$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft File: nDt48kQmDsRjG6DfYZRgi3Gof0g.mft (raw, json) Hash identifier: L819dsK//yP3nuz6w72cNXx+w2IEdJ2KhEwcEQ17sDA= Subject key identifier: 5B:E9:2C:A5:6F:8B:BD:5B:EC:F8:08:62:43:D7:8C:54:06:63:9C:32 Authority key identifier: 9C:3B:78:F2:44:26:0E:C4:63:1B:A0:DF:61:94:60:8B:71:A8:7F:48 Certificate issuer: /CN=A91BA0F9/serialNumber=9C3B78F244260EC4631BA0DF6194608B71A87F48 Certificate serial: 346F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft Manifest number: 50B3 Signing time: Thu 24 Apr 2025 15:15:51 +0000 Manifest this update: Thu 24 Apr 2025 15:15:50 +0000 Manifest next update: Thu 01 May 2025 15:15:50 +0000 Files and hashes: 1: nDt48kQmDsRjG6DfYZRgi3Gof0g.crl (hash: ijKGnFC7E7LT4MFQ/lBCtQxqRVtCA0ODC+qaaXYMaR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.crl rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13423 (0x346f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0F9, serialNumber=9C3B78F244260EC4631BA0DF6194608B71A87F48 Validity Not Before: Apr 24 15:15:50 2025 GMT Not After : May 1 15:15:50 2025 GMT Subject: CN=680a55a6-642e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7d:4a:dc:c2:d2:5e:b6:d6:68:4b:e5:68:34: 1d:1c:b4:57:68:09:6d:f3:b2:8c:c7:f5:67:7e:8f: 97:a2:69:c2:94:29:18:e8:56:fb:96:3b:fe:ef:07: 8f:db:3d:69:f6:1b:6c:4c:a0:5e:db:45:36:cd:ac: b0:5d:ca:bc:88:71:70:98:61:2b:f2:9f:79:62:30: 1a:e4:83:e0:68:34:9b:03:6b:8f:42:5e:ba:53:2d: 97:69:9d:10:5b:95:90:49:4d:37:38:71:89:77:a8: 74:ed:13:bd:c9:ab:4d:31:3d:59:c6:7c:36:31:73: 31:6d:c2:1a:c1:62:40:91:c5:70:63:1f:ee:6b:b4: 19:22:9f:28:11:54:46:60:76:a4:48:31:70:b2:99: b3:ee:ca:30:4c:c5:14:89:64:c7:9b:75:d6:06:dd: e3:9d:f9:2d:35:a6:3e:f9:6d:65:3c:d1:44:08:48: 96:f4:62:2e:59:26:e2:c0:b7:f1:a3:de:8e:0f:fb: d8:f2:0f:83:32:a7:53:b5:7e:ed:9d:63:71:a0:32: 72:89:a2:0a:92:67:32:f4:64:83:7e:8e:b2:ba:91: b0:c2:2d:92:07:b9:9a:25:3d:c6:78:21:86:0e:c6: b5:5d:6e:56:7f:3b:0e:a6:3a:fd:f3:d2:ad:71:16: 5f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E9:2C:A5:6F:8B:BD:5B:EC:F8:08:62:43:D7:8C:54:06:63:9C:32 X509v3 Authority Key Identifier: keyid:9C:3B:78:F2:44:26:0E:C4:63:1B:A0:DF:61:94:60:8B:71:A8:7F:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:36:45:e7:00:16:a7:79:9f:84:95:70:f7:2c:38:84:e4:fa: 4f:42:ef:1b:c3:a9:5c:8e:d6:44:13:f9:7f:cd:4f:c9:04:78: a6:bc:e4:61:c9:0c:fa:37:7f:b9:66:62:54:d6:8f:27:81:35: d9:bb:70:b2:90:84:34:4e:a2:69:ac:d9:5c:12:c0:71:dd:7f: 95:41:04:7c:bd:ce:f1:5d:48:d6:e7:2c:2e:de:85:8b:b2:72: c8:73:22:4d:da:71:d1:aa:22:00:ff:fb:1e:c9:be:d8:78:3c: 06:6e:ae:a1:5f:17:58:48:7c:1a:57:90:86:56:17:e4:ab:61: 15:8b:65:28:e8:0a:72:07:d8:af:8c:8c:53:63:80:9d:73:a7: f8:1f:89:79:22:76:02:df:2a:77:88:24:22:1b:48:11:f6:dd: b7:c1:8b:ed:53:95:37:4a:ba:f1:ad:a9:8d:9d:0f:c5:e6:05: d1:d3:b1:24:86:08:f7:e5:f9:f1:a7:c3:27:6a:9e:a2:04:9b: 03:f9:4d:ec:c5:10:44:4d:1d:1b:2a:42:45:71:6a:82:12:95: da:92:41:de:d0:27:d6:82:2f:84:a3:76:90:ca:d5:8c:a1:27: a3:e3:b7:ac:bf:9e:78:64:5d:63:98:04:69:77:b1:fd:3d:13: 63:9b:78:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwRjkxMTAvBgNVBAUTKDlDM0I3OEYyNDQyNjBFQzQ2MzFCQTBERjYxOTQ2MDhC NzFBODdGNDgwHhcNMjUwNDI0MTUxNTUwWhcNMjUwNTAxMTUxNTUwWjAYMRYwFAYD VQQDEw02ODBhNTVhNi02NDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoX1K3MLSXrbWaEvlaDQdHLRXaAlt87KMx/Vnfo+XomnClCkY6Fb7ljv+7weP 2z1p9htsTKBe20U2zaywXcq8iHFwmGEr8p95YjAa5IPgaDSbA2uPQl66Uy2XaZ0Q W5WQSU03OHGJd6h07RO9yatNMT1Zxnw2MXMxbcIawWJAkcVwYx/ua7QZIp8oEVRG YHakSDFwspmz7sowTMUUiWTHm3XWBt3jnfktNaY++W1lPNFECEiW9GIuWSbiwLfx o96OD/vY8g+DMqdTtX7tnWNxoDJyiaIKkmcy9GSDfo6yupGwwi2SB7maJT3GeCGG Dsa1XW5WfzsOpjr989KtcRZftQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvpLKVv i71b7PgIYkPXjFQGY5wyMB8GA1UdIwQYMBaAFJw7ePJEJg7EYxug32GUYItxqH9I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBGOS9GQ0FBMkMwMDFE QTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9uRHQ0OGtRbURzUmpHNkRmWVpSZ2kzR29m MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25EdDQ4a1FtRHNSakc2RGZZWlJnaTNHb2YwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBGOS9GQ0FBMkMwMDFEQTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9uRHQ0OGtRbURz UmpHNkRmWVpSZ2kzR29mMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1NkXnABaneZ+ElXD3LDiE5PpPQu8bw6lcjtZEE/l/zU/JBHimvORh yQz6N3+5ZmJU1o8ngTXZu3CykIQ0TqJprNlcEsBx3X+VQQR8vc7xXUjW5ywu3oWL snLIcyJN2nHRqiIA//seyb7YeDwGbq6hXxdYSHwaV5CGVhfkq2EVi2Uo6ApyB9iv jIxTY4Cdc6f4H4l5InYC3yp3iCQiG0gR9t23wYvtU5U3SrrxramNnQ/F5gXR07Ek hgj35fnxp8Mnap6iBJsD+U3sxRBETR0bKkJFcWqCEpXakkHe0CfWgi+Eo3aQytWM oSej47esv554ZF1jmARpd7H9PRNjm3jn -----END CERTIFICATE-----Generated at Sat Apr 26 05:14:29 2025 by rpki-client