$ rpki-client -vvf rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft File: 5LOuPtIxeiPhm9egMr766tU3J9M.mft (raw, json) Hash identifier: bRCg+D8seX730CYOSha2OZCK+DuaR5mryDr6M07Fcec= Subject key identifier: 2F:B5:9A:93:47:93:AE:3E:F4:B4:CE:8F:9D:85:8F:DD:AC:05:69:F2 Authority key identifier: E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3 Certificate issuer: /CN=A91298E0/serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3 Certificate serial: 3468 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft Manifest number: 3468 Signing time: Fri 04 Apr 2025 14:42:23 +0000 Manifest this update: Fri 04 Apr 2025 14:42:22 +0000 Manifest next update: Fri 11 Apr 2025 14:42:22 +0000 Files and hashes: 1: 5LOuPtIxeiPhm9egMr766tU3J9M.crl (hash: /nspsxClXaWNi1cmB34XHXoCnX8mRLxtkQWt817+hu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:42:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13416 (0x3468) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91298E0 Validity Not Before: Apr 4 14:42:22 2025 GMT Not After : Apr 11 14:42:22 2025 GMT Subject: CN=67efefcf-ccfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fe:4d:cd:81:d6:cb:27:6a:23:b6:87:fb:cc: f5:b5:6f:e6:89:79:48:18:1d:1c:84:d1:bc:20:fd: 8b:c3:cc:1b:71:49:64:1c:06:42:d9:08:13:5a:be: 78:8a:2b:80:1b:c8:55:2f:24:c6:ce:5d:cf:79:dd: bc:ca:2f:13:e8:a2:ae:78:0f:de:c6:5a:64:fe:fd: 28:44:a1:6e:f2:22:64:d1:ec:a5:d5:70:1d:c2:92: 7a:c5:52:5b:62:b2:75:b9:09:2c:6d:1c:c5:65:43: 16:de:5d:8a:69:d8:8d:fb:eb:d6:ca:70:c6:84:8b: 31:a2:84:f7:9d:ff:68:7a:0e:99:42:52:a8:a6:7c: 56:d4:e5:a7:b4:28:5c:46:9a:62:51:53:e4:92:9e: 26:ce:e4:21:59:69:20:f0:a1:ce:b0:b0:ff:28:c6: a5:f4:f2:c6:40:f9:1f:bc:8e:f4:78:c3:c8:d3:17: 06:37:be:9e:39:be:cb:1f:d8:4c:17:c0:c1:11:cf: 20:1e:82:54:23:b6:b4:1f:1b:fe:9a:17:25:92:ef: 20:d9:7a:60:91:93:28:5a:6d:7c:2a:e2:19:79:96: cd:26:f2:ee:51:eb:67:bf:16:a2:ee:2a:ec:6e:fd: e0:05:48:75:f6:31:1c:f0:33:58:5c:83:c4:d4:51: 06:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B5:9A:93:47:93:AE:3E:F4:B4:CE:8F:9D:85:8F:DD:AC:05:69:F2 X509v3 Authority Key Identifier: keyid:E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:9f:69:e4:17:30:63:33:a4:af:b9:0a:9e:f4:6e:45:ac:5a: 34:44:4a:34:e5:5a:1f:a2:61:42:fc:2f:63:50:aa:ad:33:40: dd:24:dd:c7:e2:3d:eb:40:52:49:e8:e0:ed:1b:5c:69:42:00: 1f:29:4c:be:16:c9:b9:de:e1:81:ef:ca:63:f3:3b:d2:94:da: 3e:49:7e:f9:7f:f8:c3:e6:c7:7d:fd:bc:40:2e:07:3f:5d:37: a9:4e:46:34:91:9a:9c:6a:28:f2:8f:d3:65:9e:b9:28:16:e6: da:70:f6:6f:3f:c8:ce:35:75:f6:07:61:5f:46:46:06:24:7c: 9f:ac:c4:7e:ff:a6:77:64:36:0a:ca:a9:f7:2c:84:b2:5e:0c: e8:43:93:db:4c:f2:8e:f0:da:31:34:6f:58:8a:d1:7d:d5:30: 43:b9:0e:c7:8d:15:d7:a5:17:19:b2:a7:f5:af:7c:60:af:c1: 61:60:ee:f6:92:44:a7:43:a6:c7:ea:f1:20:1d:8e:6e:a2:96: b0:2f:76:9d:3b:ae:52:10:77:53:ae:18:6e:ea:b9:d2:e6:6b: b1:56:c2:1f:59:65:ae:9a:18:09:33:8b:8d:5f:29:55:a7:27: c9:f6:82:05:16:5f:f1:6f:dc:bd:4f:79:28:e9:0f:74:7c:57: d9:12:c0:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk4RTAxMTAvBgNVBAUTKEU0QjNBRTNFRDIzMTdBMjNFMTlCRDdBMDMyQkVGQUVB RDUzNzI3RDMwHhcNMjUwNDA0MTQ0MjIyWhcNMjUwNDExMTQ0MjIyWjAYMRYwFAYD VQQDEw02N2VmZWZjZi1jY2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuf5NzYHWyydqI7aH+8z1tW/miXlIGB0chNG8IP2Lw8wbcUlkHAZC2QgTWr54 iiuAG8hVLyTGzl3Ped28yi8T6KKueA/exlpk/v0oRKFu8iJk0eyl1XAdwpJ6xVJb YrJ1uQksbRzFZUMW3l2KadiN++vWynDGhIsxooT3nf9oeg6ZQlKopnxW1OWntChc RppiUVPkkp4mzuQhWWkg8KHOsLD/KMal9PLGQPkfvI70eMPI0xcGN76eOb7LH9hM F8DBEc8gHoJUI7a0Hxv+mhclku8g2XpgkZMoWm18KuIZeZbNJvLuUetnvxai7irs bv3gBUh19jEc8DNYXIPE1FEGMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+1mpNH k64+9LTOj52Fj92sBWnyMB8GA1UdIwQYMBaAFOSzrj7SMXoj4ZvXoDK++urVNyfT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOThFMC9EQzFFRkI0QTFE OTAxMUUyQjU3QUU3RjAwOEIwMkNEMi81TE91UHRJeGVpUGhtOWVnTXI3NjZ0VTNK OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVMT3VQdEl4ZWlQaG05ZWdNcjc2NnRVM0o5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OThFMC9EQzFFRkI0QTFEOTAxMUUyQjU3QUU3RjAwOEIwMkNEMi81TE91UHRJeGVp UGhtOWVnTXI3NjZ0VTNKOU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNn2nkFzBjM6SvuQqe9G5FrFo0REo05VofomFC/C9jUKqtM0DdJN3H 4j3rQFJJ6ODtG1xpQgAfKUy+Fsm53uGB78pj8zvSlNo+SX75f/jD5sd9/bxALgc/ XTepTkY0kZqcaijyj9NlnrkoFubacPZvP8jONXX2B2FfRkYGJHyfrMR+/6Z3ZDYK yqn3LISyXgzoQ5PbTPKO8NoxNG9YitF91TBDuQ7HjRXXpRcZsqf1r3xgr8FhYO72 kkSnQ6bH6vEgHY5uopawL3adO65SEHdTrhhu6rnS5muxVsIfWWWumhgJM4uNXylV pyfJ9oIFFl/xb9y9T3ko6Q90fFfZEsCJ -----END CERTIFICATE-----Generated at Fri Apr 4 22:00:50 2025 by rpki-client