$ rpki-client -vvf rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft File: McvtHUoCFwgxgH13RKxKr_JqBuY.mft (raw, json) Hash identifier: DLXTkIMF+meNusYT8EtpkM46hAcfK77zaODx0fjxKWg= Subject key identifier: 21:23:38:90:E4:E5:BE:B7:C3:6A:DA:23:02:AB:D8:0F:A8:93:0D:05 Authority key identifier: 31:CB:ED:1D:4A:02:17:08:31:80:7D:77:44:AC:4A:AF:F2:6A:06:E6 Certificate issuer: /CN=A91C607C/serialNumber=31CBED1D4A02170831807D7744AC4AAFF26A06E6 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft Manifest number: 011D Signing time: Thu 03 Apr 2025 04:01:47 +0000 Manifest this update: Thu 03 Apr 2025 04:01:46 +0000 Manifest next update: Thu 10 Apr 2025 04:01:46 +0000 Files and hashes: 1: McvtHUoCFwgxgH13RKxKr_JqBuY.crl (hash: sIVJwSZ5e623JQWXyOsJXCHX30fIMpTCxeiKuKmLnu0=) 2: 6F94DE3C628911EEA2D58C10C4F9AE02.roa (hash: 2icqnjOM7NhkNWNRK/vV/u0TPESMuw0eja9A3sbJDHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.crl rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C607C Validity Not Before: Apr 3 04:01:46 2025 GMT Not After : Apr 10 04:01:46 2025 GMT Subject: CN=67ee082b-4140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6a:89:8c:c9:06:21:cf:72:6c:d4:cf:48:c7: 3e:08:c6:d5:8e:1a:cd:34:43:8f:2a:af:7c:0e:5c: d1:ee:5b:05:1e:5b:f7:72:ee:f4:21:e9:72:d6:16: 4c:f7:0c:85:b1:31:73:f4:e3:5a:10:bc:d9:03:45: 2a:a6:6e:b7:7f:b5:b5:41:40:37:80:04:d1:8c:1a: a9:ec:3a:e9:8b:25:b2:a6:78:4e:98:33:9a:f5:99: 5e:94:e3:e3:7e:ea:f6:93:5e:b6:3e:6f:85:96:57: eb:ab:9f:e3:b6:45:8e:b6:2c:5a:3b:0a:bd:b6:c0: eb:b0:32:fa:17:31:e5:1e:0b:ef:ad:15:22:ca:70: 82:bc:9a:5c:0b:5c:d4:1c:07:70:1a:4e:9e:94:86: 7a:31:44:a2:90:3e:e4:e2:c7:05:38:a8:46:4a:a6: 93:d3:9e:19:bc:36:4c:ab:0c:70:38:2a:2f:28:5e: 76:07:37:63:26:b0:4e:4f:af:36:b8:e5:2a:d2:6c: aa:b2:96:f9:16:0a:c7:77:fa:cb:5a:6c:ef:7a:a1: ca:14:23:06:ac:49:ac:7f:50:85:c5:b3:1c:dc:51: 23:23:b2:43:bd:be:70:60:34:9f:bf:f8:4f:ca:85: 97:7a:d8:b0:7f:3f:13:8c:60:98:61:a8:63:c3:e8: fd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:23:38:90:E4:E5:BE:B7:C3:6A:DA:23:02:AB:D8:0F:A8:93:0D:05 X509v3 Authority Key Identifier: keyid:31:CB:ED:1D:4A:02:17:08:31:80:7D:77:44:AC:4A:AF:F2:6A:06:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a9:94:cd:4e:2a:84:ec:ca:ee:f9:40:24:c6:8e:90:f5:59: 22:3c:09:9f:91:31:9a:58:20:db:1d:37:bb:8a:9d:9b:2d:87: f5:07:fa:05:db:32:c1:59:f2:98:ac:f7:bd:81:2e:88:85:79: 71:d4:d5:f8:64:33:23:47:4e:cb:28:29:f4:d7:96:e9:c0:c9: b5:bc:dd:43:aa:68:77:7d:ec:59:9a:d3:c7:dc:3f:55:cc:48: 49:d7:56:e4:b6:02:a2:5e:55:0f:17:47:05:af:35:3f:3d:6d: 43:da:e7:3d:f5:7f:e8:5a:de:cc:48:eb:ce:46:d0:75:ab:6b: 45:21:67:30:70:f0:f8:7e:f4:8b:7e:6c:4d:fd:f6:b9:95:cb: d9:40:62:83:23:31:5a:5c:1f:21:b6:af:b9:08:79:c6:9f:19: 69:9a:02:e2:9f:35:c9:34:38:6f:17:15:4c:ed:99:7c:db:e2: 9f:e4:6d:67:a3:70:97:80:17:04:42:8d:f5:9d:81:a2:f7:29: 4e:38:ca:0c:a0:3b:1b:cc:ad:f6:db:1e:e0:12:ac:56:a6:91: da:1b:51:94:bc:eb:ee:83:a0:ca:94:c3:d5:be:55:81:9a:1c: 04:94:7d:5b:f4:ff:37:47:bc:ac:b1:13:92:d7:a2:bb:6e:31: d5:20:e2:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwN0MxMTAvBgNVBAUTKDMxQ0JFRDFENEEwMjE3MDgzMTgwN0Q3NzQ0QUM0QUFG RjI2QTA2RTYwHhcNMjUwNDAzMDQwMTQ2WhcNMjUwNDEwMDQwMTQ2WjAYMRYwFAYD VQQDEw02N2VlMDgyYi00MTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2qJjMkGIc9ybNTPSMc+CMbVjhrNNEOPKq98DlzR7lsFHlv3cu70Iely1hZM 9wyFsTFz9ONaELzZA0Uqpm63f7W1QUA3gATRjBqp7DrpiyWypnhOmDOa9ZlelOPj fur2k162Pm+Fllfrq5/jtkWOtixaOwq9tsDrsDL6FzHlHgvvrRUiynCCvJpcC1zU HAdwGk6elIZ6MUSikD7k4scFOKhGSqaT054ZvDZMqwxwOCovKF52BzdjJrBOT682 uOUq0myqspb5FgrHd/rLWmzveqHKFCMGrEmsf1CFxbMc3FEjI7JDvb5wYDSfv/hP yoWXetiwfz8TjGCYYahjw+j9ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEjOJDk 5b63w2raIwKr2A+okw0FMB8GA1UdIwQYMBaAFDHL7R1KAhcIMYB9d0SsSq/yagbm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA3Qy9ENEREM0E4ODYy ODgxMUVFOTY0NEE5MENDNEY5QUUwMi9NY3Z0SFVvQ0Z3Z3hnSDEzUkt4S3JfSnFC dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01jdnRIVW9DRndneGdIMTNSS3hLcl9KcUJ1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjA3Qy9ENEREM0E4ODYyODgxMUVFOTY0NEE5MENDNEY5QUUwMi9NY3Z0SFVvQ0Z3 Z3hnSDEzUkt4S3JfSnFCdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8qZTNTiqE7Mru+UAkxo6Q9VkiPAmfkTGaWCDbHTe7ip2bLYf1B/oF 2zLBWfKYrPe9gS6IhXlx1NX4ZDMjR07LKCn015bpwMm1vN1Dqmh3fexZmtPH3D9V zEhJ11bktgKiXlUPF0cFrzU/PW1D2uc99X/oWt7MSOvORtB1q2tFIWcwcPD4fvSL fmxN/fa5lcvZQGKDIzFaXB8htq+5CHnGnxlpmgLinzXJNDhvFxVM7Zl82+Kf5G1n o3CXgBcEQo31nYGi9ylOOMoMoDsbzK322x7gEqxWppHaG1GUvOvug6DKlMPVvlWB mhwElH1b9P83R7yssROS16K7bjHVIOLA -----END CERTIFICATE-----Generated at Fri Apr 4 21:58:10 2025 by rpki-client