$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft File: 09eD7kxpu1Bj-1z1smKLx77DdIo.mft (raw, json) Hash identifier: UteD305dVlIaXIge+Dwph7Tcr4R0EHG/U1yfj++xcfY= Subject key identifier: E1:34:5F:B8:88:AD:61:24:63:E8:B7:9E:2D:34:06:BD:08:37:FF:70 Authority key identifier: D3:D7:83:EE:4C:69:BB:50:63:FB:5C:F5:B2:62:8B:C7:BE:C3:74:8A Certificate issuer: /CN=A91B9A77/serialNumber=D3D783EE4C69BB5063FB5CF5B2628BC7BEC3748A Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft Manifest number: 6F Signing time: Fri 25 Apr 2025 01:27:23 +0000 Manifest this update: Fri 25 Apr 2025 01:27:22 +0000 Manifest next update: Fri 02 May 2025 01:27:22 +0000 Files and hashes: 1: 09eD7kxpu1Bj-1z1smKLx77DdIo.crl (hash: YfQ5kf40MSPg6ccjkWqwb2Ah2XklznwhKa56heB+dNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.crl rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9A77, serialNumber=D3D783EE4C69BB5063FB5CF5B2628BC7BEC3748A Validity Not Before: Apr 25 01:27:22 2025 GMT Not After : May 2 01:27:22 2025 GMT Subject: CN=680ae4fb-41d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1b:4a:69:9f:3c:42:cb:fc:41:c4:10:e2:87: 78:04:5a:4c:da:b5:94:dd:16:4c:1d:7d:8d:f2:02: b5:ad:7e:19:25:c9:75:22:5e:16:74:d5:9d:53:27: 86:24:0c:6d:d0:a2:e4:5d:92:2c:a5:b9:15:b1:86: 72:f9:87:1c:10:5e:8a:fa:27:2c:4a:b6:97:aa:8c: 35:87:b9:33:49:2a:4a:53:3f:02:b1:0c:c3:af:c2: a6:b6:35:92:41:06:29:8d:2a:f4:6b:6e:0b:60:34: 44:d0:24:84:0a:01:1b:e7:a3:33:00:7b:70:52:bf: c4:91:ec:83:29:a0:53:e6:2f:7d:4e:6d:b8:7a:9e: 14:3f:fa:79:ca:4f:50:20:56:b0:29:0a:da:89:d0: bb:2e:89:fb:92:84:4c:32:1b:b7:7b:c5:63:a0:d8: 79:97:b1:f9:8e:07:93:bd:49:09:e2:35:aa:e0:06: d0:d2:64:8e:1b:73:cd:ab:de:56:c8:e6:04:cf:c5: 50:a8:49:81:c8:66:14:cc:26:05:56:db:a8:a2:42: 79:a9:20:37:0b:30:1a:c5:10:f4:65:03:e3:d5:f4: fc:76:7e:08:ec:48:07:99:e8:fa:b1:e8:13:05:1d: 2a:98:e1:72:02:18:80:87:aa:64:fe:b9:d5:7b:94: bf:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:34:5F:B8:88:AD:61:24:63:E8:B7:9E:2D:34:06:BD:08:37:FF:70 X509v3 Authority Key Identifier: keyid:D3:D7:83:EE:4C:69:BB:50:63:FB:5C:F5:B2:62:8B:C7:BE:C3:74:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:c7:94:b8:67:5b:43:a9:d4:2f:bf:aa:7a:e1:32:ff:61:0b: c3:73:eb:cd:8e:c5:66:f8:a7:79:e8:24:31:4e:0d:9e:34:60: 26:50:b5:3d:86:ed:ea:94:23:70:fa:78:da:86:9a:ff:87:d4: 6a:25:df:11:07:16:2f:4b:49:57:5c:f0:b4:67:db:f0:48:a1: dd:59:af:54:cd:9a:83:3a:fd:af:50:92:6c:22:65:04:84:3a: 1d:0c:d4:bb:2d:21:f1:af:a1:a2:62:b1:39:6c:5f:45:c7:6d: 7e:d9:80:08:f8:0a:aa:90:ad:55:e7:a0:6f:8e:88:5a:c0:a2: be:1d:27:b9:24:d3:87:69:b4:67:f2:96:b6:c1:60:53:6b:71: 88:10:e2:e6:27:6c:12:68:da:03:82:b0:9a:23:2f:ba:f6:e7: f1:42:01:e7:09:0d:e0:7c:e3:68:8e:e1:07:e1:f6:4a:d5:6c: a4:72:f4:c5:13:15:77:31:73:6a:22:e0:5c:95:e4:a1:f4:d7: f5:34:8d:a7:8d:9e:be:a3:4f:8f:13:4d:b8:4a:6a:a0:48:7a: e1:d7:0f:d0:a2:ec:ee:4b:3d:d5:5a:26:be:e2:9f:48:3d:36: 6f:62:b8:49:28:08:13:56:89:2f:d5:03:1a:c3:62:f1:7c:80: a1:70:ff:50 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OUE3NzExMC8GA1UEBRMoRDNENzgzRUU0QzY5QkI1MDYzRkI1Q0Y1QjI2MjhCQzdC RUMzNzQ4QTAeFw0yNTA0MjUwMTI3MjJaFw0yNTA1MDIwMTI3MjJaMBgxFjAUBgNV BAMTDTY4MGFlNGZiLTQxZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzG0ppnzxCy/xBxBDih3gEWkzatZTdFkwdfY3yArWtfhklyXUiXhZ01Z1TJ4Yk DG3QouRdkiyluRWxhnL5hxwQXor6JyxKtpeqjDWHuTNJKkpTPwKxDMOvwqa2NZJB BimNKvRrbgtgNETQJIQKARvnozMAe3BSv8SR7IMpoFPmL31Obbh6nhQ/+nnKT1Ag VrApCtqJ0LsuifuShEwyG7d7xWOg2HmXsfmOB5O9SQniNargBtDSZI4bc82r3lbI 5gTPxVCoSYHIZhTMJgVW26iiQnmpIDcLMBrFEPRlA+PV9Px2fgjsSAeZ6Pqx6BMF HSqY4XICGICHqmT+udV7lL/xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4TRfuIit YSRj6LeeLTQGvQg3/3AwHwYDVR0jBBgwFoAU09eD7kxpu1Bj+1z1smKLx77DdIow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5QTc3L0FCODUzNDQwN0Ez RjExRUZBMUMwRTAxNkM0RjlBRTAyLzA5ZUQ3a3hwdTFCai0xejFzbUtMeDc3RGRJ by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMDllRDdreHB1MUJqLTF6MXNtS0x4NzdEZElvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5 QTc3L0FCODUzNDQwN0EzRjExRUZBMUMwRTAxNkM0RjlBRTAyLzA5ZUQ3a3hwdTFC ai0xejFzbUtMeDc3RGRJby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADrHlLhnW0Op1C+/qnrhMv9hC8Nz682OxWb4p3noJDFODZ40YCZQtT2G 7eqUI3D6eNqGmv+H1Gol3xEHFi9LSVdc8LRn2/BIod1Zr1TNmoM6/a9QkmwiZQSE Oh0M1LstIfGvoaJisTlsX0XHbX7ZgAj4CqqQrVXnoG+OiFrAor4dJ7kk04dptGfy lrbBYFNrcYgQ4uYnbBJo2gOCsJojL7r25/FCAecJDeB842iO4Qfh9krVbKRy9MUT FXcxc2oi4FyV5KH01/U0jaeNnr6jT48TTbhKaqBIeuHXD9Ci7O5LPdVaJr7in0g9 Nm9iuEkoCBNWiS/VAxrDYvF8gKFw/1A= -----END CERTIFICATE-----Generated at Sat Apr 26 14:12:47 2025 by rpki-client