$ rpki-client -vvf rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft File: AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft (raw, json) Hash identifier: OKVBGEdX9U0CtCnveZUYGhD5G3ceww5Jc8EViVGf0YU= Subject key identifier: D4:BB:60:53:7E:85:2D:6B:A1:72:33:39:41:80:1B:8A:55:73:DE:CC Authority key identifier: 00:FD:31:FD:06:B4:20:4C:3D:DC:B6:35:07:18:95:33:77:8C:CC:F8 Certificate issuer: /CN=A91C09EA/serialNumber=00FD31FD06B4204C3DDCB63507189533778CCCF8 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AP0x_Qa0IEw93LY1BxiVM3eMzPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft Manifest number: 23 Signing time: Sat 05 Apr 2025 07:06:12 +0000 Manifest this update: Sat 05 Apr 2025 07:06:12 +0000 Manifest next update: Sat 12 Apr 2025 07:06:12 +0000 Files and hashes: 1: AP0x_Qa0IEw93LY1BxiVM3eMzPg.crl (hash: 18wfZpZ1RrnoashGuwXj0rjyfj541fyeOiSVuqfXaZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.crl rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AP0x_Qa0IEw93LY1BxiVM3eMzPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:06:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C09EA Validity Not Before: Apr 5 07:06:12 2025 GMT Not After : Apr 12 07:06:12 2025 GMT Subject: CN=67f0d664-69a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a2:1e:32:76:35:63:c9:08:62:da:7f:a5:05: 35:4e:79:32:cd:33:29:74:d0:b9:b2:60:df:8e:38: 4d:e5:35:75:64:1f:df:79:52:c8:3c:f3:20:dd:f5: 9e:cd:ff:56:6b:43:e5:25:fc:d2:30:5f:51:f8:1f: 94:14:30:8a:7b:0e:12:c3:f4:b7:03:2a:57:0b:e2: b8:df:e8:42:2d:d8:74:15:19:a0:48:7d:05:3f:25: c8:7d:15:43:1b:ec:99:63:63:54:96:20:12:7f:a8: 72:35:ae:cc:19:08:71:d8:aa:af:2a:48:ba:98:39: 55:65:f4:36:82:11:b7:7c:65:c2:7d:e4:90:0a:a8: 08:22:d4:c7:3d:4c:4e:6a:0a:18:a0:51:3b:25:0f: c6:fa:4e:89:58:7f:d6:1c:db:45:f2:f7:3d:ba:2c: 16:e0:d5:bb:9d:7c:65:57:e7:f8:51:65:27:40:41: b4:88:19:e2:af:89:41:d8:bf:1e:18:2d:d9:d6:19: 5b:6d:4c:ef:c2:3a:d9:ed:b6:fc:dd:ba:60:7d:82: 05:f0:c5:06:fc:6c:90:89:7e:ba:73:08:d8:ab:2b: b5:a5:35:ba:7e:1a:ff:8b:9d:c6:ff:ef:04:ed:42: 3f:e1:02:7b:df:6c:fb:1a:75:d9:03:cc:3c:34:b3: 00:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:BB:60:53:7E:85:2D:6B:A1:72:33:39:41:80:1B:8A:55:73:DE:CC X509v3 Authority Key Identifier: keyid:00:FD:31:FD:06:B4:20:4C:3D:DC:B6:35:07:18:95:33:77:8C:CC:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AP0x_Qa0IEw93LY1BxiVM3eMzPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:ab:5c:0e:cf:47:38:7c:25:f9:4f:66:a9:c9:ea:59:c8:48: 0c:b6:99:a0:fe:5f:84:d4:04:be:5a:d6:5a:8b:df:be:6b:b6: 6e:fa:f0:55:9f:6b:cc:72:2c:52:8b:9f:5e:8a:59:92:36:60: ad:05:c0:c1:b2:c4:0d:50:56:fb:7f:77:f8:a1:e9:f1:ea:9e: 94:fb:04:1f:38:11:2f:d9:be:42:4f:2f:5a:24:52:4e:52:d3: 71:54:17:2d:ff:40:83:9f:06:50:49:aa:d8:c9:e3:f3:2e:da: 74:af:3c:70:9e:25:6e:9b:ba:8b:60:12:8f:e4:64:4c:62:75: a5:e6:2a:86:e4:cd:16:f6:1f:cb:b1:e7:95:3c:a2:83:2c:1c: 4c:70:e5:67:53:75:c6:fc:9a:85:c7:13:48:37:fa:d4:37:0c: af:03:c4:3d:04:ac:18:c1:97:e2:68:42:50:ba:5a:4b:4a:2c: 93:3c:65:af:83:25:6a:fa:8f:3e:6f:99:35:c1:8b:dd:a9:11: 40:39:b3:52:1a:08:e2:86:8e:16:aa:6c:e9:13:af:ab:1b:e5: 93:99:41:57:26:1f:2c:bc:39:3d:ec:ca:89:eb:16:bc:13:78: ef:96:18:89:d9:74:cb:8a:4e:40:3c:66:d9:ef:f5:8f:89:33: 30:bc:bd:ac -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MDlFQTExMC8GA1UEBRMoMDBGRDMxRkQwNkI0MjA0QzNERENCNjM1MDcxODk1MzM3 NzhDQ0NGODAeFw0yNTA0MDUwNzA2MTJaFw0yNTA0MTIwNzA2MTJaMBgxFjAUBgNV BAMTDTY3ZjBkNjY0LTY5YTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyoh4ydjVjyQhi2n+lBTVOeTLNMyl00LmyYN+OOE3lNXVkH995Usg88yDd9Z7N /1ZrQ+Ul/NIwX1H4H5QUMIp7DhLD9LcDKlcL4rjf6EIt2HQVGaBIfQU/Jch9FUMb 7JljY1SWIBJ/qHI1rswZCHHYqq8qSLqYOVVl9DaCEbd8ZcJ95JAKqAgi1Mc9TE5q ChigUTslD8b6TolYf9Yc20Xy9z26LBbg1budfGVX5/hRZSdAQbSIGeKviUHYvx4Y LdnWGVttTO/COtnttvzdumB9ggXwxQb8bJCJfrpzCNirK7WlNbp+Gv+Lncb/7wTt Qj/hAnvfbPsaddkDzDw0swAPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1LtgU36F LWuhcjM5QYAbilVz3swwHwYDVR0jBBgwFoAUAP0x/Qa0IEw93LY1BxiVM3eMzPgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwOUVBLzhDNTkxMkZFRTEz QjExRUZCQTdCREYzQkM0RjlBRTAyL0FQMHhfUWEwSUV3OTNMWTFCeGlWTTNlTXpQ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQVAweF9RYTBJRXc5M0xZMUJ4aVZNM2VNelBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMw OUVBLzhDNTkxMkZFRTEzQjExRUZCQTdCREYzQkM0RjlBRTAyL0FQMHhfUWEwSUV3 OTNMWTFCeGlWTTNlTXpQZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFGrXA7PRzh8JflPZqnJ6lnISAy2maD+X4TUBL5a1lqL375rtm768FWf a8xyLFKLn16KWZI2YK0FwMGyxA1QVvt/d/ih6fHqnpT7BB84ES/ZvkJPL1okUk5S 03FUFy3/QIOfBlBJqtjJ4/Mu2nSvPHCeJW6buotgEo/kZExidaXmKobkzRb2H8ux 55U8ooMsHExw5WdTdcb8moXHE0g3+tQ3DK8DxD0ErBjBl+JoQlC6WktKLJM8Za+D JWr6jz5vmTXBi92pEUA5s1IaCOKGjhaqbOkTr6sb5ZOZQVcmHyy8OT3syonrFrwT eO+WGInZdMuKTkA8Ztnv9Y+JMzC8vaw= -----END CERTIFICATE-----Generated at Sat Apr 5 12:17:23 2025 by rpki-client