$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.mft File: S0Nd1JrBEcPde6D08IaF8hZRWFk.mft (raw, json) Hash identifier: rE3234OnWkFXzcDgXhE8e5sDs8v8ev05OfGwfMtRYEY= Subject key identifier: 5C:73:B8:0E:89:A8:D1:10:BA:B3:C7:17:2C:EE:CA:69:CE:03:A4:FB Authority key identifier: 4B:43:5D:D4:9A:C1:11:C3:DD:7B:A0:F4:F0:86:85:F2:16:51:58:59 Certificate issuer: /CN=A91DC33B/serialNumber=4B435DD49AC111C3DD7BA0F4F08685F216515859 Certificate serial: 165D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0Nd1JrBEcPde6D08IaF8hZRWFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.mft Manifest number: 1656 Signing time: Sat 26 Apr 2025 16:39:45 +0000 Manifest this update: Sat 26 Apr 2025 16:39:44 +0000 Manifest next update: Sat 03 May 2025 16:39:44 +0000 Files and hashes: 1: S0Nd1JrBEcPde6D08IaF8hZRWFk.crl (hash: fqu0vFLvrv4m4tkMtzFuudGyTP0gfQNBI3pKX3VmgZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.crl rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0Nd1JrBEcPde6D08IaF8hZRWFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5725 (0x165d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC33B, serialNumber=4B435DD49AC111C3DD7BA0F4F08685F216515859 Validity Not Before: Apr 26 16:39:44 2025 GMT Not After : May 3 16:39:44 2025 GMT Subject: CN=680d0c50-fe0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1b:3d:e6:3f:0a:63:0a:eb:39:fd:8f:44:1f: 3a:63:9c:a9:60:8c:2a:20:53:03:07:6b:82:d8:66: 96:03:ee:95:9a:a1:e8:ed:1b:be:ad:67:3f:f8:ff: 3a:cd:13:5e:ee:f4:ad:ea:63:67:3c:cf:6e:99:c6: 5e:4a:65:55:02:03:93:41:f5:39:a9:c6:b6:f6:70: 49:f8:04:7a:a8:6e:a0:52:50:1b:77:c2:54:b6:e6: a1:ee:a2:67:6a:02:d2:9b:d6:7a:83:61:5b:63:03: f5:db:65:d8:c9:17:03:46:82:c5:f2:82:ba:46:e1: ba:15:57:dd:e5:fd:ee:b0:ce:d9:fe:f1:06:8e:9e: f7:60:c6:ad:7f:53:82:9c:16:e8:eb:66:51:76:a1: c8:35:00:09:8d:98:5e:51:1b:1b:0f:ee:81:06:14: 1b:de:6b:46:14:91:ae:ad:eb:58:a6:b9:6f:95:85: 25:81:3d:fa:f7:88:ec:90:77:5a:a2:a1:47:e2:85: 8e:7f:1d:a3:18:b2:39:03:8a:de:21:24:8e:b3:bc: cf:60:c4:00:ca:8b:09:3f:ca:bc:a9:1f:23:c5:60: 98:97:f4:86:7f:1f:8d:b7:55:c3:74:68:92:c7:5d: cf:12:6c:53:2b:9c:ab:45:0c:34:ce:de:40:73:12: f5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:73:B8:0E:89:A8:D1:10:BA:B3:C7:17:2C:EE:CA:69:CE:03:A4:FB X509v3 Authority Key Identifier: keyid:4B:43:5D:D4:9A:C1:11:C3:DD:7B:A0:F4:F0:86:85:F2:16:51:58:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0Nd1JrBEcPde6D08IaF8hZRWFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:02:26:a7:86:68:76:ab:dd:45:3d:df:f8:90:ab:29:ef:cc: 24:19:a9:c4:a4:0a:70:48:ad:0d:3c:b5:74:dd:f6:bf:8e:33: f8:1a:dc:d9:52:ad:bc:4b:d3:9b:0a:a0:61:94:5b:74:b1:42: 3d:8a:72:8a:e8:d7:a4:d1:2d:15:94:89:45:2c:ae:23:de:d6: ff:16:06:a6:52:f9:e7:25:dc:06:1d:3b:75:67:66:7d:2b:85: 57:8b:ca:61:a2:50:82:a4:3c:29:64:af:96:73:68:cf:90:60: ec:17:80:60:42:cf:00:9c:86:b0:92:0e:08:bc:94:f2:21:8c: 67:a0:59:6f:c8:c8:15:22:e5:a4:be:06:80:26:2c:a7:78:9f: 1c:6e:eb:cf:8e:22:f3:73:94:3c:6a:1a:b8:71:56:7e:3a:35: 8b:1c:e9:9e:9d:db:0c:32:d3:97:a9:74:12:53:b7:34:e0:d7: 7c:da:6b:bb:35:1b:8b:73:20:0c:00:24:67:39:6b:c6:a1:50: 20:f5:40:7e:1e:d5:56:ca:6a:f1:b5:e0:47:83:a8:00:b1:ab: 61:29:25:0f:80:92:17:56:c9:ee:f3:3c:97:0d:32:f3:ea:41: d2:19:48:7c:20:67:63:7f:a5:ae:90:d0:2d:bb:25:a3:9b:a5: 1d:ab:a6:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMzM0IxMTAvBgNVBAUTKDRCNDM1REQ0OUFDMTExQzNERDdCQTBGNEYwODY4NUYy MTY1MTU4NTkwHhcNMjUwNDI2MTYzOTQ0WhcNMjUwNTAzMTYzOTQ0WjAYMRYwFAYD VQQDEw02ODBkMGM1MC1mZTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApBs95j8KYwrrOf2PRB86Y5ypYIwqIFMDB2uC2GaWA+6VmqHo7Ru+rWc/+P86 zRNe7vSt6mNnPM9umcZeSmVVAgOTQfU5qca29nBJ+AR6qG6gUlAbd8JUtuah7qJn agLSm9Z6g2FbYwP122XYyRcDRoLF8oK6RuG6FVfd5f3usM7Z/vEGjp73YMatf1OC nBbo62ZRdqHINQAJjZheURsbD+6BBhQb3mtGFJGuretYprlvlYUlgT3694jskHda oqFH4oWOfx2jGLI5A4reISSOs7zPYMQAyosJP8q8qR8jxWCYl/SGfx+Nt1XDdGiS x13PEmxTK5yrRQw0zt5AcxL1yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxzuA6J qNEQurPHFyzuymnOA6T7MB8GA1UdIwQYMBaAFEtDXdSawRHD3Xug9PCGhfIWUVhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMzQi9CNEM5RkU5MjA2 RjUxMUU4OTYxOEY0MkZDNEY5QUUwMi9TME5kMUpyQkVjUGRlNkQwOElhRjhoWlJX RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MwTmQxSnJCRWNQZGU2RDA4SWFGOGhaUldGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzMzQi9CNEM5RkU5MjA2RjUxMUU4OTYxOEY0MkZDNEY5QUUwMi9TME5kMUpyQkVj UGRlNkQwOElhRjhoWlJXRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClAianhmh2q91FPd/4kKsp78wkGanEpApwSK0NPLV03fa/jjP4GtzZ Uq28S9ObCqBhlFt0sUI9inKK6Nek0S0VlIlFLK4j3tb/FgamUvnnJdwGHTt1Z2Z9 K4VXi8pholCCpDwpZK+Wc2jPkGDsF4BgQs8AnIawkg4IvJTyIYxnoFlvyMgVIuWk vgaAJiyneJ8cbuvPjiLzc5Q8ahq4cVZ+OjWLHOmendsMMtOXqXQSU7c04Nd82mu7 NRuLcyAMACRnOWvGoVAg9UB+HtVWymrxteBHg6gAsathKSUPgJIXVsnu8zyXDTLz 6kHSGUh8IGdjf6WukNAtuyWjm6Udq6ZL -----END CERTIFICATE-----Generated at Sat Apr 26 23:40:04 2025 by rpki-client