$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft File: odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft (raw, json) Hash identifier: lKe/oPSGxkfNJYga7mzmrB1qAuLaIRVcUoQR57jimC4= Subject key identifier: D1:56:51:91:9A:82:A8:05:51:D1:5B:CC:88:BE:11:72:65:49:8E:2B Authority key identifier: A1:D2:5D:E3:A5:59:FD:AF:30:44:9D:94:77:D1:76:EA:37:89:71:F8 Certificate issuer: /CN=A91B0DE0/serialNumber=A1D25DE3A559FDAF30449D9477D176EA378971F8 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft Manifest number: 70 Signing time: Mon 07 Apr 2025 05:42:42 +0000 Manifest this update: Mon 07 Apr 2025 05:42:41 +0000 Manifest next update: Mon 14 Apr 2025 05:42:41 +0000 Files and hashes: 1: odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl (hash: EN7614nZ0ilt6lIvQHWkdXRs2yiSTJty9nxQhezJcCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 05:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0DE0 Validity Not Before: Apr 7 05:42:41 2025 GMT Not After : Apr 14 05:42:41 2025 GMT Subject: CN=67f365d1-d775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2e:50:d0:87:62:26:35:49:c0:4c:79:96:cf: 67:80:d6:ef:3c:f4:20:c5:5b:e3:88:fc:6f:de:7d: 2f:cb:3d:fe:52:4e:72:b8:8d:97:ae:ad:79:ec:ed: dd:74:36:0f:4b:aa:95:5b:35:8c:6f:ae:a7:b2:5d: 99:ea:74:d4:2b:e4:b2:cd:69:a3:6d:7d:a2:7c:4a: 2b:9a:8d:4c:61:39:c4:c9:1b:bc:a2:3c:0b:b7:4c: 96:3a:1f:9b:0c:07:46:c2:7b:b5:de:1b:e5:35:b0: c6:5c:9d:2f:0c:49:59:36:a0:8d:42:ec:ed:64:dd: e9:b6:5e:a8:d9:6f:93:85:71:07:05:c8:f2:7f:db: f2:c8:e2:b1:9a:bb:cb:8d:b7:ca:0f:c0:a2:12:cf: f2:21:ad:80:01:7f:87:df:77:47:0e:c5:33:35:a2: b1:c4:a8:bb:16:89:4d:fb:94:71:82:db:5d:12:18: e0:88:b6:59:28:84:a5:9d:e9:12:76:ab:78:7f:98: 4b:e4:54:ed:de:d4:e9:a8:88:9a:c9:29:08:46:ad: b5:5e:a0:45:88:10:cf:12:a3:6f:4b:73:19:d5:5f: e1:3e:86:36:f0:76:d1:dc:3d:fa:d5:96:ae:a6:d9: d2:22:85:48:47:98:82:04:69:bd:8a:49:65:a6:7a: 65:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:56:51:91:9A:82:A8:05:51:D1:5B:CC:88:BE:11:72:65:49:8E:2B X509v3 Authority Key Identifier: keyid:A1:D2:5D:E3:A5:59:FD:AF:30:44:9D:94:77:D1:76:EA:37:89:71:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:2e:99:8a:52:6a:b8:10:c7:e8:db:2e:c0:ec:dd:1c:81:37: c5:54:46:80:ec:1d:b2:4d:ef:03:25:76:94:b4:74:0e:ca:61: 57:ae:e3:a1:e3:e4:d7:04:8d:8e:0e:98:d4:30:0e:3d:9d:f5: d5:df:74:6e:32:cb:13:93:a1:45:04:c2:64:c8:ed:c4:b3:f2: 11:da:74:7d:51:8f:da:4d:34:01:57:84:c7:a9:72:31:d0:1d: 1c:6d:7f:22:aa:f1:ce:4c:dd:31:98:f5:09:03:91:4d:b9:84: 88:32:30:49:c5:e3:d9:1d:4d:33:71:8c:34:52:9d:ae:e6:5a: a6:5e:76:a7:c8:7e:fa:c6:65:73:a0:bc:15:f7:2e:79:09:81: 3b:09:31:9d:54:e2:c7:e6:f9:8e:65:56:c4:33:84:0c:ac:31: a6:a5:7a:c8:67:ef:67:51:c4:bb:61:9c:52:38:62:43:92:c6: 2f:24:de:3f:32:8d:65:0f:b0:fe:df:07:da:31:c0:6b:33:f7: f0:57:92:38:39:2d:38:77:ad:8f:34:8c:35:d3:c6:bd:bf:3a: 08:80:57:2d:8b:d8:53:e9:f4:12:6c:b5:04:30:ff:bc:52:8c: be:fe:73:1c:07:2a:20:4e:ad:4c:aa:dd:51:6b:1c:19:10:d9: 02:22:53:69 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MERFMDExMC8GA1UEBRMoQTFEMjVERTNBNTU5RkRBRjMwNDQ5RDk0NzdEMTc2RUEz Nzg5NzFGODAeFw0yNTA0MDcwNTQyNDFaFw0yNTA0MTQwNTQyNDFaMBgxFjAUBgNV BAMTDTY3ZjM2NWQxLWQ3NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwLlDQh2ImNUnATHmWz2eA1u889CDFW+OI/G/efS/LPf5STnK4jZeurXns7d10 Ng9LqpVbNYxvrqeyXZnqdNQr5LLNaaNtfaJ8SiuajUxhOcTJG7yiPAu3TJY6H5sM B0bCe7XeG+U1sMZcnS8MSVk2oI1C7O1k3em2XqjZb5OFcQcFyPJ/2/LI4rGau8uN t8oPwKISz/IhrYABf4ffd0cOxTM1orHEqLsWiU37lHGC210SGOCItlkohKWd6RJ2 q3h/mEvkVO3e1OmoiJrJKQhGrbVeoEWIEM8So29LcxnVX+E+hjbwdtHcPfrVlq6m 2dIihUhHmIIEab2KSWWmemVbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0VZRkZqC qAVR0VvMiL4RcmVJjiswHwYDVR0jBBgwFoAUodJd46VZ/a8wRJ2Ud9F26jeJcfgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIwREUwLzdBNjVFOTNDNkE4 NTExRUZCMTU2ODE0N0M0RjlBRTAyL29kSmQ0NlZaX2E4d1JKMlVkOUYyNmplSmNm Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb2RKZDQ2VlpfYTh3UkoyVWQ5RjI2amVKY2ZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIw REUwLzdBNjVFOTNDNkE4NTExRUZCMTU2ODE0N0M0RjlBRTAyL29kSmQ0NlZaX2E4 d1JKMlVkOUYyNmplSmNmZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHkumYpSargQx+jbLsDs3RyBN8VURoDsHbJN7wMldpS0dA7KYVeu46Hj 5NcEjY4OmNQwDj2d9dXfdG4yyxOToUUEwmTI7cSz8hHadH1Rj9pNNAFXhMepcjHQ HRxtfyKq8c5M3TGY9QkDkU25hIgyMEnF49kdTTNxjDRSna7mWqZedqfIfvrGZXOg vBX3LnkJgTsJMZ1U4sfm+Y5lVsQzhAysMaaleshn72dRxLthnFI4YkOSxi8k3j8y jWUPsP7fB9oxwGsz9/BXkjg5LTh3rY80jDXTxr2/OgiAVy2L2FPp9BJstQQw/7xS jL7+cxwHKiBOrUyq3VFrHBkQ2QIiU2k= -----END CERTIFICATE-----Generated at Wed Apr 9 01:24:35 2025 by rpki-client