$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft File: 4UpZOzEqmIVz16Xd-uB_kSaTyII.mft (raw, json) Hash identifier: PzDXUzGh2AcN4Dq4fPfirWhdRcyRGI8Gnx+BI1Y2so0= Subject key identifier: F7:9E:EB:04:05:DD:73:81:6C:1B:69:FB:48:C0:B2:28:6A:F1:86:AF Authority key identifier: E1:4A:59:3B:31:2A:98:85:73:D7:A5:DD:FA:E0:7F:91:26:93:C8:82 Certificate issuer: /CN=A91D4ACD/serialNumber=E14A593B312A988573D7A5DDFAE07F912693C882 Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft Manifest number: 6F Signing time: Fri 11 Apr 2025 06:06:40 +0000 Manifest this update: Fri 11 Apr 2025 06:06:39 +0000 Manifest next update: Fri 18 Apr 2025 06:06:39 +0000 Files and hashes: 1: 4UpZOzEqmIVz16Xd-uB_kSaTyII.crl (hash: U+7SfR2z+RkUETQO5SLcq9mLJj2JGeosSEQqswZuoB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.crl rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 06:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4ACD, serialNumber=E14A593B312A988573D7A5DDFAE07F912693C882 Validity Not Before: Apr 11 06:06:39 2025 GMT Not After : Apr 18 06:06:39 2025 GMT Subject: CN=67f8b16f-c129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ae:53:d9:4f:61:18:1a:b0:96:14:75:21:8a: a3:36:01:64:0a:5e:38:93:32:bf:dd:86:5f:63:53: d8:ad:d7:94:7a:69:d0:b9:5e:ef:7b:56:79:66:27: a6:63:b1:59:eb:4f:bf:0a:9c:d8:be:98:b6:50:e9: b4:6b:f4:8c:fa:d9:da:a4:18:81:43:eb:5c:b1:23: 05:86:bc:2f:9d:5d:da:30:56:cf:42:ad:8b:08:7c: cc:be:46:c9:09:9d:01:79:7a:88:1e:24:3b:6b:a3: 10:0f:63:c0:df:a7:f8:cf:8b:4d:9c:27:d5:64:65: 58:c3:f8:0c:e6:25:97:49:78:1d:79:b5:19:f5:7e: aa:dc:6c:09:48:ed:db:c2:c4:01:f1:90:af:51:0f: bc:2e:78:a2:3f:41:56:e0:df:5b:51:a7:7f:8d:02: 5a:38:2b:8a:9f:93:47:13:16:93:54:12:5d:03:78: 22:bb:6f:c4:c5:8f:ca:59:5e:75:fb:e0:05:dd:fc: d3:c2:c3:3a:67:f5:a0:c1:6d:81:b8:cd:24:d4:0d: 4c:93:78:41:c5:52:62:78:e9:61:f7:f5:13:81:19: cb:59:a5:37:74:a7:fb:04:c3:d1:97:95:47:ab:ae: 9e:05:43:c3:ce:bb:62:d6:3d:7f:8c:12:df:33:4a: ae:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:9E:EB:04:05:DD:73:81:6C:1B:69:FB:48:C0:B2:28:6A:F1:86:AF X509v3 Authority Key Identifier: keyid:E1:4A:59:3B:31:2A:98:85:73:D7:A5:DD:FA:E0:7F:91:26:93:C8:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:f0:b3:42:fb:49:24:5f:a4:a7:56:65:c1:8a:c5:27:2a:9a: 0a:16:9b:d9:7f:de:90:64:3b:39:7e:4d:e2:10:eb:bc:3a:3a: f4:bf:f0:3c:4a:3f:1e:91:56:09:13:d7:0f:41:6d:62:18:10: e6:0b:c4:4c:ad:2c:32:84:17:da:bd:5e:c4:6b:88:ee:25:60: e4:a2:0d:a4:25:f7:a1:ef:4a:6e:a9:c7:3f:24:26:4c:a4:04: ea:b9:fc:28:c7:cd:7a:b8:a4:aa:bc:8d:34:50:ca:5a:03:ab: 6f:78:c1:33:cd:52:cf:04:c6:96:da:d4:6c:bd:35:dc:1e:90: b4:e5:76:66:a1:0d:b8:a2:e3:d5:87:85:81:81:91:18:1a:47: f7:28:46:df:56:b5:c1:78:e4:56:ea:8b:d8:00:61:a9:30:7a: 63:d8:65:67:a4:b0:79:90:5f:03:b9:84:cf:87:e6:4e:ec:96: 8e:a1:fc:fb:cb:c8:ac:23:11:f0:4f:cc:b8:bc:75:8f:ed:64: 75:21:a8:bf:14:63:f5:48:6a:93:97:9c:f8:f0:4e:2c:50:a8: 6f:00:2d:9a:22:cc:0b:f8:75:17:dd:b5:d7:10:bb:4a:91:52: 8e:79:06:00:5f:ab:4b:36:c5:be:de:06:7d:21:34:37:75:f7: 11:37:b4:16 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NEFDRDExMC8GA1UEBRMoRTE0QTU5M0IzMTJBOTg4NTczRDdBNURERkFFMDdGOTEy NjkzQzg4MjAeFw0yNTA0MTEwNjA2MzlaFw0yNTA0MTgwNjA2MzlaMBgxFjAUBgNV BAMTDTY3ZjhiMTZmLWMxMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDarlPZT2EYGrCWFHUhiqM2AWQKXjiTMr/dhl9jU9it15R6adC5Xu97VnlmJ6Zj sVnrT78KnNi+mLZQ6bRr9Iz62dqkGIFD61yxIwWGvC+dXdowVs9CrYsIfMy+RskJ nQF5eogeJDtroxAPY8Dfp/jPi02cJ9VkZVjD+AzmJZdJeB15tRn1fqrcbAlI7dvC xAHxkK9RD7wueKI/QVbg31tRp3+NAlo4K4qfk0cTFpNUEl0DeCK7b8TFj8pZXnX7 4AXd/NPCwzpn9aDBbYG4zSTUDUyTeEHFUmJ46WH39ROBGctZpTd0p/sEw9GXlUer rp4FQ8POu2LWPX+MEt8zSq53AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU957rBAXd c4FsG2n7SMCyKGrxhq8wHwYDVR0jBBgwFoAU4UpZOzEqmIVz16Xd+uB/kSaTyIIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0QUNELzI5MDMxQTNBNzU2 RTExRUY5Q0E0NkU1MUM0RjlBRTAyLzRVcFpPekVxbUlWejE2WGQtdUJfa1NhVHlJ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNFVwWk96RXFtSVZ6MTZYZC11Ql9rU2FUeUlJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 QUNELzI5MDMxQTNBNzU2RTExRUY5Q0E0NkU1MUM0RjlBRTAyLzRVcFpPekVxbUlW ejE2WGQtdUJfa1NhVHlJSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEzws0L7SSRfpKdWZcGKxScqmgoWm9l/3pBkOzl+TeIQ67w6OvS/8DxK Px6RVgkT1w9BbWIYEOYLxEytLDKEF9q9XsRriO4lYOSiDaQl96HvSm6pxz8kJkyk BOq5/CjHzXq4pKq8jTRQyloDq294wTPNUs8Expba1Gy9NdwekLTldmahDbii49WH hYGBkRgaR/coRt9WtcF45Fbqi9gAYakwemPYZWeksHmQXwO5hM+H5k7slo6h/PvL yKwjEfBPzLi8dY/tZHUhqL8UY/VIapOXnPjwTixQqG8ALZoizAv4dRfdtdcQu0qR Uo55BgBfq0s2xb7eBn0hNDd19xE3tBY= -----END CERTIFICATE-----Generated at Sat Apr 12 19:16:49 2025 by rpki-client