$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft File: 0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft (raw, json) Hash identifier: FRfT/MFuGSDvpq9yXRDj45lQzCPLVbpDw3Dh5AtuhKY= Subject key identifier: C5:9F:8C:9F:4B:8D:DE:54:65:37:3C:7F:CD:DD:37:7D:EC:28:B8:DC Authority key identifier: D0:02:AB:EA:A5:B2:CD:C4:8F:EA:09:83:B0:4A:8E:C2:86:0C:F9:29 Certificate issuer: /CN=A91C9019/serialNumber=D002ABEAA5B2CDC48FEA0983B04A8EC2860CF929 Certificate serial: 01FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft Manifest number: 01FF Signing time: Fri 25 Apr 2025 01:48:28 +0000 Manifest this update: Fri 25 Apr 2025 01:48:28 +0000 Manifest next update: Fri 02 May 2025 01:48:28 +0000 Files and hashes: 1: 0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl (hash: 7OStIdKqBjGXuiHb7taJsR95yveVgEVSyLGq5GU1uPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:48:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9019, serialNumber=D002ABEAA5B2CDC48FEA0983B04A8EC2860CF929 Validity Not Before: Apr 25 01:48:28 2025 GMT Not After : May 2 01:48:28 2025 GMT Subject: CN=680ae9ec-14c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d4:70:da:0c:df:53:6d:34:e3:40:46:ce:7a: 1d:8c:28:50:15:ce:25:c8:e0:db:f9:e1:8d:22:0a: 08:0e:dc:42:27:42:ec:44:16:f7:ed:73:1b:f8:35: 84:99:7e:73:91:92:1c:e0:7d:c6:72:31:ee:1e:23: 19:c8:0d:19:52:d6:94:34:83:5b:83:24:e1:f8:91: b7:86:75:37:f1:03:29:33:5e:0f:f7:e1:9c:68:25: 37:fa:4c:70:0e:14:a4:ba:c0:6b:7b:e7:8a:57:d2: 7e:b2:f4:9e:cf:b2:b1:3b:5d:df:8b:1f:43:e7:30: da:45:f4:a3:64:c0:56:7a:2d:09:ae:94:93:21:e1: a8:ea:b4:b3:66:59:de:c7:1a:41:47:bd:47:bf:29: 50:50:1e:dc:28:c1:9e:b0:62:48:b0:d6:d2:cf:8e: 3e:01:6f:1a:df:09:bc:1d:44:7c:26:9b:bc:6a:65: ac:e7:bf:3e:7f:d0:00:61:f3:9c:d1:54:2b:82:79: 13:25:33:d9:bf:e9:bd:30:bd:39:ae:58:70:8f:5e: 73:59:eb:49:bc:bd:78:88:f4:66:fc:c9:e4:c9:a7: 00:10:12:9e:c8:99:30:7e:ae:84:79:da:65:62:fe: 02:35:95:0d:f6:07:99:bf:c0:59:42:50:da:11:de: 7f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9F:8C:9F:4B:8D:DE:54:65:37:3C:7F:CD:DD:37:7D:EC:28:B8:DC X509v3 Authority Key Identifier: keyid:D0:02:AB:EA:A5:B2:CD:C4:8F:EA:09:83:B0:4A:8E:C2:86:0C:F9:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:23:b4:35:90:47:89:71:29:b0:c4:cf:95:44:03:b2:a4:70: 63:9e:78:d9:f0:0b:5d:19:57:7a:f8:f0:53:3c:12:26:a9:7b: a5:99:d6:d8:c9:5d:64:38:73:21:27:90:06:0a:18:4f:ac:b8: e5:ca:96:24:3b:9d:5b:b0:c6:bf:6f:70:ce:e7:08:22:68:d5: 7f:13:f9:8e:ca:58:1d:8b:13:f8:af:9d:0d:fe:c6:74:25:34: fe:0f:c3:7c:4f:c8:f3:96:42:bf:7b:ea:2e:f6:8c:8d:15:e4: 7c:07:25:36:bb:37:ea:5f:57:5f:86:d7:fb:32:ad:90:ac:da: 31:81:50:5e:8c:58:f0:e2:27:7c:d0:9e:88:51:8d:f6:f6:42: 64:29:f0:7f:2f:10:16:dc:b0:c7:44:e5:2e:63:73:12:b6:06: 39:f2:0f:b0:19:5f:cf:5f:ac:9a:04:78:d2:9b:5d:37:f8:66: b5:7d:06:5b:a1:a6:2f:74:fa:07:29:d1:03:a6:e2:bd:e8:61: 61:54:5c:49:88:58:1f:a5:38:6a:bf:5a:b4:d4:4b:43:d9:dd: aa:23:cf:f5:9f:ae:41:96:63:4a:6b:5d:54:2e:15:b3:26:58: ae:5a:91:5c:de:ec:ab:bd:e2:e9:e6:28:8f:f6:56:b4:ee:f3: 32:96:af:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkwMTkxMTAvBgNVBAUTKEQwMDJBQkVBQTVCMkNEQzQ4RkVBMDk4M0IwNEE4RUMy ODYwQ0Y5MjkwHhcNMjUwNDI1MDE0ODI4WhcNMjUwNTAyMDE0ODI4WjAYMRYwFAYD VQQDEw02ODBhZTllYy0xNGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApNRw2gzfU20040BGznodjChQFc4lyODb+eGNIgoIDtxCJ0LsRBb37XMb+DWE mX5zkZIc4H3GcjHuHiMZyA0ZUtaUNINbgyTh+JG3hnU38QMpM14P9+GcaCU3+kxw DhSkusBre+eKV9J+svSez7KxO13fix9D5zDaRfSjZMBWei0JrpSTIeGo6rSzZlne xxpBR71HvylQUB7cKMGesGJIsNbSz44+AW8a3wm8HUR8Jpu8amWs578+f9AAYfOc 0VQrgnkTJTPZv+m9ML05rlhwj15zWetJvL14iPRm/MnkyacAEBKeyJkwfq6Eedpl Yv4CNZUN9geZv8BZQlDaEd5/XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWfjJ9L jd5UZTc8f83dN33sKLjcMB8GA1UdIwQYMBaAFNACq+qlss3Ej+oJg7BKjsKGDPkp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTAxOS8yOEFFNDNEODM0 NzYxMUVEODY3RTk1MTJDNEY5QUUwMi8wQUtyNnFXeXpjU1A2Z21Ec0VxT3dvWU0t U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBBS3I2cVd5emNTUDZnbURzRXFPd29ZTS1Tay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTAxOS8yOEFFNDNEODM0NzYxMUVEODY3RTk1MTJDNEY5QUUwMi8wQUtyNnFXeXpj U1A2Z21Ec0VxT3dvWU0tU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWI7Q1kEeJcSmwxM+VRAOypHBjnnjZ8AtdGVd6+PBTPBImqXulmdbY yV1kOHMhJ5AGChhPrLjlypYkO51bsMa/b3DO5wgiaNV/E/mOylgdixP4r50N/sZ0 JTT+D8N8T8jzlkK/e+ou9oyNFeR8ByU2uzfqX1dfhtf7Mq2QrNoxgVBejFjw4id8 0J6IUY329kJkKfB/LxAW3LDHROUuY3MStgY58g+wGV/PX6yaBHjSm103+Ga1fQZb oaYvdPoHKdEDpuK96GFhVFxJiFgfpThqv1q01EtD2d2qI8/1n65BlmNKa11ULhWz JliuWpFc3uyrveLp5iiP9la07vMylq+p -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:42 2025 by rpki-client