$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft File: fR7WtlFJDavaqEvZL81C5VPubHA.mft (raw, json) Hash identifier: ZQIHdN1uo2T4JiSaTWJn0+AL1ppBTPCLjhXctHeR5Ac= Subject key identifier: 96:5E:BB:3B:98:ED:D3:E6:8B:21:16:84:14:3C:3D:77:F6:6F:8C:00 Authority key identifier: 7D:1E:D6:B6:51:49:0D:AB:DA:A8:4B:D9:2F:CD:42:E5:53:EE:6C:70 Certificate issuer: /CN=A91B8C6C/serialNumber=7D1ED6B651490DABDAA84BD92FCD42E553EE6C70 Certificate serial: 3470 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft Manifest number: 3470 Signing time: Thu 24 Apr 2025 15:08:42 +0000 Manifest this update: Thu 24 Apr 2025 15:08:42 +0000 Manifest next update: Thu 01 May 2025 15:08:42 +0000 Files and hashes: 1: fR7WtlFJDavaqEvZL81C5VPubHA.crl (hash: NaK+lTyU6fUVyrbRMzG11ESkknXSc6jjP6myMoce7Eg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.crl rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13424 (0x3470) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C6C, serialNumber=7D1ED6B651490DABDAA84BD92FCD42E553EE6C70 Validity Not Before: Apr 24 15:08:42 2025 GMT Not After : May 1 15:08:42 2025 GMT Subject: CN=680a53fa-bfc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6d:36:1b:a7:32:ca:4d:5a:32:8c:32:c9:1b: e9:2d:a3:92:b7:f3:70:dd:62:83:bc:d7:66:21:6e: 45:fc:f3:f8:75:9a:63:05:6f:85:10:71:ce:a0:cb: 02:e5:49:e8:40:27:f2:f5:ef:bb:0f:37:37:30:2f: 09:9a:5a:ea:4a:b3:11:bc:a9:00:ae:b8:bf:8d:a6: ca:d0:8e:fa:ca:30:8f:0d:ba:46:9b:a2:a3:9b:af: ac:c1:e9:b4:07:65:f2:7e:0f:d1:e4:83:95:b1:71: a7:d9:0c:bf:37:7a:d9:0c:92:d8:95:ba:fd:5e:a2: 06:30:0e:dc:a2:91:47:58:76:1c:68:c2:a6:9a:8a: ff:d2:21:8e:6e:1f:8f:79:90:0f:80:9a:39:87:7c: a1:62:f7:47:02:aa:68:60:74:d8:47:35:0e:bc:d2: 35:69:56:db:9c:8f:72:e1:1b:8a:94:ca:70:09:2e: 9e:39:55:9a:c7:6b:63:8e:de:83:13:ee:88:f3:ff: 86:ec:72:4f:91:c0:a1:43:94:8c:08:a9:e5:f8:4b: b1:cb:d8:a3:f2:ff:92:7c:98:9f:06:99:85:10:3e: 4b:e4:a1:51:bb:5f:42:dd:b2:d8:d5:82:af:8b:d2: 57:e6:e4:b0:ab:2f:85:f4:de:df:37:3c:c3:e6:d3: 94:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:5E:BB:3B:98:ED:D3:E6:8B:21:16:84:14:3C:3D:77:F6:6F:8C:00 X509v3 Authority Key Identifier: keyid:7D:1E:D6:B6:51:49:0D:AB:DA:A8:4B:D9:2F:CD:42:E5:53:EE:6C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:b4:58:b7:92:d0:d3:ec:fc:0e:c6:cf:73:ad:3a:72:5e:30: 6b:01:03:ef:ca:74:11:e8:dd:37:48:50:c2:ae:72:a2:ca:46: 72:bd:f5:8b:af:56:25:8c:8d:77:b6:97:72:dc:af:75:4e:2f: c2:8c:bf:f1:0c:23:4c:c4:c4:88:ba:55:0a:76:e5:0a:b2:a1: 98:33:fc:4d:cc:d4:2e:46:38:98:b0:7b:ef:72:1b:4e:77:ab: 14:4d:dc:6e:f9:85:18:54:83:b6:22:c0:bf:c6:db:34:24:8c: 63:69:15:c8:b2:6b:11:a2:3b:eb:ae:a8:17:43:fb:36:0f:a2: ee:4b:23:f9:ec:1e:65:6a:a4:fa:e6:53:d5:80:36:fe:86:ea: 11:b1:ac:56:9e:bb:26:15:31:93:77:04:80:d9:63:2f:b1:14: fd:f4:6e:95:e3:56:b0:e8:4a:69:1a:7f:fb:55:77:49:a9:54: 51:8f:7a:37:e3:7f:e0:1a:8c:20:bb:77:fb:4d:dd:ad:af:71: fe:1a:da:c4:cd:34:a1:77:a4:3a:0c:c3:75:59:95:9b:7b:72: c4:ad:07:fa:ad:dd:0b:e8:e4:18:82:f7:9b:46:6b:15:9b:f7: 43:24:de:5c:cc:d8:3d:89:4f:10:90:36:27:44:4d:63:c5:34: e4:3a:ae:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDNkMxMTAvBgNVBAUTKDdEMUVENkI2NTE0OTBEQUJEQUE4NEJEOTJGQ0Q0MkU1 NTNFRTZDNzAwHhcNMjUwNDI0MTUwODQyWhcNMjUwNTAxMTUwODQyWjAYMRYwFAYD VQQDEw02ODBhNTNmYS1iZmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3W02G6cyyk1aMowyyRvpLaOSt/Nw3WKDvNdmIW5F/PP4dZpjBW+FEHHOoMsC 5UnoQCfy9e+7Dzc3MC8JmlrqSrMRvKkArri/jabK0I76yjCPDbpGm6Kjm6+swem0 B2Xyfg/R5IOVsXGn2Qy/N3rZDJLYlbr9XqIGMA7copFHWHYcaMKmmor/0iGObh+P eZAPgJo5h3yhYvdHAqpoYHTYRzUOvNI1aVbbnI9y4RuKlMpwCS6eOVWax2tjjt6D E+6I8/+G7HJPkcChQ5SMCKnl+Euxy9ij8v+SfJifBpmFED5L5KFRu19C3bLY1YKv i9JX5uSwqy+F9N7fNzzD5tOUPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZeuzuY 7dPmiyEWhBQ8PXf2b4wAMB8GA1UdIwQYMBaAFH0e1rZRSQ2r2qhL2S/NQuVT7mxw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEM2Qy9DMTQ4RDFDQTFE QTMxMUUyOEUxQTNFOTkwOEIwMkNEMi9mUjdXdGxGSkRhdmFxRXZaTDgxQzVWUHVi SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZSN1d0bEZKRGF2YXFFdlpMODFDNVZQdWJIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEM2Qy9DMTQ4RDFDQTFEQTMxMUUyOEUxQTNFOTkwOEIwMkNEMi9mUjdXdGxGSkRh dmFxRXZaTDgxQzVWUHViSEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXtFi3ktDT7PwOxs9zrTpyXjBrAQPvynQR6N03SFDCrnKiykZyvfWL r1YljI13tpdy3K91Ti/CjL/xDCNMxMSIulUKduUKsqGYM/xNzNQuRjiYsHvvchtO d6sUTdxu+YUYVIO2IsC/xts0JIxjaRXIsmsRojvrrqgXQ/s2D6LuSyP57B5laqT6 5lPVgDb+huoRsaxWnrsmFTGTdwSA2WMvsRT99G6V41aw6EppGn/7VXdJqVRRj3o3 43/gGowgu3f7Td2tr3H+GtrEzTShd6Q6DMN1WZWbe3LErQf6rd0L6OQYgvebRmsV m/dDJN5czNg9iU8QkDYnRE1jxTTkOq7I -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:02 2025 by rpki-client