$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft File: E7lE6lgzzbdBH9TsaqHJYs87CIA.mft (raw, json) Hash identifier: 6irksgfm+VIjlqsUGlO3VM0fvketaUVx+YrUYBr0qtQ= Subject key identifier: D0:A6:81:60:BE:3D:02:53:53:A8:22:6D:5B:28:E8:96:DC:40:7C:92 Authority key identifier: 13:B9:44:EA:58:33:CD:B7:41:1F:D4:EC:6A:A1:C9:62:CF:3B:08:80 Certificate issuer: /CN=A91FCF44/serialNumber=13B944EA5833CDB7411FD4EC6AA1C962CF3B0880 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft Manifest number: 4D Signing time: Fri 25 Apr 2025 05:38:48 +0000 Manifest this update: Fri 25 Apr 2025 05:38:47 +0000 Manifest next update: Fri 02 May 2025 05:38:47 +0000 Files and hashes: 1: E7lE6lgzzbdBH9TsaqHJYs87CIA.crl (hash: OQKx4TWEVAO0sJQAefof3njA7OxvvF8SaosgY/KKyX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.crl rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:38:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCF44, serialNumber=13B944EA5833CDB7411FD4EC6AA1C962CF3B0880 Validity Not Before: Apr 25 05:38:47 2025 GMT Not After : May 2 05:38:47 2025 GMT Subject: CN=680b1fe7-d09f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:56:73:f0:e2:5f:3d:32:03:6a:20:2a:86:0d: 54:5a:eb:dd:b4:0c:1c:52:44:92:03:a6:d6:47:97: ff:14:0f:80:01:23:61:40:77:f0:40:84:28:27:35: 02:45:28:da:44:7e:7b:5e:8f:db:43:65:fa:87:c7: af:0d:93:8b:cf:54:56:79:69:25:85:e5:c2:e4:b4: 65:9e:f1:d7:78:62:89:01:31:35:81:15:77:08:c9: 45:16:be:8b:8c:27:d7:39:b5:37:32:26:21:32:d3: cb:34:b8:3d:4c:5c:50:3e:6c:d9:e8:5e:3b:fd:9a: e6:e1:df:74:ce:1b:49:ba:fc:d6:32:7d:20:26:96: 92:86:3d:35:49:7b:98:72:9b:8f:02:91:35:43:3c: 27:de:c3:28:f8:48:55:79:10:93:86:33:2c:ec:19: 68:00:98:b7:44:92:96:bf:5e:bc:b5:fb:fe:cb:1f: da:c9:7d:aa:cc:f7:a9:c5:9c:85:34:81:53:23:e4: 6a:31:f4:b1:3a:23:17:a1:c4:dd:c7:ce:d6:be:67: 70:1f:bd:3d:71:01:bc:b3:f9:ef:4a:c2:8b:32:dc: 99:e7:5d:a7:93:48:cf:ac:94:5c:3b:45:ff:47:a9: 90:81:e8:8a:b4:d7:99:8b:38:f4:95:2c:19:b1:20: 41:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A6:81:60:BE:3D:02:53:53:A8:22:6D:5B:28:E8:96:DC:40:7C:92 X509v3 Authority Key Identifier: keyid:13:B9:44:EA:58:33:CD:B7:41:1F:D4:EC:6A:A1:C9:62:CF:3B:08:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:6b:d0:d8:bd:96:39:8a:00:1b:02:8d:7d:41:ee:0f:50:36: 9c:2a:5b:99:0e:af:90:e7:9a:a2:dd:28:9c:b0:86:0d:f9:96: 4f:b4:2b:66:be:12:9f:7d:8f:fe:03:8c:33:12:a2:db:8d:51: 30:c3:e7:26:7a:23:91:98:12:06:43:2c:a8:ba:ee:c6:31:1f: 43:48:e7:62:ef:1f:ec:a9:96:e3:db:ab:4c:93:fc:cb:b7:76: 3f:cb:6e:a8:7a:bc:3f:14:17:0d:b0:f8:fb:0b:71:10:7f:72: 43:05:38:69:a6:ed:e7:70:93:0d:0c:c3:7f:e9:ac:8c:0e:81: 2c:14:2c:6d:8d:54:24:ad:48:00:26:2e:53:89:46:03:29:99: a7:00:7a:36:6e:f0:1c:ac:8c:f2:62:6b:1b:f7:59:47:bb:5e: f7:ed:23:13:10:4a:32:22:1d:db:eb:86:54:bc:1d:81:07:c3: d0:9f:dc:28:47:42:42:19:7a:26:aa:04:c0:0a:b0:f3:c6:11: bc:8f:62:9c:a1:70:d9:8b:72:7f:42:5e:97:57:60:66:9c:2d: 61:63:be:2b:ee:06:34:28:48:bf:59:02:59:bd:6b:7f:83:8f: f7:59:cf:d8:f2:ce:16:dc:5a:38:65:ff:11:90:b3:b3:69:ed: a0:d0:d1:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Q0Y0NDExMC8GA1UEBRMoMTNCOTQ0RUE1ODMzQ0RCNzQxMUZENEVDNkFBMUM5NjJD RjNCMDg4MDAeFw0yNTA0MjUwNTM4NDdaFw0yNTA1MDIwNTM4NDdaMBgxFjAUBgNV BAMTDTY4MGIxZmU3LWQwOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6VnPw4l89MgNqICqGDVRa6920DBxSRJIDptZHl/8UD4ABI2FAd/BAhCgnNQJF KNpEfntej9tDZfqHx68Nk4vPVFZ5aSWF5cLktGWe8dd4YokBMTWBFXcIyUUWvouM J9c5tTcyJiEy08s0uD1MXFA+bNnoXjv9mubh33TOG0m6/NYyfSAmlpKGPTVJe5hy m48CkTVDPCfewyj4SFV5EJOGMyzsGWgAmLdEkpa/Xry1+/7LH9rJfarM96nFnIU0 gVMj5Gox9LE6IxehxN3Hzta+Z3AfvT1xAbyz+e9Kwosy3JnnXaeTSM+slFw7Rf9H qZCB6Iq015mLOPSVLBmxIEGxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0KaBYL49 AlNTqCJtWyjoltxAfJIwHwYDVR0jBBgwFoAUE7lE6lgzzbdBH9TsaqHJYs87CIAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDRjQ0L0UyMTlDNjM4QUUx NTExRUZCMzAyOTgzRUM0RjlBRTAyL0U3bEU2bGd6emJkQkg5VHNhcUhKWXM4N0NJ QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvRTdsRTZsZ3p6YmRCSDlUc2FxSEpZczg3Q0lBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD RjQ0L0UyMTlDNjM4QUUxNTExRUZCMzAyOTgzRUM0RjlBRTAyL0U3bEU2bGd6emJk Qkg5VHNhcUhKWXM4N0NJQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGBr0Ni9ljmKABsCjX1B7g9QNpwqW5kOr5DnmqLdKJywhg35lk+0K2a+ Ep99j/4DjDMSotuNUTDD5yZ6I5GYEgZDLKi67sYxH0NI52LvH+ypluPbq0yT/Mu3 dj/Lbqh6vD8UFw2w+PsLcRB/ckMFOGmm7edwkw0Mw3/prIwOgSwULG2NVCStSAAm LlOJRgMpmacAejZu8BysjPJiaxv3WUe7XvftIxMQSjIiHdvrhlS8HYEHw9Cf3ChH QkIZeiaqBMAKsPPGEbyPYpyhcNmLcn9CXpdXYGacLWFjvivuBjQoSL9ZAlm9a3+D j/dZz9jyzhbcWjhl/xGQs7Np7aDQ0ZY= -----END CERTIFICATE-----Generated at Sat Apr 26 12:32:59 2025 by rpki-client