$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft File: utY-wFoDGPl_MVby4gWcYZPOOAo.mft (raw, json) Hash identifier: fRQypVXMv/kWJSm8be+BeHHp2b0KcAX1FQFq0ltOqfk= Subject key identifier: 41:8A:D5:FC:6A:3F:6A:D1:C3:01:BA:7A:1A:67:2F:E1:B3:EE:99:EB Authority key identifier: BA:D6:3E:C0:5A:03:18:F9:7F:31:56:F2:E2:05:9C:61:93:CE:38:0A Certificate issuer: /CN=A91D5A49/serialNumber=BAD63EC05A0318F97F3156F2E2059C6193CE380A Certificate serial: 01C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft Manifest number: 01C1 Signing time: Sat 29 Mar 2025 02:31:36 +0000 Manifest this update: Sat 29 Mar 2025 02:31:36 +0000 Manifest next update: Sat 05 Apr 2025 02:31:36 +0000 Files and hashes: 1: utY-wFoDGPl_MVby4gWcYZPOOAo.crl (hash: IK/g5fFVAl35O1YPTrZXDkI00TBJdW8O8DsavfKsrfA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.crl rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:31:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5A49 Validity Not Before: Mar 29 02:31:36 2025 GMT Not After : Apr 5 02:31:36 2025 GMT Subject: CN=67e75b88-557e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:dd:b4:6c:72:0b:11:cd:3b:e6:fb:ee:f0:cb: e9:ef:68:fa:ba:df:af:ff:73:95:fa:89:83:fb:e1: ad:3f:03:32:b0:02:7f:0a:6d:f0:30:f5:e9:59:4a: a6:0d:0c:d0:73:ed:77:59:30:d9:1e:de:1d:c2:e3: ab:97:45:4c:77:ed:dd:3e:7c:2c:2d:aa:b7:12:0a: 8d:75:b7:ab:93:95:f9:bf:e0:c3:34:65:51:47:06: c1:59:4e:da:4d:45:ae:f1:1b:4f:62:93:db:0b:c2: 74:af:93:e2:be:1a:52:ed:72:db:be:d9:df:49:1a: 81:8c:a0:56:e1:80:9e:a8:d2:f8:86:22:c8:54:6b: 9d:cf:26:33:c9:da:56:8f:10:28:5c:b8:1f:60:91: 3a:90:c2:72:3d:92:b8:9b:6b:57:7e:35:b2:83:10: ea:05:20:af:94:4b:90:bf:e3:bb:a8:78:b0:d4:ba: 5a:31:bc:5e:1e:c1:49:f9:6a:8a:bd:b6:45:31:13: 38:08:46:a5:29:68:f3:98:be:12:a4:e8:a7:3f:5f: 4d:eb:7a:7c:84:ca:bc:fd:82:83:11:13:97:54:d3: 48:40:74:a6:27:65:af:29:8e:73:cf:14:90:c3:d6: 73:60:9c:4d:83:e1:0c:c6:c5:6d:4d:83:ba:3d:ea: 54:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8A:D5:FC:6A:3F:6A:D1:C3:01:BA:7A:1A:67:2F:E1:B3:EE:99:EB X509v3 Authority Key Identifier: keyid:BA:D6:3E:C0:5A:03:18:F9:7F:31:56:F2:E2:05:9C:61:93:CE:38:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:99:b8:73:00:00:de:78:45:46:f8:d6:83:50:25:b7:28:ec: 7c:84:e8:42:5c:22:93:87:3b:1d:ec:2d:09:fc:44:9c:c8:09: 4b:c5:59:6d:b9:eb:4d:42:df:12:75:79:a2:2b:08:1a:a1:bd: dd:e3:d6:d5:42:4c:71:1d:20:7e:aa:48:60:7e:81:7e:9f:54: 51:3a:ad:91:89:07:4f:3a:f5:5f:38:64:69:cf:e5:ba:2c:78: c8:a2:52:7a:c0:3f:19:fe:15:22:58:43:b2:24:0c:ea:6e:7a: 7c:46:be:8a:27:35:7f:0d:45:46:d2:fc:a4:ae:11:9e:4f:45: c2:bc:21:1b:d8:4c:8a:28:02:34:ce:a8:c8:b6:7c:6c:02:e4: e8:1b:14:30:7b:c9:1d:8f:48:ab:ce:bb:cc:6e:ba:1c:6a:93: 6f:52:c2:b0:57:13:fc:6b:fe:04:22:2a:b9:14:02:2f:d0:d7: dc:90:af:e1:08:09:71:f3:18:85:b8:6a:76:bc:85:dd:8b:7a: 09:4d:01:09:22:8b:2d:de:17:48:29:cd:01:e7:53:74:de:9a: ce:79:9c:59:66:2f:d6:ae:37:44:00:ba:f9:7e:f7:ad:8a:26: 0b:2b:1c:23:5a:53:74:15:f6:9c:3f:d3:9a:61:67:2e:3f:2b: 8b:41:3c:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVBNDkxMTAvBgNVBAUTKEJBRDYzRUMwNUEwMzE4Rjk3RjMxNTZGMkUyMDU5QzYx OTNDRTM4MEEwHhcNMjUwMzI5MDIzMTM2WhcNMjUwNDA1MDIzMTM2WjAYMRYwFAYD VQQDEw02N2U3NWI4OC01NTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy920bHILEc075vvu8Mvp72j6ut+v/3OV+omD++GtPwMysAJ/Cm3wMPXpWUqm DQzQc+13WTDZHt4dwuOrl0VMd+3dPnwsLaq3EgqNdberk5X5v+DDNGVRRwbBWU7a TUWu8RtPYpPbC8J0r5PivhpS7XLbvtnfSRqBjKBW4YCeqNL4hiLIVGudzyYzydpW jxAoXLgfYJE6kMJyPZK4m2tXfjWygxDqBSCvlEuQv+O7qHiw1LpaMbxeHsFJ+WqK vbZFMRM4CEalKWjzmL4SpOinP19N63p8hMq8/YKDEROXVNNIQHSmJ2WvKY5zzxSQ w9ZzYJxNg+EMxsVtTYO6PepUgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGK1fxq P2rRwwG6ehpnL+Gz7pnrMB8GA1UdIwQYMBaAFLrWPsBaAxj5fzFW8uIFnGGTzjgK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUE0OS9GOTEzMURBNjU4 QTYxMUVEQTJCQjIwNjBDNEY5QUUwMi91dFktd0ZvREdQbF9NVmJ5NGdXY1laUE9P QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V0WS13Rm9ER1BsX01WYnk0Z1djWVpQT09Bby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUE0OS9GOTEzMURBNjU4QTYxMUVEQTJCQjIwNjBDNEY5QUUwMi91dFktd0ZvREdQ bF9NVmJ5NGdXY1laUE9PQW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTmbhzAADeeEVG+NaDUCW3KOx8hOhCXCKThzsd7C0J/EScyAlLxVlt uetNQt8SdXmiKwgaob3d49bVQkxxHSB+qkhgfoF+n1RROq2RiQdPOvVfOGRpz+W6 LHjIolJ6wD8Z/hUiWEOyJAzqbnp8Rr6KJzV/DUVG0vykrhGeT0XCvCEb2EyKKAI0 zqjItnxsAuToGxQwe8kdj0irzrvMbrocapNvUsKwVxP8a/4EIiq5FAIv0NfckK/h CAlx8xiFuGp2vIXdi3oJTQEJIost3hdIKc0B51N03prOeZxZZi/WrjdEALr5fvet iiYLKxwjWlN0FfacP9OaYWcuPyuLQTwu -----END CERTIFICATE-----Generated at Fri Apr 4 22:15:11 2025 by rpki-client