$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.mft File: 9TjVlahlU-nmlHrF6Pz8y8namyE.mft (raw, json) Hash identifier: H6ChjSorBYJbmjKh0llzl6Us5Nrgh0PE+x2ACzcyj/w= Subject key identifier: 03:F6:78:13:CD:79:3B:2F:0F:E3:24:DC:E0:AE:57:78:FE:C2:30:99 Authority key identifier: F5:38:D5:95:A8:65:53:E9:E6:94:7A:C5:E8:FC:FC:CB:C9:DA:9B:21 Certificate issuer: /CN=A91EA115/serialNumber=F538D595A86553E9E6947AC5E8FCFCCBC9DA9B21 Certificate serial: 3474 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TjVlahlU-nmlHrF6Pz8y8namyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.mft Manifest number: 3473 Signing time: Sat 26 Apr 2025 14:26:40 +0000 Manifest this update: Sat 26 Apr 2025 14:26:40 +0000 Manifest next update: Sat 03 May 2025 14:26:40 +0000 Files and hashes: 1: 9TjVlahlU-nmlHrF6Pz8y8namyE.crl (hash: amE5Qv2iRhYngxU3q9AB4ucowly2K+gPRkGD6irs7Hc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.crl rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TjVlahlU-nmlHrF6Pz8y8namyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13428 (0x3474) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA115, serialNumber=F538D595A86553E9E6947AC5E8FCFCCBC9DA9B21 Validity Not Before: Apr 26 14:26:40 2025 GMT Not After : May 3 14:26:40 2025 GMT Subject: CN=680ced20-09c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2d:bb:af:d1:b4:02:0d:73:cb:8f:9d:87:7b: 0d:31:a7:34:94:ff:4c:ec:22:1d:29:d8:87:1c:12: 73:b9:10:f3:22:b9:b4:f5:75:63:7f:a6:76:25:5c: 23:fd:62:bf:b9:33:22:46:1e:7c:aa:ed:58:b7:9c: 1e:bc:31:cb:0d:53:c9:e4:ad:07:b0:ed:fa:43:c5: b7:c5:45:6d:66:52:71:63:11:a3:4f:0e:fb:ec:69: 71:47:83:19:e8:25:42:99:ae:9d:de:a7:06:e9:7e: 23:c7:26:94:22:df:74:38:b6:25:24:3c:7f:c5:68: 14:e6:ba:39:fd:f9:34:91:d2:cf:41:a4:a9:d7:3c: 2b:76:9f:90:ed:b7:fd:ca:b7:d3:98:a0:43:0e:82: a4:eb:ae:4c:47:07:86:ce:36:3c:3c:41:00:62:4c: d6:f9:56:3e:c4:2c:4b:b2:bb:be:06:d3:8f:c0:7d: d1:69:95:e5:7b:91:e3:d3:4d:f7:c4:a1:e7:55:e3: a3:73:69:39:2b:dc:bb:f6:59:99:35:84:f9:d9:50: 81:c5:67:1a:9b:17:26:d4:6a:84:b1:ed:94:11:c9: 6c:87:b1:dd:98:5a:25:10:64:a7:e4:a1:3c:71:19: 60:40:14:ef:c2:9a:42:6c:e9:ae:41:aa:6d:d0:6f: 24:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F6:78:13:CD:79:3B:2F:0F:E3:24:DC:E0:AE:57:78:FE:C2:30:99 X509v3 Authority Key Identifier: keyid:F5:38:D5:95:A8:65:53:E9:E6:94:7A:C5:E8:FC:FC:CB:C9:DA:9B:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TjVlahlU-nmlHrF6Pz8y8namyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:1b:be:bd:57:da:cf:76:f9:f5:3d:7e:a1:24:a3:cd:f4:10: 1e:3c:98:5d:3f:f0:c0:1d:99:b3:a7:c0:e6:0d:90:d5:92:b1: fc:16:18:29:47:54:56:cf:7e:26:28:12:9e:22:04:e2:2b:a7: 0c:38:cd:20:9a:62:14:dd:85:af:7b:1e:7a:eb:29:2e:51:af: 3b:e0:32:5a:d5:a7:06:ae:b5:e3:d8:7f:80:e4:35:2a:d2:ae: f2:65:47:45:ac:db:d2:41:18:09:97:28:8a:94:5c:5d:f7:66: 25:c8:04:8e:c3:f4:82:72:c5:c1:83:e2:fe:e0:b9:d0:8c:cb: 8c:43:a9:45:c5:56:7d:59:88:ab:60:04:e8:e1:45:7e:bb:8f: 6f:9a:c1:53:dd:d9:2f:60:c8:fa:a1:29:eb:6c:3a:68:d9:0d: e1:35:c7:82:ae:1d:b1:7a:2b:5f:66:9c:bf:e6:e9:27:3e:50: 2c:b2:66:c1:88:7c:cb:7f:79:90:51:b2:37:12:c8:6e:60:2f: 6d:93:ab:91:10:f5:40:42:66:6a:5a:25:bb:a0:0c:25:aa:1e: 71:cf:6c:ba:db:04:d3:6e:4b:fd:59:cc:0c:07:a4:5b:e6:13: 66:31:52:38:6f:4c:46:70:88:5c:1d:5c:58:5c:80:ba:5a:47: 23:20:9f:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExMTUxMTAvBgNVBAUTKEY1MzhENTk1QTg2NTUzRTlFNjk0N0FDNUU4RkNGQ0NC QzlEQTlCMjEwHhcNMjUwNDI2MTQyNjQwWhcNMjUwNTAzMTQyNjQwWjAYMRYwFAYD VQQDEw02ODBjZWQyMC0wOWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4C27r9G0Ag1zy4+dh3sNMac0lP9M7CIdKdiHHBJzuRDzIrm09XVjf6Z2JVwj /WK/uTMiRh58qu1Yt5wevDHLDVPJ5K0HsO36Q8W3xUVtZlJxYxGjTw777GlxR4MZ 6CVCma6d3qcG6X4jxyaUIt90OLYlJDx/xWgU5ro5/fk0kdLPQaSp1zwrdp+Q7bf9 yrfTmKBDDoKk665MRweGzjY8PEEAYkzW+VY+xCxLsru+BtOPwH3RaZXle5Hj0033 xKHnVeOjc2k5K9y79lmZNYT52VCBxWcamxcm1GqEse2UEclsh7HdmFolEGSn5KE8 cRlgQBTvwppCbOmuQapt0G8kyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAP2eBPN eTsvD+Mk3OCuV3j+wjCZMB8GA1UdIwQYMBaAFPU41ZWoZVPp5pR6xej8/MvJ2psh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTExNS85MTI1NDUwRTFE ODYxMUUyOUYzM0UwREQwOEIwMkNEMi85VGpWbGFobFUtbm1sSHJGNlB6OHk4bmFt eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlUalZsYWhsVS1ubWxIckY2UHo4eThuYW15RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTExNS85MTI1NDUwRTFEODYxMUUyOUYzM0UwREQwOEIwMkNEMi85VGpWbGFobFUt bm1sSHJGNlB6OHk4bmFteUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABG769V9rPdvn1PX6hJKPN9BAePJhdP/DAHZmzp8DmDZDVkrH8Fhgp R1RWz34mKBKeIgTiK6cMOM0gmmIU3YWvex566ykuUa874DJa1acGrrXj2H+A5DUq 0q7yZUdFrNvSQRgJlyiKlFxd92YlyASOw/SCcsXBg+L+4LnQjMuMQ6lFxVZ9WYir YATo4UV+u49vmsFT3dkvYMj6oSnrbDpo2Q3hNceCrh2xeitfZpy/5uknPlAssmbB iHzLf3mQUbI3EshuYC9tk6uREPVAQmZqWiW7oAwlqh5xz2y62wTTbkv9WcwMB6Rb 5hNmMVI4b0xGcIhcHVxYXIC6WkcjIJ/f -----END CERTIFICATE-----Generated at Sat Apr 26 17:30:40 2025 by rpki-client