$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft File: x8206hgWXlmC0KkZ_0f3JnbgUHM.mft (raw, json) Hash identifier: odT6O5MwaGmD/SkVWKXtO76+sruhXyb3K8opWZhu2c4= Subject key identifier: 68:78:5C:C2:35:3C:91:3E:A7:37:EC:59:DE:40:5E:A7:DB:94:7F:6B Authority key identifier: C7:CD:B4:EA:18:16:5E:59:82:D0:A9:19:FF:47:F7:26:76:E0:50:73 Certificate issuer: /CN=A91FBEFA/serialNumber=C7CDB4EA18165E5982D0A919FF47F72676E05073 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft Manifest number: 11 Signing time: Fri 25 Apr 2025 07:03:37 +0000 Manifest this update: Fri 25 Apr 2025 07:03:36 +0000 Manifest next update: Fri 02 May 2025 07:03:36 +0000 Files and hashes: 1: x8206hgWXlmC0KkZ_0f3JnbgUHM.crl (hash: 8BI08tyYqVS1vv/yBPggcs1H0psEsNkxargPi2hSuzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.crl rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:03:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBEFA, serialNumber=C7CDB4EA18165E5982D0A919FF47F72676E05073 Validity Not Before: Apr 25 07:03:36 2025 GMT Not After : May 2 07:03:36 2025 GMT Subject: CN=680b33c8-365f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7d:8e:a5:af:f1:5f:ea:67:21:a0:f8:eb:ef: f7:5e:f8:8f:f3:ef:0a:c0:cb:16:34:e1:4f:c7:0f: 40:1a:6b:d2:d7:f7:9d:4f:d2:23:77:79:ce:1b:0b: e4:5e:0a:36:75:dc:38:1a:39:90:50:01:82:d8:da: bc:dc:a3:6e:aa:62:12:aa:e7:81:a9:e1:77:17:85: 13:1f:ce:a8:72:92:2a:17:a4:88:f8:2f:3e:ea:ee: 0c:3f:ef:bd:f7:bf:6f:e0:51:fc:b8:be:b9:44:43: aa:6e:18:b9:34:fc:77:12:59:44:2c:d9:05:e3:3f: 3d:3c:c6:59:61:32:ed:23:70:86:8a:26:f8:65:0f: d9:c4:33:f1:ff:fe:e6:59:5e:9c:2f:a6:b8:8b:a6: 30:9d:7c:b1:a1:ae:58:81:29:d8:8d:00:cb:93:96: dc:d0:e4:59:40:a5:75:75:0e:5a:89:32:cc:31:0a: 56:7e:74:f3:9f:b7:46:63:76:d3:81:59:96:11:9a: c7:8f:e1:26:6c:d1:1d:6c:a9:5d:12:ce:36:5f:3a: 01:7f:49:73:40:8f:57:a0:06:d6:64:ed:48:92:4c: 5d:f8:30:87:54:39:8a:49:f7:84:49:f8:e3:b5:db: 66:b3:72:47:9f:4e:3d:d0:3d:f5:03:93:fd:50:55: 10:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:78:5C:C2:35:3C:91:3E:A7:37:EC:59:DE:40:5E:A7:DB:94:7F:6B X509v3 Authority Key Identifier: keyid:C7:CD:B4:EA:18:16:5E:59:82:D0:A9:19:FF:47:F7:26:76:E0:50:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:d0:d2:31:bf:fb:ea:d1:03:02:ee:c7:f9:f2:7a:ee:46:e5: fd:5b:72:2d:1e:fc:a0:ca:fc:73:e3:eb:24:aa:19:10:24:a3: 82:14:49:b8:d8:55:50:b5:2b:15:e2:84:d7:1e:c4:ee:95:99: be:ad:b5:24:52:15:0e:03:8c:22:24:8a:a0:13:69:38:03:9a: 9d:79:68:f9:4c:ca:9e:e1:5b:70:9b:af:6d:fb:52:4b:8f:cc: 68:25:e9:ac:92:3f:d7:e9:86:07:74:19:97:7c:37:51:bd:72: 34:be:11:18:9d:45:25:ba:18:88:d5:da:88:ac:48:75:80:b2: 95:14:45:5a:14:5f:d4:d6:1f:b5:35:68:94:d0:9c:ac:de:56: 0b:7e:8c:d0:0c:7a:14:7f:46:c7:50:78:d8:3c:ac:d5:5d:ec: 81:9e:00:56:dc:30:d0:a4:33:73:42:e6:80:a0:9d:30:01:27: 44:52:28:25:b4:31:cb:54:84:8d:69:d2:58:8b:5d:56:a9:48: ad:ed:05:c6:86:d3:4d:7b:56:c0:c8:45:62:b7:c6:38:cf:f2: 16:c2:7b:7b:30:5b:a6:7b:34:c1:15:25:ba:44:41:df:ce:3a: 34:e8:44:3f:4c:39:27:d6:20:49:21:c3:37:93:49:2c:51:fc: 1b:72:de:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QkVGQTExMC8GA1UEBRMoQzdDREI0RUExODE2NUU1OTgyRDBBOTE5RkY0N0Y3MjY3 NkUwNTA3MzAeFw0yNTA0MjUwNzAzMzZaFw0yNTA1MDIwNzAzMzZaMBgxFjAUBgNV BAMTDTY4MGIzM2M4LTM2NWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCfY6lr/Ff6mchoPjr7/de+I/z7wrAyxY04U/HD0Aaa9LX951P0iN3ec4bC+Re CjZ13DgaOZBQAYLY2rzco26qYhKq54Gp4XcXhRMfzqhykioXpIj4Lz7q7gw/7733 v2/gUfy4vrlEQ6puGLk0/HcSWUQs2QXjPz08xllhMu0jcIaKJvhlD9nEM/H//uZZ XpwvpriLpjCdfLGhrliBKdiNAMuTltzQ5FlApXV1DlqJMswxClZ+dPOft0ZjdtOB WZYRmseP4SZs0R1sqV0SzjZfOgF/SXNAj1egBtZk7UiSTF34MIdUOYpJ94RJ+OO1 22azckefTj3QPfUDk/1QVRDZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaHhcwjU8 kT6nN+xZ3kBep9uUf2swHwYDVR0jBBgwFoAUx8206hgWXlmC0KkZ/0f3JnbgUHMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCRUZBLzE3MjU0NkJDMEIz NzExRjA4QzIzOTg2M0M0RjlBRTAyL3g4MjA2aGdXWGxtQzBLa1pfMGYzSm5iZ1VI TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveDgyMDZoZ1dYbG1DMEtrWl8wZjNKbmJnVUhNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC RUZBLzE3MjU0NkJDMEIzNzExRjA4QzIzOTg2M0M0RjlBRTAyL3g4MjA2aGdXWGxt QzBLa1pfMGYzSm5iZ1VITS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACTQ0jG/++rRAwLux/nyeu5G5f1bci0e/KDK/HPj6ySqGRAko4IUSbjY VVC1KxXihNcexO6Vmb6ttSRSFQ4DjCIkiqATaTgDmp15aPlMyp7hW3Cbr237UkuP zGgl6aySP9fphgd0GZd8N1G9cjS+ERidRSW6GIjV2oisSHWAspUURVoUX9TWH7U1 aJTQnKzeVgt+jNAMehR/RsdQeNg8rNVd7IGeAFbcMNCkM3NC5oCgnTABJ0RSKCW0 MctUhI1p0liLXVapSK3tBcaG0017VsDIRWK3xjjP8hbCe3swW6Z7NMEVJbpEQd/O OjToRD9MOSfWIEkhwzeTSSxR/Bty3kI= -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:05 2025 by rpki-client