$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft File: n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft (raw, json) Hash identifier: Fb1aqLEc2wDc2fmWKIMqglQp04S331aI9Oj1AF17XWk= Subject key identifier: 13:C9:CB:C4:DB:B1:04:AB:DB:DE:51:5F:32:B9:96:03:C2:43:5D:B2 Authority key identifier: 9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5 Certificate issuer: /CN=A91D7578/serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5 Certificate serial: 017D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft Manifest number: 017D Signing time: Thu 24 Apr 2025 22:52:29 +0000 Manifest this update: Thu 24 Apr 2025 22:52:29 +0000 Manifest next update: Thu 01 May 2025 22:52:29 +0000 Files and hashes: 1: n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl (hash: Ugsr33QXf+0GFZEMb7Eb+HvX+Blgw/zK3RPpQz5PkDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7578, serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5 Validity Not Before: Apr 24 22:52:29 2025 GMT Not After : May 1 22:52:29 2025 GMT Subject: CN=680ac0ad-35f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:63:8a:12:dd:15:81:fd:f5:ef:0d:aa:8f:7d: 45:29:6d:41:7b:e2:a1:2d:e3:cf:18:3e:ff:4e:20: 62:ce:ed:c5:19:ba:1b:8f:55:60:3c:3e:8a:4b:5d: cc:c3:51:cf:ce:2f:be:23:19:3f:36:62:45:1a:ec: ed:07:4a:c3:32:13:fc:90:4f:b4:4b:ae:78:0c:e1: fc:c5:e4:af:50:1a:7d:f0:39:fe:34:c5:7d:52:ad: 5c:88:63:e6:07:b0:a6:fd:1f:39:b8:bc:30:fa:43: f2:6a:7b:71:40:b4:b5:d1:5a:58:4c:81:b1:b8:52: a3:dc:b4:ed:c7:9c:19:a5:47:2a:43:89:39:d1:ae: 62:b4:e6:d4:c4:c5:f2:8d:c1:49:92:8c:fc:bd:be: 8d:99:bd:d0:8e:47:1f:5a:a9:65:e8:f8:94:01:83: 50:cc:4e:54:e2:cf:9d:08:53:ef:91:33:8a:de:f0: 5b:51:23:af:0e:8a:bd:42:3c:cd:c9:6b:d8:37:a8: 04:83:76:47:94:f7:e5:19:5f:08:e6:74:b9:06:d9: da:78:f1:70:ab:fc:d2:ab:3b:f2:0b:a7:ae:c5:6e: bf:71:2a:25:c4:eb:13:cc:55:0d:a1:53:2e:6c:ca: 4f:cc:2b:a8:e4:ac:c1:47:09:41:69:e1:dd:ea:eb: 2a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C9:CB:C4:DB:B1:04:AB:DB:DE:51:5F:32:B9:96:03:C2:43:5D:B2 X509v3 Authority Key Identifier: keyid:9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:6b:8c:47:63:1c:ef:0a:e5:a3:02:b2:0f:3d:b3:a4:c6:d3: fd:85:4a:61:a6:8e:1e:d3:8f:49:d9:1e:b1:c9:a5:fc:da:f2: 3e:b6:50:59:e8:6e:ab:8a:fd:db:c5:9b:4a:7f:45:da:65:d2: 4a:c4:18:54:96:ea:2e:df:99:9c:87:46:d1:3b:9b:0e:43:4c: 03:bd:8b:44:75:1c:0c:4f:af:57:78:2b:ff:84:4d:51:9c:e1: 20:7a:0a:55:51:64:6e:5e:60:49:e3:37:16:d3:24:17:bd:9d: 9a:36:2c:1d:25:24:d7:9c:16:8d:e9:4d:66:74:b9:e3:0c:48: 1e:58:98:2f:81:23:94:f4:39:ca:65:10:7b:18:94:22:a5:85: f5:3c:35:26:14:5a:20:b0:ff:8c:34:ad:66:01:f1:b8:02:de: e5:64:5c:f3:30:9e:41:a1:ef:87:91:b5:08:37:b8:b8:d5:30: 2f:8e:7a:26:13:80:d3:b6:7d:fe:47:1d:a5:4c:30:50:44:34: 9f:98:90:04:31:e6:7b:ba:bd:68:6e:b1:47:84:4e:68:d7:fc: b1:b7:9c:3d:8e:26:bd:73:9d:5d:36:00:32:e1:3a:4b:17:b7: b0:23:5b:f2:4b:7f:0e:29:b4:1e:97:27:43:98:0e:e0:72:55: 71:78:8a:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc1NzgxMTAvBgNVBAUTKDlGRTAwQzE5Q0UwQjhGOTZFQ0Y4OUEzNTdGN0QxQUY1 NThGOTZGRjUwHhcNMjUwNDI0MjI1MjI5WhcNMjUwNTAxMjI1MjI5WjAYMRYwFAYD VQQDEw02ODBhYzBhZC0zNWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2OKEt0Vgf317w2qj31FKW1Be+KhLePPGD7/TiBizu3FGbobj1VgPD6KS13M w1HPzi++Ixk/NmJFGuztB0rDMhP8kE+0S654DOH8xeSvUBp98Dn+NMV9Uq1ciGPm B7Cm/R85uLww+kPyantxQLS10VpYTIGxuFKj3LTtx5wZpUcqQ4k50a5itObUxMXy jcFJkoz8vb6Nmb3QjkcfWqll6PiUAYNQzE5U4s+dCFPvkTOK3vBbUSOvDoq9QjzN yWvYN6gEg3ZHlPflGV8I5nS5BtnaePFwq/zSqzvyC6euxW6/cSolxOsTzFUNoVMu bMpPzCuo5KzBRwlBaeHd6usqlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPJy8Tb sQSr295RXzK5lgPCQ12yMB8GA1UdIwQYMBaAFJ/gDBnOC4+W7PiaNX99GvVY+W/1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzU3OC82NzAwNThCNERG RjgxMUVEOTUxNTNEMzFDNEY5QUUwMi9uLUFNR2M0TGo1YnMtSm8xZjMwYTlWajVi X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL24tQU1HYzRMajVicy1KbzFmMzBhOVZqNWJfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzU3OC82NzAwNThCNERGRjgxMUVEOTUxNTNEMzFDNEY5QUUwMi9uLUFNR2M0TGo1 YnMtSm8xZjMwYTlWajViX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRa4xHYxzvCuWjArIPPbOkxtP9hUphpo4e049J2R6xyaX82vI+tlBZ 6G6riv3bxZtKf0XaZdJKxBhUluou35mch0bRO5sOQ0wDvYtEdRwMT69XeCv/hE1R nOEgegpVUWRuXmBJ4zcW0yQXvZ2aNiwdJSTXnBaN6U1mdLnjDEgeWJgvgSOU9DnK ZRB7GJQipYX1PDUmFFogsP+MNK1mAfG4At7lZFzzMJ5Boe+HkbUIN7i41TAvjnom E4DTtn3+Rx2lTDBQRDSfmJAEMeZ7ur1obrFHhE5o1/yxt5w9jia9c51dNgAy4TpL F7ewI1vyS38OKbQelydDmA7gclVxeIo1 -----END CERTIFICATE-----Generated at Sat Apr 26 12:56:25 2025 by rpki-client