$ rpki-client -vvf rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft File: a9bIzoghkMgWnoE2ReDt2bdX6xk.mft (raw, json) Hash identifier: 1a5Utc1itX3qPHH5nC1rsJ8Ojo8dRjsZ8ilYYHFDGOg= Subject key identifier: C8:77:AB:3C:1A:ED:23:39:B6:66:2D:8B:24:12:65:03:9A:78:A6:9B Authority key identifier: 6B:D6:C8:CE:88:21:90:C8:16:9E:81:36:45:E0:ED:D9:B7:57:EB:19 Certificate issuer: /CN=A91398E5/serialNumber=6BD6C8CE882190C8169E813645E0EDD9B757EB19 Certificate serial: 16F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9bIzoghkMgWnoE2ReDt2bdX6xk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft Manifest number: 2012 Signing time: Fri 04 Apr 2025 16:43:16 +0000 Manifest this update: Fri 04 Apr 2025 16:43:15 +0000 Manifest next update: Fri 11 Apr 2025 16:43:15 +0000 Files and hashes: 1: a9bIzoghkMgWnoE2ReDt2bdX6xk.crl (hash: V+GjYiZCVJiNrz+0RVZ7nwXkGJf6Gcj35+1kvHQkuTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.crl rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9bIzoghkMgWnoE2ReDt2bdX6xk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:43:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5876 (0x16f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91398E5 Validity Not Before: Apr 4 16:43:15 2025 GMT Not After : Apr 11 16:43:15 2025 GMT Subject: CN=67f00c23-0bb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:14:f3:a6:c2:72:bd:b6:8f:95:88:30:16:c2: 06:2f:0d:f7:78:a7:5f:85:88:77:d2:01:cb:e7:b0: b2:d8:6a:c2:19:45:40:61:97:81:aa:2b:e7:c6:b9: 02:cc:40:24:04:04:15:f9:48:9c:73:4f:ff:3a:34: af:8a:de:75:f8:70:35:c5:86:94:3e:52:69:3f:e7: f1:2e:92:13:63:6a:83:89:e7:5a:ea:5f:7e:ba:09: 94:dd:d7:80:07:89:60:ee:ee:9e:00:1f:03:6c:b5: e0:a2:6d:df:de:9b:9a:b0:e4:ab:b5:e9:d1:57:9f: fa:0c:78:45:b8:d8:f0:70:50:94:ab:13:6c:52:74: a8:39:dc:25:91:f4:be:44:a4:07:82:6f:3c:45:f5: ca:8e:b3:20:c5:f6:4c:c4:b5:a6:11:90:e4:3f:f8: 03:a2:41:20:32:ca:c4:36:50:45:5f:b3:a4:5a:40: 2e:2a:0e:3d:b5:f7:a4:79:5c:8f:0c:23:73:f4:d7: a4:78:dc:d7:4b:e6:e3:3e:ca:bc:e0:8c:b3:c7:9b: 13:1b:87:84:c1:63:c5:33:9a:95:95:bb:db:d3:de: cf:d9:52:8f:d0:2e:dc:f4:f4:3c:4b:a6:6a:1f:39: 8b:c7:07:4b:08:97:67:e1:93:77:06:ce:bb:bc:30: c1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:77:AB:3C:1A:ED:23:39:B6:66:2D:8B:24:12:65:03:9A:78:A6:9B X509v3 Authority Key Identifier: keyid:6B:D6:C8:CE:88:21:90:C8:16:9E:81:36:45:E0:ED:D9:B7:57:EB:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9bIzoghkMgWnoE2ReDt2bdX6xk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:76:d7:83:0e:b5:8d:ad:d2:1c:94:fc:81:7d:03:79:dd:b5: b4:29:87:09:e4:a3:b9:26:77:d7:5d:da:66:24:01:ca:a1:16: 41:75:7b:bc:ca:b5:3e:3a:e1:1f:49:f5:4e:71:24:56:bc:17: 5c:46:df:6d:f4:a4:7e:49:b1:b9:8a:8c:c9:22:b4:7b:fb:e4: b5:cb:dc:ca:f1:c4:bf:cf:74:41:02:e7:ee:2b:9d:6b:c7:3c: 04:b0:e7:e6:c1:13:53:02:55:34:70:32:c3:b1:0a:8e:39:fc: ad:e4:94:66:86:e6:bd:50:86:1d:34:09:da:fa:a0:80:6a:ee: 50:17:3a:a3:79:60:52:81:22:53:d4:76:85:78:12:70:15:05: f0:ed:13:8e:21:24:56:ba:31:34:a8:fb:1e:93:e5:8d:c4:03: 75:af:a3:f6:49:c4:c5:d7:ef:32:04:2a:15:bd:71:73:aa:de: 70:2f:62:61:f8:d0:77:ce:86:1f:b9:32:6a:90:27:28:c1:de: 67:e3:73:a2:bf:f8:27:7d:bb:8a:46:20:58:64:1f:09:7d:85: cf:25:40:a3:66:ef:22:34:40:81:77:73:ee:b2:df:37:a6:f1: 2d:f7:ea:5f:04:ee:65:f4:7b:2a:50:25:7b:54:ea:26:b4:8d: 67:d9:57:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk4RTUxMTAvBgNVBAUTKDZCRDZDOENFODgyMTkwQzgxNjlFODEzNjQ1RTBFREQ5 Qjc1N0VCMTkwHhcNMjUwNDA0MTY0MzE1WhcNMjUwNDExMTY0MzE1WjAYMRYwFAYD VQQDEw02N2YwMGMyMy0wYmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhTzpsJyvbaPlYgwFsIGLw33eKdfhYh30gHL57Cy2GrCGUVAYZeBqivnxrkC zEAkBAQV+Uicc0//OjSvit51+HA1xYaUPlJpP+fxLpITY2qDieda6l9+ugmU3deA B4lg7u6eAB8DbLXgom3f3puasOSrtenRV5/6DHhFuNjwcFCUqxNsUnSoOdwlkfS+ RKQHgm88RfXKjrMgxfZMxLWmEZDkP/gDokEgMsrENlBFX7OkWkAuKg49tfekeVyP DCNz9NekeNzXS+bjPsq84Iyzx5sTG4eEwWPFM5qVlbvb097P2VKP0C7c9PQ8S6Zq HzmLxwdLCJdn4ZN3Bs67vDDB3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMh3qzwa 7SM5tmYtiyQSZQOaeKabMB8GA1UdIwQYMBaAFGvWyM6IIZDIFp6BNkXg7dm3V+sZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOThFNS83ODQwRDk1RUU0 OTExMUU3OTFCRTE4NjlDNEY5QUUwMi9hOWJJem9naGtNZ1dub0UyUmVEdDJiZFg2 eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E5Ykl6b2doa01nV25vRTJSZUR0MmJkWDZ4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OThFNS83ODQwRDk1RUU0OTExMUU3OTFCRTE4NjlDNEY5QUUwMi9hOWJJem9naGtN Z1dub0UyUmVEdDJiZFg2eGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKdteDDrWNrdIclPyBfQN53bW0KYcJ5KO5JnfXXdpmJAHKoRZBdXu8 yrU+OuEfSfVOcSRWvBdcRt9t9KR+SbG5iozJIrR7++S1y9zK8cS/z3RBAufuK51r xzwEsOfmwRNTAlU0cDLDsQqOOfyt5JRmhua9UIYdNAna+qCAau5QFzqjeWBSgSJT 1HaFeBJwFQXw7ROOISRWujE0qPsek+WNxAN1r6P2ScTF1+8yBCoVvXFzqt5wL2Jh +NB3zoYfuTJqkCcowd5n43Oiv/gnfbuKRiBYZB8JfYXPJUCjZu8iNECBd3Pust83 pvEt9+pfBO5l9HsqUCV7VOomtI1n2Vcw -----END CERTIFICATE-----Generated at Sat Apr 5 22:59:19 2025 by rpki-client