$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft File: _M8p58OjX6g2yQkOaCx4DQI56VU.mft (raw, json) Hash identifier: c9JS8OZXOyPPbvfuCFUzedw1cRUTEpQSItQ1mdQnIaw= Subject key identifier: 4A:81:FF:17:E8:58:36:67:16:4A:E8:39:A6:B5:50:27:4B:F1:12:59 Authority key identifier: FC:CF:29:E7:C3:A3:5F:A8:36:C9:09:0E:68:2C:78:0D:02:39:E9:55 Certificate issuer: /CN=A91C0243/serialNumber=FCCF29E7C3A35FA836C9090E682C780D0239E955 Certificate serial: 0770 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_M8p58OjX6g2yQkOaCx4DQI56VU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft Manifest number: 076F Signing time: Sat 12 Apr 2025 21:08:36 +0000 Manifest this update: Sat 12 Apr 2025 21:08:36 +0000 Manifest next update: Sat 19 Apr 2025 21:08:36 +0000 Files and hashes: 1: _M8p58OjX6g2yQkOaCx4DQI56VU.crl (hash: I7wzd0YxNwZYnqqDvsX+PDXc1qL3AdgZwy9SMDaFpHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.crl rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_M8p58OjX6g2yQkOaCx4DQI56VU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 21:08:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1904 (0x770) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0243, serialNumber=FCCF29E7C3A35FA836C9090E682C780D0239E955 Validity Not Before: Apr 12 21:08:36 2025 GMT Not After : Apr 19 21:08:36 2025 GMT Subject: CN=67fad654-4b26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e2:ae:de:71:6b:39:39:89:0f:96:f6:76:09: cf:00:ab:96:2c:f2:3c:42:55:3f:11:66:62:21:52: d2:1c:aa:d5:48:69:62:5b:3c:d1:8e:25:b2:85:8d: 82:e4:0c:32:f8:35:81:de:b6:45:5a:11:10:9f:45: 28:19:15:15:cf:3a:87:02:99:e9:01:d5:dd:0b:27: 50:9e:45:3d:f0:35:f2:6f:3a:b1:3a:b3:ee:27:a9: 75:c1:d1:0e:c3:28:8d:80:b6:c2:c0:95:d1:35:58: 9a:69:c8:ab:27:7e:ff:ca:d6:b7:25:86:a4:0a:27: 8c:ba:bb:3c:93:22:68:8a:48:e4:3b:7b:e8:66:b7: 2f:73:24:dc:7b:c6:9f:85:9e:4c:bb:51:a2:54:dc: 92:07:4a:5a:88:8e:ec:5f:ab:90:21:6c:45:04:40: 91:0d:01:9e:df:00:4b:1a:73:b5:18:f1:d5:29:21: 68:cd:8d:c5:85:b3:e8:2e:ea:57:22:72:c7:38:20: 42:86:a2:04:88:30:4d:0c:fa:58:44:23:95:3f:87: 02:b8:59:0f:74:c2:ad:08:d1:98:8f:40:57:66:ce: 07:42:e1:0f:36:28:18:21:c6:f8:41:0a:22:78:fb: 76:60:df:96:e8:e8:b1:7c:77:99:41:1c:23:b0:3c: 23:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:81:FF:17:E8:58:36:67:16:4A:E8:39:A6:B5:50:27:4B:F1:12:59 X509v3 Authority Key Identifier: keyid:FC:CF:29:E7:C3:A3:5F:A8:36:C9:09:0E:68:2C:78:0D:02:39:E9:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_M8p58OjX6g2yQkOaCx4DQI56VU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:f8:80:26:bc:08:0f:98:bd:99:ed:5f:fe:15:64:99:2b:90: 6c:c0:fc:d5:28:0e:bd:6d:4e:e7:26:c3:7f:42:f8:67:a8:3e: cc:d6:8a:65:67:1f:23:35:67:7b:6c:91:1b:d8:36:56:3b:0f: 20:e3:ca:08:0b:66:31:af:9c:c4:7d:53:9f:19:82:78:ea:86: ea:0b:bf:fd:71:9b:df:ff:61:49:dd:f4:1d:d5:6a:b7:8e:ee: 2a:39:f3:d2:3d:50:ec:20:0c:9b:40:0d:2e:2e:b2:1b:57:52: 9c:d1:8e:92:0c:e8:86:fa:6a:6b:17:a1:96:bb:91:39:f6:d3: 16:89:aa:6f:71:38:ca:c5:ab:79:18:50:f4:7f:11:56:7d:31: ef:28:27:b8:82:99:8f:93:11:8a:38:8b:e9:a5:10:b7:c2:9a: 6c:9b:56:f0:69:11:57:e0:36:5c:ae:7f:39:aa:38:67:97:81: f9:b9:77:a5:fd:b7:1c:6b:12:60:a3:cd:af:14:3a:8b:93:c6: 00:da:ad:29:4b:a0:32:1b:7b:96:55:be:4c:84:db:51:27:df: ef:ef:30:55:03:24:f1:eb:b2:29:de:06:f1:ff:d8:d4:98:33: ab:8a:a4:bb:23:f6:4b:7a:7a:02:1a:fe:27:f6:a5:3d:24:87: ef:cf:99:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzAyNDMxMTAvBgNVBAUTKEZDQ0YyOUU3QzNBMzVGQTgzNkM5MDkwRTY4MkM3ODBE MDIzOUU5NTUwHhcNMjUwNDEyMjEwODM2WhcNMjUwNDE5MjEwODM2WjAYMRYwFAYD VQQDEw02N2ZhZDY1NC00YjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnOKu3nFrOTmJD5b2dgnPAKuWLPI8QlU/EWZiIVLSHKrVSGliWzzRjiWyhY2C 5Awy+DWB3rZFWhEQn0UoGRUVzzqHApnpAdXdCydQnkU98DXybzqxOrPuJ6l1wdEO wyiNgLbCwJXRNViaacirJ37/yta3JYakCieMurs8kyJoikjkO3voZrcvcyTce8af hZ5Mu1GiVNySB0paiI7sX6uQIWxFBECRDQGe3wBLGnO1GPHVKSFozY3FhbPoLupX InLHOCBChqIEiDBNDPpYRCOVP4cCuFkPdMKtCNGYj0BXZs4HQuEPNigYIcb4QQoi ePt2YN+W6OixfHeZQRwjsDwjGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqB/xfo WDZnFkroOaa1UCdL8RJZMB8GA1UdIwQYMBaAFPzPKefDo1+oNskJDmgseA0COelV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDI0My8wMTY2RkY2NDBE MUMxMUVCQjgyRjM1MzFDNEY5QUUwMi9fTThwNThPalg2ZzJ5UWtPYUN4NERRSTU2 VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19NOHA1OE9qWDZnMnlRa09hQ3g0RFFJNTZWVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDI0My8wMTY2RkY2NDBEMUMxMUVCQjgyRjM1MzFDNEY5QUUwMi9fTThwNThPalg2 ZzJ5UWtPYUN4NERRSTU2VlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo+IAmvAgPmL2Z7V/+FWSZK5BswPzVKA69bU7nJsN/QvhnqD7M1opl Zx8jNWd7bJEb2DZWOw8g48oIC2Yxr5zEfVOfGYJ46obqC7/9cZvf/2FJ3fQd1Wq3 ju4qOfPSPVDsIAybQA0uLrIbV1Kc0Y6SDOiG+mprF6GWu5E59tMWiapvcTjKxat5 GFD0fxFWfTHvKCe4gpmPkxGKOIvppRC3wppsm1bwaRFX4DZcrn85qjhnl4H5uXel /bccaxJgo82vFDqLk8YA2q0pS6AyG3uWVb5MhNtRJ9/v7zBVAyTx67Ip3gbx/9jU mDOriqS7I/ZLenoCGv4n9qU9JIfvz5lA -----END CERTIFICATE-----Generated at Sun Apr 13 04:38:29 2025 by rpki-client