$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft File: ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft (raw, json) Hash identifier: zgMov1JazeSuAxgNGWvrr5SNpVeYgDEiv45x6HFPwG4= Subject key identifier: D3:F1:56:86:3C:FB:7A:7D:B4:37:96:56:1A:51:8B:A3:E3:2F:50:00 Authority key identifier: 13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77 Certificate issuer: /CN=A91F89D9/serialNumber=131570B4535F840302530DD1317442316309C177 Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft Manifest number: 76 Signing time: Fri 25 Apr 2025 05:46:46 +0000 Manifest this update: Fri 25 Apr 2025 05:46:45 +0000 Manifest next update: Fri 02 May 2025 05:46:45 +0000 Files and hashes: 1: ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl (hash: NjJ0UN+JX1Es30fKj0Hg/VNVUGWlRP4iTNUfOGTM92k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:46:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89D9, serialNumber=131570B4535F840302530DD1317442316309C177 Validity Not Before: Apr 25 05:46:45 2025 GMT Not After : May 2 05:46:45 2025 GMT Subject: CN=680b21c5-2d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:07:e0:c6:34:16:77:14:1a:b5:80:0a:ca:88: bc:7a:39:c8:92:a5:94:7f:c5:01:08:a9:d1:a4:c0: 36:d8:a8:1b:6c:92:b0:70:23:84:f4:95:8e:d8:f9: 96:7e:e1:f9:ac:08:65:42:bf:c2:12:56:16:b1:ea: 4c:6d:01:5c:39:50:43:63:27:2c:43:2c:53:c0:68: 59:da:87:04:76:cd:7a:ea:6d:22:67:c6:28:e1:d3: 72:b4:10:8c:00:de:45:c3:39:34:9f:0c:d8:89:e7: 80:a5:a7:70:cb:b3:47:8d:bc:12:ed:fe:32:45:0a: e4:ab:15:ba:9e:82:b3:95:18:bd:d7:74:da:e3:e3: 6e:d7:6b:3b:46:5b:64:f6:35:34:9c:44:a3:ae:80: 7e:2c:0a:60:f8:a7:f3:04:d5:3e:57:47:e2:8c:bd: 5a:87:3a:1d:dd:7b:88:e2:63:a1:c1:1c:78:0a:df: e7:7c:92:cc:2c:18:a9:83:ce:03:54:e6:03:46:d0: b1:7e:23:9a:95:91:82:0c:c5:70:1b:87:66:01:51: dc:b0:fb:0d:29:8a:bf:21:35:f5:0d:3e:c2:a7:b4: 2b:38:5f:32:b1:ca:c9:a1:0e:7b:97:1c:a5:b9:f7: fc:75:57:d6:1d:b0:16:51:e4:cd:8c:53:d2:97:04: e6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F1:56:86:3C:FB:7A:7D:B4:37:96:56:1A:51:8B:A3:E3:2F:50:00 X509v3 Authority Key Identifier: keyid:13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:62:a4:29:56:e6:81:84:71:2a:f4:e7:fd:ac:5e:a7:50:c5: 95:5c:d7:b0:a5:65:07:42:59:58:c4:52:f5:5e:e7:18:7d:c8: c2:f9:bb:a3:58:99:f7:f6:a1:27:a0:92:f4:d3:1b:be:68:3a: c8:50:8e:46:79:b0:49:5f:e9:ae:de:e4:49:a8:44:03:55:07: 88:e7:00:3e:e7:db:3d:fc:f7:52:f5:3f:21:06:b3:ee:0d:19: c0:e5:50:98:e9:9e:0f:64:9b:21:6e:64:f4:f8:d6:2b:12:d8: d4:92:d5:49:48:0f:8f:ae:09:1d:a6:45:8e:59:62:c2:46:f0: fb:01:58:e6:60:6e:40:5f:67:98:9e:f3:4f:fa:e3:97:d9:0a: 95:36:96:4f:9c:ba:ae:6c:e8:02:1e:a6:6c:cd:1c:d7:ef:1e: a4:3b:c0:02:b2:2a:ce:58:7b:c9:08:3a:40:3c:6e:6b:0b:25: ce:36:41:bf:d4:c5:d2:87:e7:e9:45:a0:ad:0b:94:fb:42:71: e0:07:01:f4:dc:31:41:dd:d1:ce:a8:b5:49:c1:36:1b:58:9b: 2b:e7:ef:04:91:fe:aa:0d:44:f5:50:eb:ea:3d:bd:da:5f:cb: 19:b9:85:1b:3c:3c:48:7c:de:a7:ee:8c:e8:12:07:03:31:8a: e1:34:9e:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODlEOTExMC8GA1UEBRMoMTMxNTcwQjQ1MzVGODQwMzAyNTMwREQxMzE3NDQyMzE2 MzA5QzE3NzAeFw0yNTA0MjUwNTQ2NDVaFw0yNTA1MDIwNTQ2NDVaMBgxFjAUBgNV BAMTDTY4MGIyMWM1LTJkMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD7B+DGNBZ3FBq1gArKiLx6OciSpZR/xQEIqdGkwDbYqBtskrBwI4T0lY7Y+ZZ+ 4fmsCGVCv8ISVhax6kxtAVw5UENjJyxDLFPAaFnahwR2zXrqbSJnxijh03K0EIwA 3kXDOTSfDNiJ54Clp3DLs0eNvBLt/jJFCuSrFbqegrOVGL3XdNrj427XaztGW2T2 NTScRKOugH4sCmD4p/ME1T5XR+KMvVqHOh3de4jiY6HBHHgK3+d8kswsGKmDzgNU 5gNG0LF+I5qVkYIMxXAbh2YBUdyw+w0pir8hNfUNPsKntCs4XzKxysmhDnuXHKW5 9/x1V9YdsBZR5M2MU9KXBObJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0/FWhjz7 en20N5ZWGlGLo+MvUAAwHwYDVR0jBBgwFoAUExVwtFNfhAMCUw3RMXRCMWMJwXcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4OUQ5L0Y1NjAzN0E2NkY1 QzExRUY4MzVBN0I2NkM0RjlBRTAyL0V4Vnd0Rk5maEFNQ1V3M1JNWFJDTVdNSndY Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRXhWd3RGTmZoQU1DVXczUk1YUkNNV01Kd1hjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 OUQ5L0Y1NjAzN0E2NkY1QzExRUY4MzVBN0I2NkM0RjlBRTAyL0V4Vnd0Rk5maEFN Q1V3M1JNWFJDTVdNSndYYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH5ipClW5oGEcSr05/2sXqdQxZVc17ClZQdCWVjEUvVe5xh9yML5u6NY mff2oSegkvTTG75oOshQjkZ5sElf6a7e5EmoRANVB4jnAD7n2z3891L1PyEGs+4N GcDlUJjpng9kmyFuZPT41isS2NSS1UlID4+uCR2mRY5ZYsJG8PsBWOZgbkBfZ5ie 80/645fZCpU2lk+cuq5s6AIepmzNHNfvHqQ7wAKyKs5Ye8kIOkA8bmsLJc42Qb/U xdKH5+lFoK0LlPtCceAHAfTcMUHd0c6otUnBNhtYmyvn7wSR/qoNRPVQ6+o9vdpf yxm5hRs8PEh83qfujOgSBwMxiuE0nkI= -----END CERTIFICATE-----Generated at Sat Apr 26 12:19:22 2025 by rpki-client