$ rpki-client -vvf rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft File: 1l59EGxXG0LrbOL4iHLeery6-7g.mft (raw, json) Hash identifier: iQZ/7fw440PWEcf0srBUoetL2i1y/Y6QPm6Wqi2pMaI= Subject key identifier: 0E:9F:CF:EC:83:68:50:0B:5F:0E:53:C7:46:3E:8A:30:64:E0:FA:E5 Authority key identifier: D6:5E:7D:10:6C:57:1B:42:EB:6C:E2:F8:88:72:DE:7A:BC:BA:FB:B8 Certificate issuer: /CN=A913C34F/serialNumber=D65E7D106C571B42EB6CE2F88872DE7ABCBAFBB8 Certificate serial: 3245 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1l59EGxXG0LrbOL4iHLeery6-7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft Manifest number: 3245 Signing time: Sun 20 Apr 2025 15:23:29 +0000 Manifest this update: Sun 20 Apr 2025 15:23:29 +0000 Manifest next update: Sun 27 Apr 2025 15:23:29 +0000 Files and hashes: 1: 1l59EGxXG0LrbOL4iHLeery6-7g.crl (hash: jgDBq87HkAoHhQpI1vyJIkgysUjSbaQO/5m3JZq5m+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.crl rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1l59EGxXG0LrbOL4iHLeery6-7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 15:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12869 (0x3245) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C34F, serialNumber=D65E7D106C571B42EB6CE2F88872DE7ABCBAFBB8 Validity Not Before: Apr 20 15:23:29 2025 GMT Not After : Apr 27 15:23:29 2025 GMT Subject: CN=68051171-6432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:41:49:89:2e:ca:f3:8e:ba:f6:fe:05:98:c4: f4:70:d7:ca:1b:81:7b:de:41:88:46:fd:d7:00:9e: 24:85:3a:90:dd:db:63:de:02:29:89:c3:a0:65:fe: 33:a6:5b:9c:fb:5c:54:7a:56:0c:f9:5f:13:18:55: a9:9e:a1:44:80:35:7e:da:d9:90:20:b5:83:5a:61: bd:01:66:dc:ee:38:c9:db:b8:20:9f:7d:37:d8:08: 4a:c8:05:de:d7:57:75:2e:a0:be:c9:fb:63:f3:0b: f5:15:67:01:9c:d0:89:c6:3d:d7:d5:dc:d5:16:cc: 82:21:ce:75:e7:1d:a8:34:fd:50:a1:9c:da:f5:72: 00:fb:17:a2:ba:63:95:f5:29:47:0c:eb:ae:3a:71: cb:b1:9e:5e:79:2f:8c:20:a3:18:1f:0a:02:f8:91: 6f:72:44:42:6b:62:cb:c9:6d:ac:1c:16:82:bb:a5: e3:78:91:37:8f:17:0d:6f:71:aa:55:5e:5b:0d:17: 86:e8:42:b4:62:97:b5:18:f8:32:11:c2:2e:21:fa: d3:05:98:0f:7b:82:3b:ba:23:75:8a:d0:9b:b3:58: 26:29:69:8c:b4:29:44:b4:32:10:59:1a:c2:f4:c6: 85:ab:36:81:16:9e:bd:9c:3e:52:12:dc:71:45:00: fe:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9F:CF:EC:83:68:50:0B:5F:0E:53:C7:46:3E:8A:30:64:E0:FA:E5 X509v3 Authority Key Identifier: keyid:D6:5E:7D:10:6C:57:1B:42:EB:6C:E2:F8:88:72:DE:7A:BC:BA:FB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1l59EGxXG0LrbOL4iHLeery6-7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:e5:19:c7:8e:0d:9a:f2:63:83:20:c0:ca:3e:d7:2b:64:b9: 02:f6:78:c8:bb:0d:4f:d0:72:71:76:35:f0:76:28:c2:fa:b9: aa:54:ba:18:27:01:30:0e:4d:1f:13:1b:30:1d:1f:48:f1:72: ee:12:d3:c4:1c:4c:81:36:b0:fd:f3:c2:d7:81:48:f7:a7:55: 81:bf:cc:7c:94:46:76:a4:4e:a6:c0:83:cd:b7:bd:68:ea:a2: 6b:9f:7f:18:34:33:37:51:99:22:70:d1:d9:d7:f1:41:4d:bc: b4:7c:78:18:85:96:73:bf:19:54:45:6b:15:2e:d7:31:f8:0c: ff:bf:db:1b:d0:71:f6:e5:9f:b0:98:e3:51:c8:85:03:53:d8: cf:23:b7:89:f1:d4:b8:9f:e0:40:0b:0a:16:55:f8:a8:15:38: 23:2e:f1:3e:88:ee:13:46:88:88:fa:02:39:79:33:e6:1e:4c: 5a:57:10:08:55:b9:60:6f:c2:14:d4:76:0f:77:42:70:e3:85: c7:4f:02:d0:66:c5:1c:ba:5f:ca:17:a0:fe:d9:de:81:47:20: b3:92:4c:f9:a0:64:0d:98:26:bd:41:6f:ef:46:c6:e3:5c:bf: 3c:02:89:36:d5:5f:41:fe:fb:bb:12:91:ae:e8:91:7a:2d:e8: 56:ff:e0:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MzNEYxMTAvBgNVBAUTKEQ2NUU3RDEwNkM1NzFCNDJFQjZDRTJGODg4NzJERTdB QkNCQUZCQjgwHhcNMjUwNDIwMTUyMzI5WhcNMjUwNDI3MTUyMzI5WjAYMRYwFAYD VQQDEw02ODA1MTE3MS02NDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUFJiS7K84669v4FmMT0cNfKG4F73kGIRv3XAJ4khTqQ3dtj3gIpicOgZf4z pluc+1xUelYM+V8TGFWpnqFEgDV+2tmQILWDWmG9AWbc7jjJ27ggn3032AhKyAXe 11d1LqC+yftj8wv1FWcBnNCJxj3X1dzVFsyCIc515x2oNP1QoZza9XIA+xeiumOV 9SlHDOuuOnHLsZ5eeS+MIKMYHwoC+JFvckRCa2LLyW2sHBaCu6XjeJE3jxcNb3Gq VV5bDReG6EK0Ype1GPgyEcIuIfrTBZgPe4I7uiN1itCbs1gmKWmMtClEtDIQWRrC 9MaFqzaBFp69nD5SEtxxRQD+xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6fz+yD aFALXw5Tx0Y+ijBk4PrlMB8GA1UdIwQYMBaAFNZefRBsVxtC62zi+Ihy3nq8uvu4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzM0Ri8zNUZCRjVENDhB MDQxMUUyQjg4MjFEMDkzMjkyQjVFOC8xbDU5RUd4WEcwTHJiT0w0aUhMZWVyeTYt N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFsNTlFR3hYRzBMcmJPTDRpSExlZXJ5Ni03Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzM0Ri8zNUZCRjVENDhBMDQxMUUyQjg4MjFEMDkzMjkyQjVFOC8xbDU5RUd4WEcw THJiT0w0aUhMZWVyeTYtN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC5RnHjg2a8mODIMDKPtcrZLkC9njIuw1P0HJxdjXwdijC+rmqVLoY JwEwDk0fExswHR9I8XLuEtPEHEyBNrD988LXgUj3p1WBv8x8lEZ2pE6mwIPNt71o 6qJrn38YNDM3UZkicNHZ1/FBTby0fHgYhZZzvxlURWsVLtcx+Az/v9sb0HH25Z+w mONRyIUDU9jPI7eJ8dS4n+BACwoWVfioFTgjLvE+iO4TRoiI+gI5eTPmHkxaVxAI Vblgb8IU1HYPd0Jw44XHTwLQZsUcul/KF6D+2d6BRyCzkkz5oGQNmCa9QW/vRsbj XL88Aok21V9B/vu7EpGu6JF6LehW/+BO -----END CERTIFICATE-----Generated at Mon Apr 21 21:00:52 2025 by rpki-client