$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft File: Iin2usLWDFC9Hk9Y9CwMobD4m28.mft (raw, json) Hash identifier: atVHJcjO8h2rpgevSjh8cRHXc5C2etLl5QiUU0NfVN8= Subject key identifier: D2:A6:6F:93:7E:AA:A8:B8:62:48:10:7F:C5:C0:04:CB:0E:6B:43:FA Authority key identifier: 22:29:F6:BA:C2:D6:0C:50:BD:1E:4F:58:F4:2C:0C:A1:B0:F8:9B:6F Certificate issuer: /CN=A91B8C13/serialNumber=2229F6BAC2D60C50BD1E4F58F42C0CA1B0F89B6F Certificate serial: 347F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft Manifest number: 347F Signing time: Thu 24 Apr 2025 15:17:56 +0000 Manifest this update: Thu 24 Apr 2025 15:17:55 +0000 Manifest next update: Thu 01 May 2025 15:17:55 +0000 Files and hashes: 1: Iin2usLWDFC9Hk9Y9CwMobD4m28.crl (hash: HNf2UmXm8JiAPHo4+xELttoiTuxFaOqkFBDNE8ElF7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.crl rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:17:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13439 (0x347f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C13, serialNumber=2229F6BAC2D60C50BD1E4F58F42C0CA1B0F89B6F Validity Not Before: Apr 24 15:17:55 2025 GMT Not After : May 1 15:17:55 2025 GMT Subject: CN=680a5624-bb36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0b:0c:5b:9b:6c:eb:b8:ab:a6:07:34:91:b3: ce:64:21:42:bf:27:48:bc:2a:bc:e6:98:7b:a0:cd: 5b:9b:b7:2c:e9:7a:02:4b:fc:35:b8:dc:28:5e:af: 0e:77:fa:82:dd:be:4d:22:96:91:fa:f2:e7:69:6a: 8e:83:18:8b:54:23:13:99:0c:43:35:f5:0f:f8:3b: 9a:9b:90:f1:35:af:7d:eb:82:96:4e:dd:56:77:ff: 4d:c7:e7:34:23:b4:27:11:98:f9:0d:7c:65:32:bd: e0:cd:b5:53:81:60:4d:3b:b3:fa:30:ce:04:60:53: 61:9a:3b:d8:33:78:91:24:83:5b:58:63:6e:9b:a0: b2:b1:28:67:e8:9d:dd:73:87:65:73:3d:da:8c:91: d1:33:29:9c:54:69:e6:56:a6:df:54:11:a9:99:a2: 40:60:9c:ea:6f:45:a3:48:07:1c:46:72:92:42:0c: 48:85:a9:b2:44:d1:3a:ad:13:97:29:de:83:e2:d2: d9:8f:bc:fe:26:15:63:9c:d8:68:43:14:ca:b2:4c: b2:b6:5b:c2:f9:06:ed:26:05:05:6e:12:0d:8e:bd: cb:eb:e5:20:95:b2:a0:de:ec:3c:1b:c3:5b:38:9a: b7:e4:e4:d5:d6:50:81:23:8a:ab:f7:10:38:70:56: b6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A6:6F:93:7E:AA:A8:B8:62:48:10:7F:C5:C0:04:CB:0E:6B:43:FA X509v3 Authority Key Identifier: keyid:22:29:F6:BA:C2:D6:0C:50:BD:1E:4F:58:F4:2C:0C:A1:B0:F8:9B:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:7b:6b:0a:30:d9:1c:3b:8e:c5:5f:48:f2:bd:b6:76:83:51: 30:6c:8a:92:33:dd:2c:f6:84:8a:65:83:30:17:0c:49:6d:bb: 46:6a:69:9a:68:74:cd:15:47:3f:ac:10:86:71:23:a6:14:bf: 05:77:3d:a3:17:38:44:7a:2f:59:31:28:b6:05:30:bd:a2:df: bd:47:c8:ef:f2:5b:5d:69:29:d9:c1:db:dc:e4:72:14:85:55: 89:5b:c0:74:94:6c:1c:43:50:0b:4a:d8:5a:81:10:c2:ba:13: f2:1f:27:07:97:c5:41:96:5c:ec:53:70:80:7b:97:8d:f5:08: 02:e6:97:f6:4e:67:07:5d:38:ce:4c:b5:00:11:44:fc:94:6d: 7e:7e:c1:41:9d:05:6f:f8:fb:0d:6b:03:0e:21:ea:43:9b:88: 06:f4:b9:87:7c:43:58:3a:e2:ac:bd:9a:de:3c:f5:ba:17:ce: df:b1:7d:e7:17:26:79:07:0e:48:8e:7b:f9:ca:0a:df:f5:8a: ba:dc:c5:40:d4:f5:24:89:62:50:ba:65:e9:17:63:23:c8:2a: c6:a1:e4:45:d9:da:c4:94:8a:0d:96:8f:fd:ba:2a:95:6d:15: cd:a9:db:48:7c:84:72:3b:73:36:b2:9b:3f:69:85:7c:8f:d2: 59:dc:93:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDMTMxMTAvBgNVBAUTKDIyMjlGNkJBQzJENjBDNTBCRDFFNEY1OEY0MkMwQ0Ex QjBGODlCNkYwHhcNMjUwNDI0MTUxNzU1WhcNMjUwNTAxMTUxNzU1WjAYMRYwFAYD VQQDEw02ODBhNTYyNC1iYjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQsMW5ts67irpgc0kbPOZCFCvydIvCq85ph7oM1bm7cs6XoCS/w1uNwoXq8O d/qC3b5NIpaR+vLnaWqOgxiLVCMTmQxDNfUP+Duam5DxNa9964KWTt1Wd/9Nx+c0 I7QnEZj5DXxlMr3gzbVTgWBNO7P6MM4EYFNhmjvYM3iRJINbWGNum6CysShn6J3d c4dlcz3ajJHRMymcVGnmVqbfVBGpmaJAYJzqb0WjSAccRnKSQgxIhamyRNE6rROX Kd6D4tLZj7z+JhVjnNhoQxTKskyytlvC+QbtJgUFbhINjr3L6+UglbKg3uw8G8Nb OJq35OTV1lCBI4qr9xA4cFa2QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKmb5N+ qqi4YkgQf8XABMsOa0P6MB8GA1UdIwQYMBaAFCIp9rrC1gxQvR5PWPQsDKGw+Jtv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEMxMy82RkE5NUI1ODFE QUExMUUyODVDMjFDQTYwOEIwMkNEMi9JaW4ydXNMV0RGQzlIazlZOUN3TW9iRDRt MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpbjJ1c0xXREZDOUhrOVk5Q3dNb2JENG0yOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEMxMy82RkE5NUI1ODFEQUExMUUyODVDMjFDQTYwOEIwMkNEMi9JaW4ydXNMV0RG QzlIazlZOUN3TW9iRDRtMjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXe2sKMNkcO47FX0jyvbZ2g1EwbIqSM90s9oSKZYMwFwxJbbtGamma aHTNFUc/rBCGcSOmFL8Fdz2jFzhEei9ZMSi2BTC9ot+9R8jv8ltdaSnZwdvc5HIU hVWJW8B0lGwcQ1ALSthagRDCuhPyHycHl8VBllzsU3CAe5eN9QgC5pf2TmcHXTjO TLUAEUT8lG1+fsFBnQVv+PsNawMOIepDm4gG9LmHfENYOuKsvZrePPW6F87fsX3n FyZ5Bw5Ijnv5ygrf9Yq63MVA1PUkiWJQumXpF2MjyCrGoeRF2drElIoNlo/9uiqV bRXNqdtIfIRyO3M2sps/aYV8j9JZ3JPZ -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:26 2025 by rpki-client