$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.mft File: voMTRZEKyCwYqIMcLYUK5bOOUA8.mft (raw, json) Hash identifier: wAn+XXMtTTm0XsfO11cAX/v0BKByO54MZX9mDVHZpT4= Subject key identifier: 5F:03:49:9E:86:60:B0:F9:0D:55:0F:ED:1E:94:2A:59:89:20:1E:AF Authority key identifier: BE:83:13:45:91:0A:C8:2C:18:A8:83:1C:2D:85:0A:E5:B3:8E:50:0F Certificate issuer: /CN=A91B8C13/serialNumber=BE831345910AC82C18A8831C2D850AE5B38E500F Certificate serial: 0787 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/voMTRZEKyCwYqIMcLYUK5bOOUA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.mft Manifest number: 0786 Signing time: Sat 26 Apr 2025 15:17:08 +0000 Manifest this update: Sat 26 Apr 2025 15:17:08 +0000 Manifest next update: Sat 03 May 2025 15:17:08 +0000 Files and hashes: 1: voMTRZEKyCwYqIMcLYUK5bOOUA8.crl (hash: S4eKxtkauM03gws1RWCMlezPrOXn+qVmSaP/xqsT+lg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.crl rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/voMTRZEKyCwYqIMcLYUK5bOOUA8.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1927 (0x787) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C13, serialNumber=BE831345910AC82C18A8831C2D850AE5B38E500F Validity Not Before: Apr 26 15:17:08 2025 GMT Not After : May 3 15:17:08 2025 GMT Subject: CN=680cf8f4-c34d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c8:a6:b2:1a:7d:13:52:c9:e7:63:4e:17:f0: 21:d6:8b:d0:1d:dd:13:83:79:1f:fc:d3:c0:bc:ce: ae:26:f6:ef:ae:db:97:10:27:7d:e3:ff:84:d6:a3: 64:2f:08:e7:33:1b:82:91:73:b7:0b:67:6a:08:0c: 37:9c:f2:09:a4:02:1f:e0:c2:25:2b:6a:79:92:a6: a3:65:c6:9e:80:d6:bd:2a:51:2c:84:d2:0f:7c:cd: 0c:04:02:49:31:26:1e:0e:be:24:a7:b5:9f:6e:81: 32:69:0b:db:2f:e2:e4:cf:d2:a8:66:27:51:52:06: b0:fa:d4:a6:d0:9e:2b:22:0e:d6:13:27:23:1c:7a: 8d:ba:71:2d:71:a1:b3:2f:c7:72:67:72:d9:3d:f4: 04:ac:06:1f:d5:77:80:fb:94:35:85:02:c8:f7:c7: 08:12:88:73:fb:f6:d8:42:d5:8a:96:51:7d:55:39: 4e:16:53:64:b8:e9:be:fc:ea:f5:f6:8a:0b:10:79: ca:85:82:9e:0b:25:a1:ae:8b:51:e9:dd:8b:6d:27: 0d:1f:2c:62:de:8c:ee:af:ee:46:f4:37:0e:06:9c: 77:f7:e7:9d:c8:5f:00:66:1d:1e:0c:93:3f:5c:d8: f9:a1:8b:eb:1e:ce:cb:95:97:e9:84:d9:f8:8a:98: 86:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:03:49:9E:86:60:B0:F9:0D:55:0F:ED:1E:94:2A:59:89:20:1E:AF X509v3 Authority Key Identifier: keyid:BE:83:13:45:91:0A:C8:2C:18:A8:83:1C:2D:85:0A:E5:B3:8E:50:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/voMTRZEKyCwYqIMcLYUK5bOOUA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:bc:4f:da:b1:05:d0:51:dd:83:f8:6a:e8:d9:b0:15:5b:ef: 71:54:02:0d:16:e5:e9:ba:4c:2b:88:d4:5b:14:25:d3:7e:72: 26:f2:eb:7d:6a:dc:8a:6f:8d:14:cc:6c:6e:99:d7:85:46:f0: 9e:d2:b7:c4:7f:72:90:c2:2e:de:47:54:6e:24:f4:45:ed:e5: 9c:86:9b:82:9f:da:eb:8d:7f:23:ea:a1:58:8e:22:8c:ca:22: fc:c0:21:93:f1:b7:19:44:43:a0:da:e3:c2:b2:bf:46:11:bb: bc:96:92:5a:9d:60:ed:8a:81:df:c8:ce:e3:fc:7c:80:e4:bf: 49:f4:25:42:29:c5:47:4a:5c:0f:27:24:1a:cf:a8:b9:84:80: 3f:fd:9e:af:cd:3e:7b:30:b3:37:df:00:ce:77:61:37:58:f0: ba:82:0e:1b:e4:0e:e7:ed:04:bc:d0:20:09:53:c2:41:ee:34: 81:11:14:57:b2:eb:2f:b5:1f:48:35:46:c8:72:05:44:e0:34: da:ab:68:2a:94:d5:e6:70:3a:fb:ee:0d:6e:b8:a6:44:14:0d: e2:fc:73:40:6e:1d:8b:7c:34:aa:ca:48:1c:59:3c:0b:3c:84: 7c:f8:d2:5a:fa:0e:f8:ec:7b:c1:af:93:37:d0:be:49:54:73: d5:5b:9f:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDMTMxMTAvBgNVBAUTKEJFODMxMzQ1OTEwQUM4MkMxOEE4ODMxQzJEODUwQUU1 QjM4RTUwMEYwHhcNMjUwNDI2MTUxNzA4WhcNMjUwNTAzMTUxNzA4WjAYMRYwFAYD VQQDEw02ODBjZjhmNC1jMzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssimshp9E1LJ52NOF/Ah1ovQHd0Tg3kf/NPAvM6uJvbvrtuXECd94/+E1qNk LwjnMxuCkXO3C2dqCAw3nPIJpAIf4MIlK2p5kqajZcaegNa9KlEshNIPfM0MBAJJ MSYeDr4kp7WfboEyaQvbL+Lkz9KoZidRUgaw+tSm0J4rIg7WEycjHHqNunEtcaGz L8dyZ3LZPfQErAYf1XeA+5Q1hQLI98cIEohz+/bYQtWKllF9VTlOFlNkuOm+/Or1 9ooLEHnKhYKeCyWhrotR6d2LbScNHyxi3ozur+5G9DcOBpx39+edyF8AZh0eDJM/ XNj5oYvrHs7LlZfphNn4ipiGVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8DSZ6G YLD5DVUP7R6UKlmJIB6vMB8GA1UdIwQYMBaAFL6DE0WRCsgsGKiDHC2FCuWzjlAP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEMxMy9GODlDNEY2ODBE NjgxMUVCODQ5QkRGM0VDNEY5QUUwMi92b01UUlpFS3lDd1lxSU1jTFlVSzViT09V QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3ZvTVRSWkVLeUN3WXFJTWNMWVVLNWJPT1VBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEMxMy9GODlDNEY2ODBENjgxMUVCODQ5QkRGM0VDNEY5QUUwMi92b01UUlpFS3lD d1lxSU1jTFlVSzViT09VQTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYvE/asQXQUd2D+Gro2bAVW+9xVAINFuXpukwriNRbFCXTfnIm8ut9 atyKb40UzGxumdeFRvCe0rfEf3KQwi7eR1RuJPRF7eWchpuCn9rrjX8j6qFYjiKM yiL8wCGT8bcZREOg2uPCsr9GEbu8lpJanWDtioHfyM7j/HyA5L9J9CVCKcVHSlwP JyQaz6i5hIA//Z6vzT57MLM33wDOd2E3WPC6gg4b5A7n7QS80CAJU8JB7jSBERRX susvtR9INUbIcgVE4DTaq2gqlNXmcDr77g1uuKZEFA3i/HNAbh2LfDSqykgcWTwL PIR8+NJa+g747HvBr5M30L5JVHPVW58T -----END CERTIFICATE-----Generated at Sat Apr 26 17:43:01 2025 by rpki-client