$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft File: 8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft (raw, json) Hash identifier: 1mLXhfH4xVdI2i5eMOxqqLAec1epDYmRDQlapqRkYc0= Subject key identifier: AB:B8:40:C0:01:9C:CB:E0:E2:EA:8E:D1:77:AF:75:07:6A:21:1F:21 Authority key identifier: F2:E4:65:7F:B0:B1:51:42:73:C5:0E:EB:F9:0F:44:16:FD:A5:4B:07 Certificate issuer: /CN=A91C9916/serialNumber=F2E4657FB0B1514273C50EEBF90F4416FDA54B07 Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft Manifest number: 01BA Signing time: Sat 29 Mar 2025 02:34:06 +0000 Manifest this update: Sat 29 Mar 2025 02:34:05 +0000 Manifest next update: Sat 05 Apr 2025 02:34:05 +0000 Files and hashes: 1: 8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.crl (hash: o9d/wQOe+/tTC6hVqothCyt0woRdoUKYZrhZTTd0MIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.crl rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9916 Validity Not Before: Mar 29 02:34:05 2025 GMT Not After : Apr 5 02:34:05 2025 GMT Subject: CN=67e75c1d-0f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:75:d6:9d:af:1c:0a:60:c4:33:b2:48:89:ff: 39:31:bc:86:1b:78:cb:11:63:cf:50:fa:17:63:be: c3:b9:80:2c:d1:04:74:bc:f4:80:44:c0:c7:0d:3f: 71:35:3e:56:60:77:25:4f:71:92:4d:48:31:76:2b: f0:f8:89:37:0a:d7:2f:32:f9:16:c1:a5:a3:8c:49: 42:db:d1:0c:6c:4f:8b:f5:93:fa:d9:40:80:71:dc: d7:9e:ac:5e:3d:d8:a5:5d:46:a7:d4:48:83:d8:ab: 3c:7b:db:8d:13:2e:75:72:67:bb:43:1d:45:7c:6e: 14:31:14:89:62:bb:ad:01:d1:dd:5c:55:b8:43:a0: 48:b1:ac:bf:49:0a:90:0f:42:1a:93:bb:55:ce:df: f1:6d:dd:32:ed:ef:87:fc:cc:24:cf:43:a0:8d:44: d0:83:b6:5e:ba:a5:8d:00:e9:c4:16:ce:58:26:77: 4e:d1:b7:f4:3e:ee:4d:f3:5b:b2:57:e6:fc:71:01: 77:50:07:e1:ab:6b:e4:4c:ce:e4:40:59:95:aa:bf: 6f:aa:c1:52:b4:3b:b1:98:52:11:93:d1:1d:00:bb: 8a:a9:33:83:1f:87:cf:a5:3b:7e:de:35:db:f0:f6: 6e:a0:7d:50:9f:ef:de:4a:ee:7d:ea:fe:39:29:6f: b2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B8:40:C0:01:9C:CB:E0:E2:EA:8E:D1:77:AF:75:07:6A:21:1F:21 X509v3 Authority Key Identifier: keyid:F2:E4:65:7F:B0:B1:51:42:73:C5:0E:EB:F9:0F:44:16:FD:A5:4B:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:e8:24:cb:97:8b:7d:cc:3d:b4:1f:e6:ee:61:1c:33:2d:da: 52:3e:d9:d7:44:2d:3c:fd:c7:89:6c:fa:84:3d:13:c6:20:db: 69:40:68:61:f7:19:de:69:5c:e3:04:87:e7:db:6b:27:e8:24: ab:e4:49:a3:21:c0:02:cf:0d:37:bf:bb:64:70:25:1b:68:1e: 29:fb:b9:a2:20:ea:18:37:51:87:11:11:27:d4:e5:0d:7d:7f: 44:74:49:bd:f4:f1:04:de:30:d1:5a:97:ab:e9:02:fc:32:19: 2d:6f:56:69:9c:82:df:db:14:bf:85:b4:65:65:4a:a5:1d:3d: 8c:95:0d:2a:fa:79:ae:d4:b7:bf:a2:b0:b7:fb:58:00:16:5f: c9:ee:0c:47:9d:cd:28:c4:54:20:76:0b:97:29:4c:91:fb:51: e1:79:ff:4d:b8:44:43:35:10:c9:64:fa:46:be:b2:83:f4:ce: 64:20:fc:0f:91:66:39:f5:92:e4:92:5e:ac:b4:bc:93:da:fa: b1:07:d6:92:6b:fd:7d:ea:10:9a:28:20:50:9c:21:75:30:59: ee:40:f8:3e:11:71:8b:d2:ca:c1:4d:1f:c1:74:2b:42:6e:56: d4:50:a7:34:2f:9b:b6:a0:f9:bf:8f:d9:1e:0b:8b:01:cb:1a: 26:63:ae:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk5MTYxMTAvBgNVBAUTKEYyRTQ2NTdGQjBCMTUxNDI3M0M1MEVFQkY5MEY0NDE2 RkRBNTRCMDcwHhcNMjUwMzI5MDIzNDA1WhcNMjUwNDA1MDIzNDA1WjAYMRYwFAYD VQQDEw02N2U3NWMxZC0wZjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXXWna8cCmDEM7JIif85MbyGG3jLEWPPUPoXY77DuYAs0QR0vPSARMDHDT9x NT5WYHclT3GSTUgxdivw+Ik3CtcvMvkWwaWjjElC29EMbE+L9ZP62UCAcdzXnqxe PdilXUan1EiD2Ks8e9uNEy51cme7Qx1FfG4UMRSJYrutAdHdXFW4Q6BIsay/SQqQ D0Iak7tVzt/xbd0y7e+H/Mwkz0OgjUTQg7ZeuqWNAOnEFs5YJndO0bf0Pu5N81uy V+b8cQF3UAfhq2vkTM7kQFmVqr9vqsFStDuxmFIRk9EdALuKqTODH4fPpTt+3jXb 8PZuoH1Qn+/eSu596v45KW+yTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKu4QMAB nMvg4uqO0XevdQdqIR8hMB8GA1UdIwQYMBaAFPLkZX+wsVFCc8UO6/kPRBb9pUsH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTkxNi8yMzlEQzQyNjYx OEIxMUVEODhBQkJDMjJDNEY5QUUwMi84dVJsZjdDeFVVSnp4UTdyLVE5RUZ2MmxT d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh1UmxmN0N4VVVKenhRN3ItUTlFRnYybFN3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTkxNi8yMzlEQzQyNjYxOEIxMUVEODhBQkJDMjJDNEY5QUUwMi84dVJsZjdDeFVV Snp4UTdyLVE5RUZ2MmxTd2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv6CTLl4t9zD20H+buYRwzLdpSPtnXRC08/ceJbPqEPRPGINtpQGhh 9xneaVzjBIfn22sn6CSr5EmjIcACzw03v7tkcCUbaB4p+7miIOoYN1GHEREn1OUN fX9EdEm99PEE3jDRWper6QL8Mhktb1ZpnILf2xS/hbRlZUqlHT2MlQ0q+nmu1Le/ orC3+1gAFl/J7gxHnc0oxFQgdguXKUyR+1Hhef9NuERDNRDJZPpGvrKD9M5kIPwP kWY59ZLkkl6stLyT2vqxB9aSa/196hCaKCBQnCF1MFnuQPg+EXGL0srBTR/BdCtC blbUUKc0L5u2oPm/j9keC4sByxomY67O -----END CERTIFICATE-----Generated at Fri Apr 4 18:28:31 2025 by rpki-client