$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft File: N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft (raw, json) Hash identifier: h3Flldx2ivM3fd02TUVk4XgR5wanz5kIfBEuFQciRyo= Subject key identifier: FB:68:48:70:ED:C2:74:75:F7:F1:7F:75:28:6B:C2:9B:2C:DA:3D:4E Authority key identifier: 37:78:35:CD:A2:BD:63:67:EF:0F:EB:5E:A5:81:98:F8:18:3A:87:C1 Certificate issuer: /CN=A91EA409/serialNumber=377835CDA2BD6367EF0FEB5EA58198F8183A87C1 Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft Manifest number: 58 Signing time: Fri 25 Apr 2025 06:08:36 +0000 Manifest this update: Fri 25 Apr 2025 06:08:36 +0000 Manifest next update: Fri 02 May 2025 06:08:36 +0000 Files and hashes: 1: N3g1zaK9Y2fvD-tepYGY-Bg6h8E.crl (hash: KfFNuUkJ+Qpou/m/ftzYhcoyDNp3sWR5QHO5yfK+LN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.crl rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:08:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA409, serialNumber=377835CDA2BD6367EF0FEB5EA58198F8183A87C1 Validity Not Before: Apr 25 06:08:36 2025 GMT Not After : May 2 06:08:36 2025 GMT Subject: CN=680b26e4-8982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:69:49:54:f2:7e:68:c9:bf:42:84:25:37:c7: 31:7f:c7:16:4c:9a:9a:6b:d6:5f:21:4b:82:55:a2: a3:17:5a:24:01:8a:6c:d7:6a:bc:06:45:e5:00:73: b8:1b:53:b8:f8:64:47:5c:26:96:e6:5e:4d:e7:2c: b8:05:64:c7:e2:68:ba:a6:a7:8d:2c:46:f9:79:79: 55:3f:15:5d:d7:60:2c:6d:16:dd:9e:1b:86:0e:a9: 11:b6:00:dd:88:9d:e8:1a:d8:29:95:ba:bc:74:f6: a7:3d:63:a5:58:0e:1a:ec:48:2b:27:44:43:1b:37: d7:f5:24:a9:d5:d8:31:4d:38:07:2c:a8:43:3f:ad: 5a:56:13:d8:cb:fc:7b:48:49:a2:49:34:73:2f:d4: d4:1e:75:b5:13:8b:e5:b7:ed:9a:61:a8:56:f9:3d: 61:12:23:c4:ce:3e:f6:26:bd:18:86:db:7a:e9:1f: 2c:6f:28:80:56:73:8d:4a:18:25:09:13:23:d9:da: a0:39:45:9b:03:9c:30:b1:d6:5d:f6:08:30:82:92: 26:99:07:82:3b:25:87:9a:64:b9:c2:49:67:b8:af: d9:78:2f:f7:79:99:38:38:ae:59:a2:d2:c1:61:2e: fd:02:cd:78:af:74:4f:3c:c4:57:ab:ba:ed:57:0e: b0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:68:48:70:ED:C2:74:75:F7:F1:7F:75:28:6B:C2:9B:2C:DA:3D:4E X509v3 Authority Key Identifier: keyid:37:78:35:CD:A2:BD:63:67:EF:0F:EB:5E:A5:81:98:F8:18:3A:87:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:91:42:ba:fb:26:8f:d8:39:23:4f:27:d4:89:eb:f5:9b:b6: d6:e4:06:93:05:bb:45:8b:fd:2c:26:50:ff:a0:c3:9c:d8:ec: 24:2a:cb:19:55:4c:9d:c6:30:ec:e4:d8:72:bc:40:61:29:4c: d2:39:27:95:49:7d:02:39:5e:e1:b2:f5:e0:6f:67:cd:8d:db: 13:7e:80:33:5d:0d:54:11:66:6c:cd:91:54:12:58:29:8b:a3: e5:95:b3:67:b0:5a:4a:4f:58:e0:b9:54:37:6d:0a:d6:8d:8d: 79:92:98:bd:42:d5:8f:81:ce:2e:45:9f:aa:79:f4:2a:a9:eb: b8:af:aa:f5:90:3a:16:c5:cc:96:32:16:b8:d6:24:40:0e:1e: 0d:2f:4e:c2:df:dc:88:57:f8:79:85:34:d1:fb:fb:c5:12:71: 5e:b4:b3:d0:1b:f3:ec:53:58:a1:48:23:93:86:31:8a:a9:af: 99:24:23:74:03:48:c6:c2:70:8b:9a:d8:fb:79:d0:47:1c:a5: 71:57:fa:93:25:d7:61:a1:0e:d5:42:ea:87:7b:18:c3:4d:36: f5:bb:45:59:48:bc:60:c6:9c:cb:a7:85:c1:de:9a:2d:b4:65: aa:3b:f0:da:8e:4c:9f:36:bd:4c:97:c1:bb:9f:4d:bc:17:20: 1f:40:a0:13 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTQwOTExMC8GA1UEBRMoMzc3ODM1Q0RBMkJENjM2N0VGMEZFQjVFQTU4MTk4Rjgx ODNBODdDMTAeFw0yNTA0MjUwNjA4MzZaFw0yNTA1MDIwNjA4MzZaMBgxFjAUBgNV BAMTDTY4MGIyNmU0LTg5ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJaUlU8n5oyb9ChCU3xzF/xxZMmppr1l8hS4JVoqMXWiQBimzXarwGReUAc7gb U7j4ZEdcJpbmXk3nLLgFZMfiaLqmp40sRvl5eVU/FV3XYCxtFt2eG4YOqRG2AN2I nega2CmVurx09qc9Y6VYDhrsSCsnREMbN9f1JKnV2DFNOAcsqEM/rVpWE9jL/HtI SaJJNHMv1NQedbUTi+W37ZphqFb5PWESI8TOPvYmvRiG23rpHyxvKIBWc41KGCUJ EyPZ2qA5RZsDnDCx1l32CDCCkiaZB4I7JYeaZLnCSWe4r9l4L/d5mTg4rlmi0sFh Lv0CzXivdE88xFeruu1XDrCnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+2hIcO3C dHX38X91KGvCmyzaPU4wHwYDVR0jBBgwFoAUN3g1zaK9Y2fvD+tepYGY+Bg6h8Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBNDA5LzAyODlGNkZDOUNB QzExRUZBQjU5NTUxNkM0RjlBRTAyL04zZzF6YUs5WTJmdkQtdGVwWUdZLUJnNmg4 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjNnMXphSzlZMmZ2RC10ZXBZR1ktQmc2aDhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB NDA5LzAyODlGNkZDOUNBQzExRUZBQjU5NTUxNkM0RjlBRTAyL04zZzF6YUs5WTJm dkQtdGVwWUdZLUJnNmg4RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABSRQrr7Jo/YOSNPJ9SJ6/WbttbkBpMFu0WL/SwmUP+gw5zY7CQqyxlV TJ3GMOzk2HK8QGEpTNI5J5VJfQI5XuGy9eBvZ82N2xN+gDNdDVQRZmzNkVQSWCmL o+WVs2ewWkpPWOC5VDdtCtaNjXmSmL1C1Y+Bzi5Fn6p59Cqp67ivqvWQOhbFzJYy FrjWJEAOHg0vTsLf3IhX+HmFNNH7+8UScV60s9Ab8+xTWKFII5OGMYqpr5kkI3QD SMbCcIua2Pt50EccpXFX+pMl12GhDtVC6od7GMNNNvW7RVlIvGDGnMunhcHemi20 Zao78NqOTJ82vUyXwbufTbwXIB9AoBM= -----END CERTIFICATE-----Generated at Sat Apr 26 17:18:33 2025 by rpki-client