$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft File: P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft (raw, json) Hash identifier: yA8s7OpQTSYiDMYYTkryk6v5+38rpCuDBaREnYCobao= Subject key identifier: E8:55:58:51:E9:5C:03:9D:EE:A1:5F:33:AA:CB:CF:EA:61:60:5D:3C Authority key identifier: 3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7 Certificate issuer: /CN=A91C4A80/serialNumber=3FD7F555FC7D6FC23539A3A621EF2D048D4C7CC7 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft Manifest number: 20 Signing time: Sat 05 Apr 2025 07:07:45 +0000 Manifest this update: Sat 05 Apr 2025 07:07:45 +0000 Manifest next update: Sat 12 Apr 2025 07:07:45 +0000 Files and hashes: 1: P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl (hash: ZFqke+vl0ZHGUEnN44xts/u3fEmJa+kSTWbQoNzcJXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4A80 Validity Not Before: Apr 5 07:07:45 2025 GMT Not After : Apr 12 07:07:45 2025 GMT Subject: CN=67f0d6c1-944e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ba:96:37:94:58:31:1d:13:f5:d6:16:96:2f: b4:45:cd:21:28:b1:2c:18:bb:16:05:b8:4a:6e:7c: 1a:51:05:4a:c2:db:c5:d9:e8:21:3c:0c:8f:3f:6f: bb:fe:21:c0:aa:8b:20:d8:28:2b:fa:17:1e:4e:90: 8c:96:76:35:b9:56:90:0b:11:ad:93:ad:1c:8c:60: 95:60:a1:41:87:77:dc:eb:74:5b:a0:e4:2d:b4:fb: 78:d2:2b:05:f2:8d:0b:3e:18:cc:fc:10:f9:7c:92: 36:c3:cf:6a:b1:6d:7b:75:46:de:5d:06:ee:a9:e6: fa:e1:5a:f2:43:20:52:7a:60:6b:79:83:3b:c6:86: 3b:e4:7c:c6:0b:91:b6:f4:27:5a:d1:95:6d:36:d2: 7c:77:9f:7e:3c:27:e4:e0:85:db:23:07:77:65:74: e3:84:eb:1e:02:95:43:dc:20:80:16:f7:37:e4:cd: d1:1d:a6:80:a6:9c:3a:b4:c2:90:bb:aa:c9:f7:2c: 70:a0:73:ae:2b:8c:cc:97:2b:1f:67:27:7e:60:e5: 55:55:ed:ec:4c:36:e1:0f:1a:05:3f:1c:85:b3:cd: 03:c0:2f:c7:46:6c:c1:73:dc:ca:69:92:ca:02:89: 01:20:30:ba:2f:bb:47:c8:52:00:1e:01:4b:39:64: 46:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:55:58:51:E9:5C:03:9D:EE:A1:5F:33:AA:CB:CF:EA:61:60:5D:3C X509v3 Authority Key Identifier: keyid:3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:0e:96:b9:22:ef:64:62:88:79:15:77:bd:4e:4e:9c:a0:4b: e4:78:ea:38:de:10:d5:78:c4:52:83:f9:41:b9:f4:19:f7:8d: dc:85:1c:e0:28:9b:a1:92:0a:c6:fc:bb:d2:4e:68:02:1e:4f: ce:03:0e:ac:90:98:3f:8d:db:5d:82:6c:e4:dd:27:48:3e:3e: bf:66:aa:f3:72:39:95:4c:fb:a1:1b:af:0a:df:85:fc:0d:54: 9f:f1:56:01:b7:d4:df:08:63:b2:3b:f9:ac:be:60:2d:7b:2c: 93:94:d5:93:56:6b:36:09:4b:07:b5:0b:81:2b:c0:52:a6:ff: fe:e1:03:be:8b:08:24:ec:73:d5:17:39:6c:16:21:cc:2a:00: 0e:30:83:92:c2:c9:ab:cb:94:88:19:47:35:c9:e7:8a:cc:2e: 85:6c:07:a1:f0:11:f1:12:3d:a3:9b:3d:96:0f:9a:68:7b:7d: 08:c2:1d:6c:34:51:f9:c4:06:a9:26:34:5a:b2:7a:0f:40:67: e0:62:f5:4e:4f:9b:29:f2:b3:ef:bd:bb:8a:c2:4e:24:c4:08: cf:09:d6:9b:81:24:fb:59:ab:04:fb:d9:68:85:76:5b:47:b7: cd:45:ab:91:e0:35:48:26:c3:a7:01:a5:ac:de:6b:c2:69:41: b4:e6:1c:52 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NEE4MDExMC8GA1UEBRMoM0ZEN0Y1NTVGQzdENkZDMjM1MzlBM0E2MjFFRjJEMDQ4 RDRDN0NDNzAeFw0yNTA0MDUwNzA3NDVaFw0yNTA0MTIwNzA3NDVaMBgxFjAUBgNV BAMTDTY3ZjBkNmMxLTk0NGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2upY3lFgxHRP11haWL7RFzSEosSwYuxYFuEpufBpRBUrC28XZ6CE8DI8/b7v+ IcCqiyDYKCv6Fx5OkIyWdjW5VpALEa2TrRyMYJVgoUGHd9zrdFug5C20+3jSKwXy jQs+GMz8EPl8kjbDz2qxbXt1Rt5dBu6p5vrhWvJDIFJ6YGt5gzvGhjvkfMYLkbb0 J1rRlW020nx3n348J+TghdsjB3dldOOE6x4ClUPcIIAW9zfkzdEdpoCmnDq0wpC7 qsn3LHCgc64rjMyXKx9nJ35g5VVV7exMNuEPGgU/HIWzzQPAL8dGbMFz3MppksoC iQEgMLovu0fIUgAeAUs5ZEYnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6FVYUelc A53uoV8zqsvP6mFgXTwwHwYDVR0jBBgwFoAUP9f1Vfx9b8I1OaOmIe8tBI1MfMcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0QTgwLzI5RUM3M0JBRTRF RjExRUZCNzE0RTU2Q0M0RjlBRTAyL1A5ZjFWZng5YjhJMU9hT21JZTh0QkkxTWZN Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUDlmMVZmeDliOEkxT2FPbUllOHRCSTFNZk1jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0 QTgwLzI5RUM3M0JBRTRFRjExRUZCNzE0RTU2Q0M0RjlBRTAyL1A5ZjFWZng5YjhJ MU9hT21JZTh0QkkxTWZNYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABIOlrki72RiiHkVd71OTpygS+R46jjeENV4xFKD+UG59Bn3jdyFHOAo m6GSCsb8u9JOaAIeT84DDqyQmD+N212CbOTdJ0g+Pr9mqvNyOZVM+6EbrwrfhfwN VJ/xVgG31N8IY7I7+ay+YC17LJOU1ZNWazYJSwe1C4ErwFKm//7hA76LCCTsc9UX OWwWIcwqAA4wg5LCyavLlIgZRzXJ54rMLoVsB6HwEfESPaObPZYPmmh7fQjCHWw0 UfnEBqkmNFqyeg9AZ+Bi9U5Pmynys++9u4rCTiTECM8J1puBJPtZqwT72WiFdltH t81Fq5HgNUgmw6cBpazea8JpQbTmHFI= -----END CERTIFICATE-----Generated at Sun Apr 6 14:07:22 2025 by rpki-client