$ rpki-client -vvf rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft File: 11KsJgWV3m0QKce5SPSUl-SD6s4.mft (raw, json) Hash identifier: my0PviyUVVZOf/My1I5u7gXy6ioRjj54dw4qlZFbze0= Subject key identifier: 34:2E:29:C4:F9:E0:93:B0:61:AC:B4:9F:FE:6E:54:06:16:0E:C0:FE Authority key identifier: D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE Certificate issuer: /CN=A91383B0/serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE Certificate serial: 2B93 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft Manifest number: 2B93 Signing time: Tue 22 Apr 2025 15:35:25 +0000 Manifest this update: Tue 22 Apr 2025 15:35:25 +0000 Manifest next update: Tue 29 Apr 2025 15:35:25 +0000 Files and hashes: 1: 11KsJgWV3m0QKce5SPSUl-SD6s4.crl (hash: ZlfidrjOGrl5TInriNa90HsRmn9x9j8Y+RNLeHVzDQ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 15:35:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11155 (0x2b93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383B0, serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE Validity Not Before: Apr 22 15:35:25 2025 GMT Not After : Apr 29 15:35:25 2025 GMT Subject: CN=6807b73d-69df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d3:69:2a:b7:7f:80:d3:54:e6:7c:68:fc:83: 54:3d:d4:c8:e3:64:2a:34:49:99:dc:77:b3:ee:3a: c7:a9:a7:ad:be:a3:ce:24:94:5e:e2:d1:9e:8c:8e: 36:09:14:89:95:9f:86:84:8d:b0:74:59:33:28:9e: 0c:ed:ba:19:83:81:bd:81:8f:8c:39:4d:15:06:35: 01:25:27:61:b1:3b:99:19:f3:8f:d9:33:2d:ac:66: bb:31:5f:41:33:d6:e1:d9:c6:44:bf:55:52:e1:89: 38:7d:9c:9a:0d:ff:50:23:84:24:07:e6:b6:00:f3: 39:a4:05:25:e4:03:46:53:b1:57:53:8d:c3:da:da: 6c:15:95:72:f6:1a:dd:22:ab:29:1c:c0:e3:67:e0: c3:ae:fd:5a:45:51:d2:94:bf:cf:ec:90:5c:50:9b: 22:97:dc:d7:26:e5:20:65:e6:0b:c1:d2:d0:87:0f: 70:74:cc:75:0b:31:37:b9:a5:14:91:6f:20:c9:62: 2d:50:c9:c1:fd:b9:68:6f:30:2f:de:0a:81:fc:97: 2f:8d:db:dd:8d:b5:ff:66:47:21:ec:db:8b:b3:9e: e0:eb:d6:df:8a:e5:97:2b:de:cf:a7:36:9b:a7:16: 10:4a:78:02:0c:11:bb:e1:7a:b4:3f:c3:57:ab:63: df:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2E:29:C4:F9:E0:93:B0:61:AC:B4:9F:FE:6E:54:06:16:0E:C0:FE X509v3 Authority Key Identifier: keyid:D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:1a:4b:68:ea:f2:e0:39:5a:09:9d:c1:57:a2:b9:39:b5:85: b6:3a:6d:30:a7:48:d2:6c:3a:ff:8f:d3:21:f1:14:d4:d2:67: e6:aa:b8:36:5f:08:a3:2c:d1:07:08:a7:c7:5f:36:af:5a:14: 05:f0:39:07:b7:90:20:41:3a:d1:30:82:31:eb:8f:ac:96:43: 2f:fc:a9:bd:ef:e8:6f:4f:e6:fb:a9:df:e3:12:fb:bd:22:b9: 98:82:27:b7:02:eb:e8:eb:c5:c5:74:d7:67:69:32:5f:f9:e9: d2:43:bf:51:8a:15:e5:23:ef:ee:58:a7:a5:21:a6:6d:d3:16: 84:f2:69:c6:84:ee:a9:ff:a8:8e:78:6a:cc:52:33:17:54:46: 66:cf:e9:38:de:77:44:6d:ea:26:c6:1c:9c:a9:60:33:b9:14: 4b:c5:17:4c:2f:83:b5:6c:83:90:29:da:fb:ee:dd:91:6e:7d: 41:34:5e:f0:3c:15:29:79:9a:4c:28:c6:37:75:f6:a3:e5:dc: ca:ce:15:ed:ea:55:01:0d:81:a5:e2:79:8f:88:2a:d1:20:47: 35:b9:62:55:35:b9:89:56:49:1e:44:aa:2d:66:9d:b6:16:d6: b0:a6:20:20:5c:80:dd:33:fc:9c:e4:9c:5c:7a:f4:d9:9f:32: 09:bd:ca:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzQjAxMTAvBgNVBAUTKEQ3NTJBQzI2MDU5NURFNkQxMDI5QzdCOTQ4RjQ5NDk3 RTQ4M0VBQ0UwHhcNMjUwNDIyMTUzNTI1WhcNMjUwNDI5MTUzNTI1WjAYMRYwFAYD VQQDEw02ODA3YjczZC02OWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9NpKrd/gNNU5nxo/INUPdTI42QqNEmZ3Hez7jrHqaetvqPOJJRe4tGejI42 CRSJlZ+GhI2wdFkzKJ4M7boZg4G9gY+MOU0VBjUBJSdhsTuZGfOP2TMtrGa7MV9B M9bh2cZEv1VS4Yk4fZyaDf9QI4QkB+a2APM5pAUl5ANGU7FXU43D2tpsFZVy9hrd IqspHMDjZ+DDrv1aRVHSlL/P7JBcUJsil9zXJuUgZeYLwdLQhw9wdMx1CzE3uaUU kW8gyWItUMnB/blobzAv3gqB/JcvjdvdjbX/Zkch7NuLs57g69bfiuWXK97Ppzab pxYQSngCDBG74Xq0P8NXq2PfwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQuKcT5 4JOwYay0n/5uVAYWDsD+MB8GA1UdIwQYMBaAFNdSrCYFld5tECnHuUj0lJfkg+rO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCMC8zRDNGRTlCNkRC QzIxMUUzOEY1NTE0NEY1OTExRUEzMi8xMUtzSmdXVjNtMFFLY2U1U1BTVWwtU0Q2 czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzExS3NKZ1dWM20wUUtjZTVTUFNVbC1TRDZzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNCMC8zRDNGRTlCNkRCQzIxMUUzOEY1NTE0NEY1OTExRUEzMi8xMUtzSmdXVjNt MFFLY2U1U1BTVWwtU0Q2czQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9Gkto6vLgOVoJncFXork5tYW2Om0wp0jSbDr/j9Mh8RTU0mfmqrg2 XwijLNEHCKfHXzavWhQF8DkHt5AgQTrRMIIx64+slkMv/Km97+hvT+b7qd/jEvu9 IrmYgie3Auvo68XFdNdnaTJf+enSQ79RihXlI+/uWKelIaZt0xaE8mnGhO6p/6iO eGrMUjMXVEZmz+k43ndEbeomxhycqWAzuRRLxRdML4O1bIOQKdr77t2Rbn1BNF7w PBUpeZpMKMY3dfaj5dzKzhXt6lUBDYGl4nmPiCrRIEc1uWJVNbmJVkkeRKotZp22 FtawpiAgXIDdM/yc5JxcevTZnzIJvcq6 -----END CERTIFICATE-----Generated at Tue Apr 22 23:05:45 2025 by rpki-client