$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft File: cBtV7SDYPjSNgjfON1l5WevAGCQ.mft (raw, json) Hash identifier: 7gocAJEsLcbvfxtIluZ7KvFiBk8QcZVuK6wpFEWSapA= Subject key identifier: F4:39:BE:A1:0B:66:82:F3:F0:66:6F:63:57:81:77:40:8B:75:2A:64 Authority key identifier: 70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24 Certificate issuer: /CN=A91E5D61/serialNumber=701B55ED20D83E348D8237CE37597959EBC01824 Certificate serial: 127C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft Manifest number: 470B Signing time: Thu 24 Apr 2025 14:20:59 +0000 Manifest this update: Thu 24 Apr 2025 14:20:59 +0000 Manifest next update: Thu 01 May 2025 14:20:59 +0000 Files and hashes: 1: cBtV7SDYPjSNgjfON1l5WevAGCQ.crl (hash: he8HLDaPboD8uO0W3nj76IRRW9Ag4Gj0XxtthccFgo4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:20:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4732 (0x127c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=701B55ED20D83E348D8237CE37597959EBC01824 Validity Not Before: Apr 24 14:20:59 2025 GMT Not After : May 1 14:20:59 2025 GMT Subject: CN=680a48cb-5e8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8e:8c:0a:5c:eb:1c:52:eb:46:d5:c8:74:87: c3:59:ba:94:17:4a:2d:39:78:14:41:9c:ce:dc:72: 90:b8:a8:f7:70:59:30:3c:06:13:ec:20:f8:14:4b: fc:55:c0:c7:30:0a:5a:78:ef:75:79:e0:ba:10:f2: 39:92:fd:46:df:ed:3b:01:aa:a9:02:0a:c0:df:3d: 55:50:ab:7b:ed:59:2d:b6:67:6f:54:b0:9c:34:ae: 65:e6:78:e2:aa:86:17:d3:b6:78:04:be:14:61:3c: b0:4f:13:fb:d3:16:ed:ca:24:15:8d:f2:2b:4d:03: c5:06:d5:89:9d:25:06:dd:30:11:24:dd:43:bf:8c: 29:dc:14:c6:b8:e9:93:8b:67:d3:07:f0:93:40:1a: db:ae:81:23:a6:18:09:4a:27:14:84:bf:cb:7d:e0: e4:e4:a8:1a:35:62:0e:fb:93:a1:a5:6d:37:c2:7f: 82:99:6a:12:16:97:c9:16:d6:03:8b:68:9a:32:7b: 00:91:f2:05:0b:d1:3e:3e:97:dc:5d:dd:a0:30:dc: a5:75:23:9e:db:48:9e:d6:37:a4:80:73:9b:e7:b6: 30:3e:2a:57:74:8a:9b:47:98:e5:50:4c:bd:f6:3b: 04:6c:c4:ef:f6:94:13:cc:4e:41:06:ef:57:33:b7: fb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:39:BE:A1:0B:66:82:F3:F0:66:6F:63:57:81:77:40:8B:75:2A:64 X509v3 Authority Key Identifier: keyid:70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d5:b7:36:ad:91:cd:92:74:78:4e:9c:b9:92:16:d3:bf:82: 07:73:5e:27:e4:56:ad:f3:f6:5a:3b:71:b4:38:86:2d:d3:26: f9:ca:d1:f6:a7:b5:23:ff:33:38:b9:b9:f4:3e:f9:56:df:f8: 63:bb:b5:25:ad:9f:bb:2a:6e:24:71:bb:b6:f3:04:60:31:95: 34:96:ee:14:02:7e:77:12:5e:a7:9a:21:8d:e5:02:9c:60:ac: 48:45:43:82:fd:1a:01:9a:a3:95:44:08:2b:ff:fc:dc:56:a6: ad:b3:b8:69:e2:9e:eb:21:c5:18:09:36:db:23:0d:00:51:71: 03:1b:be:fe:b2:14:57:ca:f2:2f:0f:9e:f3:3c:d4:87:81:c4: b3:b1:61:10:92:e0:02:f8:d8:eb:bb:cc:eb:fa:9d:97:15:32: c8:20:44:75:6d:7f:c4:76:44:8f:cb:8f:e3:6d:6d:30:43:1c: b6:77:ee:4f:c8:18:a3:fb:cf:e5:15:4f:4f:11:30:93:5d:18: f3:ca:6f:e6:92:b2:98:d5:46:1a:71:29:c0:f4:7a:71:bd:cc: 51:92:97:0d:c3:4e:97:44:a2:90:12:1d:aa:30:08:f7:dc:41: cc:ff:ca:26:36:05:6d:82:a3:19:b2:37:3c:cc:04:bc:11:45: f6:a2:76:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDcwMUI1NUVEMjBEODNFMzQ4RDgyMzdDRTM3NTk3OTU5 RUJDMDE4MjQwHhcNMjUwNDI0MTQyMDU5WhcNMjUwNTAxMTQyMDU5WjAYMRYwFAYD VQQDEw02ODBhNDhjYi01ZThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyY6MClzrHFLrRtXIdIfDWbqUF0otOXgUQZzO3HKQuKj3cFkwPAYT7CD4FEv8 VcDHMApaeO91eeC6EPI5kv1G3+07AaqpAgrA3z1VUKt77VkttmdvVLCcNK5l5nji qoYX07Z4BL4UYTywTxP70xbtyiQVjfIrTQPFBtWJnSUG3TARJN1Dv4wp3BTGuOmT i2fTB/CTQBrbroEjphgJSicUhL/LfeDk5KgaNWIO+5OhpW03wn+CmWoSFpfJFtYD i2iaMnsAkfIFC9E+PpfcXd2gMNyldSOe20ie1jekgHOb57YwPipXdIqbR5jlUEy9 9jsEbMTv9pQTzE5BBu9XM7f7lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPQ5vqEL ZoLz8GZvY1eBd0CLdSpkMB8GA1UdIwQYMBaAFHAbVe0g2D40jYI3zjdZeVnrwBgk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS9FRTY3RDhDMDFE NzgxMUUyODc5RTM4QzUwOEIwMkNEMi9jQnRWN1NEWVBqU05namZPTjFsNVdldkFH Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NCdFY3U0RZUGpTTmdqZk9OMWw1V2V2QUdDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS9FRTY3RDhDMDFENzgxMUUyODc5RTM4QzUwOEIwMkNEMi9jQnRWN1NEWVBq U05namZPTjFsNVdldkFHQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO1bc2rZHNknR4Tpy5khbTv4IHc14n5Fat8/ZaO3G0OIYt0yb5ytH2 p7Uj/zM4ubn0PvlW3/hju7UlrZ+7Km4kcbu28wRgMZU0lu4UAn53El6nmiGN5QKc YKxIRUOC/RoBmqOVRAgr//zcVqats7hp4p7rIcUYCTbbIw0AUXEDG77+shRXyvIv D57zPNSHgcSzsWEQkuAC+Njru8zr+p2XFTLIIER1bX/EdkSPy4/jbW0wQxy2d+5P yBij+8/lFU9PETCTXRjzym/mkrKY1UYacSnA9HpxvcxRkpcNw06XRKKQEh2qMAj3 3EHM/8omNgVtgqMZsjc8zAS8EUX2onaS -----END CERTIFICATE-----Generated at Sat Apr 26 15:22:19 2025 by rpki-client