$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft File: RtfjskJlD3X4XEWBNYWNzYyZwgM.mft (raw, json) Hash identifier: ELdzoiOC6QyCt8WKIEc3nf2+kLpdifDIO32HkSF9vWw= Subject key identifier: 3E:FF:77:92:F5:FA:5B:18:69:6E:D2:C0:38:03:60:37:DB:46:BD:80 Authority key identifier: 46:D7:E3:B2:42:65:0F:75:F8:5C:45:81:35:85:8D:CD:8C:99:C2:03 Certificate issuer: /CN=A91F3989/serialNumber=46D7E3B242650F75F85C458135858DCD8C99C203 Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft Manifest number: C9 Signing time: Fri 25 Apr 2025 04:47:14 +0000 Manifest this update: Fri 25 Apr 2025 04:47:13 +0000 Manifest next update: Fri 02 May 2025 04:47:13 +0000 Files and hashes: 1: RtfjskJlD3X4XEWBNYWNzYyZwgM.crl (hash: WrH2u+3LpII4oZiWnVfQxXvrAhTn5C8oGs+2S5vLvpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.crl rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:47:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3989, serialNumber=46D7E3B242650F75F85C458135858DCD8C99C203 Validity Not Before: Apr 25 04:47:13 2025 GMT Not After : May 2 04:47:13 2025 GMT Subject: CN=680b13d1-2f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:10:b2:7f:d2:1f:40:06:d5:54:41:e6:1e:61: 65:27:ec:c4:ad:b3:c4:d9:70:56:24:8f:6e:c7:98: 5d:e6:44:5d:58:d3:5b:9a:26:09:79:35:0a:26:73: 71:05:f3:c2:9a:46:ba:b7:a7:a8:81:02:c0:43:94: f5:3a:14:3f:97:95:7b:f6:e3:4e:c5:2f:67:af:12: d7:5f:0b:72:e1:97:eb:00:67:be:b2:8b:28:50:4a: 65:a5:b5:b5:b2:47:cc:c7:5f:f8:47:0c:59:65:bd: f6:56:77:25:56:fe:ed:86:30:1b:aa:3e:65:cd:d6: a6:6c:4d:87:bd:7c:80:e3:3b:cd:ee:90:e9:ec:aa: f5:78:e5:a5:0d:ea:c3:f7:cf:d7:23:38:55:08:e1: fd:e8:e3:77:bc:dc:10:cb:b6:9c:17:9e:ab:0c:78: c8:4e:04:b3:cd:95:84:cd:a1:59:f9:f0:dc:b9:58: 32:5f:db:f6:63:60:03:68:82:69:8e:67:47:ec:a2: 6a:dc:2e:c6:c9:8c:a2:87:0f:4b:bf:d9:e9:4d:1b: 51:db:61:aa:33:f7:43:d5:0c:9a:8e:27:c0:bb:05: a5:5e:5a:fe:07:8d:09:2c:f9:06:c6:be:1c:5f:56: fe:f7:db:05:54:11:18:68:97:36:04:ce:91:52:88: 1d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:FF:77:92:F5:FA:5B:18:69:6E:D2:C0:38:03:60:37:DB:46:BD:80 X509v3 Authority Key Identifier: keyid:46:D7:E3:B2:42:65:0F:75:F8:5C:45:81:35:85:8D:CD:8C:99:C2:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:14:be:d3:ae:e2:7c:ca:1a:ab:68:37:92:ee:8b:cc:89:13: da:fd:23:c3:b9:8f:b7:90:4f:37:6a:04:0e:8f:20:85:06:4b: b2:92:56:68:36:eb:79:19:b1:52:3f:b6:94:02:19:2d:d1:c6: 13:e1:a2:5e:5b:bd:9b:60:bb:97:51:fa:09:b1:f1:57:7a:3d: 13:4d:51:4a:d8:f1:6d:49:fe:a9:1d:9a:24:58:c4:a8:da:57: 62:18:85:8c:76:03:77:cc:8d:de:a9:45:af:94:5c:a7:4b:38: d7:af:d4:05:bf:68:70:98:53:4c:5b:38:06:f2:ed:c8:c7:bd: 9f:8f:1e:d3:fe:7d:90:8e:f5:e4:ef:fe:7e:e7:39:7e:6b:fb: 48:ad:36:43:27:ed:4f:75:aa:20:06:92:d1:e0:2f:3a:d5:71: af:2c:3d:75:8c:fc:da:d2:37:ba:6c:1a:53:a2:95:d1:9f:e3: 54:c0:ae:66:8e:82:76:b9:88:25:f2:29:87:59:4b:a8:d3:81: bb:c9:8c:64:12:8c:81:37:a9:c8:d7:37:fc:14:94:e5:51:84: bc:b7:81:2b:fb:27:e6:c2:f4:4f:ce:88:b5:27:e2:f9:f1:84: e3:21:61:6b:84:c0:6f:cc:d0:b9:db:ce:cd:04:47:78:20:d7: ae:95:3d:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5ODkxMTAvBgNVBAUTKDQ2RDdFM0IyNDI2NTBGNzVGODVDNDU4MTM1ODU4RENE OEM5OUMyMDMwHhcNMjUwNDI1MDQ0NzEzWhcNMjUwNTAyMDQ0NzEzWjAYMRYwFAYD VQQDEw02ODBiMTNkMS0yZjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlRCyf9IfQAbVVEHmHmFlJ+zErbPE2XBWJI9ux5hd5kRdWNNbmiYJeTUKJnNx BfPCmka6t6eogQLAQ5T1OhQ/l5V79uNOxS9nrxLXXwty4ZfrAGe+sosoUEplpbW1 skfMx1/4RwxZZb32VnclVv7thjAbqj5lzdambE2HvXyA4zvN7pDp7Kr1eOWlDerD 98/XIzhVCOH96ON3vNwQy7acF56rDHjITgSzzZWEzaFZ+fDcuVgyX9v2Y2ADaIJp jmdH7KJq3C7GyYyihw9Lv9npTRtR22GqM/dD1QyajifAuwWlXlr+B40JLPkGxr4c X1b+99sFVBEYaJc2BM6RUogd9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7/d5L1 +lsYaW7SwDgDYDfbRr2AMB8GA1UdIwQYMBaAFEbX47JCZQ91+FxFgTWFjc2MmcID MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzk4OS8zQUFDMEU1OEVD RDAxMUVFOEEyMjRENDlDNEY5QUUwMi9SdGZqc2tKbEQzWDRYRVdCTllXTnpZeVp3 Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J0Zmpza0psRDNYNFhFV0JOWVdOell5WndnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mzk4OS8zQUFDMEU1OEVDRDAxMUVFOEEyMjRENDlDNEY5QUUwMi9SdGZqc2tKbEQz WDRYRVdCTllXTnpZeVp3Z00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyFL7TruJ8yhqraDeS7ovMiRPa/SPDuY+3kE83agQOjyCFBkuyklZo Nut5GbFSP7aUAhkt0cYT4aJeW72bYLuXUfoJsfFXej0TTVFK2PFtSf6pHZokWMSo 2ldiGIWMdgN3zI3eqUWvlFynSzjXr9QFv2hwmFNMWzgG8u3Ix72fjx7T/n2QjvXk 7/5+5zl+a/tIrTZDJ+1PdaogBpLR4C861XGvLD11jPza0je6bBpTopXRn+NUwK5m joJ2uYgl8imHWUuo04G7yYxkEoyBN6nI1zf8FJTlUYS8t4Er+yfmwvRPzoi1J+L5 8YTjIWFrhMBvzNC5287NBEd4INeulT2+ -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:43 2025 by rpki-client