$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft File: odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft (raw, json) Hash identifier: Sd1rv4xJ7DNh1iv6s84eRi6K7bt0nTDsIKS1YcZVhy8= Subject key identifier: E3:AF:53:19:C3:3D:2A:FB:60:38:9A:71:13:F3:78:0F:15:D3:86:59 Authority key identifier: A1:D2:5D:E3:A5:59:FD:AF:30:44:9D:94:77:D1:76:EA:37:89:71:F8 Certificate issuer: /CN=A91B0DE0/serialNumber=A1D25DE3A559FDAF30449D9477D176EA378971F8 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft Manifest number: 79 Signing time: Fri 25 Apr 2025 05:44:15 +0000 Manifest this update: Fri 25 Apr 2025 05:44:15 +0000 Manifest next update: Fri 02 May 2025 05:44:15 +0000 Files and hashes: 1: odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl (hash: 24k1Cz96PJNUsADWMLee6TdFnRk3SNO95Wb1+/BQN1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0DE0, serialNumber=A1D25DE3A559FDAF30449D9477D176EA378971F8 Validity Not Before: Apr 25 05:44:15 2025 GMT Not After : May 2 05:44:15 2025 GMT Subject: CN=680b212f-6a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a9:bd:e5:a5:e2:cd:69:ca:b4:a4:e1:91:ea: cd:9d:d7:ed:0a:86:d4:01:1b:24:f9:5e:01:45:ba: 0b:76:4d:9f:b1:9b:22:17:51:07:3a:45:d0:9b:68: 57:e5:f1:b1:78:39:5b:77:c4:7b:77:a2:35:fd:52: 31:17:59:1e:e5:e4:40:7c:4e:b9:c7:41:d4:e2:f5: ad:ab:57:7a:be:00:48:ab:b2:98:4a:b2:ff:c0:ad: fa:f7:df:0c:7f:6a:9e:19:e4:2a:c7:d0:ca:c6:df: a3:77:d7:4a:1b:3f:66:b1:c9:3c:0e:4f:a2:ab:f5: f5:0d:5f:eb:b2:84:8b:75:b5:ef:af:a5:81:b6:70: 2c:5a:f1:d6:90:7a:2b:2a:73:f1:e1:a5:37:f1:99: a2:ca:72:9a:fa:60:f3:be:db:17:76:ed:be:41:d8: fe:bb:42:77:cf:64:c8:7c:62:a5:63:ae:f4:6b:d3: 2b:a7:28:10:9b:72:c6:38:4f:96:46:78:93:f1:aa: 2a:8b:bb:1d:1e:57:09:fb:4a:44:36:05:cd:aa:24: 31:3e:0b:be:58:c7:c1:95:f4:9b:49:6d:54:f8:ae: 6b:22:59:7b:e6:0d:bb:f9:43:3a:41:57:c9:23:58: 18:c0:c5:18:5d:c4:cb:28:a8:a6:c7:a7:c8:fe:5e: 4c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:AF:53:19:C3:3D:2A:FB:60:38:9A:71:13:F3:78:0F:15:D3:86:59 X509v3 Authority Key Identifier: keyid:A1:D2:5D:E3:A5:59:FD:AF:30:44:9D:94:77:D1:76:EA:37:89:71:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:18:0c:dc:a7:07:5c:c7:36:cd:d4:c6:11:e3:33:83:61:12: e6:8b:dd:69:7f:fb:73:cf:80:92:f4:c0:02:7b:a0:2e:7b:38: 33:c5:ef:ae:f7:76:71:6f:96:a9:52:4e:92:99:06:4e:ca:02: f9:6c:de:18:4f:f2:9d:76:95:34:8d:01:57:7a:b1:3f:ff:f9: d9:88:55:e5:59:0c:b0:42:51:dc:4e:e5:be:a8:d8:c5:b1:0b: d6:03:58:2d:a6:6b:7d:81:dd:7f:c2:69:ad:88:a8:10:34:2c: 38:63:dc:53:67:e3:0b:bd:43:2c:50:a5:ff:be:c0:19:bd:8c: cc:60:fa:21:49:e8:49:d9:33:7c:76:05:a5:ee:12:3e:5e:62: 0f:f0:da:56:6e:f9:56:3e:2c:e4:49:c9:59:2f:b7:4a:5d:d6: b2:35:d5:f2:73:c1:87:b4:6c:d8:77:40:78:00:f1:ec:f0:49: 3a:9c:64:0c:55:9f:54:bb:0a:19:d1:40:c6:5d:e7:b2:9d:7e: 90:d1:ee:dd:46:d0:c3:86:7b:2f:b4:99:ba:21:a8:b8:7a:ec: dd:ad:85:d3:c0:b0:1c:7c:8d:54:c7:9d:c1:1e:76:d7:71:86: fa:e8:6b:99:ea:a5:54:79:a2:57:3a:77:1c:a1:a7:75:44:7c: fa:0c:e2:85 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MERFMDExMC8GA1UEBRMoQTFEMjVERTNBNTU5RkRBRjMwNDQ5RDk0NzdEMTc2RUEz Nzg5NzFGODAeFw0yNTA0MjUwNTQ0MTVaFw0yNTA1MDIwNTQ0MTVaMBgxFjAUBgNV BAMTDTY4MGIyMTJmLTZhMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3qb3lpeLNacq0pOGR6s2d1+0KhtQBGyT5XgFFugt2TZ+xmyIXUQc6RdCbaFfl 8bF4OVt3xHt3ojX9UjEXWR7l5EB8TrnHQdTi9a2rV3q+AEirsphKsv/Arfr33wx/ ap4Z5CrH0MrG36N310obP2axyTwOT6Kr9fUNX+uyhIt1te+vpYG2cCxa8daQeisq c/HhpTfxmaLKcpr6YPO+2xd27b5B2P67QnfPZMh8YqVjrvRr0yunKBCbcsY4T5ZG eJPxqiqLux0eVwn7SkQ2Bc2qJDE+C75Yx8GV9JtJbVT4rmsiWXvmDbv5QzpBV8kj WBjAxRhdxMsoqKbHp8j+XkyLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU469TGcM9 KvtgOJpxE/N4DxXThlkwHwYDVR0jBBgwFoAUodJd46VZ/a8wRJ2Ud9F26jeJcfgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIwREUwLzdBNjVFOTNDNkE4 NTExRUZCMTU2ODE0N0M0RjlBRTAyL29kSmQ0NlZaX2E4d1JKMlVkOUYyNmplSmNm Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb2RKZDQ2VlpfYTh3UkoyVWQ5RjI2amVKY2ZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIw REUwLzdBNjVFOTNDNkE4NTExRUZCMTU2ODE0N0M0RjlBRTAyL29kSmQ0NlZaX2E4 d1JKMlVkOUYyNmplSmNmZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF4YDNynB1zHNs3UxhHjM4NhEuaL3Wl/+3PPgJL0wAJ7oC57ODPF7673 dnFvlqlSTpKZBk7KAvls3hhP8p12lTSNAVd6sT//+dmIVeVZDLBCUdxO5b6o2MWx C9YDWC2ma32B3X/Caa2IqBA0LDhj3FNn4wu9QyxQpf++wBm9jMxg+iFJ6EnZM3x2 BaXuEj5eYg/w2lZu+VY+LORJyVkvt0pd1rI11fJzwYe0bNh3QHgA8ezwSTqcZAxV n1S7ChnRQMZd57KdfpDR7t1G0MOGey+0mbohqLh67N2thdPAsBx8jVTHncEedtdx hvroa5nqpVR5olc6dxyhp3VEfPoM4oU= -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:45 2025 by rpki-client