$ rpki-client -vvf rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft File: B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft (raw, json) Hash identifier: 89Ej2kCkolBLseYZ2D8rb5If5LSRX0DnTi9UzO37MAo= Subject key identifier: FE:5A:1C:96:14:2D:68:55:BE:06:73:A2:FD:1B:B2:6D:A7:A7:48:95 Authority key identifier: 07:FE:41:71:DD:50:DC:E7:B6:4F:76:99:89:67:A5:71:CF:93:C4:0B Certificate issuer: /CN=A911BFB0/serialNumber=07FE4171DD50DCE7B64F76998967A571CF93C40B Certificate serial: 0F38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft Manifest number: 10E5 Signing time: Wed 16 Apr 2025 17:33:29 +0000 Manifest this update: Wed 16 Apr 2025 17:33:29 +0000 Manifest next update: Wed 23 Apr 2025 17:33:29 +0000 Files and hashes: 1: B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.crl (hash: xoqhnREOeualGorbMVGK5gS/G/0U26k9XcWGbqYvdH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.crl rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 17:33:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3896 (0xf38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BFB0, serialNumber=07FE4171DD50DCE7B64F76998967A571CF93C40B Validity Not Before: Apr 16 17:33:29 2025 GMT Not After : Apr 23 17:33:29 2025 GMT Subject: CN=67ffe9e9-76fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f2:a9:eb:f1:6e:0b:78:78:5a:97:36:b0:90: 9c:e9:77:c8:f4:13:23:99:f9:11:33:4d:c6:68:11: 7d:5e:d9:42:be:0f:cf:85:32:21:04:18:57:a4:fe: a1:86:57:66:44:69:68:4a:09:6d:4e:12:e1:22:a8: 80:22:08:8b:ec:55:92:6d:97:00:d4:4a:5c:75:3b: a5:23:76:92:59:d1:2f:91:db:12:2d:be:f8:ee:ea: ae:5a:98:d0:ee:16:97:21:08:d6:17:6d:70:d3:36: a8:f7:29:73:e2:79:a6:b0:f5:05:c9:6e:0f:5e:b7: 96:f2:4d:f5:ba:36:12:63:51:c9:52:8f:18:cb:f6: 96:6f:35:0e:e9:54:e3:f7:0d:a5:83:e2:ce:37:ae: 17:13:01:8c:d9:11:af:eb:3e:20:3d:8b:dd:0b:c9: bd:64:8b:4f:ed:1c:88:ac:79:48:94:79:0c:0d:6a: cf:77:e1:61:c5:94:aa:68:87:61:d0:9c:0f:9a:47: 35:bb:17:64:d9:28:60:c9:e0:30:1e:47:16:65:f8: ba:2e:00:b2:17:23:0c:7b:af:e4:c2:b8:a3:8c:68: d5:a0:00:04:fa:a2:4a:ab:37:4c:b4:1a:04:21:6d: ae:c6:96:cb:bd:5b:51:0f:d1:86:92:d6:0b:e0:18: 01:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:5A:1C:96:14:2D:68:55:BE:06:73:A2:FD:1B:B2:6D:A7:A7:48:95 X509v3 Authority Key Identifier: keyid:07:FE:41:71:DD:50:DC:E7:B6:4F:76:99:89:67:A5:71:CF:93:C4:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:e2:9a:56:23:b6:1e:7c:5f:b2:f4:e5:d8:bc:f1:5f:28:cd: 97:ce:4c:42:40:77:19:ad:f1:c8:b0:6a:64:ed:4f:93:9e:df: ee:4e:15:21:d7:38:15:b1:4a:40:1e:6e:5f:07:3a:df:14:70: 01:87:df:79:66:43:96:35:df:f5:4f:d7:e1:e8:5a:c0:f4:4c: c6:97:4e:bf:fb:b7:07:4b:eb:51:7d:d9:77:18:49:ef:bc:c7: c8:25:75:b6:a8:d6:c6:aa:c0:44:d6:21:44:41:91:9c:76:61: 4c:1f:43:53:5f:1e:76:5a:5e:18:bc:09:42:4b:64:20:b6:5e: af:4f:ee:9e:84:fd:7d:e7:cd:f9:48:96:f9:d9:ca:15:c0:e3: 55:cd:f7:8f:c5:a6:08:7f:04:16:11:a6:81:d7:a5:bf:b5:d6: b6:a8:97:d3:fd:16:06:f3:3c:3a:76:71:52:ac:8f:c7:be:57: 37:3c:24:af:eb:62:7b:b8:c8:a8:00:1e:ad:2f:f1:5b:c4:06: 5b:6e:fd:db:27:42:d3:42:34:9e:b8:89:cc:22:05:7d:9f:e1: 6e:63:05:07:ee:74:ba:65:c2:55:7f:4f:6d:16:1d:be:41:2b: 57:8c:f7:73:70:ac:07:46:07:d8:3c:ca:5a:51:7f:31:4a:84: da:8c:39:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJGQjAxMTAvBgNVBAUTKDA3RkU0MTcxREQ1MERDRTdCNjRGNzY5OTg5NjdBNTcx Q0Y5M0M0MEIwHhcNMjUwNDE2MTczMzI5WhcNMjUwNDIzMTczMzI5WjAYMRYwFAYD VQQDEw02N2ZmZTllOS03NmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkvKp6/FuC3h4Wpc2sJCc6XfI9BMjmfkRM03GaBF9XtlCvg/PhTIhBBhXpP6h hldmRGloSgltThLhIqiAIgiL7FWSbZcA1EpcdTulI3aSWdEvkdsSLb747uquWpjQ 7haXIQjWF21w0zao9ylz4nmmsPUFyW4PXreW8k31ujYSY1HJUo8Yy/aWbzUO6VTj 9w2lg+LON64XEwGM2RGv6z4gPYvdC8m9ZItP7RyIrHlIlHkMDWrPd+FhxZSqaIdh 0JwPmkc1uxdk2ShgyeAwHkcWZfi6LgCyFyMMe6/kwrijjGjVoAAE+qJKqzdMtBoE IW2uxpbLvVtRD9GGktYL4BgBPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP5aHJYU LWhVvgZzov0bsm2np0iVMB8GA1UdIwQYMBaAFAf+QXHdUNzntk92mYlnpXHPk8QL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkZCMC8yMkMyNTE0NjZD QzIxMUU5QTBENkFGNjdDNEY5QUUwMi9CXzVCY2QxUTNPZTJUM2FaaVdlbGNjLVR4 QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JfNUJjZDFRM09lMlQzYVppV2VsY2MtVHhBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkZCMC8yMkMyNTE0NjZDQzIxMUU5QTBENkFGNjdDNEY5QUUwMi9CXzVCY2QxUTNP ZTJUM2FaaVdlbGNjLVR4QXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDN4ppWI7YefF+y9OXYvPFfKM2XzkxCQHcZrfHIsGpk7U+Tnt/uThUh 1zgVsUpAHm5fBzrfFHABh995ZkOWNd/1T9fh6FrA9EzGl06/+7cHS+tRfdl3GEnv vMfIJXW2qNbGqsBE1iFEQZGcdmFMH0NTXx52Wl4YvAlCS2Qgtl6vT+6ehP195835 SJb52coVwONVzfePxaYIfwQWEaaB16W/tda2qJfT/RYG8zw6dnFSrI/Hvlc3PCSv 62J7uMioAB6tL/FbxAZbbv3bJ0LTQjSeuInMIgV9n+FuYwUH7nS6ZcJVf09tFh2+ QStXjPdzcKwHRgfYPMpaUX8xSoTajDm2 -----END CERTIFICATE-----Generated at Fri Apr 18 13:51:05 2025 by rpki-client