$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft File: MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft (raw, json) Hash identifier: JdgTdPCd5io1bIomBfAb5TMScWufTONnf7wQdivFt/8= Subject key identifier: 6F:0B:57:C6:42:26:44:E0:15:43:C7:1D:80:25:E4:7B:EF:14:CE:3A Authority key identifier: 30:E8:96:E7:89:D4:43:60:34:6E:A4:CB:B4:ED:45:91:4E:AD:02:7D Certificate issuer: /CN=A91EF73D/serialNumber=30E896E789D44360346EA4CBB4ED45914EAD027D Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft Manifest number: DD Signing time: Fri 25 Apr 2025 04:33:21 +0000 Manifest this update: Fri 25 Apr 2025 04:33:20 +0000 Manifest next update: Fri 02 May 2025 04:33:20 +0000 Files and hashes: 1: MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl (hash: y2k/QTA38nKu/OKCPfhzjbjWLSPSWJy23p8KVW7rk4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF73D, serialNumber=30E896E789D44360346EA4CBB4ED45914EAD027D Validity Not Before: Apr 25 04:33:20 2025 GMT Not After : May 2 04:33:20 2025 GMT Subject: CN=680b1090-360c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:44:38:10:6b:2d:7f:e6:21:60:bc:5a:db:1b: 85:77:a7:8e:ce:ff:53:39:a7:39:74:e3:e7:b0:d1: 93:ee:5f:57:51:dd:8d:b0:dc:0f:41:5c:61:bd:c4: e7:cf:e0:07:e8:6c:b4:9a:42:19:92:31:8e:c1:a5: 58:fe:55:5f:a2:2e:a4:91:c5:62:be:4c:5a:a2:7d: ce:da:a4:d8:2f:1f:1a:29:e2:fd:67:ab:6d:ef:15: 8a:17:90:b6:46:8c:27:42:a7:c1:fb:73:b9:b8:0a: dd:98:a1:df:ab:d4:e0:35:9e:51:94:4c:8d:dd:f0: ce:ec:56:ab:4e:dd:dd:59:1d:50:52:ba:67:45:3d: 6a:e6:21:d1:aa:38:b1:98:bd:26:73:5a:b4:48:74: 7e:e3:ce:c1:56:3c:96:10:34:08:59:64:de:83:ef: 3d:9a:89:bd:7d:7f:f9:4b:ee:cf:eb:25:5c:7e:ef: f5:9d:3d:71:fa:27:65:e9:b7:37:2d:6d:fe:99:c4: 19:75:73:2d:d2:b7:80:b0:bc:25:35:12:9f:5e:61: e9:90:3d:d9:8f:d0:18:31:9e:55:64:79:78:5f:b7: 48:36:59:50:b7:6f:8f:a0:29:42:23:e2:c9:f8:d8: aa:f2:23:4f:53:d6:48:fb:8f:26:2c:09:c2:b8:32: 7b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:0B:57:C6:42:26:44:E0:15:43:C7:1D:80:25:E4:7B:EF:14:CE:3A X509v3 Authority Key Identifier: keyid:30:E8:96:E7:89:D4:43:60:34:6E:A4:CB:B4:ED:45:91:4E:AD:02:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:36:5a:c7:ad:40:ca:d2:ba:1d:2e:ae:f2:41:83:a3:ba:9a: 31:d1:41:d4:54:b0:2e:4a:55:f0:77:a6:c7:6d:88:8f:5f:f8: 85:9a:b0:a2:ff:15:64:3c:90:11:8c:81:6e:5f:1e:c1:c0:f6: b2:28:3b:d0:9e:1f:0a:42:82:23:26:03:fe:15:c3:1f:cc:9f: b4:fd:8c:d5:e1:e0:e2:c7:eb:d8:14:8c:3d:36:82:fc:bd:d5: 5e:24:d1:d9:ea:83:14:00:c3:83:55:15:5a:17:14:dd:00:b1: 7b:9b:93:52:03:15:24:d8:cf:e9:80:ef:85:4a:b4:37:60:89: 22:85:c9:2e:a9:be:59:56:6d:34:eb:e0:ed:0a:76:d8:76:cb: 21:24:a1:72:05:80:03:d6:8e:69:b9:6a:c3:e5:5f:08:03:66: 65:e8:1a:65:7c:fd:d5:c3:f9:2a:d8:2d:7f:91:c0:f2:09:14: 80:09:df:14:cd:84:5d:24:21:50:24:d7:9a:a9:a5:5a:79:99: 00:ba:34:58:03:66:ea:2e:ae:90:2b:16:d1:03:da:c6:a8:ca: 91:ec:3d:7a:f4:65:4f:d9:4a:a5:d4:b8:33:ae:cb:bd:19:be: 00:b6:26:5f:bd:1e:5d:ec:e2:81:64:09:cf:7c:a3:3e:f3:f0: 68:66:51:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3M0QxMTAvBgNVBAUTKDMwRTg5NkU3ODlENDQzNjAzNDZFQTRDQkI0RUQ0NTkx NEVBRDAyN0QwHhcNMjUwNDI1MDQzMzIwWhcNMjUwNTAyMDQzMzIwWjAYMRYwFAYD VQQDEw02ODBiMTA5MC0zNjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10Q4EGstf+YhYLxa2xuFd6eOzv9TOac5dOPnsNGT7l9XUd2NsNwPQVxhvcTn z+AH6Gy0mkIZkjGOwaVY/lVfoi6kkcVivkxaon3O2qTYLx8aKeL9Z6tt7xWKF5C2 RownQqfB+3O5uArdmKHfq9TgNZ5RlEyN3fDO7FarTt3dWR1QUrpnRT1q5iHRqjix mL0mc1q0SHR+487BVjyWEDQIWWTeg+89mom9fX/5S+7P6yVcfu/1nT1x+idl6bc3 LW3+mcQZdXMt0reAsLwlNRKfXmHpkD3Zj9AYMZ5VZHl4X7dINllQt2+PoClCI+LJ +Niq8iNPU9ZI+48mLAnCuDJ74QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8LV8ZC JkTgFUPHHYAl5HvvFM46MB8GA1UdIwQYMBaAFDDolueJ1ENgNG6ky7TtRZFOrQJ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjczRC9EMjcyMzBERUNF MUYxMUVFQUM2MjYxN0NDNEY5QUUwMi9NT2lXNTRuVVEyQTBicVRMdE8xRmtVNnRB bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PaVc1NG5VUTJBMGJxVEx0TzFGa1U2dEFuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjczRC9EMjcyMzBERUNFMUYxMUVFQUM2MjYxN0NDNEY5QUUwMi9NT2lXNTRuVVEy QTBicVRMdE8xRmtVNnRBbjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9NlrHrUDK0rodLq7yQYOjupox0UHUVLAuSlXwd6bHbYiPX/iFmrCi /xVkPJARjIFuXx7BwPayKDvQnh8KQoIjJgP+FcMfzJ+0/YzV4eDix+vYFIw9NoL8 vdVeJNHZ6oMUAMODVRVaFxTdALF7m5NSAxUk2M/pgO+FSrQ3YIkihckuqb5ZVm00 6+DtCnbYdsshJKFyBYAD1o5puWrD5V8IA2Zl6BplfP3Vw/kq2C1/kcDyCRSACd8U zYRdJCFQJNeaqaVaeZkAujRYA2bqLq6QKxbRA9rGqMqR7D169GVP2Uql1Lgzrsu9 Gb4AtiZfvR5d7OKBZAnPfKM+8/BoZlFA -----END CERTIFICATE-----Generated at Sat Apr 26 13:41:49 2025 by rpki-client