$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft File: MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft (raw, json) Hash identifier: WxHvZDL7VPtua305gZwkoqKYab+PTH+ve2+HwaZJXm0= Subject key identifier: 19:97:82:9D:EA:B2:14:F9:F0:90:77:87:5E:FA:DE:4B:36:BE:39:EC Authority key identifier: 30:B5:DE:5E:87:86:28:82:F8:FD:A2:B6:90:C2:F3:07:09:95:F5:FE Certificate issuer: /CN=A91D560D/serialNumber=30B5DE5E87862882F8FDA2B690C2F3070995F5FE Certificate serial: 0AF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLXeXoeGKIL4_aK2kMLzBwmV9f4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft Manifest number: 1363 Signing time: Thu 24 Apr 2025 19:13:12 +0000 Manifest this update: Thu 24 Apr 2025 19:13:11 +0000 Manifest next update: Thu 01 May 2025 19:13:11 +0000 Files and hashes: 1: MLXeXoeGKIL4_aK2kMLzBwmV9f4.crl (hash: VcfPjoS4cBV2mrkjiimk6qPzjhZ9R4W+b9nbmIy9+QU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.crl rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLXeXoeGKIL4_aK2kMLzBwmV9f4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:13:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2809 (0xaf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D560D, serialNumber=30B5DE5E87862882F8FDA2B690C2F3070995F5FE Validity Not Before: Apr 24 19:13:11 2025 GMT Not After : May 1 19:13:11 2025 GMT Subject: CN=680a8d47-cdb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:54:b4:fb:2c:b4:9b:a2:22:d9:96:d2:92:4f: 6a:9a:ef:c6:4a:d2:24:d3:ed:da:9d:28:43:53:92: 92:25:e4:7e:0b:02:b9:fc:63:3d:8b:50:07:31:99: a1:7f:8b:b9:4c:2e:fe:ee:2d:2e:a2:dc:4e:fb:c7: d8:42:7d:3b:21:5a:00:50:bf:00:b6:13:f8:be:ed: 42:e7:46:2c:aa:6d:93:ca:3b:55:86:50:45:10:a0: 30:8f:e8:4c:38:b6:27:8a:9b:27:7b:b2:7a:96:bd: d7:05:d9:b5:23:f8:45:8b:3d:86:c9:9c:52:aa:27: e8:ea:b2:55:2f:c1:2a:60:78:21:d2:8f:d0:f7:4e: 02:74:91:42:d3:dd:92:53:9d:28:ee:e9:df:d5:d0: 12:37:55:22:2b:ad:ca:60:90:0e:d2:d9:2c:6f:2f: 64:5a:1e:94:a9:04:84:3e:4c:23:b2:51:16:d7:23: ad:a5:ae:1b:b1:a2:8a:0d:94:ef:8a:d8:73:77:46: 34:b3:bf:ba:a5:96:aa:11:c3:1e:b2:37:f2:b4:60: 6a:5b:65:9e:61:28:2c:21:bc:f4:a9:5c:78:a8:11: 25:f9:68:bb:40:ec:bf:e2:f8:cd:0a:42:f7:4f:b7: f0:ce:83:ab:03:4f:86:3d:42:d8:d3:33:0e:a6:1d: 37:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:97:82:9D:EA:B2:14:F9:F0:90:77:87:5E:FA:DE:4B:36:BE:39:EC X509v3 Authority Key Identifier: keyid:30:B5:DE:5E:87:86:28:82:F8:FD:A2:B6:90:C2:F3:07:09:95:F5:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLXeXoeGKIL4_aK2kMLzBwmV9f4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:c9:bb:00:21:92:78:a5:f6:24:5e:1b:ec:6c:43:00:3a:26: cc:06:bd:67:3d:bc:d3:3c:b9:09:dc:2e:b6:7d:a5:fb:a0:50: 69:25:58:10:ea:52:6a:dd:1e:14:90:93:8a:a5:df:c5:ae:8d: 70:2a:a0:0b:c1:7a:15:c0:76:df:15:0c:06:e9:e8:76:bb:c7: 3a:67:dd:48:75:12:2b:5a:79:4e:b2:36:16:b1:ed:07:07:73: 0e:74:54:18:b3:96:cc:6b:cd:de:61:a4:b8:35:c7:f9:ef:77: ec:c9:16:0a:27:c9:5f:8c:8f:24:e7:5d:31:dc:b1:49:01:89: 0b:01:bd:01:ed:83:eb:59:97:0d:42:a1:97:8d:b3:59:c7:a9: 55:cf:f8:58:78:4e:3e:e4:72:a0:ff:0e:98:28:55:c0:30:77: 08:2d:e6:88:c3:ed:d8:70:90:9d:28:bc:8f:3b:8c:d9:3d:fe: c1:e6:a6:40:b8:31:7c:e5:a2:e0:4c:ea:c9:d0:a1:b7:6f:01: 7c:3c:c4:8c:e1:46:b8:9c:a4:3c:0f:91:5d:45:cd:df:bb:e0: f9:6e:ac:99:0b:65:67:1b:7c:0f:62:b6:59:bd:3e:31:5a:74: bb:c7:3f:85:1f:4e:10:2d:d0:ad:49:c1:06:8e:5e:df:dd:6f: 7a:92:6a:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2MEQxMTAvBgNVBAUTKDMwQjVERTVFODc4NjI4ODJGOEZEQTJCNjkwQzJGMzA3 MDk5NUY1RkUwHhcNMjUwNDI0MTkxMzExWhcNMjUwNTAxMTkxMzExWjAYMRYwFAYD VQQDEw02ODBhOGQ0Ny1jZGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoFS0+yy0m6Ii2ZbSkk9qmu/GStIk0+3anShDU5KSJeR+CwK5/GM9i1AHMZmh f4u5TC7+7i0uotxO+8fYQn07IVoAUL8AthP4vu1C50Ysqm2TyjtVhlBFEKAwj+hM OLYnipsne7J6lr3XBdm1I/hFiz2GyZxSqifo6rJVL8EqYHgh0o/Q904CdJFC092S U50o7unf1dASN1UiK63KYJAO0tksby9kWh6UqQSEPkwjslEW1yOtpa4bsaKKDZTv ithzd0Y0s7+6pZaqEcMesjfytGBqW2WeYSgsIbz0qVx4qBEl+Wi7QOy/4vjNCkL3 T7fwzoOrA0+GPULY0zMOph03cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmXgp3q shT58JB3h1763ks2vjnsMB8GA1UdIwQYMBaAFDC13l6HhiiC+P2itpDC8wcJlfX+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTYwRC82OEMzRjQ5QTQx RUUxMUVBOUNFQTFGNzVDNEY5QUUwMi9NTFhlWG9lR0tJTDRfYUsya01MekJ3bVY5 ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01MWGVYb2VHS0lMNF9hSzJrTUx6QndtVjlmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTYwRC82OEMzRjQ5QTQxRUUxMUVBOUNFQTFGNzVDNEY5QUUwMi9NTFhlWG9lR0tJ TDRfYUsya01MekJ3bVY5ZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSybsAIZJ4pfYkXhvsbEMAOibMBr1nPbzTPLkJ3C62faX7oFBpJVgQ 6lJq3R4UkJOKpd/Fro1wKqALwXoVwHbfFQwG6eh2u8c6Z91IdRIrWnlOsjYWse0H B3MOdFQYs5bMa83eYaS4Ncf573fsyRYKJ8lfjI8k510x3LFJAYkLAb0B7YPrWZcN QqGXjbNZx6lVz/hYeE4+5HKg/w6YKFXAMHcILeaIw+3YcJCdKLyPO4zZPf7B5qZA uDF85aLgTOrJ0KG3bwF8PMSM4Ua4nKQ8D5FdRc3fu+D5bqyZC2VnG3wPYrZZvT4x WnS7xz+FH04QLdCtScEGjl7f3W96kmpG -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:58 2025 by rpki-client