$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft File: e9ZuQtUwkEC0dRqcKySR1818FLg.mft (raw, json) Hash identifier: SZL04MgQQSEq0YC2vekT0OADcwMoZSAgg3CYhdpzelM= Subject key identifier: 2C:DB:72:F0:58:D7:B4:9E:29:7A:B2:57:D1:0C:41:F4:CB:E6:3E:9C Authority key identifier: 7B:D6:6E:42:D5:30:90:40:B4:75:1A:9C:2B:24:91:D7:CD:7C:14:B8 Certificate issuer: /CN=A91CA5AD/serialNumber=7BD66E42D5309040B4751A9C2B2491D7CD7C14B8 Certificate serial: 347B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft Manifest number: 347A Signing time: Thu 24 Apr 2025 14:19:36 +0000 Manifest this update: Thu 24 Apr 2025 14:19:36 +0000 Manifest next update: Thu 01 May 2025 14:19:36 +0000 Files and hashes: 1: e9ZuQtUwkEC0dRqcKySR1818FLg.crl (hash: ugajQVTce4mRb/Xg3tEtNqCs+cRffrqm5wq38fthtEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.crl rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13435 (0x347b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA5AD, serialNumber=7BD66E42D5309040B4751A9C2B2491D7CD7C14B8 Validity Not Before: Apr 24 14:19:36 2025 GMT Not After : May 1 14:19:36 2025 GMT Subject: CN=680a4878-5624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d7:ef:e4:10:d1:d1:23:8c:c9:9b:68:ed:63: 10:c8:49:78:93:51:44:ea:29:1f:d2:99:4f:fa:96: 8c:b5:41:cc:0d:38:2e:90:c6:3a:fd:e7:ae:ff:fb: 30:ed:58:d2:67:9d:9d:90:8e:e0:30:59:ee:d5:40: 53:87:1d:bc:b9:9e:de:c2:1f:73:e2:02:15:9d:0f: 12:54:8e:2e:a0:e4:cb:6e:c9:44:6d:02:0a:07:e0: b5:a3:85:e9:c1:25:76:fe:89:ec:c2:5b:a6:4c:3d: 11:cb:1b:d0:9a:46:a6:10:96:a8:fe:e5:e9:f6:52: bb:84:3d:e3:22:76:cc:df:93:ec:96:3d:17:56:91: 84:3f:d3:97:29:97:f8:8a:4d:81:f7:55:9c:ed:3c: e0:01:f3:31:12:18:72:9e:d3:85:db:f0:d9:37:2f: 8d:f9:80:06:1f:be:95:4e:20:ad:57:d6:d1:42:8c: a4:13:a2:f4:2d:d2:20:12:fc:c5:36:d4:48:94:35: 77:13:12:6c:00:92:7a:b6:d3:6a:c4:08:11:24:62: d0:69:4e:a4:60:bd:d9:1f:ee:90:bb:73:58:fc:3f: a9:de:0c:2f:d6:53:45:00:a2:e6:2e:5c:b2:ea:a3: 2e:98:b6:85:71:8d:05:6d:4a:9b:cc:f7:a9:83:53: b8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DB:72:F0:58:D7:B4:9E:29:7A:B2:57:D1:0C:41:F4:CB:E6:3E:9C X509v3 Authority Key Identifier: keyid:7B:D6:6E:42:D5:30:90:40:B4:75:1A:9C:2B:24:91:D7:CD:7C:14:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:5d:88:0e:71:59:49:23:02:b9:e5:3e:37:a4:7e:07:cd:73: 42:00:03:52:ef:a4:f3:d7:ef:af:93:61:1a:c5:14:7a:8a:43: e9:b4:de:8d:d1:59:a9:39:ff:a5:a0:a8:5c:f7:af:93:00:3a: 55:95:6a:58:a8:97:2e:fb:57:50:71:42:38:ac:f5:4f:2a:eb: f0:89:44:ea:f4:88:63:6d:bf:49:20:02:ef:5c:ee:2b:b0:4b: 7e:7b:2f:73:fa:ce:0e:c6:30:d6:31:0e:60:4e:e6:b3:bc:41: 3e:a3:e2:57:56:0e:38:dc:d5:83:6f:6b:b0:cc:e7:e8:af:04: df:cd:df:15:e8:ad:93:e1:ff:b1:56:aa:bf:b0:e5:75:84:8c: 2c:c6:9f:81:02:bf:c7:fd:fc:2f:bd:f6:7f:94:ce:0a:eb:78: c0:ff:84:d0:78:1e:2f:50:b5:17:bb:c7:8f:fc:42:4d:c0:8e: 7e:2a:8f:c5:10:f3:a4:88:39:aa:f3:ae:1d:58:72:6c:b9:77: 04:97:b1:f0:12:9e:c8:58:d4:10:ff:2a:62:b3:68:13:81:93: 36:d2:de:2a:8f:dc:34:86:0c:ca:1e:fe:61:e9:f5:a1:57:a5: ff:58:c2:47:f5:dd:66:f1:46:bb:0d:46:52:43:3d:a9:cc:28: 14:76:c4:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E1QUQxMTAvBgNVBAUTKDdCRDY2RTQyRDUzMDkwNDBCNDc1MUE5QzJCMjQ5MUQ3 Q0Q3QzE0QjgwHhcNMjUwNDI0MTQxOTM2WhcNMjUwNTAxMTQxOTM2WjAYMRYwFAYD VQQDEw02ODBhNDg3OC01NjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAktfv5BDR0SOMyZto7WMQyEl4k1FE6ikf0plP+paMtUHMDTgukMY6/eeu//sw 7VjSZ52dkI7gMFnu1UBThx28uZ7ewh9z4gIVnQ8SVI4uoOTLbslEbQIKB+C1o4Xp wSV2/onswlumTD0RyxvQmkamEJao/uXp9lK7hD3jInbM35Pslj0XVpGEP9OXKZf4 ik2B91Wc7TzgAfMxEhhyntOF2/DZNy+N+YAGH76VTiCtV9bRQoykE6L0LdIgEvzF NtRIlDV3ExJsAJJ6ttNqxAgRJGLQaU6kYL3ZH+6Qu3NY/D+p3gwv1lNFAKLmLlyy 6qMumLaFcY0FbUqbzPepg1O4xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzbcvBY 17SeKXqyV9EMQfTL5j6cMB8GA1UdIwQYMBaAFHvWbkLVMJBAtHUanCskkdfNfBS4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTVBRC8zNjZDNDQyRTFE NzExMUUyQUI1NEUyQjUwOEIwMkNEMi9lOVp1UXRVd2tFQzBkUnFjS3lTUjE4MThG TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U5WnVRdFV3a0VDMGRScWNLeVNSMTgxOEZMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTVBRC8zNjZDNDQyRTFENzExMUUyQUI1NEUyQjUwOEIwMkNEMi9lOVp1UXRVd2tF QzBkUnFjS3lTUjE4MThGTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAXYgOcVlJIwK55T43pH4HzXNCAANS76Tz1++vk2EaxRR6ikPptN6N 0VmpOf+loKhc96+TADpVlWpYqJcu+1dQcUI4rPVPKuvwiUTq9Ihjbb9JIALvXO4r sEt+ey9z+s4OxjDWMQ5gTuazvEE+o+JXVg443NWDb2uwzOforwTfzd8V6K2T4f+x Vqq/sOV1hIwsxp+BAr/H/fwvvfZ/lM4K63jA/4TQeB4vULUXu8eP/EJNwI5+Ko/F EPOkiDmq864dWHJsuXcEl7HwEp7IWNQQ/ypis2gTgZM20t4qj9w0hgzKHv5h6fWh V6X/WMJH9d1m8Ua7DUZSQz2pzCgUdsTv -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:59 2025 by rpki-client