$ rpki-client -vvf rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft File: 2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft (raw, json) Hash identifier: hKVGH1Xib59Sk2PIo4207rIoBYqF2Nt8L2wyoIBMZnc= Subject key identifier: 7C:C3:C1:38:E4:46:88:9D:71:10:8B:E0:FF:5E:0F:8B:E2:EC:B2:EC Authority key identifier: D9:6B:F5:6A:B6:3F:AE:F0:16:9C:0D:29:D6:4A:54:78:1C:06:B2:E4 Certificate issuer: /CN=A91487B2/serialNumber=D96BF56AB63FAEF0169C0D29D64A54781C06B2E4 Certificate serial: 041E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft Manifest number: 041D Signing time: Sun 13 Apr 2025 00:00:15 +0000 Manifest this update: Sun 13 Apr 2025 00:00:14 +0000 Manifest next update: Sun 20 Apr 2025 00:00:14 +0000 Files and hashes: 1: 2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl (hash: /H7aPvZQU7VsUKOgCx/t91Llu0IrBfMM+CtOeYJc2II=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 00:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1054 (0x41e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91487B2, serialNumber=D96BF56AB63FAEF0169C0D29D64A54781C06B2E4 Validity Not Before: Apr 13 00:00:14 2025 GMT Not After : Apr 20 00:00:14 2025 GMT Subject: CN=67fafe8f-91e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2a:09:79:f2:e0:be:dd:78:85:eb:f0:30:3d: 77:4d:97:74:60:1d:2f:c6:9b:13:1f:12:96:72:7b: a3:82:26:ae:f3:08:74:cb:88:5f:89:bf:d9:b6:69: 4c:3b:2e:9c:b6:ae:8c:60:c3:8d:03:b4:36:7a:45: a5:e3:22:e2:84:ab:0f:ce:be:4d:e3:ea:9a:d8:00: d3:68:1c:fc:a1:ba:cf:ee:20:55:44:eb:ab:ad:93: 96:90:5e:a7:f3:fa:56:04:58:32:62:3f:0b:2f:d1: db:5b:23:48:19:f0:58:87:90:e7:ae:a2:b5:fb:2d: 4c:2d:ab:52:b3:e9:39:b9:9a:a4:16:e1:55:94:9d: 4e:67:84:1d:21:6b:7c:6c:1f:f1:e2:e0:e8:bc:37: 88:fe:b6:80:25:33:65:8c:78:9f:b9:0b:93:36:ce: 68:4d:8b:38:2f:41:77:5a:09:b2:89:4b:a0:cf:ec: 24:b8:03:af:b8:12:85:10:d6:e7:4d:02:2a:a5:1f: 98:cc:8a:56:a0:ae:89:8d:b4:bd:b2:11:54:42:a3: 9e:b9:2e:d8:6d:4f:a3:68:51:7d:fe:66:fd:a5:f3: 78:1d:02:b6:a7:41:11:a5:c1:42:25:7c:47:05:5e: 1a:df:8d:9c:c4:9b:e7:4b:ff:e1:2c:15:c4:99:1a: 7d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C3:C1:38:E4:46:88:9D:71:10:8B:E0:FF:5E:0F:8B:E2:EC:B2:EC X509v3 Authority Key Identifier: keyid:D9:6B:F5:6A:B6:3F:AE:F0:16:9C:0D:29:D6:4A:54:78:1C:06:B2:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:c1:ab:ec:41:6e:f1:67:07:d5:3d:8f:cf:c6:ee:b2:c6:4d: 9a:5f:6e:97:32:6f:62:f4:ae:10:17:44:84:1f:eb:bd:f6:8e: a8:b6:19:bc:2b:21:ca:e0:6d:f6:dd:35:18:26:2d:11:4f:be: 56:72:1c:96:4a:1b:cd:dd:2e:89:a3:df:34:eb:09:bb:4c:84: 44:80:69:58:70:99:e9:b3:ba:84:1c:29:33:8c:78:0f:84:70: 62:8c:e4:6f:24:53:47:5e:9a:78:dd:30:87:5f:39:4d:43:a0: 7c:31:30:45:ad:1f:5d:43:9e:f4:3c:85:0c:57:d1:e3:ad:8b: 6d:58:24:9e:d9:39:23:bf:44:be:b1:f0:12:4b:37:b1:9d:8f: 86:77:d8:6d:8b:cc:96:2f:7e:7f:6e:bd:8e:35:db:02:ff:cc: 23:ee:af:93:fb:91:6f:32:1c:0f:42:42:9e:57:d2:c2:94:49: f9:86:d1:91:38:7e:e4:fe:8f:f2:0d:c9:5d:a1:ef:64:78:38: 60:51:40:23:ee:13:44:13:73:ac:fc:50:0d:99:80:1c:71:e3: fb:03:3b:23:2d:12:f4:cd:de:67:86:b5:24:33:72:f9:60:fd: b2:08:4a:88:43:1a:c6:e9:f5:56:df:df:1d:00:4b:56:e1:c7: 3d:f3:6e:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg3QjIxMTAvBgNVBAUTKEQ5NkJGNTZBQjYzRkFFRjAxNjlDMEQyOUQ2NEE1NDc4 MUMwNkIyRTQwHhcNMjUwNDEzMDAwMDE0WhcNMjUwNDIwMDAwMDE0WjAYMRYwFAYD VQQDEw02N2ZhZmU4Zi05MWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoyoJefLgvt14hevwMD13TZd0YB0vxpsTHxKWcnujgiau8wh0y4hfib/ZtmlM Oy6ctq6MYMONA7Q2ekWl4yLihKsPzr5N4+qa2ADTaBz8obrP7iBVROurrZOWkF6n 8/pWBFgyYj8LL9HbWyNIGfBYh5DnrqK1+y1MLatSs+k5uZqkFuFVlJ1OZ4QdIWt8 bB/x4uDovDeI/raAJTNljHifuQuTNs5oTYs4L0F3WgmyiUugz+wkuAOvuBKFENbn TQIqpR+YzIpWoK6JjbS9shFUQqOeuS7YbU+jaFF9/mb9pfN4HQK2p0ERpcFCJXxH BV4a342cxJvnS//hLBXEmRp9hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzDwTjk RoidcRCL4P9eD4vi7LLsMB8GA1UdIwQYMBaAFNlr9Wq2P67wFpwNKdZKVHgcBrLk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODdCMi83NDZEQjZGMjVE NjUxMUVDQkI0MEQxMzVDNEY5QUUwMi8yV3YxYXJZX3J2QVduQTBwMWtwVWVCd0dz dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJXdjFhcllfcnZBV25BMHAxa3BVZUJ3R3N1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODdCMi83NDZEQjZGMjVENjUxMUVDQkI0MEQxMzVDNEY5QUUwMi8yV3YxYXJZX3J2 QVduQTBwMWtwVWVCd0dzdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAwavsQW7xZwfVPY/Pxu6yxk2aX26XMm9i9K4QF0SEH+u99o6othm8 KyHK4G323TUYJi0RT75WchyWShvN3S6Jo9806wm7TIREgGlYcJnps7qEHCkzjHgP hHBijORvJFNHXpp43TCHXzlNQ6B8MTBFrR9dQ570PIUMV9HjrYttWCSe2Tkjv0S+ sfASSzexnY+Gd9hti8yWL35/br2ONdsC/8wj7q+T+5FvMhwPQkKeV9LClEn5htGR OH7k/o/yDcldoe9keDhgUUAj7hNEE3Os/FANmYAcceP7AzsjLRL0zd5nhrUkM3L5 YP2yCEqIQxrG6fVW398dAEtW4cc9827j -----END CERTIFICATE-----Generated at Sun Apr 13 02:14:29 2025 by rpki-client