$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft File: jos0Y56lTfgQuSvLp0JwTkyIQsI.mft (raw, json) Hash identifier: 727djJePSsqTm37obgxNXK5Vty+sOiK2cmul5m7cA5w= Subject key identifier: C9:DC:DE:B6:D1:D8:B9:7D:52:87:8B:D5:F6:F6:A4:3D:E8:88:A6:27 Authority key identifier: 8E:8B:34:63:9E:A5:4D:F8:10:B9:2B:CB:A7:42:70:4E:4C:88:42:C2 Certificate issuer: /CN=A91B4C1B/serialNumber=8E8B34639EA54DF810B92BCBA742704E4C8842C2 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft Manifest number: 7D Signing time: Fri 25 Apr 2025 05:40:34 +0000 Manifest this update: Fri 25 Apr 2025 05:40:34 +0000 Manifest next update: Fri 02 May 2025 05:40:34 +0000 Files and hashes: 1: jos0Y56lTfgQuSvLp0JwTkyIQsI.crl (hash: PYOvkaY3GThZU3R+trge8OtUtPgCAtw1OYskSkzF24Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.crl rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:40:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4C1B, serialNumber=8E8B34639EA54DF810B92BCBA742704E4C8842C2 Validity Not Before: Apr 25 05:40:34 2025 GMT Not After : May 2 05:40:34 2025 GMT Subject: CN=680b2052-add1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:83:22:c2:64:44:cf:ff:3b:9d:e3:bd:ee:95: 0b:18:ea:b0:19:da:fc:3f:21:cd:a0:d0:6f:c5:fd: df:23:35:44:ce:7d:b9:15:46:a0:36:ac:12:f8:07: de:29:12:f2:4d:05:24:83:4a:b8:e1:f2:43:eb:09: ef:25:8f:8a:19:1d:c3:85:f7:cb:54:ca:89:eb:15: 5e:f3:37:50:12:64:27:86:2e:45:cc:3b:ce:a2:bb: f2:da:1a:ed:b3:f4:97:a6:5e:ba:b1:57:47:34:99: f9:63:55:26:06:65:aa:c4:6c:4a:d3:52:83:39:9f: db:f4:4c:69:1d:d4:24:f4:50:cd:ab:99:de:6f:62: 32:30:74:bb:d4:44:33:fe:ac:3e:4e:c6:dc:87:be: 9f:53:6c:3b:ec:f4:2b:f6:4f:39:fb:c0:42:11:e9: e8:a8:7a:85:49:0e:0e:34:dc:6a:b8:17:de:9c:2e: 8a:6d:84:a0:c4:88:07:93:9d:46:14:7f:83:ca:04: fe:45:57:1c:4f:c7:9c:3b:55:ff:ae:13:98:74:7b: 54:3b:03:f3:ae:4c:01:c3:67:94:ad:b1:51:43:ee: 10:1a:22:1d:56:51:db:0c:75:b4:d8:a0:45:a9:6e: 11:a0:67:24:75:34:fa:46:27:ca:98:cd:64:ea:14: 67:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:DC:DE:B6:D1:D8:B9:7D:52:87:8B:D5:F6:F6:A4:3D:E8:88:A6:27 X509v3 Authority Key Identifier: keyid:8E:8B:34:63:9E:A5:4D:F8:10:B9:2B:CB:A7:42:70:4E:4C:88:42:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:20:56:af:55:89:9d:74:35:d0:0e:49:af:e9:0e:72:18:fa: eb:b5:e9:18:8f:91:df:42:17:b4:9b:77:b8:68:f7:d0:e0:93: 08:99:6b:98:41:a2:c0:0e:ff:d9:51:bb:43:f6:db:dd:59:58: 59:d3:2a:1d:31:0a:39:fc:92:78:59:eb:ed:b7:af:d7:a6:f9: f1:e9:4d:10:4b:32:f5:9e:03:76:69:d7:ee:0c:92:26:72:7a: 67:c9:4c:81:f4:ca:e5:ac:aa:28:90:1e:61:34:da:c6:b0:10: 3c:08:ce:a0:98:c9:47:e8:0c:22:88:6c:dd:f9:42:01:71:7e: 28:98:4e:f1:34:e2:82:83:6d:d8:b9:88:16:14:8d:ed:6e:55: 56:af:62:0b:4f:21:87:e7:fe:0f:15:0c:13:d6:3e:55:aa:3b: ec:23:0f:e9:04:57:0c:e5:51:23:83:36:1b:d3:b4:91:ed:de: 46:7d:49:e5:be:5e:b9:44:2c:94:d9:1e:3d:0a:e5:ff:f0:c0: d4:75:3e:30:89:22:f9:db:47:a1:d0:79:9a:1e:4c:8c:af:ec: 57:34:9b:99:14:f3:6c:ce:06:59:c3:e1:73:97:1a:c2:5e:8d: a1:4a:bf:ce:d7:d7:2e:83:08:95:db:ea:0b:28:ca:45:7c:63: 31:f7:8e:08 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NEMxQjExMC8GA1UEBRMoOEU4QjM0NjM5RUE1NERGODEwQjkyQkNCQTc0MjcwNEU0 Qzg4NDJDMjAeFw0yNTA0MjUwNTQwMzRaFw0yNTA1MDIwNTQwMzRaMBgxFjAUBgNV BAMTDTY4MGIyMDUyLWFkZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFgyLCZETP/zud473ulQsY6rAZ2vw/Ic2g0G/F/d8jNUTOfbkVRqA2rBL4B94p EvJNBSSDSrjh8kPrCe8lj4oZHcOF98tUyonrFV7zN1ASZCeGLkXMO86iu/LaGu2z 9JemXrqxV0c0mfljVSYGZarEbErTUoM5n9v0TGkd1CT0UM2rmd5vYjIwdLvURDP+ rD5OxtyHvp9TbDvs9Cv2Tzn7wEIR6eioeoVJDg403Gq4F96cLopthKDEiAeTnUYU f4PKBP5FVxxPx5w7Vf+uE5h0e1Q7A/OuTAHDZ5StsVFD7hAaIh1WUdsMdbTYoEWp bhGgZyR1NPpGJ8qYzWTqFGeVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUydzettHY uX1Sh4vV9vakPeiIpicwHwYDVR0jBBgwFoAUjos0Y56lTfgQuSvLp0JwTkyIQsIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0QzFCL0Q5NjVCQTQwNjQx QjExRUY5ODkxNTQ3RkM0RjlBRTAyL2pvczBZNTZsVGZnUXVTdkxwMEp3VGt5SVFz SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvam9zMFk1NmxUZmdRdVN2THAwSndUa3lJUXNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 QzFCL0Q5NjVCQTQwNjQxQjExRUY5ODkxNTQ3RkM0RjlBRTAyL2pvczBZNTZsVGZn UXVTdkxwMEp3VGt5SVFzSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH8gVq9ViZ10NdAOSa/pDnIY+uu16RiPkd9CF7Sbd7ho99DgkwiZa5hB osAO/9lRu0P2291ZWFnTKh0xCjn8knhZ6+23r9em+fHpTRBLMvWeA3Zp1+4MkiZy emfJTIH0yuWsqiiQHmE02sawEDwIzqCYyUfoDCKIbN35QgFxfiiYTvE04oKDbdi5 iBYUje1uVVavYgtPIYfn/g8VDBPWPlWqO+wjD+kEVwzlUSODNhvTtJHt3kZ9SeW+ XrlELJTZHj0K5f/wwNR1PjCJIvnbR6HQeZoeTIyv7Fc0m5kU82zOBlnD4XOXGsJe jaFKv87X1y6DCJXb6gsoykV8YzH3jgg= -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:49 2025 by rpki-client