$ rpki-client -vvf rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft File: bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft (raw, json) Hash identifier: 1+oIhfBIA7UjZAnt8wscyBiIh9AqWCpW7nly7usqD/Q= Subject key identifier: 0E:DB:73:8D:29:E7:3F:5A:7E:D6:4E:BC:81:9C:BF:3F:72:6B:E6:73 Authority key identifier: 6C:05:EE:AF:3F:68:70:41:D5:9A:49:BA:17:09:B8:30:32:B7:4C:DC Certificate issuer: /CN=A9119010/serialNumber=6C05EEAF3F687041D59A49BA1709B83032B74CDC Certificate serial: 0C25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft Manifest number: 0C22 Signing time: Sun 20 Apr 2025 18:30:36 +0000 Manifest this update: Sun 20 Apr 2025 18:30:36 +0000 Manifest next update: Sun 27 Apr 2025 18:30:36 +0000 Files and hashes: 1: bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl (hash: DB88K8Vd9vm4ych40tgyZNSrTLWk7HcJu92a4763Ntw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 18:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3109 (0xc25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119010, serialNumber=6C05EEAF3F687041D59A49BA1709B83032B74CDC Validity Not Before: Apr 20 18:30:36 2025 GMT Not After : Apr 27 18:30:36 2025 GMT Subject: CN=68053d4c-0d3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:16:2c:18:c0:6a:5f:49:cd:d6:df:cb:63:35: e2:53:7d:59:a0:6a:64:ae:d6:8f:7c:7f:fc:55:8b: 99:67:cb:53:79:45:19:a1:63:0a:4c:ba:9c:04:63: 87:75:d2:d0:89:90:f9:e4:be:12:59:42:26:14:33: ba:d5:9f:ec:7a:e1:e0:df:c3:e6:5a:5a:3d:6b:37: db:05:cf:fe:ab:be:b4:b1:1a:7f:95:13:7f:c8:d8: c8:8a:8e:9a:8b:0c:95:02:e2:5c:41:8f:8a:7d:d8: 37:f4:bc:0b:13:55:6a:65:48:9a:05:73:9c:f8:f1: 97:39:14:d2:59:1c:6c:76:67:a8:b1:c8:82:d5:06: 8e:95:88:9d:98:c0:ee:3d:62:68:d3:06:c6:27:fa: 9d:41:25:10:59:62:d3:c5:79:f2:ae:f6:21:7b:ae: a0:ed:41:2f:81:f3:45:05:3b:40:e6:fa:d0:2b:13: 9f:44:08:d0:37:c9:2c:24:9c:9e:2c:e6:14:e7:79: a0:d5:fd:e3:45:a8:31:b9:4c:ec:c6:98:3e:cb:d7: 1f:ac:21:d5:69:c6:7f:b5:96:15:6c:06:6a:d4:12: cb:0d:89:1a:9a:61:e7:8d:86:a1:70:bf:65:f3:0a: 55:c3:7c:b9:1f:a1:a9:ef:4f:81:64:32:3b:13:47: f9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:DB:73:8D:29:E7:3F:5A:7E:D6:4E:BC:81:9C:BF:3F:72:6B:E6:73 X509v3 Authority Key Identifier: keyid:6C:05:EE:AF:3F:68:70:41:D5:9A:49:BA:17:09:B8:30:32:B7:4C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:12:b8:41:c7:cb:96:0c:43:f2:60:21:5c:00:dd:a3:12:4b: 77:32:e7:ae:2b:55:7d:37:1e:c2:56:01:c3:ab:2b:2e:00:ed: f6:09:a3:8f:21:c0:ca:40:8b:4a:30:14:57:e0:36:41:78:4f: 43:43:bb:ca:69:76:05:64:2e:55:c5:6f:23:06:98:8f:3b:34: 6e:0c:c2:5a:f2:41:46:9f:1e:10:24:6b:9f:24:e4:37:b6:ca: 32:52:52:a8:cb:6d:4a:35:f1:da:41:35:aa:c7:80:c7:c6:f9: 5c:4c:07:6c:d3:7c:05:a8:95:71:7b:b4:3f:ab:e8:b3:78:8b: 79:53:bf:72:bd:6a:23:18:66:5c:85:fb:68:f6:ca:c0:28:3b: 59:d8:2c:1b:79:5a:6c:86:23:7d:0d:f2:41:28:ed:90:aa:2e: d3:22:bc:1e:ae:a1:bf:39:87:4e:09:ef:b7:c1:93:b7:24:70: 1f:fc:41:15:4a:40:07:43:0f:1c:e2:0a:d9:00:22:24:b8:ec: ff:75:38:b7:c1:6b:b7:4a:84:fb:b8:19:71:2b:e3:cd:ab:3f: 0c:73:df:4c:7a:de:a3:cd:97:c3:b7:c5:b2:b5:5c:71:c2:f2: 63:e0:d2:de:7c:82:b7:6c:49:ab:ad:9c:38:35:ea:86:bb:71: 3e:f4:b6:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkwMTAxMTAvBgNVBAUTKDZDMDVFRUFGM0Y2ODcwNDFENTlBNDlCQTE3MDlCODMw MzJCNzRDREMwHhcNMjUwNDIwMTgzMDM2WhcNMjUwNDI3MTgzMDM2WjAYMRYwFAYD VQQDEw02ODA1M2Q0Yy0wZDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBYsGMBqX0nN1t/LYzXiU31ZoGpkrtaPfH/8VYuZZ8tTeUUZoWMKTLqcBGOH ddLQiZD55L4SWUImFDO61Z/seuHg38PmWlo9azfbBc/+q760sRp/lRN/yNjIio6a iwyVAuJcQY+Kfdg39LwLE1VqZUiaBXOc+PGXORTSWRxsdmeosciC1QaOlYidmMDu PWJo0wbGJ/qdQSUQWWLTxXnyrvYhe66g7UEvgfNFBTtA5vrQKxOfRAjQN8ksJJye LOYU53mg1f3jRagxuUzsxpg+y9cfrCHVacZ/tZYVbAZq1BLLDYkammHnjYahcL9l 8wpVw3y5H6Gp70+BZDI7E0f5NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7bc40p 5z9aftZOvIGcvz9ya+ZzMB8GA1UdIwQYMBaAFGwF7q8/aHBB1ZpJuhcJuDAyt0zc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTAxMC82QTdFOTQwQTBD M0ExMUVBOTM1NTdDNzlDNEY5QUUwMi9iQVh1cno5b2NFSFZta202RndtNE1ESzNU TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JBWHVyejlvY0VIVm1rbTZGd200TURLM1ROdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTAxMC82QTdFOTQwQTBDM0ExMUVBOTM1NTdDNzlDNEY5QUUwMi9iQVh1cno5b2NF SFZta202RndtNE1ESzNUTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWErhBx8uWDEPyYCFcAN2jEkt3MueuK1V9Nx7CVgHDqysuAO32CaOP IcDKQItKMBRX4DZBeE9DQ7vKaXYFZC5VxW8jBpiPOzRuDMJa8kFGnx4QJGufJOQ3 tsoyUlKoy21KNfHaQTWqx4DHxvlcTAds03wFqJVxe7Q/q+izeIt5U79yvWojGGZc hfto9srAKDtZ2CwbeVpshiN9DfJBKO2Qqi7TIrwerqG/OYdOCe+3wZO3JHAf/EEV SkAHQw8c4grZACIkuOz/dTi3wWu3SoT7uBlxK+PNqz8Mc99Met6jzZfDt8WytVxx wvJj4NLefIK3bEmrrZw4NeqGu3E+9Lb0 -----END CERTIFICATE-----Generated at Tue Apr 22 19:12:41 2025 by rpki-client