$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft File: _M8p58OjX6g2yQkOaCx4DQI56VU.mft (raw, json) Hash identifier: DxHQbfb/9ZjRzwPXjkKwR1TqCXB7FJ3yrWrKLW2TY+4= Subject key identifier: 5F:6D:00:F0:3A:5C:0E:D8:EE:4E:4D:11:5F:EB:47:86:36:11:89:9A Authority key identifier: FC:CF:29:E7:C3:A3:5F:A8:36:C9:09:0E:68:2C:78:0D:02:39:E9:55 Certificate issuer: /CN=A91C0243/serialNumber=FCCF29E7C3A35FA836C9090E682C780D0239E955 Certificate serial: 0776 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_M8p58OjX6g2yQkOaCx4DQI56VU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft Manifest number: 0775 Signing time: Thu 24 Apr 2025 21:14:30 +0000 Manifest this update: Thu 24 Apr 2025 21:14:29 +0000 Manifest next update: Thu 01 May 2025 21:14:29 +0000 Files and hashes: 1: _M8p58OjX6g2yQkOaCx4DQI56VU.crl (hash: e1XJH/Vi7p3TyCXH+t99NHln4oNV1mqwSq0CP0Zev9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.crl rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_M8p58OjX6g2yQkOaCx4DQI56VU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1910 (0x776) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0243, serialNumber=FCCF29E7C3A35FA836C9090E682C780D0239E955 Validity Not Before: Apr 24 21:14:29 2025 GMT Not After : May 1 21:14:29 2025 GMT Subject: CN=680aa9b5-d2a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6c:89:17:d3:9f:e6:c8:10:72:4c:57:f9:5e: 02:ed:fa:e1:7d:1f:24:8d:19:f1:cf:b4:4c:f5:86: 0e:a1:5d:54:ca:de:28:f3:69:86:52:df:99:ad:c0: 9b:bc:37:d0:30:21:96:73:cc:7c:1d:44:82:0d:48: 07:3e:1b:8d:4f:d9:03:e9:a7:83:1e:55:1b:48:b2: 28:49:27:cc:bd:f3:c1:bc:ca:c7:de:7f:04:26:10: e9:ac:93:a4:82:68:63:3f:22:2d:0e:bc:5a:67:77: 3e:60:73:3d:ff:1d:06:38:2c:0a:ed:21:99:94:53: 2c:c1:2b:ab:bb:c7:2a:68:b4:fb:61:4b:37:14:23: a5:af:c3:1f:f0:08:c6:0c:a8:36:17:a1:de:17:01: be:d3:ad:b6:2f:e6:3f:9b:8b:22:7a:40:3f:c3:d2: 1f:8f:92:08:83:50:ff:25:6e:60:37:ae:34:a0:26: 7d:88:f6:a8:e2:f5:d7:2f:b8:6c:84:74:b4:78:a8: d3:db:fe:f8:41:19:1c:5f:66:82:32:d4:ee:f2:3c: d0:17:08:f9:86:9b:39:ff:5e:77:c0:13:73:15:fa: 79:3d:e3:38:38:b7:55:7b:67:02:bd:ce:87:84:25: ec:35:a5:87:3a:96:a2:13:85:4b:de:94:d4:71:a2: d4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:6D:00:F0:3A:5C:0E:D8:EE:4E:4D:11:5F:EB:47:86:36:11:89:9A X509v3 Authority Key Identifier: keyid:FC:CF:29:E7:C3:A3:5F:A8:36:C9:09:0E:68:2C:78:0D:02:39:E9:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_M8p58OjX6g2yQkOaCx4DQI56VU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:48:65:66:94:ea:61:6e:7c:85:d3:44:b1:1e:2b:e7:7b:08: 7d:66:f0:65:90:fd:b4:da:13:bc:2e:88:5d:c6:c5:0b:5d:43: 8e:93:d8:33:d6:ba:ae:66:17:05:85:b0:dc:82:e4:dd:e9:fc: 92:7e:73:08:e2:f6:e5:3d:a1:22:6c:6a:bb:88:73:04:88:86: 23:13:35:06:98:8e:df:a5:ac:e6:04:1c:d9:d8:fe:70:78:90: 73:50:ab:14:ce:f5:b1:be:36:c2:83:fd:f3:06:84:f4:b5:8f: 42:5a:d2:1b:7c:a6:96:ff:be:cf:53:60:0a:b0:f9:18:9c:a5: e5:7f:59:0c:4e:c1:a2:c4:df:59:80:de:d9:90:cf:59:06:8d: 1c:df:f8:b0:c2:ab:4b:d5:17:04:bd:2d:b9:c8:26:1f:8a:fa: 8a:9b:b4:22:6f:a1:40:90:80:5a:ca:5a:be:47:b9:5a:5a:dc: 1a:79:ed:0f:e4:18:0a:ec:70:8c:9f:c6:cf:e8:ef:ff:02:42: 83:80:52:1d:c3:53:6c:a4:b0:b8:71:76:11:67:4a:50:ab:f4: f5:0c:b2:ca:cd:1c:fc:02:a1:63:39:f1:9b:71:8e:3e:90:0c: 7f:da:93:52:6c:4d:1c:10:5b:40:d6:27:52:2a:0e:c9:2d:2d: 9f:6e:f5:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzAyNDMxMTAvBgNVBAUTKEZDQ0YyOUU3QzNBMzVGQTgzNkM5MDkwRTY4MkM3ODBE MDIzOUU5NTUwHhcNMjUwNDI0MjExNDI5WhcNMjUwNTAxMjExNDI5WjAYMRYwFAYD VQQDEw02ODBhYTliNS1kMmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmyJF9Of5sgQckxX+V4C7frhfR8kjRnxz7RM9YYOoV1Uyt4o82mGUt+ZrcCb vDfQMCGWc8x8HUSCDUgHPhuNT9kD6aeDHlUbSLIoSSfMvfPBvMrH3n8EJhDprJOk gmhjPyItDrxaZ3c+YHM9/x0GOCwK7SGZlFMswSuru8cqaLT7YUs3FCOlr8Mf8AjG DKg2F6HeFwG+0622L+Y/m4siekA/w9Ifj5IIg1D/JW5gN640oCZ9iPao4vXXL7hs hHS0eKjT2/74QRkcX2aCMtTu8jzQFwj5hps5/153wBNzFfp5PeM4OLdVe2cCvc6H hCXsNaWHOpaiE4VL3pTUcaLUWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9tAPA6 XA7Y7k5NEV/rR4Y2EYmaMB8GA1UdIwQYMBaAFPzPKefDo1+oNskJDmgseA0COelV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDI0My8wMTY2RkY2NDBE MUMxMUVCQjgyRjM1MzFDNEY5QUUwMi9fTThwNThPalg2ZzJ5UWtPYUN4NERRSTU2 VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19NOHA1OE9qWDZnMnlRa09hQ3g0RFFJNTZWVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDI0My8wMTY2RkY2NDBEMUMxMUVCQjgyRjM1MzFDNEY5QUUwMi9fTThwNThPalg2 ZzJ5UWtPYUN4NERRSTU2VlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6SGVmlOphbnyF00SxHivnewh9ZvBlkP202hO8LohdxsULXUOOk9gz 1rquZhcFhbDcguTd6fySfnMI4vblPaEibGq7iHMEiIYjEzUGmI7fpazmBBzZ2P5w eJBzUKsUzvWxvjbCg/3zBoT0tY9CWtIbfKaW/77PU2AKsPkYnKXlf1kMTsGixN9Z gN7ZkM9ZBo0c3/iwwqtL1RcEvS25yCYfivqKm7Qib6FAkIBaylq+R7laWtwaee0P 5BgK7HCMn8bP6O//AkKDgFIdw1NspLC4cXYRZ0pQq/T1DLLKzRz8AqFjOfGbcY4+ kAx/2pNSbE0cEFtA1idSKg7JLS2fbvWh -----END CERTIFICATE-----Generated at Sat Apr 26 13:57:52 2025 by rpki-client