$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft File: foUuJJ2cR8tllecBfQfeJ8OUrwk.mft (raw, json) Hash identifier: GCTzHuhv+JG+KVZwkKZxyIjQePnucMkPpQhDeK7OAwU= Subject key identifier: 46:26:60:6A:E4:68:DE:E5:41:6F:D6:AA:82:7A:AA:CA:6F:92:55:91 Authority key identifier: 7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09 Certificate issuer: /CN=A91E5D61/serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09 Certificate serial: 34BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft Manifest number: 475D Signing time: Thu 24 Apr 2025 14:20:53 +0000 Manifest this update: Thu 24 Apr 2025 14:20:53 +0000 Manifest next update: Thu 01 May 2025 14:20:53 +0000 Files and hashes: 1: foUuJJ2cR8tllecBfQfeJ8OUrwk.crl (hash: DUm7mEuDH2NryQoqXpgScbSWaS5RdlRtTwIyDZCMIbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13498 (0x34ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09 Validity Not Before: Apr 24 14:20:53 2025 GMT Not After : May 1 14:20:53 2025 GMT Subject: CN=680a48c5-c1af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c2:d5:db:8c:7f:e1:f6:1b:95:d3:81:b8:89: d7:f0:77:b4:b0:50:e4:05:a5:9f:ae:e9:92:26:fd: b8:be:fa:6d:75:e1:aa:ef:74:c4:a5:84:9b:d5:26: dc:a2:e8:a3:05:c6:30:ee:2d:94:13:0a:5f:13:6b: be:87:e2:9e:c8:56:38:fd:32:9d:3c:cf:76:c6:55: 84:2b:41:27:2f:12:59:90:01:7e:0f:e4:25:09:00: 7b:de:8b:0f:74:d6:61:c6:6e:81:b5:02:69:34:6f: a1:a2:a5:b4:22:a9:17:72:ea:b8:6d:11:28:0d:e0: 65:50:4d:de:64:d7:4e:01:69:26:b7:0e:ed:c6:2e: 1e:65:ac:01:a9:50:cb:b6:4e:6b:dc:06:0c:ef:d5: 93:2d:27:0f:2e:81:64:3c:28:3e:10:6c:80:d1:0d: b2:a6:39:d2:78:66:01:e4:ce:17:54:e9:2a:7a:d5: 69:39:d8:e2:2d:2b:ce:f7:5d:db:50:80:a9:68:d5: 15:43:db:4b:0b:f6:9f:37:9b:4e:ad:f2:4e:cd:45: ad:20:cb:92:39:80:95:4d:30:3b:13:9e:72:86:53: 47:80:68:04:c4:76:98:84:4c:3e:ee:66:40:3c:71: 05:44:18:5b:4a:20:86:81:4f:a8:31:7c:a3:28:14: b1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:26:60:6A:E4:68:DE:E5:41:6F:D6:AA:82:7A:AA:CA:6F:92:55:91 X509v3 Authority Key Identifier: keyid:7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:a2:da:54:63:8f:83:b8:93:60:a9:7c:95:f1:1e:c4:83:19: 3e:3e:d4:13:ad:80:e5:02:15:83:51:73:82:88:1c:0b:bc:c4: 9a:0f:a7:cd:95:3c:d8:02:87:a9:5b:8c:8b:35:57:c5:39:5f: 90:d0:89:a8:76:ca:01:62:11:fb:2a:4f:a2:5e:75:3a:29:f4: fe:7f:d4:43:9d:df:63:06:a4:33:6e:16:c3:de:b2:c9:b0:bf: 60:ca:c4:e2:2c:b7:78:95:6c:17:9c:31:87:62:20:9b:b0:75: a8:13:06:c8:68:72:b3:8f:dc:b4:ae:1b:0b:e0:82:8b:87:e1: 1d:fe:12:62:f4:6e:35:73:41:27:aa:aa:aa:12:da:8d:45:b7: db:82:e0:0c:c1:b9:fb:6a:f9:da:f8:9a:85:35:50:83:7d:9b: 72:f5:54:27:65:82:07:ec:a9:5a:aa:cb:a0:a0:1b:09:25:5c: d5:dd:8d:8d:ad:c9:93:a7:f2:e0:b2:2a:40:16:58:a2:78:51: 84:71:00:21:23:7e:4c:ab:f5:7d:02:28:64:c5:8c:29:5e:ae: 5c:17:be:3a:0c:c8:2b:99:2d:ad:9b:69:44:b3:6b:fa:40:5c: 35:95:08:26:bf:63:69:c5:e8:fb:57:84:a3:3d:1e:44:2e:d0: ce:2c:07:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDdFODUyRTI0OUQ5QzQ3Q0I2NTk1RTcwMTdEMDdERTI3 QzM5NEFGMDkwHhcNMjUwNDI0MTQyMDUzWhcNMjUwNTAxMTQyMDUzWjAYMRYwFAYD VQQDEw02ODBhNDhjNS1jMWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8LV24x/4fYbldOBuInX8He0sFDkBaWfrumSJv24vvptdeGq73TEpYSb1Sbc ouijBcYw7i2UEwpfE2u+h+KeyFY4/TKdPM92xlWEK0EnLxJZkAF+D+QlCQB73osP dNZhxm6BtQJpNG+hoqW0IqkXcuq4bREoDeBlUE3eZNdOAWkmtw7txi4eZawBqVDL tk5r3AYM79WTLScPLoFkPCg+EGyA0Q2ypjnSeGYB5M4XVOkqetVpOdjiLSvO913b UICpaNUVQ9tLC/afN5tOrfJOzUWtIMuSOYCVTTA7E55yhlNHgGgExHaYhEw+7mZA PHEFRBhbSiCGgU+oMXyjKBSxqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEYmYGrk aN7lQW/WqoJ6qspvklWRMB8GA1UdIwQYMBaAFH6FLiSdnEfLZZXnAX0H3ifDlK8J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8wQzZBMEM5RTFE NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9mb1V1SkoyY1I4dGxsZWNCZlFmZUo4T1Vy d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZvVXVKSjJjUjh0bGxlY0JmUWZlSjhPVXJ3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS8wQzZBMEM5RTFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9mb1V1SkoyY1I4 dGxsZWNCZlFmZUo4T1Vyd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACotpUY4+DuJNgqXyV8R7Egxk+PtQTrYDlAhWDUXOCiBwLvMSaD6fN lTzYAoepW4yLNVfFOV+Q0ImodsoBYhH7Kk+iXnU6KfT+f9RDnd9jBqQzbhbD3rLJ sL9gysTiLLd4lWwXnDGHYiCbsHWoEwbIaHKzj9y0rhsL4IKLh+Ed/hJi9G41c0En qqqqEtqNRbfbguAMwbn7avna+JqFNVCDfZty9VQnZYIH7KlaqsugoBsJJVzV3Y2N rcmTp/LgsipAFliieFGEcQAhI35Mq/V9AihkxYwpXq5cF746DMgrmS2tm2lEs2v6 QFw1lQgmv2Npxej7V4SjPR5ELtDOLAcX -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:49 2025 by rpki-client