$ rpki-client -vvf rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft File: Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft (raw, json) Hash identifier: nY3RkGZf7SshX/LXNt7YUCyr367eXXas1m6Ucunbfss= Subject key identifier: 63:D8:AD:28:F3:02:D1:E7:83:3D:52:D6:95:75:C6:2D:F2:58:B9:33 Authority key identifier: 36:BF:DF:4C:65:CD:EE:6B:B7:6E:9F:3E:60:80:34:66:1A:9D:7A:26 Certificate issuer: /CN=A91B67B0/serialNumber=36BFDF4C65CDEE6BB76E9F3E608034661A9D7A26 Certificate serial: 055B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft Manifest number: 0552 Signing time: Thu 10 Apr 2025 23:22:31 +0000 Manifest this update: Thu 10 Apr 2025 23:22:30 +0000 Manifest next update: Thu 17 Apr 2025 23:22:30 +0000 Files and hashes: 1: Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl (hash: 2asQcSDbrJj4eJ13Eh1qok/jiICMXxaJahDzsQ8lS2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 23:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1371 (0x55b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B67B0, serialNumber=36BFDF4C65CDEE6BB76E9F3E608034661A9D7A26 Validity Not Before: Apr 10 23:22:30 2025 GMT Not After : Apr 17 23:22:30 2025 GMT Subject: CN=67f852b6-7087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:68:6d:b1:26:5f:12:36:51:8d:31:e0:d3:9b: 03:a8:84:0d:12:3b:08:4a:ce:4d:eb:23:11:ae:75: 33:93:64:37:44:e6:f7:f5:69:54:77:81:d0:fc:e0: 42:f8:7a:5c:12:6f:08:a5:e6:83:1a:a6:4b:4e:e6: da:54:2d:c0:e7:ed:a6:c7:e4:a0:7b:72:94:b9:3f: ed:de:d2:4a:ea:6c:58:f4:b1:3d:00:01:34:a4:69: de:71:7b:6a:0b:33:3c:a1:dd:2c:4d:80:12:19:0a: 07:dc:18:86:19:78:79:01:99:03:ee:03:a3:01:e8: 2b:da:02:fb:19:b4:87:e6:8d:0c:1f:2a:82:8e:83: 63:58:18:32:98:47:99:9b:e1:ef:46:65:da:89:5b: 6a:f8:bb:ba:f5:0a:4d:47:22:de:41:2f:5b:2e:a3: 66:db:69:93:c6:2c:26:34:7e:e2:76:3e:cf:d8:03: 34:80:87:6c:2d:c2:9a:73:87:57:57:75:d7:0b:68: e8:fb:d3:63:9e:30:04:31:01:95:2e:03:fb:bb:00: ec:61:8c:58:f0:31:ec:3e:89:a3:55:90:9c:7b:bb: 6a:6f:47:d8:b1:d2:63:79:03:d0:a9:60:60:a8:8b: bb:b7:18:ef:28:2d:dc:d6:24:41:bb:96:02:30:58: 49:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D8:AD:28:F3:02:D1:E7:83:3D:52:D6:95:75:C6:2D:F2:58:B9:33 X509v3 Authority Key Identifier: keyid:36:BF:DF:4C:65:CD:EE:6B:B7:6E:9F:3E:60:80:34:66:1A:9D:7A:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:f3:85:2b:7d:94:5e:03:1b:0f:dd:99:04:27:dc:1b:5f:35: 1a:00:8a:1b:6b:ba:3b:87:ca:c1:f6:3e:dc:41:51:6c:6e:13: bb:86:23:b8:e6:2a:a3:4b:c7:f0:e2:62:a4:2e:2d:8a:f0:d6: 93:c8:ee:21:29:ff:cb:99:75:7f:f3:65:fe:df:00:1b:db:fd: 06:08:fd:f8:8e:88:8d:e9:e1:e2:2c:9b:24:97:5d:e1:cf:a1: b4:dc:f1:d1:b0:7b:15:cc:fa:3e:87:a5:cb:26:81:92:c5:b1: 65:05:9f:8f:98:58:65:fa:f3:41:ac:6f:6f:a9:dd:f0:7a:02: 04:bf:4d:c8:39:f1:54:65:8f:ec:16:1a:90:2b:4c:6c:66:87: 03:b4:90:89:dd:9f:4c:9f:2d:08:46:73:6b:2b:1b:f2:ee:7b: 87:6a:b9:7d:06:ec:da:f6:97:4f:f1:d5:a7:ac:ca:11:f2:5c: 6a:6f:c6:bd:f4:9a:bc:30:c2:52:1c:b9:a2:2d:3d:58:72:00: 8e:a7:9b:61:b3:f4:61:33:40:ed:ed:a9:7f:79:e1:24:98:83: ae:b0:0a:8f:b4:b0:a8:a9:0c:fd:04:8c:b1:ce:49:4d:fc:dd: ec:28:32:8c:62:98:1e:08:ed:ff:90:11:6f:00:af:44:c6:0b: f9:e3:8a:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY3QjAxMTAvBgNVBAUTKDM2QkZERjRDNjVDREVFNkJCNzZFOUYzRTYwODAzNDY2 MUE5RDdBMjYwHhcNMjUwNDEwMjMyMjMwWhcNMjUwNDE3MjMyMjMwWjAYMRYwFAYD VQQDEw02N2Y4NTJiNi03MDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGhtsSZfEjZRjTHg05sDqIQNEjsISs5N6yMRrnUzk2Q3ROb39WlUd4HQ/OBC +HpcEm8IpeaDGqZLTubaVC3A5+2mx+Sge3KUuT/t3tJK6mxY9LE9AAE0pGnecXtq CzM8od0sTYASGQoH3BiGGXh5AZkD7gOjAegr2gL7GbSH5o0MHyqCjoNjWBgymEeZ m+HvRmXaiVtq+Lu69QpNRyLeQS9bLqNm22mTxiwmNH7idj7P2AM0gIdsLcKac4dX V3XXC2jo+9NjnjAEMQGVLgP7uwDsYYxY8DHsPomjVZCce7tqb0fYsdJjeQPQqWBg qIu7txjvKC3c1iRBu5YCMFhJcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGPYrSjz AtHngz1S1pV1xi3yWLkzMB8GA1UdIwQYMBaAFDa/30xlze5rt26fPmCANGYanXom MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjdCMC8yMUMwMDgxOEU0 NEYxMUVCQUFBMzdGMENDNEY5QUUwMi9Ocl9mVEdYTjdtdTNicDgtWUlBMFpocWRl aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05yX2ZUR1hON211M2JwOC1ZSUEwWmhxZGVpWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjdCMC8yMUMwMDgxOEU0NEYxMUVCQUFBMzdGMENDNEY5QUUwMi9Ocl9mVEdYTjdt dTNicDgtWUlBMFpocWRlaVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN84UrfZReAxsP3ZkEJ9wbXzUaAIoba7o7h8rB9j7cQVFsbhO7hiO4 5iqjS8fw4mKkLi2K8NaTyO4hKf/LmXV/82X+3wAb2/0GCP34joiN6eHiLJskl13h z6G03PHRsHsVzPo+h6XLJoGSxbFlBZ+PmFhl+vNBrG9vqd3wegIEv03IOfFUZY/s FhqQK0xsZocDtJCJ3Z9Mny0IRnNrKxvy7nuHarl9Buza9pdP8dWnrMoR8lxqb8a9 9Jq8MMJSHLmiLT1YcgCOp5ths/RhM0Dt7al/eeEkmIOusAqPtLCoqQz9BIyxzklN /N3sKDKMYpgeCO3/kBFvAK9Exgv544qX -----END CERTIFICATE-----Generated at Sat Apr 12 20:01:16 2025 by rpki-client