$ rpki-client -vvf rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft File: F4xrtHazfF8V5ulTq-TLzwhhCCs.mft (raw, json) Hash identifier: qj7Ojogs2xyCCD8YNLSQihkCt5jOG2onPHtFf7nG0u4= Subject key identifier: A1:A9:26:03:00:34:82:60:A8:40:40:C3:A8:58:0B:B9:09:08:91:EA Authority key identifier: 17:8C:6B:B4:76:B3:7C:5F:15:E6:E9:53:AB:E4:CB:CF:08:61:08:2B Certificate issuer: /CN=A91709F5/serialNumber=178C6BB476B37C5F15E6E953ABE4CBCF0861082B Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft Manifest number: 1F Signing time: Sat 29 Mar 2025 07:11:36 +0000 Manifest this update: Sat 29 Mar 2025 07:11:36 +0000 Manifest next update: Sat 05 Apr 2025 07:11:36 +0000 Files and hashes: 1: F4xrtHazfF8V5ulTq-TLzwhhCCs.crl (hash: 42mLa1GGnnS1YZWzWeWrbyD6X7MAQQM3jQeX6N/trik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.crl rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91709F5 Validity Not Before: Mar 29 07:11:36 2025 GMT Not After : Apr 5 07:11:36 2025 GMT Subject: CN=67e79d28-3ccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:94:0a:81:a5:11:aa:8e:40:a0:b6:d9:e1:b8: a8:ca:97:31:ce:2b:70:3d:60:52:7e:0b:80:ff:c9: e3:7e:a5:33:ff:0c:56:02:a6:ac:09:00:89:fd:8f: 5d:9a:89:09:b0:91:65:1e:ef:5d:f2:ab:58:09:dc: 2b:0c:ff:49:e5:70:89:a7:99:76:96:85:d4:b4:f2: cc:2d:05:91:d1:42:89:f3:10:17:ce:48:6d:2e:38: 12:8a:0d:0e:f4:9c:ca:ac:f7:8e:fb:c0:3a:38:39: b8:ea:5a:0f:ff:0e:06:b4:62:ca:00:74:52:a2:71: ca:00:d9:37:e4:18:c1:ca:2c:b4:f9:9a:26:75:57: 35:46:23:0d:9a:22:a4:ca:13:14:59:94:2a:29:cc: f3:5b:39:d3:29:33:b6:0e:53:2c:7d:87:11:6a:08: 08:0b:05:4b:85:3b:37:20:8e:cf:6c:f2:da:7a:f2: 81:70:12:a0:17:e6:f9:63:9e:d2:71:25:e4:32:a2: 5d:df:54:a1:5e:64:66:0a:4e:13:03:d2:60:0f:f5: 84:8d:17:9c:01:68:76:a1:e8:92:60:f3:52:e9:a3: 45:6e:0a:65:e1:b8:44:86:e2:eb:c0:68:a5:ef:66: 14:9b:7b:c1:d5:b2:f2:b0:b3:e2:b9:df:fc:8a:eb: 45:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A9:26:03:00:34:82:60:A8:40:40:C3:A8:58:0B:B9:09:08:91:EA X509v3 Authority Key Identifier: keyid:17:8C:6B:B4:76:B3:7C:5F:15:E6:E9:53:AB:E4:CB:CF:08:61:08:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:00:cd:b1:f5:9c:75:ef:2c:83:1f:e6:12:22:78:5f:bd:43: be:03:12:b8:84:2c:f1:8c:25:24:16:c0:b7:27:67:d8:87:fd: 0a:36:af:75:1e:51:fd:65:d6:e9:d3:60:8d:94:20:11:30:e4: 8d:fc:04:5a:9e:7e:9e:70:61:ba:30:55:77:eb:51:c5:82:b9: fe:1d:c1:7e:10:98:af:6d:f1:ed:e6:9f:2e:3c:8e:f4:ce:f1: d1:89:96:68:1c:d1:e6:b0:9a:95:55:95:97:81:48:21:77:1b: f7:4e:24:06:db:5c:77:08:2e:60:5e:96:29:08:2a:5e:0b:33: d3:b8:06:b9:73:c4:81:5e:7a:0d:0f:38:b6:25:e3:30:8c:e2: 89:b6:76:87:16:09:d0:1e:b6:e5:e5:29:db:7f:d7:45:a2:f7: d5:14:2d:b0:cf:48:4d:5f:3c:76:9a:63:79:16:6d:d3:56:85: 86:4d:a3:57:ce:0e:92:dc:30:03:be:84:54:94:aa:81:ec:8e: 8c:df:a0:2f:42:34:07:18:6e:24:44:f7:22:82:db:e6:0e:b9: 50:f5:00:2f:67:89:2c:5a:76:ca:b5:75:21:05:72:fa:4b:29: 9b:5f:d3:e9:63:3a:b8:87:fd:fa:7c:55:fd:84:0f:db:3b:0e: bd:43:a4:06 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDlGNTExMC8GA1UEBRMoMTc4QzZCQjQ3NkIzN0M1RjE1RTZFOTUzQUJFNENCQ0Yw ODYxMDgyQjAeFw0yNTAzMjkwNzExMzZaFw0yNTA0MDUwNzExMzZaMBgxFjAUBgNV BAMTDTY3ZTc5ZDI4LTNjY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhlAqBpRGqjkCgttnhuKjKlzHOK3A9YFJ+C4D/yeN+pTP/DFYCpqwJAIn9j12a iQmwkWUe713yq1gJ3CsM/0nlcImnmXaWhdS08swtBZHRQonzEBfOSG0uOBKKDQ70 nMqs9477wDo4ObjqWg//Dga0YsoAdFKiccoA2TfkGMHKLLT5miZ1VzVGIw2aIqTK ExRZlCopzPNbOdMpM7YOUyx9hxFqCAgLBUuFOzcgjs9s8tp68oFwEqAX5vljntJx JeQyol3fVKFeZGYKThMD0mAP9YSNF5wBaHah6JJg81Lpo0VuCmXhuESG4uvAaKXv ZhSbe8HVsvKws+K53/yK60XlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoakmAwA0 gmCoQEDDqFgLuQkIkeowHwYDVR0jBBgwFoAUF4xrtHazfF8V5ulTq+TLzwhhCCsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwOUY1LzNBODI5MEU4REZE QTExRUY4QjQ3ODYyNEM0RjlBRTAyL0Y0eHJ0SGF6ZkY4VjV1bFRxLVRMendoaEND cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRjR4cnRIYXpmRjhWNXVsVHEtVEx6d2hoQ0NzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw OUY1LzNBODI5MEU4REZEQTExRUY4QjQ3ODYyNEM0RjlBRTAyL0Y0eHJ0SGF6ZkY4 VjV1bFRxLVRMendoaENDcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABoAzbH1nHXvLIMf5hIieF+9Q74DEriELPGMJSQWwLcnZ9iH/Qo2r3Ue Uf1l1unTYI2UIBEw5I38BFqefp5wYbowVXfrUcWCuf4dwX4QmK9t8e3mny48jvTO 8dGJlmgc0eawmpVVlZeBSCF3G/dOJAbbXHcILmBelikIKl4LM9O4BrlzxIFeeg0P OLYl4zCM4om2docWCdAetuXlKdt/10Wi99UULbDPSE1fPHaaY3kWbdNWhYZNo1fO DpLcMAO+hFSUqoHsjozfoC9CNAcYbiRE9yKC2+YOuVD1AC9niSxadsq1dSEFcvpL KZtf0+ljOriH/fp8Vf2ED9s7Dr1DpAY= -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:37 2025 by rpki-client