQopVvcfUnQq55cwd9w4Mdexgt+YX2Q R7GI5Dhi1CSp6zn+vfOwbWnJ3eY/zwJ99PZnOoB8OcZk6Q8O/xleivtYqStmtw/M DMoQbQOPQuuAwvUOimU5jWf2DWFs8Sat -----END CERTIFICATE-----Generated at Sat Apr 26 05:55:03 2025 by rpki-client