$ rpki-client -vvf rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft File: rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft (raw, json) Hash identifier: gCqR+nWgjd9/F8VbWgvfiTGrjxX0gZMjKViEQkYad4A= Subject key identifier: A1:96:81:7F:4B:66:8A:19:60:B5:50:04:7B:99:1B:D0:EA:53:64:2C Authority key identifier: AC:5F:6F:EF:08:B2:2E:F5:FF:64:73:DB:3D:56:C8:EB:26:E5:50:38 Certificate issuer: /CN=A91580A1/serialNumber=AC5F6FEF08B22EF5FF6473DB3D56C8EB26E55038 Certificate serial: 0B2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rF9v7wiyLvX_ZHPbPVbI6yblUDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft Manifest number: 130A Signing time: Thu 10 Apr 2025 19:07:18 +0000 Manifest this update: Thu 10 Apr 2025 19:07:17 +0000 Manifest next update: Thu 17 Apr 2025 19:07:17 +0000 Files and hashes: 1: rF9v7wiyLvX_ZHPbPVbI6yblUDg.crl (hash: vDKdr4BM/QwazFTRBKKvc7mWA6pZRnwnUiMnQFI2+j4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.crl rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rF9v7wiyLvX_ZHPbPVbI6yblUDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 19:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2862 (0xb2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91580A1, serialNumber=AC5F6FEF08B22EF5FF6473DB3D56C8EB26E55038 Validity Not Before: Apr 10 19:07:17 2025 GMT Not After : Apr 17 19:07:17 2025 GMT Subject: CN=67f816e6-e455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6d:e5:fe:06:75:2a:49:09:05:16:5b:42:cc: 81:f2:72:e0:ee:b0:1c:26:e5:d3:3c:00:bc:99:00: 28:48:6b:8b:38:2a:79:2c:8c:89:10:e4:b9:09:f4: 32:75:00:bb:1f:20:32:21:9e:be:7d:d4:1d:4e:07: bd:f8:60:2e:e3:a4:98:b0:f4:e1:92:25:fe:6e:1b: f4:75:3d:6c:6b:5a:11:61:7d:60:60:a6:78:69:32: 1d:66:85:cb:77:4c:44:67:b4:28:84:90:e9:23:d6: 8c:e2:bc:3a:af:3d:25:a5:69:f4:5f:e4:01:96:d1: c1:74:c3:fb:92:47:65:00:a4:74:3f:56:08:63:ee: 5d:22:2e:37:e0:74:05:f5:cc:bd:2e:cf:95:69:0a: 5b:d8:8d:95:3e:d3:bd:e8:38:b9:23:9e:71:40:81: 99:b8:61:28:da:7d:5b:f1:3c:56:93:a9:cb:d8:b7: 0e:e3:d9:62:87:6c:a8:55:61:d9:08:7d:8e:cd:bc: 1d:5a:35:0c:48:c2:6d:73:00:a4:6d:e8:4b:85:85: f6:4c:85:34:1a:de:77:93:e3:fd:98:f0:96:b9:74: 10:95:19:8f:8c:7c:79:58:b4:dc:68:b5:45:2b:1e: 1e:02:8f:3b:e8:3f:c8:63:a0:d3:cf:ec:53:cc:26: 2b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:96:81:7F:4B:66:8A:19:60:B5:50:04:7B:99:1B:D0:EA:53:64:2C X509v3 Authority Key Identifier: keyid:AC:5F:6F:EF:08:B2:2E:F5:FF:64:73:DB:3D:56:C8:EB:26:E5:50:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rF9v7wiyLvX_ZHPbPVbI6yblUDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f2:f0:62:34:97:aa:80:78:1c:44:69:a8:ed:b3:19:87:fa: 3c:75:c6:fb:3b:6a:c5:57:77:e2:8e:a0:bd:ab:fe:27:01:36: 00:3b:3b:10:b5:ae:cd:60:4c:76:93:14:03:70:43:71:26:61: bd:36:60:e4:51:64:da:a6:7f:24:6f:3e:b7:b9:51:5a:85:86: d2:e7:7f:1b:58:22:1c:6a:94:41:d8:cc:5e:72:ea:4a:9f:72: a5:17:58:bc:26:a1:c6:cc:c0:5e:e3:4d:13:ca:1e:46:9a:19: e8:ea:c6:1e:b5:98:d3:fb:e9:38:8e:a1:81:9a:48:09:43:57: 41:08:e3:39:79:5a:b9:55:b9:31:4b:c7:7f:0d:39:5f:b2:00: c9:0e:81:ba:cd:41:1e:67:04:7d:15:d9:78:67:54:84:d1:3f: ab:b8:bd:a3:74:83:04:71:d8:71:dc:19:f5:71:9d:db:e7:47: 31:83:b6:fb:f5:49:06:5f:90:78:cd:05:13:eb:ed:cd:f6:db: c0:da:40:cf:d7:12:2c:03:07:2e:c8:2c:b5:ec:e3:f1:e8:7d: 83:ea:0c:db:81:15:e8:12:bb:14:a0:e4:ac:a2:f1:37:16:ea: 07:44:9c:97:4d:c3:69:ab:a1:a1:b5:33:89:bd:d3:bc:b8:96: 99:01:89:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwQTExMTAvBgNVBAUTKEFDNUY2RkVGMDhCMjJFRjVGRjY0NzNEQjNENTZDOEVC MjZFNTUwMzgwHhcNMjUwNDEwMTkwNzE3WhcNMjUwNDE3MTkwNzE3WjAYMRYwFAYD VQQDEw02N2Y4MTZlNi1lNDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1m3l/gZ1KkkJBRZbQsyB8nLg7rAcJuXTPAC8mQAoSGuLOCp5LIyJEOS5CfQy dQC7HyAyIZ6+fdQdTge9+GAu46SYsPThkiX+bhv0dT1sa1oRYX1gYKZ4aTIdZoXL d0xEZ7QohJDpI9aM4rw6rz0lpWn0X+QBltHBdMP7kkdlAKR0P1YIY+5dIi434HQF 9cy9Ls+VaQpb2I2VPtO96Di5I55xQIGZuGEo2n1b8TxWk6nL2LcO49lih2yoVWHZ CH2OzbwdWjUMSMJtcwCkbehLhYX2TIU0Gt53k+P9mPCWuXQQlRmPjHx5WLTcaLVF Kx4eAo876D/IY6DTz+xTzCYrhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGWgX9L ZooZYLVQBHuZG9DqU2QsMB8GA1UdIwQYMBaAFKxfb+8Isi71/2Rz2z1WyOsm5VA4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBBMS85MjU2MEE2QTM3 NEQxMUVBQTBBM0JFNTVDNEY5QUUwMi9yRjl2N3dpeUx2WF9aSFBiUFZiSTZ5YmxV RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JGOXY3d2l5THZYX1pIUGJQVmJJNnlibFVEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODBBMS85MjU2MEE2QTM3NEQxMUVBQTBBM0JFNTVDNEY5QUUwMi9yRjl2N3dpeUx2 WF9aSFBiUFZiSTZ5YmxVRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd8vBiNJeqgHgcRGmo7bMZh/o8dcb7O2rFV3fijqC9q/4nATYAOzsQ ta7NYEx2kxQDcENxJmG9NmDkUWTapn8kbz63uVFahYbS538bWCIcapRB2MxecupK n3KlF1i8JqHGzMBe400Tyh5Gmhno6sYetZjT++k4jqGBmkgJQ1dBCOM5eVq5Vbkx S8d/DTlfsgDJDoG6zUEeZwR9Fdl4Z1SE0T+ruL2jdIMEcdhx3Bn1cZ3b50cxg7b7 9UkGX5B4zQUT6+3N9tvA2kDP1xIsAwcuyCy17OPx6H2D6gzbgRXoErsUoOSsovE3 FuoHRJyXTcNpq6GhtTOJvdO8uJaZAYk3 -----END CERTIFICATE-----Generated at Sat Apr 12 17:55:29 2025 by rpki-client