$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft File: 1icW92HxiNVvoRf53JS-QUEEpoE.mft (raw, json) Hash identifier: S0oV2JClcm4NqiHT5rsNjyCwZwJNsOgm71RGnJ7I2sc= Subject key identifier: BB:53:5E:D6:10:C6:4A:1F:B3:E6:8A:24:73:4F:E1:95:1D:D7:89:3B Authority key identifier: D6:27:16:F7:61:F1:88:D5:6F:A1:17:F9:DC:94:BE:41:41:04:A6:81 Certificate issuer: /CN=A91C5D53/serialNumber=D62716F761F188D56FA117F9DC94BE414104A681 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft Manifest number: 43 Signing time: Thu 03 Apr 2025 06:41:22 +0000 Manifest this update: Thu 03 Apr 2025 06:41:21 +0000 Manifest next update: Thu 10 Apr 2025 06:41:21 +0000 Files and hashes: 1: 1icW92HxiNVvoRf53JS-QUEEpoE.crl (hash: w49jsivRQpDnXFGwasb8embMQGzC3FP7peh4h+kS+UM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.crl rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:41:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D53 Validity Not Before: Apr 3 06:41:21 2025 GMT Not After : Apr 10 06:41:21 2025 GMT Subject: CN=67ee2d91-97cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b3:75:c5:e2:4e:c9:52:6d:ae:af:d2:a2:65: f7:9b:48:87:be:5d:1d:b3:aa:99:d6:6e:9d:7e:77: ce:d0:23:e5:f8:14:32:8c:a2:f7:51:96:ff:70:a6: 3f:4f:bd:7b:72:66:bd:d0:31:4e:96:5c:2a:82:ba: 32:81:25:f3:ec:65:f0:d6:31:4a:5b:33:b5:f6:e6: 4c:50:29:d2:9f:f9:86:68:c3:ec:1b:0f:f8:c9:4e: b4:d9:14:15:3b:7e:e2:fb:57:5d:cb:15:4d:f8:54: c8:f0:da:31:ef:5e:50:8c:81:d4:8b:04:8c:47:8d: 65:4f:5e:06:a5:ca:ef:df:4e:3e:1e:7d:9c:a6:2f: 82:6d:6e:a7:87:12:53:79:bb:59:0f:c7:a0:a7:6e: 66:b9:bb:1e:c2:6b:dd:7c:af:a4:c0:a1:96:5f:28: 69:03:ec:f9:44:f4:77:cf:79:8a:0a:0d:1f:91:0f: 4a:43:01:7c:fd:21:fa:e9:1e:ee:cf:51:81:33:2c: 11:d6:13:98:8a:51:cb:7c:b9:f5:01:dc:69:67:9a: b8:1c:ab:50:a6:6f:92:b4:21:86:9f:89:a6:86:47: a2:e1:73:cc:ef:51:e6:e1:9c:6b:03:4c:11:16:89: 13:75:0a:04:f7:81:a8:0c:74:11:b9:7a:84:6f:cf: b5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:53:5E:D6:10:C6:4A:1F:B3:E6:8A:24:73:4F:E1:95:1D:D7:89:3B X509v3 Authority Key Identifier: keyid:D6:27:16:F7:61:F1:88:D5:6F:A1:17:F9:DC:94:BE:41:41:04:A6:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:e4:eb:95:20:53:5c:91:7f:75:17:b4:ba:d0:11:7e:0e:6e: 52:35:ee:ed:c1:ce:2d:93:b6:23:7c:89:a7:36:e6:04:ff:ae: 4c:e4:2d:6d:07:d9:2a:7a:10:a2:7f:b7:36:a0:21:e4:7d:da: 05:c7:bf:47:27:e2:84:ec:16:1f:53:01:d8:c7:69:a8:10:3b: 26:83:93:f7:0b:3d:6c:06:3c:ab:e9:f1:b8:ba:64:64:1d:c7: b4:66:db:14:e1:14:30:44:e4:63:32:eb:0d:a9:3f:ff:58:0e: 4c:9e:4b:1c:0a:06:61:ed:72:bb:fe:6e:24:41:47:47:53:97: a7:80:a9:d8:96:40:d3:31:34:c0:8f:11:53:00:06:7c:39:b6: 97:27:9d:ce:76:c1:ff:de:14:00:3a:9e:e6:ad:d3:74:23:36: 59:e3:31:ec:8d:91:c3:de:ae:9d:53:3c:e6:f2:86:0b:52:a9: ba:36:10:6c:24:cc:64:af:70:4d:69:44:54:ee:55:e4:dc:5c: 1b:d9:dd:06:e7:17:db:93:e4:b8:e9:64:7d:60:6e:1f:3c:90: 8e:a7:27:09:e6:d9:a7:79:fa:f1:26:4a:78:e7:cc:12:07:cc: 2f:84:03:c1:95:d7:ec:1d:fb:73:2b:81:b4:7c:37:3a:ee:f4: 1f:f4:60:34 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NUQ1MzExMC8GA1UEBRMoRDYyNzE2Rjc2MUYxODhENTZGQTExN0Y5REM5NEJFNDE0 MTA0QTY4MTAeFw0yNTA0MDMwNjQxMjFaFw0yNTA0MTAwNjQxMjFaMBgxFjAUBgNV BAMTDTY3ZWUyZDkxLTk3Y2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFs3XF4k7JUm2ur9KiZfebSIe+XR2zqpnWbp1+d87QI+X4FDKMovdRlv9wpj9P vXtyZr3QMU6WXCqCujKBJfPsZfDWMUpbM7X25kxQKdKf+YZow+wbD/jJTrTZFBU7 fuL7V13LFU34VMjw2jHvXlCMgdSLBIxHjWVPXgalyu/fTj4efZymL4JtbqeHElN5 u1kPx6Cnbma5ux7Ca918r6TAoZZfKGkD7PlE9HfPeYoKDR+RD0pDAXz9IfrpHu7P UYEzLBHWE5iKUct8ufUB3Glnmrgcq1Cmb5K0IYafiaaGR6Lhc8zvUebhnGsDTBEW iRN1CgT3gagMdBG5eoRvz7W3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUu1Ne1hDG Sh+z5ookc0/hlR3XiTswHwYDVR0jBBgwFoAU1icW92HxiNVvoRf53JS+QUEEpoEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1RDUzLzA1RkZDMDBFQUM4 NDExRUY4MjE0OTcyQkM0RjlBRTAyLzFpY1c5Mkh4aU5Wdm9SZjUzSlMtUVVFRXBv RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMWljVzkySHhpTlZ2b1JmNTNKUy1RVUVFcG9FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1 RDUzLzA1RkZDMDBFQUM4NDExRUY4MjE0OTcyQkM0RjlBRTAyLzFpY1c5Mkh4aU5W dm9SZjUzSlMtUVVFRXBvRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACnk65UgU1yRf3UXtLrQEX4OblI17u3Bzi2TtiN8iac25gT/rkzkLW0H 2Sp6EKJ/tzagIeR92gXHv0cn4oTsFh9TAdjHaagQOyaDk/cLPWwGPKvp8bi6ZGQd x7Rm2xThFDBE5GMy6w2pP/9YDkyeSxwKBmHtcrv+biRBR0dTl6eAqdiWQNMxNMCP EVMABnw5tpcnnc52wf/eFAA6nuat03QjNlnjMeyNkcPerp1TPObyhgtSqbo2EGwk zGSvcE1pRFTuVeTcXBvZ3QbnF9uT5LjpZH1gbh88kI6nJwnm2ad5+vEmSnjnzBIH zC+EA8GV1+wd+3MrgbR8Nzru9B/0YDQ= -----END CERTIFICATE-----Generated at Fri Apr 4 22:04:25 2025 by rpki-client