$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft File: mYWbHvAhS7n86OW_FSbzvRHsKAc.mft (raw, json) Hash identifier: gg2u/zYDz2vhM1Bc6RG/IuuvvgdEkZcgYu/+sXeFH2c= Subject key identifier: 72:6C:51:EA:2D:E6:51:59:C5:A5:69:08:90:7E:ED:64:C2:BF:07:2F Authority key identifier: 99:85:9B:1E:F0:21:4B:B9:FC:E8:E5:BF:15:26:F3:BD:11:EC:28:07 Certificate issuer: /CN=A91BF026/serialNumber=99859B1EF0214BB9FCE8E5BF1526F3BD11EC2807 Certificate serial: 1728 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mYWbHvAhS7n86OW_FSbzvRHsKAc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft Manifest number: 1F6B Signing time: Thu 24 Apr 2025 16:38:07 +0000 Manifest this update: Thu 24 Apr 2025 16:38:06 +0000 Manifest next update: Thu 01 May 2025 16:38:06 +0000 Files and hashes: 1: mYWbHvAhS7n86OW_FSbzvRHsKAc.crl (hash: uVPZ+txaHphGnH3WbRFD5d0ruKGmFa7GAGEOZrfNEYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.crl rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mYWbHvAhS7n86OW_FSbzvRHsKAc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5928 (0x1728) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF026, serialNumber=99859B1EF0214BB9FCE8E5BF1526F3BD11EC2807 Validity Not Before: Apr 24 16:38:06 2025 GMT Not After : May 1 16:38:06 2025 GMT Subject: CN=680a68ef-d8e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ee:b4:ce:11:03:03:44:4f:40:52:fe:ed:2f: 21:65:3d:8b:9d:fc:91:49:84:ca:07:65:b6:ae:49: 50:5e:ab:eb:91:de:8d:e6:e2:6a:74:17:f4:4c:21: 8c:94:db:d8:16:96:e2:a5:f1:d6:e2:87:21:21:cd: 6a:6b:67:80:8c:b0:d8:00:31:05:c2:7a:be:96:a9: f3:19:b2:00:67:8b:b9:27:dd:74:1d:eb:60:63:1f: 50:e1:33:df:4d:5f:22:b7:32:30:60:5c:cb:c3:a6: 18:94:c9:fb:2e:c6:83:91:3a:39:a3:7e:dd:15:cd: a5:2f:57:4f:80:2b:95:5c:72:fd:a9:7f:fe:5a:5b: d9:a7:32:aa:39:2f:d2:91:9c:c6:1c:28:ac:07:19: c5:46:0a:32:36:0a:4a:03:a1:ca:79:d8:7a:4b:ff: cd:3c:b9:fa:c4:6c:d4:a9:6f:fb:10:b0:8b:95:e0: 21:87:e1:fc:81:52:07:a6:15:33:a7:29:c2:b0:19: 84:13:ac:4d:ce:3e:81:7c:63:8b:63:69:d5:8b:5c: 95:35:75:ac:5b:34:62:e6:a1:14:29:1d:4e:cd:19: ef:06:9f:57:1e:a9:ee:27:62:1c:38:1b:c3:e9:c7: 77:01:cb:15:c1:dc:98:7c:20:62:f2:96:7b:cd:25: dc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:6C:51:EA:2D:E6:51:59:C5:A5:69:08:90:7E:ED:64:C2:BF:07:2F X509v3 Authority Key Identifier: keyid:99:85:9B:1E:F0:21:4B:B9:FC:E8:E5:BF:15:26:F3:BD:11:EC:28:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mYWbHvAhS7n86OW_FSbzvRHsKAc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:1d:aa:19:64:63:50:da:54:05:c8:1d:e9:f0:75:f1:28:14: 17:0f:ac:2d:67:e9:2d:e9:54:2a:4e:28:95:9c:1e:58:35:31: f4:a1:ee:90:fa:6f:86:be:14:d4:01:fe:62:1d:2a:9b:22:d7: 63:43:92:68:50:9b:55:70:7b:46:a0:e0:13:e9:db:44:02:41: 0b:b1:6d:68:78:fb:a6:1b:db:cc:f6:34:c8:b5:f5:8c:2e:f8: 66:e6:67:10:20:05:10:64:4a:4c:e1:b8:27:4d:0a:5e:1f:2a: ed:79:3b:75:7c:dd:cd:80:5f:fd:28:f8:3c:6c:6b:1c:90:66: 68:a5:bc:e0:ee:17:85:87:29:07:f9:c7:32:1d:71:0d:1f:f6: 1e:4d:18:3d:b4:6f:e7:79:0f:6b:28:75:1b:41:70:6c:cf:76: 71:6d:e0:35:ea:1a:18:3f:02:67:e1:15:39:b7:23:72:22:b2: ad:ef:3d:19:9e:1a:d1:17:08:b8:8e:c0:63:a3:e0:24:34:fd: 1f:47:a5:83:e5:ef:2f:20:69:aa:d4:4a:ff:f0:ac:9e:b6:f6: 33:be:c3:96:e5:3e:08:78:6c:8a:9e:f7:ef:ef:71:d7:b7:d2: 54:29:85:8a:3e:a2:31:ad:9e:12:e7:3a:63:03:32:bb:ec:6e: a6:16:c1:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYwMjYxMTAvBgNVBAUTKDk5ODU5QjFFRjAyMTRCQjlGQ0U4RTVCRjE1MjZGM0JE MTFFQzI4MDcwHhcNMjUwNDI0MTYzODA2WhcNMjUwNTAxMTYzODA2WjAYMRYwFAYD VQQDEw02ODBhNjhlZi1kOGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwO60zhEDA0RPQFL+7S8hZT2LnfyRSYTKB2W2rklQXqvrkd6N5uJqdBf0TCGM lNvYFpbipfHW4ochIc1qa2eAjLDYADEFwnq+lqnzGbIAZ4u5J910HetgYx9Q4TPf TV8itzIwYFzLw6YYlMn7LsaDkTo5o37dFc2lL1dPgCuVXHL9qX/+WlvZpzKqOS/S kZzGHCisBxnFRgoyNgpKA6HKedh6S//NPLn6xGzUqW/7ELCLleAhh+H8gVIHphUz pynCsBmEE6xNzj6BfGOLY2nVi1yVNXWsWzRi5qEUKR1OzRnvBp9XHqnuJ2IcOBvD 6cd3AcsVwdyYfCBi8pZ7zSXcOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJsUeot 5lFZxaVpCJB+7WTCvwcvMB8GA1UdIwQYMBaAFJmFmx7wIUu5/OjlvxUm870R7CgH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjAyNi8wMzI4QTg1Q0RE RTAxMUU3QjI4MTA3NTdDNEY5QUUwMi9tWVdiSHZBaFM3bjg2T1dfRlNienZSSHNL QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21ZV2JIdkFoUzduODZPV19GU2J6dlJIc0tBYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjAyNi8wMzI4QTg1Q0RERTAxMUU3QjI4MTA3NTdDNEY5QUUwMi9tWVdiSHZBaFM3 bjg2T1dfRlNienZSSHNLQWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQHaoZZGNQ2lQFyB3p8HXxKBQXD6wtZ+kt6VQqTiiVnB5YNTH0oe6Q +m+GvhTUAf5iHSqbItdjQ5JoUJtVcHtGoOAT6dtEAkELsW1oePumG9vM9jTItfWM Lvhm5mcQIAUQZEpM4bgnTQpeHyrteTt1fN3NgF/9KPg8bGsckGZopbzg7heFhykH +ccyHXENH/YeTRg9tG/neQ9rKHUbQXBsz3ZxbeA16hoYPwJn4RU5tyNyIrKt7z0Z nhrRFwi4jsBjo+AkNP0fR6WD5e8vIGmq1Er/8KyetvYzvsOW5T4IeGyKnvfv73HX t9JUKYWKPqIxrZ4S5zpjAzK77G6mFsH0 -----END CERTIFICATE-----Generated at Sat Apr 26 12:22:53 2025 by rpki-client