$ rpki-client -vvf rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft File: 13OnYxe8qx7vA29fbkx7NMSra3s.mft (raw, json) Hash identifier: S+VagJyKOj03C9WcYq4berzuHeDxs63YLL6n3CILqis= Subject key identifier: CE:37:6B:2D:3B:61:1C:0F:41:A4:D1:2E:CA:56:CF:95:3B:4A:E9:50 Authority key identifier: D7:73:A7:63:17:BC:AB:1E:EF:03:6F:5F:6E:4C:7B:34:C4:AB:6B:7B Certificate issuer: /CN=A917AE24/serialNumber=D773A76317BCAB1EEF036F5F6E4C7B34C4AB6B7B Certificate serial: 0491 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft Manifest number: 0491 Signing time: Sun 06 Apr 2025 23:37:08 +0000 Manifest this update: Sun 06 Apr 2025 23:37:07 +0000 Manifest next update: Sun 13 Apr 2025 23:37:07 +0000 Files and hashes: 1: 13OnYxe8qx7vA29fbkx7NMSra3s.crl (hash: dYdXIJQARx4Wd1DH44lqkf3+Y7C3dIp/GrGKl83JBd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.crl rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 23:37:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1169 (0x491) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AE24 Validity Not Before: Apr 6 23:37:07 2025 GMT Not After : Apr 13 23:37:07 2025 GMT Subject: CN=67f31024-e1a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cf:3e:80:6c:12:eb:19:e5:da:db:90:1b:3b: b4:89:c1:4b:23:7f:63:9a:83:96:c7:54:e3:6d:98: 36:44:8e:9b:2b:d2:2b:be:d4:92:62:b4:c4:fa:88: 81:9e:ac:f8:e2:b8:25:83:a2:a4:12:0e:af:14:92: b6:bf:b5:ae:1e:cd:a2:4f:4a:a4:68:dc:37:46:02: 6b:99:a0:34:21:cf:8d:ca:ea:8b:de:dd:9c:3f:cd: 49:d5:d8:66:44:4e:99:16:70:db:e4:d3:db:01:a2: f6:fe:ba:6e:c9:70:a2:83:a3:58:cc:3f:c0:b7:62: 63:ea:14:54:16:63:76:ca:4f:c4:ad:9a:83:1a:12: f6:15:2e:6e:d1:d3:bf:96:86:01:27:6a:a3:ec:de: 19:d6:29:ff:e4:1a:df:d0:c9:b5:81:c7:0c:66:27: 3a:a1:70:6a:0c:e9:76:72:3d:28:00:84:0a:10:49: c4:31:ce:48:bc:08:8b:7a:e0:15:33:80:e8:6e:57: f2:ae:38:65:54:29:16:c3:f9:51:31:0c:fc:9b:dd: b2:b8:f9:a2:86:5e:71:6b:4b:17:7a:64:ef:53:eb: 14:e6:80:0a:3e:12:bd:d3:6e:fa:83:61:b3:61:66: a8:17:74:5d:7f:f5:10:31:93:38:ac:a6:57:62:2e: 3a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:37:6B:2D:3B:61:1C:0F:41:A4:D1:2E:CA:56:CF:95:3B:4A:E9:50 X509v3 Authority Key Identifier: keyid:D7:73:A7:63:17:BC:AB:1E:EF:03:6F:5F:6E:4C:7B:34:C4:AB:6B:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:07:25:aa:f0:ce:fd:e6:6d:58:68:02:90:d0:55:0c:fe:4a: c3:63:0d:3e:c9:eb:75:c9:7c:8c:88:03:f9:d3:6c:1a:fa:52: b3:31:40:2b:83:82:3e:fc:18:2a:0b:27:af:f2:b5:bd:71:00: 1e:56:d8:78:98:cf:2b:7f:bd:b4:a2:fc:0f:d8:48:25:1e:ec: 17:f8:b2:41:6d:83:79:38:65:77:b2:d8:36:86:1e:1f:03:dc: c6:0e:06:c6:6d:1c:fb:36:ca:80:ac:ec:e3:c8:7d:2f:22:91: fa:6f:0b:31:41:a8:40:e9:27:41:1a:60:fb:48:92:20:65:8a: 88:6b:84:47:58:70:f2:05:6f:1f:ec:16:16:12:75:cc:e6:4e: 42:5e:bb:d5:c5:57:17:fe:4a:03:26:d3:24:06:65:ec:e1:c2: 11:1d:11:28:b0:6b:82:e8:89:79:52:4f:7e:c0:ac:5e:d6:7b: ae:e1:13:7f:1a:8a:18:dc:38:74:ec:8b:b0:1d:b3:d1:59:01: 7d:1c:9b:a7:17:bf:f5:0e:05:bb:e2:1b:a3:77:99:43:70:d9: 60:21:a9:88:f5:f2:a0:30:fd:57:c3:04:00:33:92:9f:0b:20: 96:0b:11:59:7d:58:4b:52:66:2e:8f:fd:1c:c8:12:15:27:d3: ae:c6:50:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FFMjQxMTAvBgNVBAUTKEQ3NzNBNzYzMTdCQ0FCMUVFRjAzNkY1RjZFNEM3QjM0 QzRBQjZCN0IwHhcNMjUwNDA2MjMzNzA3WhcNMjUwNDEzMjMzNzA3WjAYMRYwFAYD VQQDEw02N2YzMTAyNC1lMWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu88+gGwS6xnl2tuQGzu0icFLI39jmoOWx1TjbZg2RI6bK9IrvtSSYrTE+oiB nqz44rglg6KkEg6vFJK2v7WuHs2iT0qkaNw3RgJrmaA0Ic+NyuqL3t2cP81J1dhm RE6ZFnDb5NPbAaL2/rpuyXCig6NYzD/At2Jj6hRUFmN2yk/ErZqDGhL2FS5u0dO/ loYBJ2qj7N4Z1in/5Brf0Mm1gccMZic6oXBqDOl2cj0oAIQKEEnEMc5IvAiLeuAV M4DoblfyrjhlVCkWw/lRMQz8m92yuPmihl5xa0sXemTvU+sU5oAKPhK90276g2Gz YWaoF3Rdf/UQMZM4rKZXYi465wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM43ay07 YRwPQaTRLspWz5U7SulQMB8GA1UdIwQYMBaAFNdzp2MXvKse7wNvX25MezTEq2t7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUUyNC84RUM0MDA5NDMw QTQxMUVDOEJFREI4MkRDNEY5QUUwMi8xM09uWXhlOHF4N3ZBMjlmYmt4N05NU3Jh M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEzT25ZeGU4cXg3dkEyOWZia3g3Tk1TcmEzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUUyNC84RUM0MDA5NDMwQTQxMUVDOEJFREI4MkRDNEY5QUUwMi8xM09uWXhlOHF4 N3ZBMjlmYmt4N05NU3JhM3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgByWq8M795m1YaAKQ0FUM/krDYw0+yet1yXyMiAP502wa+lKzMUAr g4I+/BgqCyev8rW9cQAeVth4mM8rf720ovwP2EglHuwX+LJBbYN5OGV3stg2hh4f A9zGDgbGbRz7NsqArOzjyH0vIpH6bwsxQahA6SdBGmD7SJIgZYqIa4RHWHDyBW8f 7BYWEnXM5k5CXrvVxVcX/koDJtMkBmXs4cIRHREosGuC6Il5Uk9+wKxe1nuu4RN/ GooY3Dh07IuwHbPRWQF9HJunF7/1DgW74hujd5lDcNlgIamI9fKgMP1XwwQAM5Kf CyCWCxFZfVhLUmYuj/0cyBIVJ9OuxlCX -----END CERTIFICATE-----Generated at Mon Apr 7 09:42:44 2025 by rpki-client