$ rpki-client -vvf rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft File: E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft (raw, json) Hash identifier: 08kMvIsaTYGUN926E+W9X5U3B1KhCD8k49iPJNpg8QM= Subject key identifier: 83:BF:AF:98:B6:DB:CC:4D:5A:41:AB:46:E9:91:A3:CF:F8:EE:9E:07 Authority key identifier: 13:8F:9A:8C:F2:07:DA:00:8B:40:1C:6D:E8:D9:13:10:FE:25:EA:4C Certificate issuer: /CN=A913F8B5/serialNumber=138F9A8CF207DA008B401C6DE8D91310FE25EA4C Certificate serial: 0513 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft Manifest number: 050C Signing time: Thu 10 Apr 2025 23:35:15 +0000 Manifest this update: Thu 10 Apr 2025 23:35:15 +0000 Manifest next update: Thu 17 Apr 2025 23:35:15 +0000 Files and hashes: 1: E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl (hash: KeyAC5mnT1wcmlmWaeT9obFIkybrFOkZ+iOpdV1LikI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 23:35:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1299 (0x513) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F8B5, serialNumber=138F9A8CF207DA008B401C6DE8D91310FE25EA4C Validity Not Before: Apr 10 23:35:15 2025 GMT Not After : Apr 17 23:35:15 2025 GMT Subject: CN=67f855b3-93c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:70:45:b9:cf:65:43:0d:88:c6:da:5f:11:8c: cf:80:80:32:34:e8:a0:37:24:d1:ac:62:83:ae:d7: 25:ef:d9:d9:df:73:8a:c1:1e:61:e4:be:ef:06:4a: 9c:20:3a:70:41:c4:60:2c:c7:ce:be:ce:00:52:ca: d6:ba:e5:7b:10:2e:45:b2:07:57:a3:b3:46:b9:29: 61:85:18:ed:c3:d2:08:02:48:ca:e1:5a:8f:43:c7: af:2c:59:00:be:52:8b:16:55:7c:92:9f:cd:ef:4b: c6:b8:6f:f8:c5:63:e3:3d:1e:0d:1f:b7:48:0d:d0: 3f:de:e8:5e:91:b9:76:0b:4f:71:3e:28:11:f5:30: 2c:fd:19:2f:dc:0c:23:6c:bd:a2:4c:8c:69:11:44: 88:00:46:2a:5a:aa:54:1d:c6:fc:d9:bd:2a:6d:c3: 8d:4b:af:0a:76:2d:54:e0:6c:10:25:b5:e5:ef:31: 87:8a:f3:d3:e5:13:6e:2d:ad:b4:39:93:52:32:0c: f4:89:dc:02:14:37:92:56:4a:84:6e:aa:3f:03:f0: 3e:43:3e:41:28:c7:06:de:0c:71:13:b8:46:06:7f: ca:17:7c:48:32:ee:67:22:63:a7:d5:14:f1:41:95: f8:49:0e:c0:09:63:40:8d:14:5f:ec:1f:36:6b:0b: c0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:BF:AF:98:B6:DB:CC:4D:5A:41:AB:46:E9:91:A3:CF:F8:EE:9E:07 X509v3 Authority Key Identifier: keyid:13:8F:9A:8C:F2:07:DA:00:8B:40:1C:6D:E8:D9:13:10:FE:25:EA:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:d6:ef:4f:3a:bf:19:62:53:48:e2:1f:81:df:8e:25:71:21: f0:c8:42:76:75:6e:61:ca:a4:fe:6d:04:88:06:60:c7:1d:cf: 50:d3:b9:4b:55:95:ae:17:2a:36:04:3c:73:86:d3:21:6a:41: 06:c7:5d:16:8e:dd:75:85:ca:d6:98:77:95:c9:7e:a8:cb:86: c7:f5:82:db:e6:b8:8f:fd:c1:6a:89:26:b3:5b:49:21:40:d1: c1:29:b9:6b:4f:43:29:cf:41:77:3a:af:f1:9f:c3:82:a5:75: ef:17:69:53:61:f0:95:88:2a:14:35:6b:fa:d5:d9:68:7f:c7: 3e:c1:3a:84:c1:c7:f8:0a:37:76:f7:f9:4c:e6:70:9f:aa:19: 89:91:12:30:2f:36:da:89:fb:65:f0:42:59:6e:b8:90:d8:77: 06:e0:ca:92:cc:45:17:d8:f8:a4:2d:39:34:7a:be:24:88:ff: a0:28:39:b5:49:f2:9c:f1:bc:06:a2:9a:6e:c0:6d:f9:69:e7: 20:54:6e:0d:22:2b:f7:f6:ad:8b:e0:9f:5b:5d:5d:79:7f:4c: 2e:55:58:4d:1c:40:33:b3:26:0c:ea:77:f7:d0:f8:86:46:f4: ef:70:c7:96:6c:c8:5a:cf:59:d3:fe:4b:1a:41:e1:65:c2:6d: 7b:e0:e5:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y4QjUxMTAvBgNVBAUTKDEzOEY5QThDRjIwN0RBMDA4QjQwMUM2REU4RDkxMzEw RkUyNUVBNEMwHhcNMjUwNDEwMjMzNTE1WhcNMjUwNDE3MjMzNTE1WjAYMRYwFAYD VQQDEw02N2Y4NTViMy05M2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA03BFuc9lQw2IxtpfEYzPgIAyNOigNyTRrGKDrtcl79nZ33OKwR5h5L7vBkqc IDpwQcRgLMfOvs4AUsrWuuV7EC5FsgdXo7NGuSlhhRjtw9IIAkjK4VqPQ8evLFkA vlKLFlV8kp/N70vGuG/4xWPjPR4NH7dIDdA/3uhekbl2C09xPigR9TAs/Rkv3Awj bL2iTIxpEUSIAEYqWqpUHcb82b0qbcONS68Kdi1U4GwQJbXl7zGHivPT5RNuLa20 OZNSMgz0idwCFDeSVkqEbqo/A/A+Qz5BKMcG3gxxE7hGBn/KF3xIMu5nImOn1RTx QZX4SQ7ACWNAjRRf7B82awvAbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIO/r5i2 28xNWkGrRumRo8/47p4HMB8GA1UdIwQYMBaAFBOPmozyB9oAi0AcbejZExD+JepM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjhCNS8yMzlEMkE0MkZG RjkxMUVCQThGNzQzNjBDNEY5QUUwMi9FNC1halBJSDJnQ0xRQnh0Nk5rVEVQNGw2 a3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U0LWFqUElIMmdDTFFCeHQ2TmtURVA0bDZrdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjhCNS8yMzlEMkE0MkZGRjkxMUVCQThGNzQzNjBDNEY5QUUwMi9FNC1halBJSDJn Q0xRQnh0Nk5rVEVQNGw2a3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo1u9POr8ZYlNI4h+B344lcSHwyEJ2dW5hyqT+bQSIBmDHHc9Q07lL VZWuFyo2BDxzhtMhakEGx10Wjt11hcrWmHeVyX6oy4bH9YLb5riP/cFqiSazW0kh QNHBKblrT0Mpz0F3Oq/xn8OCpXXvF2lTYfCViCoUNWv61dlof8c+wTqEwcf4Cjd2 9/lM5nCfqhmJkRIwLzbaiftl8EJZbriQ2HcG4MqSzEUX2PikLTk0er4kiP+gKDm1 SfKc8bwGoppuwG35aecgVG4NIiv39q2L4J9bXV15f0wuVVhNHEAzsyYM6nf30PiG RvTvcMeWbMhaz1nT/ksaQeFlwm174OVD -----END CERTIFICATE-----Generated at Sat Apr 12 15:22:30 2025 by rpki-client