$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft File: iP8qX1-BdhNDU35LVLXmoW8gfqk.mft (raw, json) Hash identifier: k2P13mqNRxV6/DtiuXum3fzmoHdDdu3DGIek0+6+MOE= Subject key identifier: 96:26:C4:28:EC:00:1A:5C:FC:FB:40:3A:8E:9D:14:A5:58:79:63:9F Authority key identifier: 88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 Certificate issuer: /CN=A91CF1E7/serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft Manifest number: 012A Signing time: Thu 03 Apr 2025 03:49:35 +0000 Manifest this update: Thu 03 Apr 2025 03:49:34 +0000 Manifest next update: Thu 10 Apr 2025 03:49:34 +0000 Files and hashes: 1: iP8qX1-BdhNDU35LVLXmoW8gfqk.crl (hash: XO7NAF/EC1GiQxfq98ZhgdfQJSnjch6TKsB9nsmjd8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF1E7 Validity Not Before: Apr 3 03:49:34 2025 GMT Not After : Apr 10 03:49:34 2025 GMT Subject: CN=67ee054e-6513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2a:14:9a:12:a7:ec:9f:23:b0:0b:41:26:77: 10:8e:2b:e9:70:26:b5:a9:82:18:06:f6:e5:1b:1d: d8:13:d4:7b:f8:9b:f9:c6:31:82:3f:56:d3:3b:b4: 36:a6:8d:0c:91:14:7d:1d:8c:b2:31:97:f0:b7:86: d1:ca:bb:a9:e2:9d:19:95:37:90:25:42:a1:b3:86: f4:7b:1c:b8:b6:e9:84:12:67:1c:44:b5:e3:6a:3d: 57:9c:79:23:f4:20:6b:da:2a:e7:52:a6:12:11:0b: 4f:53:f1:bf:e2:a0:0d:b0:6e:9f:c1:5d:d0:8d:3a: 07:e6:5f:4e:b0:8d:23:3a:67:6d:22:7d:1c:3c:eb: 42:5c:fa:6c:03:1f:e7:64:e0:01:21:b3:4c:2f:ab: fc:a5:07:2f:2d:c0:e7:0d:55:58:c7:ba:59:a5:c5: 58:35:d7:fc:65:76:6a:7b:48:f4:e7:43:78:bb:c0: 0e:88:a7:dd:12:ec:d6:8c:4b:9e:79:40:d4:f6:a0: f5:89:71:13:6f:fb:1d:b7:04:6d:46:ba:d6:d9:8c: 49:17:66:99:33:90:d5:90:21:cf:be:a7:06:b4:21: cb:d3:38:46:57:0c:00:ab:5f:ac:56:e9:16:0c:6e: f6:29:20:7c:66:15:e5:bc:72:37:4a:c9:d3:14:31: de:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:26:C4:28:EC:00:1A:5C:FC:FB:40:3A:8E:9D:14:A5:58:79:63:9F X509v3 Authority Key Identifier: keyid:88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:36:92:d8:9c:54:d5:6e:bc:9d:1c:de:3e:97:6f:7d:ca:7b: de:1e:6f:d8:d3:ca:3a:d2:d8:4f:52:af:10:ea:cd:39:a9:1b: d8:7f:95:53:76:1f:ca:68:cc:26:8a:74:7e:88:f8:47:18:90: 51:42:53:b2:dc:0f:de:a8:7e:94:74:78:b4:c7:ca:46:a4:cf: 66:d1:43:8f:c6:66:e6:25:8f:0c:e7:b6:41:52:b1:fe:17:c1: 10:72:e3:f0:0c:94:50:da:a6:11:d3:24:4a:d0:ef:4d:41:b1: cd:d0:2b:c3:27:30:d6:3f:ee:77:58:cf:3e:82:ac:15:0c:f9: ab:fd:78:59:35:0a:39:a1:f4:b0:70:c4:d8:4a:f1:0c:9d:8c: fc:95:2b:82:9f:3b:31:f6:68:d0:9f:7f:01:74:56:d7:f0:35: f5:53:c2:a0:2d:75:8b:7a:9e:13:dd:fe:53:ae:9d:11:6e:c2: 38:92:7e:47:0c:3c:61:75:41:34:3d:d2:1b:98:f4:db:bf:a1: ac:ae:a8:0b:e9:1a:74:ab:40:41:cb:e4:d3:6c:df:89:39:34: 00:74:ae:24:0e:c2:77:5e:ba:02:b4:5a:cc:5b:bf:4c:b3:ed: a8:1d:91:f3:56:05:b6:56:03:81:f0:72:20:78:c9:72:6f:26: b9:d0:3b:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YxRTcxMTAvBgNVBAUTKDg4RkYyQTVGNUY4MTc2MTM0MzUzN0U0QjU0QjVFNkEx NkYyMDdFQTkwHhcNMjUwNDAzMDM0OTM0WhcNMjUwNDEwMDM0OTM0WjAYMRYwFAYD VQQDEw02N2VlMDU0ZS02NTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSoUmhKn7J8jsAtBJncQjivpcCa1qYIYBvblGx3YE9R7+Jv5xjGCP1bTO7Q2 po0MkRR9HYyyMZfwt4bRyrup4p0ZlTeQJUKhs4b0exy4tumEEmccRLXjaj1XnHkj 9CBr2irnUqYSEQtPU/G/4qANsG6fwV3QjToH5l9OsI0jOmdtIn0cPOtCXPpsAx/n ZOABIbNML6v8pQcvLcDnDVVYx7pZpcVYNdf8ZXZqe0j050N4u8AOiKfdEuzWjEue eUDU9qD1iXETb/sdtwRtRrrW2YxJF2aZM5DVkCHPvqcGtCHL0zhGVwwAq1+sVukW DG72KSB8ZhXlvHI3SsnTFDHe7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYmxCjs ABpc/PtAOo6dFKVYeWOfMB8GA1UdIwQYMBaAFIj/Kl9fgXYTQ1N+S1S15qFvIH6p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjFFNy8xREJFMUEzMjQ3 QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRoTkRVMzVMVkxYbW9XOGdm cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lQOHFYMS1CZGhORFUzNUxWTFhtb1c4Z2Zxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjFFNy8xREJFMUEzMjQ3QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRo TkRVMzVMVkxYbW9XOGdmcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7NpLYnFTVbrydHN4+l299ynveHm/Y08o60thPUq8Q6s05qRvYf5VT dh/KaMwminR+iPhHGJBRQlOy3A/eqH6UdHi0x8pGpM9m0UOPxmbmJY8M57ZBUrH+ F8EQcuPwDJRQ2qYR0yRK0O9NQbHN0CvDJzDWP+53WM8+gqwVDPmr/XhZNQo5ofSw cMTYSvEMnYz8lSuCnzsx9mjQn38BdFbX8DX1U8KgLXWLep4T3f5Trp0RbsI4kn5H DDxhdUE0PdIbmPTbv6GsrqgL6Rp0q0BBy+TTbN+JOTQAdK4kDsJ3XroCtFrMW79M s+2oHZHzVgW2VgOB8HIgeMlybya50DtN -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:39 2025 by rpki-client