$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft File: rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft (raw, json) Hash identifier: hrITC1QTPotOzZPWVvOXll9bjktllmaEj+k32Ewmhd4= Subject key identifier: 90:71:82:C2:E6:B6:A8:D6:AE:CD:C8:37:D1:61:58:32:23:83:3E:DB Authority key identifier: AC:FC:B3:1E:2B:E2:AD:3D:12:B1:A7:91:02:FC:B4:FD:58:BB:66:83 Certificate issuer: /CN=A91F7BA0/serialNumber=ACFCB31E2BE2AD3D12B1A79102FCB4FD58BB6683 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPyzHivirT0SsaeRAvy0_Vi7ZoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft Manifest number: 9F Signing time: Fri 25 Apr 2025 05:19:02 +0000 Manifest this update: Fri 25 Apr 2025 05:19:01 +0000 Manifest next update: Fri 02 May 2025 05:19:01 +0000 Files and hashes: 1: rPyzHivirT0SsaeRAvy0_Vi7ZoM.crl (hash: JYQsu04fI1PYV8LbdAmbBq8dqDfgnAuZwGzvpj6Z5Dc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.crl rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPyzHivirT0SsaeRAvy0_Vi7ZoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:19:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7BA0, serialNumber=ACFCB31E2BE2AD3D12B1A79102FCB4FD58BB6683 Validity Not Before: Apr 25 05:19:01 2025 GMT Not After : May 2 05:19:01 2025 GMT Subject: CN=680b1b46-93ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f3:e3:10:0c:54:d5:45:8d:97:40:09:e4:55: f0:90:f7:31:3b:d3:e1:e0:73:90:18:5a:92:de:65: 62:f6:4d:5b:88:67:0d:b2:2f:ae:df:f8:1c:f7:65: 19:98:ab:23:1d:4d:de:ec:fc:a5:aa:40:02:f1:35: a6:06:c2:6c:3e:d7:63:e6:ce:d2:8a:33:7f:95:6f: c3:6d:e6:ab:38:7c:16:7f:2c:b9:8e:28:a9:ea:81: 4b:44:bd:55:37:6f:00:63:50:21:a8:10:f4:12:3a: b0:90:34:9a:30:d7:4e:8b:a8:97:5b:55:bd:6e:a7: 2e:93:28:7e:9f:d6:96:aa:5f:a4:f7:5f:af:6a:7b: f8:d4:57:44:a2:b6:71:6c:00:ff:58:cb:3c:9c:aa: 28:98:a8:9e:b8:c9:00:b2:42:18:a7:35:af:ff:50: 7e:59:c1:b4:fc:46:c3:1a:a7:ce:bd:4d:9f:e7:73: 0d:f5:10:80:32:5c:da:3a:cf:9b:c3:98:b8:49:d0: 1a:6d:40:71:2d:7f:f3:d2:70:1e:01:32:b3:ec:47: 89:ed:35:f3:9f:c0:d1:6a:83:55:08:a3:4c:3d:aa: a8:f7:fe:8e:52:62:82:54:18:e6:44:e9:31:0a:5f: 34:af:53:69:be:4d:79:8b:57:44:51:12:48:e9:2b: 47:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:71:82:C2:E6:B6:A8:D6:AE:CD:C8:37:D1:61:58:32:23:83:3E:DB X509v3 Authority Key Identifier: keyid:AC:FC:B3:1E:2B:E2:AD:3D:12:B1:A7:91:02:FC:B4:FD:58:BB:66:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPyzHivirT0SsaeRAvy0_Vi7ZoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:55:6c:42:75:fc:30:c2:04:c7:68:ed:f0:1d:05:56:0f:2d: f3:b1:73:26:73:6c:1f:f5:6e:13:f5:ab:3a:fd:9f:0c:5d:e9: 79:a3:e1:e7:a1:49:3d:7f:55:ae:68:e8:a5:ec:11:e9:b8:33: a9:15:21:89:35:01:9c:9f:c3:1d:89:49:67:19:7d:d2:8a:33: d6:fb:cc:07:f8:e3:24:5a:d1:13:66:43:60:71:f3:35:13:33: cf:bd:2a:60:88:78:80:26:6f:1a:16:f9:8e:9e:9b:d1:c9:20: af:bb:be:71:f9:70:4d:33:25:38:9f:04:ac:22:1e:18:82:45: 26:00:6d:fa:d8:4e:59:5d:17:f0:10:be:30:ef:a5:b0:72:83: e8:57:7e:11:d2:9b:a2:22:c9:3f:eb:6d:a6:50:45:89:3a:65: 25:40:6c:40:2c:86:08:cd:c4:e4:99:e2:39:b0:be:06:c1:74: 30:30:ca:63:d4:51:b3:97:bc:cc:33:bb:7f:82:05:1e:45:72: 3a:99:e0:77:fc:0c:1c:a4:b9:3d:9a:cc:13:81:a0:5e:9b:fc: 7f:a2:6e:6c:c4:14:3b:cb:f3:a2:ed:6f:77:0e:7b:d2:5e:80: ea:85:cd:c4:8b:d9:fc:f4:84:93:43:86:d8:65:63:16:90:f8: 8b:c2:a9:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdCQTAxMTAvBgNVBAUTKEFDRkNCMzFFMkJFMkFEM0QxMkIxQTc5MTAyRkNCNEZE NThCQjY2ODMwHhcNMjUwNDI1MDUxOTAxWhcNMjUwNTAyMDUxOTAxWjAYMRYwFAYD VQQDEw02ODBiMWI0Ni05M2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPPjEAxU1UWNl0AJ5FXwkPcxO9Ph4HOQGFqS3mVi9k1biGcNsi+u3/gc92UZ mKsjHU3e7PylqkAC8TWmBsJsPtdj5s7SijN/lW/DbearOHwWfyy5jiip6oFLRL1V N28AY1AhqBD0EjqwkDSaMNdOi6iXW1W9bqcukyh+n9aWql+k91+vanv41FdEorZx bAD/WMs8nKoomKieuMkAskIYpzWv/1B+WcG0/EbDGqfOvU2f53MN9RCAMlzaOs+b w5i4SdAabUBxLX/z0nAeATKz7EeJ7TXzn8DRaoNVCKNMPaqo9/6OUmKCVBjmROkx Cl80r1Npvk15i1dEURJI6StHtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBxgsLm tqjWrs3IN9FhWDIjgz7bMB8GA1UdIwQYMBaAFKz8sx4r4q09ErGnkQL8tP1Yu2aD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0JBMC9GNzM4M0Y4NDM4 RjExMUVGOTBCOTA3NDBDNEY5QUUwMi9yUHl6SGl2aXJUMFNzYWVSQXZ5MF9WaTda b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JQeXpIaXZpclQwU3NhZVJBdnkwX1ZpN1pvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0JBMC9GNzM4M0Y4NDM4RjExMUVGOTBCOTA3NDBDNEY5QUUwMi9yUHl6SGl2aXJU MFNzYWVSQXZ5MF9WaTdab00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqVWxCdfwwwgTHaO3wHQVWDy3zsXMmc2wf9W4T9as6/Z8MXel5o+Hn oUk9f1WuaOil7BHpuDOpFSGJNQGcn8MdiUlnGX3SijPW+8wH+OMkWtETZkNgcfM1 EzPPvSpgiHiAJm8aFvmOnpvRySCvu75x+XBNMyU4nwSsIh4YgkUmAG362E5ZXRfw EL4w76WwcoPoV34R0puiIsk/622mUEWJOmUlQGxALIYIzcTkmeI5sL4GwXQwMMpj 1FGzl7zMM7t/ggUeRXI6meB3/AwcpLk9mswTgaBem/x/om5sxBQ7y/Oi7W93DnvS XoDqhc3Ei9n89ISTQ4bYZWMWkPiLwqnH -----END CERTIFICATE-----Generated at Sat Apr 26 13:01:34 2025 by rpki-client