$ rpki-client -vvf rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft File: 1ex0z8jA_QV81Og74-tX8GHcWPg.mft (raw, json) Hash identifier: OouZC73eR40Y+0P7GIDJ6ezvTFPAxzFa3Gby4r01SJM= Subject key identifier: 4D:8C:B3:89:4D:D9:19:F9:1C:B2:92:22:3E:D2:FE:F2:6A:88:6F:D4 Authority key identifier: D5:EC:74:CF:C8:C0:FD:05:7C:D4:E8:3B:E3:EB:57:F0:61:DC:58:F8 Certificate issuer: /CN=A91D313B/serialNumber=D5EC74CFC8C0FD057CD4E83BE3EB57F061DC58F8 Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft Manifest number: 90 Signing time: Fri 25 Apr 2025 05:27:16 +0000 Manifest this update: Fri 25 Apr 2025 05:27:15 +0000 Manifest next update: Fri 02 May 2025 05:27:15 +0000 Files and hashes: 1: 1ex0z8jA_QV81Og74-tX8GHcWPg.crl (hash: XfPZPszRn1sQRUzfwgBNqJnHbNNTg/eB4x7Ytszsi2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.crl rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D313B, serialNumber=D5EC74CFC8C0FD057CD4E83BE3EB57F061DC58F8 Validity Not Before: Apr 25 05:27:15 2025 GMT Not After : May 2 05:27:15 2025 GMT Subject: CN=680b1d33-6723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:90:f1:94:67:45:83:6e:3a:40:c2:d4:8d:4e: c1:13:16:2f:35:40:4c:26:77:2b:4c:9f:51:3e:df: db:b2:4b:70:32:f2:f8:a0:0f:a8:c5:50:20:11:bf: 12:5e:3a:df:59:85:44:05:e9:a3:d8:1e:2e:71:15: c5:7d:ea:ef:22:8e:0c:2f:79:9d:83:53:e5:a3:08: 24:94:52:88:87:ed:61:50:a5:a3:4d:62:f9:4a:21: da:db:fd:a6:33:c8:ef:4a:d8:9f:c4:a7:80:3b:89: ea:a7:17:ee:ab:40:f7:89:60:dd:ea:6a:52:36:ea: e4:c6:7e:3c:13:c5:f9:04:5b:cd:9d:e4:1f:0a:22: be:f2:72:1a:03:c4:ce:ec:17:24:6f:38:b4:91:24: 68:f6:46:87:41:65:a5:62:20:26:3a:6d:cf:b9:a1: 55:0f:85:7d:52:48:0c:a0:95:d6:df:2f:ce:47:d6: d3:74:2d:5c:66:de:71:fc:c0:59:7b:03:39:db:2a: 05:c4:83:ba:7f:69:8e:45:35:90:ab:41:ba:62:fd: 42:58:36:c6:06:d3:f2:c6:ef:f6:63:f6:dc:8a:e9: 79:79:44:c5:ed:95:53:4c:84:53:1b:e8:24:a6:63: d0:2c:5d:03:03:3f:f0:74:29:2b:d8:a5:2a:b8:a9: 35:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8C:B3:89:4D:D9:19:F9:1C:B2:92:22:3E:D2:FE:F2:6A:88:6F:D4 X509v3 Authority Key Identifier: keyid:D5:EC:74:CF:C8:C0:FD:05:7C:D4:E8:3B:E3:EB:57:F0:61:DC:58:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:ae:f9:58:4f:86:01:48:ef:ba:45:f9:9d:55:fb:71:6d:e1: 00:14:23:a2:b6:eb:77:6b:bc:e2:e6:49:f3:fb:45:d8:23:63: 09:3e:c9:cc:33:c8:f2:f6:4b:f4:a0:8b:36:df:4f:5a:c3:d0: b9:08:c0:8c:cb:d6:82:69:06:99:0b:cc:48:45:62:3d:1c:1a: c5:f8:72:b6:c8:0f:98:f2:a4:96:79:03:e1:d1:42:93:81:6c: ea:1f:15:7f:48:64:64:2c:97:1a:80:76:1a:a6:3a:63:f1:b1: 94:02:b6:8f:9a:2c:91:51:19:11:7e:72:e2:f4:72:9d:2e:7e: 4d:f7:59:87:f8:12:fe:7b:cc:9e:91:b6:97:97:44:05:16:ed: 3a:1e:98:4b:56:07:dc:ce:3c:74:6c:49:94:95:0a:37:87:8b: 03:54:24:14:3a:7c:63:ea:68:69:14:0e:1b:c0:89:5f:9a:5e: 6c:59:87:a8:79:70:1a:03:92:7e:10:c8:97:43:1d:e8:68:04: 05:57:8d:50:ee:67:4b:0e:80:ad:67:54:f7:0f:a1:36:c0:fb: 76:22:42:e9:bd:55:c0:51:4a:50:ee:cb:04:6c:31:2f:44:92: 85:e2:c0:b5:f3:dc:ae:db:81:6e:a8:2a:d9:5e:4b:75:3c:df: 18:8f:5e:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMxM0IxMTAvBgNVBAUTKEQ1RUM3NENGQzhDMEZEMDU3Q0Q0RTgzQkUzRUI1N0Yw NjFEQzU4RjgwHhcNMjUwNDI1MDUyNzE1WhcNMjUwNTAyMDUyNzE1WjAYMRYwFAYD VQQDEw02ODBiMWQzMy02NzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4pDxlGdFg246QMLUjU7BExYvNUBMJncrTJ9RPt/bsktwMvL4oA+oxVAgEb8S XjrfWYVEBemj2B4ucRXFfervIo4ML3mdg1PlowgklFKIh+1hUKWjTWL5SiHa2/2m M8jvStifxKeAO4nqpxfuq0D3iWDd6mpSNurkxn48E8X5BFvNneQfCiK+8nIaA8TO 7Bckbzi0kSRo9kaHQWWlYiAmOm3PuaFVD4V9UkgMoJXW3y/OR9bTdC1cZt5x/MBZ ewM52yoFxIO6f2mORTWQq0G6Yv1CWDbGBtPyxu/2Y/bciul5eUTF7ZVTTIRTG+gk pmPQLF0DAz/wdCkr2KUquKk1HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2Ms4lN 2Rn5HLKSIj7S/vJqiG/UMB8GA1UdIwQYMBaAFNXsdM/IwP0FfNToO+PrV/Bh3Fj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzEzQi9ENUJGRUMxNDQ3 REIxMUVGQUVBNEIwMkRDNEY5QUUwMi8xZXgwejhqQV9RVjgxT2c3NC10WDhHSGNX UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFleDB6OGpBX1FWODFPZzc0LXRYOEdIY1dQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzEzQi9ENUJGRUMxNDQ3REIxMUVGQUVBNEIwMkRDNEY5QUUwMi8xZXgwejhqQV9R VjgxT2c3NC10WDhHSGNXUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABrvlYT4YBSO+6RfmdVftxbeEAFCOitut3a7zi5knz+0XYI2MJPsnM M8jy9kv0oIs2309aw9C5CMCMy9aCaQaZC8xIRWI9HBrF+HK2yA+Y8qSWeQPh0UKT gWzqHxV/SGRkLJcagHYapjpj8bGUAraPmiyRURkRfnLi9HKdLn5N91mH+BL+e8ye kbaXl0QFFu06HphLVgfczjx0bEmUlQo3h4sDVCQUOnxj6mhpFA4bwIlfml5sWYeo eXAaA5J+EMiXQx3oaAQFV41Q7mdLDoCtZ1T3D6E2wPt2IkLpvVXAUUpQ7ssEbDEv RJKF4sC189yu24FuqCrZXkt1PN8Yj16J -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:44 2025 by rpki-client