$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft File: 0S_1veXU0upxiMsALH_wFtyZTXI.mft (raw, json) Hash identifier: ndCpSzB5xLmC6f4croFCN22+tFmFI0CJPXFhg61Pmgk= Subject key identifier: 8B:76:37:6A:00:0A:C7:E0:52:A8:AB:1C:D2:88:CD:40:97:AB:73:69 Authority key identifier: D1:2F:F5:BD:E5:D4:D2:EA:71:88:CB:00:2C:7F:F0:16:DC:99:4D:72 Certificate issuer: /CN=A91EA623/serialNumber=D12FF5BDE5D4D2EA7188CB002C7FF016DC994D72 Certificate serial: 0501 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0S_1veXU0upxiMsALH_wFtyZTXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft Manifest number: 0501 Signing time: Thu 24 Apr 2025 23:26:57 +0000 Manifest this update: Thu 24 Apr 2025 23:26:56 +0000 Manifest next update: Thu 01 May 2025 23:26:56 +0000 Files and hashes: 1: 0S_1veXU0upxiMsALH_wFtyZTXI.crl (hash: c239Z4DuwKWFH5v4GiIvO8ICiIiYcgj4YAAioojgOeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.crl rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0S_1veXU0upxiMsALH_wFtyZTXI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1281 (0x501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA623, serialNumber=D12FF5BDE5D4D2EA7188CB002C7FF016DC994D72 Validity Not Before: Apr 24 23:26:56 2025 GMT Not After : May 1 23:26:56 2025 GMT Subject: CN=680ac8c0-5770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:28:7c:28:6f:b1:fb:31:9a:4f:a8:02:3f:47: 58:88:83:2c:ae:58:cc:c0:91:4f:9a:3b:3f:66:a6: 5a:44:6f:56:16:85:84:a9:fe:e5:bd:e0:af:29:9c: 73:d2:0d:49:79:55:cd:9c:da:16:f2:5a:83:28:66: fa:7f:d2:a6:74:23:db:d0:3d:6e:a3:4e:e5:92:a3: e7:de:63:0e:3b:44:32:c3:52:7b:fb:d1:4c:18:79: 05:52:ef:c7:ba:b7:7d:69:1c:bc:a2:14:ea:f3:d8: d5:2a:d9:0a:2d:1c:e3:9d:ac:d5:70:55:0e:3f:05: d3:5c:64:2d:15:94:ba:32:29:4d:62:8d:f4:67:d6: e1:8b:a4:ed:f1:43:f0:1b:0f:31:89:87:ec:af:92: 83:cf:44:49:e5:b6:39:38:93:84:8a:c1:74:63:02: e6:a7:6b:34:f1:45:dc:ee:ad:0f:83:4e:67:de:df: 20:10:ab:24:78:de:54:40:e8:df:d6:57:b4:56:c5: ed:07:fd:f2:b1:42:1a:d0:06:29:41:3a:7f:ba:66: 4e:26:44:1d:fc:09:93:13:e6:4b:1d:2b:8d:76:6d: ac:1d:64:49:12:b1:2a:d2:fc:02:b8:4e:56:0b:01: 78:e6:de:1c:56:c4:c1:0f:ab:ca:27:9a:9c:8c:09: 76:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:76:37:6A:00:0A:C7:E0:52:A8:AB:1C:D2:88:CD:40:97:AB:73:69 X509v3 Authority Key Identifier: keyid:D1:2F:F5:BD:E5:D4:D2:EA:71:88:CB:00:2C:7F:F0:16:DC:99:4D:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0S_1veXU0upxiMsALH_wFtyZTXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:10:d5:65:91:7e:6a:e1:1b:e1:09:5e:da:2a:e5:bd:5e:7c: a4:65:6c:cc:0d:30:a8:f1:d6:99:1f:b9:c0:41:b2:f3:c4:96: 81:1f:11:7b:7b:23:53:f0:31:54:06:21:0a:90:2b:d5:0d:73: bd:af:a1:5f:81:b1:1d:7d:33:f9:6c:e6:79:ac:15:ec:97:8a: 15:43:f6:25:64:6e:82:8a:5f:21:97:bc:be:0f:ef:55:d9:be: 92:bf:69:92:30:ed:28:33:41:87:77:13:9d:63:d9:d3:89:d2: 7e:2c:96:6a:dd:53:ba:a9:a9:e3:c3:5c:6f:a0:6e:0e:74:fa: 5a:aa:a5:e4:54:78:b9:a9:87:8b:5b:07:b1:a7:cb:f2:0d:0e: 63:f6:16:35:0f:99:60:fc:27:ed:c2:05:d7:a7:26:20:40:21: 87:3d:39:2a:76:8a:1a:3c:a7:5e:34:1e:c8:db:2e:4e:1a:49: e0:3f:f1:89:b9:e3:b6:6a:97:03:64:19:6f:f1:52:54:4c:78: bc:33:11:75:ca:77:5d:23:ad:c1:4b:bb:fc:ab:58:1b:a5:c5: 87:95:63:0d:11:b8:ca:63:8c:5f:30:97:2e:4e:b4:59:ee:57: e3:15:77:f9:d4:c5:bc:9e:3c:a5:b0:3c:1b:5d:1e:73:18:e3: 0e:09:05:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE2MjMxMTAvBgNVBAUTKEQxMkZGNUJERTVENEQyRUE3MTg4Q0IwMDJDN0ZGMDE2 REM5OTRENzIwHhcNMjUwNDI0MjMyNjU2WhcNMjUwNTAxMjMyNjU2WjAYMRYwFAYD VQQDEw02ODBhYzhjMC01NzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzih8KG+x+zGaT6gCP0dYiIMsrljMwJFPmjs/ZqZaRG9WFoWEqf7lveCvKZxz 0g1JeVXNnNoW8lqDKGb6f9KmdCPb0D1uo07lkqPn3mMOO0Qyw1J7+9FMGHkFUu/H urd9aRy8ohTq89jVKtkKLRzjnazVcFUOPwXTXGQtFZS6MilNYo30Z9bhi6Tt8UPw Gw8xiYfsr5KDz0RJ5bY5OJOEisF0YwLmp2s08UXc7q0Pg05n3t8gEKskeN5UQOjf 1le0VsXtB/3ysUIa0AYpQTp/umZOJkQd/AmTE+ZLHSuNdm2sHWRJErEq0vwCuE5W CwF45t4cVsTBD6vKJ5qcjAl2WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIt2N2oA CsfgUqirHNKIzUCXq3NpMB8GA1UdIwQYMBaAFNEv9b3l1NLqcYjLACx/8BbcmU1y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTYyMy9EMzE2N0YwQTA2 MEMxMUVDQUY2NzUwNDNDNEY5QUUwMi8wU18xdmVYVTB1cHhpTXNBTEhfd0Z0eVpU WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBTXzF2ZVhVMHVweGlNc0FMSF93RnR5WlRYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTYyMy9EMzE2N0YwQTA2MEMxMUVDQUY2NzUwNDNDNEY5QUUwMi8wU18xdmVYVTB1 cHhpTXNBTEhfd0Z0eVpUWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByENVlkX5q4RvhCV7aKuW9XnykZWzMDTCo8daZH7nAQbLzxJaBHxF7 eyNT8DFUBiEKkCvVDXO9r6FfgbEdfTP5bOZ5rBXsl4oVQ/YlZG6Cil8hl7y+D+9V 2b6Sv2mSMO0oM0GHdxOdY9nTidJ+LJZq3VO6qanjw1xvoG4OdPpaqqXkVHi5qYeL Wwexp8vyDQ5j9hY1D5lg/CftwgXXpyYgQCGHPTkqdooaPKdeNB7I2y5OGkngP/GJ ueO2apcDZBlv8VJUTHi8MxF1ynddI63BS7v8q1gbpcWHlWMNEbjKY4xfMJcuTrRZ 7lfjFXf51MW8njylsDwbXR5zGOMOCQUQ -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:15 2025 by rpki-client