$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft File: fR7WtlFJDavaqEvZL81C5VPubHA.mft (raw, json) Hash identifier: b++aRw/nBBH5jC4odB1RgvNc9ZnNj/iBZ1iErt5cOnE= Subject key identifier: BA:53:BF:DF:01:6B:08:28:F1:FC:63:CF:76:0D:0B:47:95:9A:50:93 Authority key identifier: 7D:1E:D6:B6:51:49:0D:AB:DA:A8:4B:D9:2F:CD:42:E5:53:EE:6C:70 Certificate issuer: /CN=A91B8C6C/serialNumber=7D1ED6B651490DABDAA84BD92FCD42E553EE6C70 Certificate serial: 346E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft Manifest number: 346E Signing time: Sun 20 Apr 2025 15:07:41 +0000 Manifest this update: Sun 20 Apr 2025 15:07:40 +0000 Manifest next update: Sun 27 Apr 2025 15:07:40 +0000 Files and hashes: 1: fR7WtlFJDavaqEvZL81C5VPubHA.crl (hash: RYyhUlHeJnXlfFgpdwnAKxFBqfRuKdUWsIrBW6/DkI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.crl rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 15:07:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13422 (0x346e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C6C, serialNumber=7D1ED6B651490DABDAA84BD92FCD42E553EE6C70 Validity Not Before: Apr 20 15:07:40 2025 GMT Not After : Apr 27 15:07:40 2025 GMT Subject: CN=68050dbd-d139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a3:9f:52:80:52:d6:21:9c:20:de:f5:ea:98: 3f:d5:0b:a9:85:ce:fa:c9:01:e2:23:81:81:f8:b7: ef:c3:fb:59:15:dc:62:73:37:40:48:6c:3d:fa:76: 15:82:99:f2:89:ee:07:10:47:a6:f6:04:26:89:9f: 9d:da:81:0c:23:6d:22:0e:67:aa:20:26:d6:e2:22: 65:b8:ad:d5:44:49:ea:46:d0:db:63:36:82:bc:02: fd:fc:7c:9a:c1:06:0b:52:39:0f:ab:68:52:a7:4c: 5c:8c:6e:d8:7b:20:4a:a1:ce:3b:a7:82:60:c9:a9: 92:ec:c0:72:51:b1:f2:da:b2:d8:9e:e7:38:03:d9: 84:05:81:ff:22:2c:2e:8d:9a:aa:a8:c1:fa:95:11: ac:42:7e:e4:13:e6:16:ab:a5:d7:1a:1c:d6:78:b4: 3b:dc:f8:66:1a:ee:4d:98:34:d9:39:5c:e2:f0:c0: 98:22:34:47:5f:f2:09:14:84:67:71:bd:66:9a:5c: 38:16:ee:b4:1a:90:a5:a4:e1:78:0f:24:48:b0:b5: 79:92:f6:3a:ab:4f:54:87:6b:35:9a:dc:8c:4e:88: 7f:38:e1:5b:18:cb:99:61:85:da:b4:c4:cd:e7:6b: 95:31:81:29:e0:51:dd:b7:2b:d4:9c:e9:f0:21:1c: 4b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:53:BF:DF:01:6B:08:28:F1:FC:63:CF:76:0D:0B:47:95:9A:50:93 X509v3 Authority Key Identifier: keyid:7D:1E:D6:B6:51:49:0D:AB:DA:A8:4B:D9:2F:CD:42:E5:53:EE:6C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:e6:e6:98:c3:89:d4:fc:fe:6f:18:0a:c4:e5:5e:8e:a9:ec: 7c:f5:56:ce:05:29:a7:c0:27:dd:14:10:39:f0:f0:09:61:7d: 64:e9:84:50:46:51:b4:0a:ca:40:81:6c:b7:b5:9b:0a:fb:e1: 13:eb:79:5a:f5:2f:91:6f:da:3a:f2:41:12:6c:98:7a:16:33: ef:4d:8e:2d:e0:e9:1e:bc:8b:42:c7:52:8c:4e:fb:a8:b6:f8: 0b:17:7d:7c:c7:73:01:4e:70:55:b7:6e:32:66:de:9d:4d:7f: ff:e4:55:13:ac:5c:a5:2d:0b:fc:f4:29:53:89:5f:ae:3f:cc: 06:4a:69:af:4f:17:f4:56:99:65:90:c1:61:68:89:2f:c4:dd: a2:4b:6f:54:50:d6:73:c6:d9:75:74:24:1b:f8:43:2c:f2:3f: bc:ae:95:fb:21:a3:f4:eb:43:c6:7c:e2:16:67:11:e2:7d:d3: 84:a9:c6:00:e3:f6:12:cc:db:60:7c:b5:31:81:17:60:6c:0b: 13:68:6f:3d:2e:45:a4:2d:a4:11:50:0a:c1:7d:d5:d0:8b:85: 6b:2a:33:f0:11:e8:c2:74:af:c0:18:11:d1:b4:d3:65:5f:e0: 0b:8b:13:13:a2:89:30:18:13:e4:9c:57:44:28:d9:a1:81:02: 10:a9:d8:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDNkMxMTAvBgNVBAUTKDdEMUVENkI2NTE0OTBEQUJEQUE4NEJEOTJGQ0Q0MkU1 NTNFRTZDNzAwHhcNMjUwNDIwMTUwNzQwWhcNMjUwNDI3MTUwNzQwWjAYMRYwFAYD VQQDEw02ODA1MGRiZC1kMTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoqOfUoBS1iGcIN716pg/1Quphc76yQHiI4GB+Lfvw/tZFdxiczdASGw9+nYV gpnyie4HEEem9gQmiZ+d2oEMI20iDmeqICbW4iJluK3VREnqRtDbYzaCvAL9/Hya wQYLUjkPq2hSp0xcjG7YeyBKoc47p4JgyamS7MByUbHy2rLYnuc4A9mEBYH/Iiwu jZqqqMH6lRGsQn7kE+YWq6XXGhzWeLQ73PhmGu5NmDTZOVzi8MCYIjRHX/IJFIRn cb1mmlw4Fu60GpClpOF4DyRIsLV5kvY6q09Uh2s1mtyMToh/OOFbGMuZYYXatMTN 52uVMYEp4FHdtyvUnOnwIRxLKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpTv98B awgo8fxjz3YNC0eVmlCTMB8GA1UdIwQYMBaAFH0e1rZRSQ2r2qhL2S/NQuVT7mxw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEM2Qy9DMTQ4RDFDQTFE QTMxMUUyOEUxQTNFOTkwOEIwMkNEMi9mUjdXdGxGSkRhdmFxRXZaTDgxQzVWUHVi SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZSN1d0bEZKRGF2YXFFdlpMODFDNVZQdWJIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEM2Qy9DMTQ4RDFDQTFEQTMxMUUyOEUxQTNFOTkwOEIwMkNEMi9mUjdXdGxGSkRh dmFxRXZaTDgxQzVWUHViSEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO5uaYw4nU/P5vGArE5V6Oqex89VbOBSmnwCfdFBA58PAJYX1k6YRQ RlG0CspAgWy3tZsK++ET63la9S+Rb9o68kESbJh6FjPvTY4t4OkevItCx1KMTvuo tvgLF318x3MBTnBVt24yZt6dTX//5FUTrFylLQv89ClTiV+uP8wGSmmvTxf0Vpll kMFhaIkvxN2iS29UUNZzxtl1dCQb+EMs8j+8rpX7IaP060PGfOIWZxHifdOEqcYA 4/YSzNtgfLUxgRdgbAsTaG89LkWkLaQRUArBfdXQi4VrKjPwEejCdK/AGBHRtNNl X+ALixMTookwGBPknFdEKNmhgQIQqdjh -----END CERTIFICATE-----Generated at Sun Apr 20 20:10:28 2025 by rpki-client