$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft File: 7uxT6tF_v4myIdm6WvzQEHkMmU0.mft (raw, json) Hash identifier: 1tzPjdtAsPEUhtbnEVK143WwzY3gpToYy4ruOKWyYh0= Subject key identifier: 72:65:77:17:A2:4A:16:79:66:82:91:3D:13:E3:B9:FB:AB:0B:2D:B6 Authority key identifier: EE:EC:53:EA:D1:7F:BF:89:B2:21:D9:BA:5A:FC:D0:10:79:0C:99:4D Certificate issuer: /CN=A91CFF62/serialNumber=EEEC53EAD17FBF89B221D9BA5AFCD010790C994D Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft Manifest number: 0124 Signing time: Fri 25 Apr 2025 03:45:06 +0000 Manifest this update: Fri 25 Apr 2025 03:45:06 +0000 Manifest next update: Fri 02 May 2025 03:45:06 +0000 Files and hashes: 1: 7uxT6tF_v4myIdm6WvzQEHkMmU0.crl (hash: 8SO6/40C2jbVG08kQxo398p9U48+fvKnoCPORxOO0JM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.crl rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:45:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFF62, serialNumber=EEEC53EAD17FBF89B221D9BA5AFCD010790C994D Validity Not Before: Apr 25 03:45:06 2025 GMT Not After : May 2 03:45:06 2025 GMT Subject: CN=680b0542-e9df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8d:25:8a:3b:e4:a3:74:1d:62:8e:4a:f1:52: 12:81:6c:91:16:4c:10:69:e4:ba:cc:2e:e4:1c:50: c3:c2:07:d4:2f:74:d6:ba:2d:ad:34:c1:37:a4:87: 03:11:4f:38:29:45:b0:9e:83:73:e7:58:21:24:23: bf:fe:4b:55:cb:7e:71:fd:76:14:59:34:43:a4:08: ba:5e:ab:57:12:aa:f1:59:9e:87:24:11:ba:6c:fc: d8:99:40:c8:c3:b4:a4:f6:b8:d8:20:33:4d:ed:0d: 05:50:78:c5:53:cc:ea:10:b1:f3:11:5b:3c:8e:0a: 75:b0:b5:79:fb:46:a6:26:68:63:45:e6:b9:84:c2: 47:ac:9a:8a:68:f4:cb:41:12:c0:8e:00:c2:71:1c: 89:e2:65:4d:eb:06:20:a4:79:8a:16:57:29:a8:e5: 1a:4e:27:78:2e:d9:6c:ea:83:76:e8:d7:94:58:18: ae:5f:ba:8c:51:d2:5c:f4:a0:11:ad:5f:5a:89:4f: e6:6d:a1:52:08:68:5a:4e:3f:ce:d7:99:25:07:15: a2:d7:b1:6b:cd:d4:1c:d8:58:15:c1:e8:e8:08:a7: a3:fc:62:da:7b:3d:3e:5e:86:61:94:53:6b:ab:61: 5e:a4:e5:a2:a6:e7:5b:13:af:91:ad:ba:cc:84:11: 4d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:65:77:17:A2:4A:16:79:66:82:91:3D:13:E3:B9:FB:AB:0B:2D:B6 X509v3 Authority Key Identifier: keyid:EE:EC:53:EA:D1:7F:BF:89:B2:21:D9:BA:5A:FC:D0:10:79:0C:99:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:51:f5:1d:79:cb:6a:0c:5a:98:66:44:b7:78:57:0f:89:2e: 37:1d:1d:a4:b5:fd:80:d5:a9:cb:b8:05:6a:28:14:2c:46:00: 07:81:61:db:66:b1:72:ea:2a:1a:a5:97:31:fb:ae:c2:ce:18: 5d:2a:aa:a0:a2:c0:a2:9a:12:fc:62:24:bb:89:5f:b3:02:01: d5:79:1b:35:c4:2b:1b:26:b8:a4:34:ef:8a:f3:23:3d:ed:26: e6:bc:13:77:f5:a7:5b:80:e0:c1:aa:93:07:16:93:9d:a9:e1: 89:bf:b4:62:77:c6:98:6b:fc:1d:04:da:47:20:eb:31:19:c7: b3:1e:de:ed:a9:75:ab:66:87:15:f5:48:6d:f8:17:8b:ba:4f: 16:e6:85:0f:bd:2a:02:57:af:5a:fd:7f:60:70:37:02:43:e9: 6e:ce:b2:5f:bc:a4:ee:7a:75:4a:b8:cc:59:8f:23:94:4b:1a: dc:3b:d4:2c:33:07:54:1f:e0:db:c2:73:df:ea:d8:8c:c3:ac: 09:80:f6:db:e1:c4:c9:f1:7e:3e:0b:74:40:77:67:87:a5:ed: fb:15:6a:f9:3d:30:d0:c4:49:da:ec:1d:b0:02:5c:cb:74:a4: 60:28:91:b6:d4:27:53:c6:8b:74:29:c2:de:6e:a6:55:e7:8b: bd:43:b5:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGNjIxMTAvBgNVBAUTKEVFRUM1M0VBRDE3RkJGODlCMjIxRDlCQTVBRkNEMDEw NzkwQzk5NEQwHhcNMjUwNDI1MDM0NTA2WhcNMjUwNTAyMDM0NTA2WjAYMRYwFAYD VQQDEw02ODBiMDU0Mi1lOWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsI0lijvko3QdYo5K8VISgWyRFkwQaeS6zC7kHFDDwgfUL3TWui2tNME3pIcD EU84KUWwnoNz51ghJCO//ktVy35x/XYUWTRDpAi6XqtXEqrxWZ6HJBG6bPzYmUDI w7Sk9rjYIDNN7Q0FUHjFU8zqELHzEVs8jgp1sLV5+0amJmhjRea5hMJHrJqKaPTL QRLAjgDCcRyJ4mVN6wYgpHmKFlcpqOUaTid4Ltls6oN26NeUWBiuX7qMUdJc9KAR rV9aiU/mbaFSCGhaTj/O15klBxWi17FrzdQc2FgVwejoCKej/GLaez0+XoZhlFNr q2FepOWipudbE6+RrbrMhBFNfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJldxei ShZ5ZoKRPRPjufurCy22MB8GA1UdIwQYMBaAFO7sU+rRf7+JsiHZulr80BB5DJlN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkY2Mi8xQThBMDY2NDYy NjIxMUVFODBCQzg1NURDNEY5QUUwMi83dXhUNnRGX3Y0bXlJZG02V3Z6UUVIa01t VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd1eFQ2dEZfdjRteUlkbTZXdnpRRUhrTW1VMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkY2Mi8xQThBMDY2NDYyNjIxMUVFODBCQzg1NURDNEY5QUUwMi83dXhUNnRGX3Y0 bXlJZG02V3Z6UUVIa01tVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARUfUdectqDFqYZkS3eFcPiS43HR2ktf2A1anLuAVqKBQsRgAHgWHb ZrFy6ioapZcx+67CzhhdKqqgosCimhL8YiS7iV+zAgHVeRs1xCsbJrikNO+K8yM9 7SbmvBN39adbgODBqpMHFpOdqeGJv7Rid8aYa/wdBNpHIOsxGcezHt7tqXWrZocV 9Uht+BeLuk8W5oUPvSoCV69a/X9gcDcCQ+luzrJfvKTuenVKuMxZjyOUSxrcO9Qs MwdUH+DbwnPf6tiMw6wJgPbb4cTJ8X4+C3RAd2eHpe37FWr5PTDQxEna7B2wAlzL dKRgKJG21CdTxot0KcLebqZV54u9Q7Xm -----END CERTIFICATE-----Generated at Sat Apr 26 12:57:32 2025 by rpki-client