$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft File: DldBdtqmrGyXcGxmecfiTnC6rVc.mft (raw, json) Hash identifier: 8ZLNxUZjA9Mw80V7x0rNi0p6/ls1hCeNGHA9wjayjuA= Subject key identifier: 61:C5:CA:F4:13:B0:E6:AF:36:C0:30:88:85:D8:5C:F0:35:E1:D9:31 Authority key identifier: 0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57 Certificate issuer: /CN=A91C0BDE/serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57 Certificate serial: 098A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft Manifest number: 124D Signing time: Thu 24 Apr 2025 19:59:33 +0000 Manifest this update: Thu 24 Apr 2025 19:59:32 +0000 Manifest next update: Thu 01 May 2025 19:59:32 +0000 Files and hashes: 1: DldBdtqmrGyXcGxmecfiTnC6rVc.crl (hash: qXQ2ixmijpJPW1rvG0Un7RtfH+Ei3LuO+pZ1K1LtZJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:59:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2442 (0x98a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE, serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57 Validity Not Before: Apr 24 19:59:32 2025 GMT Not After : May 1 19:59:32 2025 GMT Subject: CN=680a9824-f46b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6d:2a:ae:e6:82:d9:a9:a2:a3:6d:5a:32:a8: 7d:e8:ba:4a:21:e3:95:2e:da:95:3f:41:1b:1e:4a: 20:d0:d1:65:e7:c0:5d:5f:4d:90:31:40:f8:cc:54: 5e:85:89:bb:9a:5d:6b:4f:b2:fc:e4:ac:cc:9e:5c: c8:3b:2c:d0:be:28:46:73:a3:60:9a:a6:3c:c4:dc: 57:36:7c:84:cb:c4:32:7f:97:ed:dc:a6:49:c9:2f: d4:3c:71:3c:fe:4a:8c:76:29:30:28:19:3a:21:63: 88:d1:6e:2b:7d:fd:4b:6d:1d:fd:a8:77:52:a6:1d: e3:7d:7a:b0:1f:5c:9f:1e:d9:84:74:78:1c:a1:80: 68:44:24:81:61:10:b6:e0:63:59:db:b0:af:95:fd: 3d:5f:1a:6c:14:38:0c:7b:72:7c:03:02:c8:29:9f: 61:b2:6d:a0:49:c1:f5:88:63:a4:cb:11:cb:9b:0d: b3:4d:f0:c5:c9:19:7e:bf:fb:11:cb:31:e6:84:83: 5b:bf:df:67:9e:2f:f4:6f:2f:8b:48:39:e6:fe:4c: 8d:ae:62:b6:b8:98:d3:18:a8:c0:ee:3e:a1:da:f3: 1b:9c:4a:6a:c5:22:61:3c:ed:e9:9c:12:34:e1:d7: c6:57:b6:03:ae:60:4e:4f:e9:2e:74:75:de:56:88: c2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C5:CA:F4:13:B0:E6:AF:36:C0:30:88:85:D8:5C:F0:35:E1:D9:31 X509v3 Authority Key Identifier: keyid:0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:1e:83:ec:f9:aa:f5:5e:a5:e4:6c:3d:7a:9c:a5:87:e6:1a: b0:2d:93:48:92:ea:58:f1:ef:42:6b:40:72:91:cb:18:56:7d: a5:bf:1b:bb:78:37:ba:ae:d2:42:36:96:60:33:fd:9b:d2:06: c7:85:28:4e:db:26:83:d6:19:d3:21:1e:88:ba:29:98:30:16: 0e:14:ec:06:77:fc:ed:b8:fd:14:27:38:d1:46:f8:d2:59:a8: 4f:77:d2:5b:a4:d9:33:8c:89:12:2e:a3:25:8e:db:37:b8:fb: f1:63:eb:09:14:45:78:d3:72:30:0f:20:1b:0c:e5:79:f0:91: fe:cb:57:97:66:85:1c:90:00:30:56:15:55:df:fa:d5:f1:8f: 01:1a:d8:d6:46:dd:7a:76:0f:b7:06:fb:e8:52:83:59:e2:de: 18:96:ae:f1:a8:5f:b0:d1:64:3c:1b:28:8f:f7:7b:40:50:d5: d0:5b:64:6c:72:cf:5f:de:b5:9e:dd:51:1b:0d:04:2d:9a:03: 52:92:70:0a:61:8d:b6:ef:d6:15:72:c5:b1:3d:e2:07:d5:cb: 2a:c8:a3:d6:09:d3:26:7c:b8:03:79:76:cb:c3:64:78:09:65: 43:d4:21:ca:9d:cb:ce:e8:05:12:43:c7:38:dd:06:d6:83:2b: c0:5b:57:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKDBFNTc0MTc2REFBNkFDNkM5NzcwNkM2Njc5QzdFMjRF NzBCQUFENTcwHhcNMjUwNDI0MTk1OTMyWhcNMjUwNTAxMTk1OTMyWjAYMRYwFAYD VQQDEw02ODBhOTgyNC1mNDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApG0qruaC2amio21aMqh96LpKIeOVLtqVP0EbHkog0NFl58BdX02QMUD4zFRe hYm7ml1rT7L85KzMnlzIOyzQvihGc6NgmqY8xNxXNnyEy8Qyf5ft3KZJyS/UPHE8 /kqMdikwKBk6IWOI0W4rff1LbR39qHdSph3jfXqwH1yfHtmEdHgcoYBoRCSBYRC2 4GNZ27Cvlf09XxpsFDgMe3J8AwLIKZ9hsm2gScH1iGOkyxHLmw2zTfDFyRl+v/sR yzHmhINbv99nni/0by+LSDnm/kyNrmK2uJjTGKjA7j6h2vMbnEpqxSJhPO3pnBI0 4dfGV7YDrmBOT+kudHXeVojCpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHFyvQT sOavNsAwiIXYXPA14dkxMB8GA1UdIwQYMBaAFA5XQXbapqxsl3BsZnnH4k5wuq1X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9EbGRCZHRxbXJHeVhjR3htZWNmaVRuQzZy VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RsZEJkdHFtckd5WGNHeG1lY2ZpVG5DNnJWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEJERS83RTVBQzNFMDg5NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9EbGRCZHRxbXJH eVhjR3htZWNmaVRuQzZyVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnHoPs+ar1XqXkbD16nKWH5hqwLZNIkupY8e9Ca0BykcsYVn2lvxu7 eDe6rtJCNpZgM/2b0gbHhShO2yaD1hnTIR6IuimYMBYOFOwGd/ztuP0UJzjRRvjS WahPd9JbpNkzjIkSLqMljts3uPvxY+sJFEV403IwDyAbDOV58JH+y1eXZoUckAAw VhVV3/rV8Y8BGtjWRt16dg+3BvvoUoNZ4t4Ylq7xqF+w0WQ8GyiP93tAUNXQW2Rs cs9f3rWe3VEbDQQtmgNSknAKYY2279YVcsWxPeIH1csqyKPWCdMmfLgDeXbLw2R4 CWVD1CHKncvO6AUSQ8c43QbWgyvAW1fp -----END CERTIFICATE-----Generated at Sat Apr 26 14:02:00 2025 by rpki-client