$ rpki-client -vvf rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft File: _3wGiSUYZz7M4Ea2pxfzU85TxQk.mft (raw, json) Hash identifier: HKzut3fRRvlEGRm79q3U8gLfPmZ3ly7bqQVVuwpaF2w= Subject key identifier: 34:33:EE:CF:43:41:B9:93:B8:B8:78:76:08:F5:33:A2:B6:6C:22:B9 Authority key identifier: FF:7C:06:89:25:18:67:3E:CC:E0:46:B6:A7:17:F3:53:CE:53:C5:09 Certificate issuer: /CN=A91476FE/serialNumber=FF7C06892518673ECCE046B6A717F353CE53C509 Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3wGiSUYZz7M4Ea2pxfzU85TxQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft Manifest number: 06 Signing time: Sat 29 Mar 2025 07:31:38 +0000 Manifest this update: Sat 29 Mar 2025 07:31:37 +0000 Manifest next update: Sat 05 Apr 2025 07:31:37 +0000 Files and hashes: 1: _3wGiSUYZz7M4Ea2pxfzU85TxQk.crl (hash: TpckM62N0qV0OOEB7N74kwL+p4FljNABfGFRrJW7J1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.crl rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3wGiSUYZz7M4Ea2pxfzU85TxQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91476FE Validity Not Before: Mar 29 07:31:37 2025 GMT Not After : Apr 5 07:31:37 2025 GMT Subject: CN=67e7a1da-4ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:13:90:19:24:51:24:ed:e0:4b:57:1a:08:f0: 4b:64:7f:06:fe:f3:bb:3e:67:2d:a6:68:08:11:e1: 64:ca:38:ab:0c:f4:81:6b:8e:dc:55:38:28:5b:4b: f6:30:29:47:de:19:65:bb:60:dd:ee:14:9b:23:d3: 28:1e:45:09:f3:f4:cf:cf:64:25:eb:f0:64:de:89: 0c:76:5c:4f:05:9c:72:8d:0c:31:da:dd:47:02:15: 2e:57:15:c8:88:35:7f:5a:62:97:e6:8e:cc:6e:e6: 34:18:55:7d:9c:8e:25:ea:5f:80:51:52:08:a8:1d: c0:7d:ff:19:50:b8:b2:05:26:1c:2b:49:ba:80:c8: 78:c3:d7:42:9b:68:5d:f4:30:f7:8f:06:4c:42:aa: b6:ad:b4:56:43:b5:93:1c:aa:3e:ef:29:3b:d5:67: ff:5b:ea:fc:21:05:f8:1c:0b:24:cf:25:68:01:d1: cc:ab:da:8c:d3:6b:57:bf:20:43:b5:e7:ad:a1:a3: f5:b0:df:0e:c5:86:9d:a7:94:2d:27:81:d5:aa:41: dc:c4:e2:96:c4:f4:de:ce:8e:78:4d:eb:ec:63:e1: ec:57:0b:32:ff:1e:a7:fe:61:a5:92:7f:3d:30:b3: 40:d4:7d:8b:f8:a6:8d:c8:c2:eb:41:38:cb:27:7e: 95:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:33:EE:CF:43:41:B9:93:B8:B8:78:76:08:F5:33:A2:B6:6C:22:B9 X509v3 Authority Key Identifier: keyid:FF:7C:06:89:25:18:67:3E:CC:E0:46:B6:A7:17:F3:53:CE:53:C5:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3wGiSUYZz7M4Ea2pxfzU85TxQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:f1:32:9f:e6:15:c5:a1:e8:5f:48:38:4d:83:8d:57:32:9b: 2d:9e:37:85:18:f0:69:6b:09:4e:c1:d7:c2:1d:e8:fb:bd:22: 25:e2:6f:88:1d:e1:f5:59:38:42:cc:19:37:ab:8e:6c:9d:bb: 58:f1:ba:5d:c7:b6:ac:2b:45:3c:47:6e:56:1e:b1:7e:f2:bf: 8c:a1:cd:af:4d:ea:1b:93:05:1b:44:a3:70:6a:15:9e:8a:0b: 16:6f:5a:55:aa:86:1d:d3:60:10:78:b6:9b:72:90:8f:57:a8: 0b:16:b4:c3:d9:71:fb:80:66:86:15:5c:09:5c:5d:95:f0:fb: a0:36:a4:54:5a:f2:6f:04:8e:17:3f:0b:22:df:84:d1:6c:d2: af:ad:13:08:a3:3d:40:26:81:61:9e:e7:04:10:0d:af:12:07: d0:e6:21:cf:a9:72:2e:95:f1:2d:55:60:9e:73:50:84:83:89: 8e:3e:d4:b4:55:41:55:44:4b:ff:0d:1e:0c:4c:30:91:82:cf: c5:7d:27:9a:d2:f7:a9:d1:66:81:42:5c:f2:3f:c2:77:b1:7b: 42:71:ef:9e:0e:16:30:f5:c9:dc:9c:8d:d7:61:c9:b4:36:7a: 9c:36:af:90:1b:2c:23:62:59:63:15:c8:a9:6a:11:06:fa:cd: 5f:fc:c2:e9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzZGRTExMC8GA1UEBRMoRkY3QzA2ODkyNTE4NjczRUNDRTA0NkI2QTcxN0YzNTND RTUzQzUwOTAeFw0yNTAzMjkwNzMxMzdaFw0yNTA0MDUwNzMxMzdaMBgxFjAUBgNV BAMTDTY3ZTdhMWRhLTRlYzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcE5AZJFEk7eBLVxoI8Etkfwb+87s+Zy2maAgR4WTKOKsM9IFrjtxVOChbS/Yw KUfeGWW7YN3uFJsj0ygeRQnz9M/PZCXr8GTeiQx2XE8FnHKNDDHa3UcCFS5XFciI NX9aYpfmjsxu5jQYVX2cjiXqX4BRUgioHcB9/xlQuLIFJhwrSbqAyHjD10KbaF30 MPePBkxCqrattFZDtZMcqj7vKTvVZ/9b6vwhBfgcCyTPJWgB0cyr2ozTa1e/IEO1 562ho/Ww3w7Fhp2nlC0ngdWqQdzE4pbE9N7OjnhN6+xj4exXCzL/Hqf+YaWSfz0w s0DUfYv4po3IwutBOMsnfpUBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNDPuz0NB uZO4uHh2CPUzorZsIrkwHwYDVR0jBBgwFoAU/3wGiSUYZz7M4Ea2pxfzU85TxQkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3NkZFLzkwRkU0NzIwMDgz NzExRjA5REI5MUI3MEM0RjlBRTAyL18zd0dpU1VZWno3TTRFYTJweGZ6VTg1VHhR ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvXzN3R2lTVVlaejdNNEVhMnB4ZnpVODVUeFFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 NkZFLzkwRkU0NzIwMDgzNzExRjA5REI5MUI3MEM0RjlBRTAyL18zd0dpU1VZWno3 TTRFYTJweGZ6VTg1VHhRay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJHxMp/mFcWh6F9IOE2DjVcymy2eN4UY8GlrCU7B18Id6Pu9IiXib4gd 4fVZOELMGTerjmydu1jxul3HtqwrRTxHblYesX7yv4yhza9N6huTBRtEo3BqFZ6K CxZvWlWqhh3TYBB4tptykI9XqAsWtMPZcfuAZoYVXAlcXZXw+6A2pFRa8m8Ejhc/ CyLfhNFs0q+tEwijPUAmgWGe5wQQDa8SB9DmIc+pci6V8S1VYJ5zUISDiY4+1LRV QVVES/8NHgxMMJGCz8V9J5rS96nRZoFCXPI/wnexe0Jx754OFjD1ydycjddhybQ2 epw2r5AbLCNiWWMVyKlqEQb6zV/8wuk= -----END CERTIFICATE-----Generated at Fri Apr 4 22:09:23 2025 by rpki-client