$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft File: Ii81OE7WK2pwdPiC574Cnw4E40M.mft (raw, json) Hash identifier: yl8Y7hBm5nXzXUyjz+9x+t4yA5qarAHdB+dJ4TFISNs= Subject key identifier: EB:CD:50:74:F9:45:4B:23:24:FA:E9:95:E4:18:61:3C:AF:D4:48:DB Authority key identifier: 22:2F:35:38:4E:D6:2B:6A:70:74:F8:82:E7:BE:02:9F:0E:04:E3:43 Certificate issuer: /CN=A91E5D61/serialNumber=222F35384ED62B6A7074F882E7BE029F0E04E343 Certificate serial: 348F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft Manifest number: 470A Signing time: Thu 24 Apr 2025 14:20:57 +0000 Manifest this update: Thu 24 Apr 2025 14:20:57 +0000 Manifest next update: Thu 01 May 2025 14:20:57 +0000 Files and hashes: 1: Ii81OE7WK2pwdPiC574Cnw4E40M.crl (hash: loGQzU1KnVkJJOgqN2slkB07f3vzUxKOKOfK9/2qcxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.crl rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:20:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13455 (0x348f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=222F35384ED62B6A7074F882E7BE029F0E04E343 Validity Not Before: Apr 24 14:20:57 2025 GMT Not After : May 1 14:20:57 2025 GMT Subject: CN=680a48c9-2b54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d6:13:10:80:d7:48:63:8d:e7:86:48:be:ff: 5b:ba:3a:77:ed:ba:e8:b2:fe:e4:86:e4:53:94:f3: 15:a0:aa:5c:a2:3b:a3:6b:06:fe:f1:96:cf:1a:4c: 64:30:2c:56:4b:b8:65:bb:5b:19:63:e8:47:4b:ff: b1:0d:3d:88:83:7a:55:1a:5e:d5:0e:95:7d:0d:61: d1:52:c4:2c:8f:69:78:5c:e5:8f:37:bc:61:30:5b: d6:05:d7:de:a9:cc:71:79:cc:0d:57:ea:98:6a:97: f8:fc:19:23:60:94:2a:3c:7b:b9:15:ca:f9:d6:e5: 66:b7:56:74:e3:f3:1a:74:e8:2a:50:92:c5:bc:06: 08:b1:66:62:34:9f:b3:db:d0:b7:b6:25:c8:28:d8: ee:14:d1:56:81:be:08:04:0c:52:5b:20:63:24:39: b2:44:1b:92:96:d5:5a:37:f7:a0:35:e6:d6:0b:bc: 5d:b8:21:10:43:fc:4f:a0:63:6d:a7:14:8a:4c:f4: e0:e2:ca:cc:2a:db:95:b8:fa:82:73:97:17:44:d1: a8:67:a9:bd:b5:6e:af:1b:9b:f1:4b:c1:c2:34:18: 8c:6b:5c:11:19:39:a7:0d:24:80:7f:ce:9f:0f:c9: 26:21:a0:71:d1:61:41:c5:cd:a4:82:f6:2b:f3:eb: b3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:CD:50:74:F9:45:4B:23:24:FA:E9:95:E4:18:61:3C:AF:D4:48:DB X509v3 Authority Key Identifier: keyid:22:2F:35:38:4E:D6:2B:6A:70:74:F8:82:E7:BE:02:9F:0E:04:E3:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:07:a1:e2:61:e1:05:2a:b4:4e:d3:d2:9e:39:4c:b2:03:ab: a5:20:71:a0:71:31:d5:d7:fe:cb:60:82:78:32:f9:d9:c4:c9: dd:c4:95:2b:55:7b:fe:2b:32:7e:3f:50:a3:1a:c5:1f:8e:9f: 77:ce:69:94:86:eb:7c:39:06:d8:6b:ce:26:ba:9b:52:53:bb: 9d:97:cc:30:ab:f0:28:7f:5b:87:f2:81:a3:76:42:1c:31:40: 05:bf:fa:20:ff:d3:39:19:95:8f:5c:79:80:00:5a:50:5f:74: 53:21:5d:83:13:0f:50:76:11:60:31:22:d1:8e:1f:59:d5:40: 9c:38:b5:e8:92:14:84:98:41:8d:4e:e8:52:d4:b7:e6:ee:a6: 91:29:8e:c8:9a:63:08:db:6a:4a:97:de:a0:c3:25:2a:72:72: 2c:59:c2:b4:d0:25:af:78:47:5d:61:f0:fd:3b:2c:6c:28:9e: 4f:17:9c:9f:b7:8e:0a:c4:61:9d:42:13:89:f2:13:26:de:fb: 71:80:02:1e:b9:6b:62:8d:dc:1a:ae:1b:ac:31:dc:e1:44:fb: 5c:f3:b0:99:3c:a4:bc:c9:e6:82:93:2e:69:e9:e2:09:91:fb: fe:87:1e:d4:0d:96:e9:46:f6:54:76:12:67:25:b2:28:a9:71: a6:bd:6d:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDIyMkYzNTM4NEVENjJCNkE3MDc0Rjg4MkU3QkUwMjlG MEUwNEUzNDMwHhcNMjUwNDI0MTQyMDU3WhcNMjUwNTAxMTQyMDU3WjAYMRYwFAYD VQQDEw02ODBhNDhjOS0yYjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNYTEIDXSGON54ZIvv9bujp37brosv7khuRTlPMVoKpcojujawb+8ZbPGkxk MCxWS7hlu1sZY+hHS/+xDT2Ig3pVGl7VDpV9DWHRUsQsj2l4XOWPN7xhMFvWBdfe qcxxecwNV+qYapf4/BkjYJQqPHu5Fcr51uVmt1Z04/MadOgqUJLFvAYIsWZiNJ+z 29C3tiXIKNjuFNFWgb4IBAxSWyBjJDmyRBuSltVaN/egNebWC7xduCEQQ/xPoGNt pxSKTPTg4srMKtuVuPqCc5cXRNGoZ6m9tW6vG5vxS8HCNBiMa1wRGTmnDSSAf86f D8kmIaBx0WFBxc2kgvYr8+uzUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvNUHT5 RUsjJPrpleQYYTyv1EjbMB8GA1UdIwQYMBaAFCIvNThO1itqcHT4gue+Ap8OBOND MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS9FRTY3RDhDMDFE NzgxMUUyODc5RTM4QzUwOEIwMkNEMi9JaTgxT0U3V0sycHdkUGlDNTc0Q253NEU0 ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lpODFPRTdXSzJwd2RQaUM1NzRDbnc0RTQwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS9FRTY3RDhDMDFENzgxMUUyODc5RTM4QzUwOEIwMkNEMi9JaTgxT0U3V0sy cHdkUGlDNTc0Q253NEU0ME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmB6HiYeEFKrRO09KeOUyyA6ulIHGgcTHV1/7LYIJ4MvnZxMndxJUr VXv+KzJ+P1CjGsUfjp93zmmUhut8OQbYa84muptSU7udl8wwq/Aof1uH8oGjdkIc MUAFv/og/9M5GZWPXHmAAFpQX3RTIV2DEw9QdhFgMSLRjh9Z1UCcOLXokhSEmEGN TuhS1Lfm7qaRKY7ImmMI22pKl96gwyUqcnIsWcK00CWveEddYfD9OyxsKJ5PF5yf t44KxGGdQhOJ8hMm3vtxgAIeuWtijdwarhusMdzhRPtc87CZPKS8yeaCky5p6eIJ kfv+hx7UDZbpRvZUdhJnJbIoqXGmvW1i -----END CERTIFICATE-----Generated at Sat Apr 26 15:16:05 2025 by rpki-client