$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft File: pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft (raw, json) Hash identifier: cu1LxME/L0lkRfOxXam3D+0x+i8tKcFaLGTu5A8c+Z4= Subject key identifier: 77:DE:47:C9:F5:3C:55:81:16:A7:67:C4:62:87:8C:BF:85:27:4C:C8 Authority key identifier: A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 Certificate issuer: /CN=A91D6552/serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Certificate serial: 346A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft Manifest number: 346A Signing time: Sat 12 Apr 2025 14:53:49 +0000 Manifest this update: Sat 12 Apr 2025 14:53:49 +0000 Manifest next update: Sat 19 Apr 2025 14:53:49 +0000 Files and hashes: 1: pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl (hash: Kb/zyD84VkqnrGObNmb3TnYL2S/aRR9bKv08S8KSIIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 14:53:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13418 (0x346a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6552, serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Validity Not Before: Apr 12 14:53:49 2025 GMT Not After : Apr 19 14:53:49 2025 GMT Subject: CN=67fa7e7d-787c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:04:3c:14:2f:08:26:64:ae:b9:eb:f3:b3:2f: d0:fa:7f:43:4e:31:37:6c:c9:11:37:83:7f:4d:01: ef:dc:e7:db:cf:22:b7:a9:fc:12:5c:22:c1:8b:2d: f3:e2:ee:ee:6b:9b:01:ee:fc:d5:b8:4d:4f:30:49: fd:31:15:38:ff:6b:c4:b4:b9:ff:64:15:19:6e:92: fd:ed:e2:43:8a:70:f1:87:e3:ae:82:01:49:e4:fe: a2:2e:a0:b6:42:e8:59:69:e5:2f:54:86:02:26:53: 7f:ef:83:4c:94:84:7e:12:01:13:48:3e:69:e7:be: 14:88:7e:53:6d:75:67:59:fa:d7:cc:67:f2:77:bd: 65:f2:fd:fb:91:53:e0:79:4a:83:c5:76:af:8c:3a: 4a:34:c9:98:8a:0d:aa:44:6a:64:fb:f0:44:52:d8: 8a:8e:3e:c2:b9:aa:47:15:ac:65:db:12:35:0d:2b: 5a:11:6e:ce:4e:75:8b:20:3a:4c:5b:f5:5a:33:2c: e2:bc:30:c1:01:a1:6f:33:32:1d:ea:04:ad:f3:dd: 19:bc:ab:de:ff:25:cf:61:04:68:c0:d3:11:b8:f8: fa:a4:32:0c:6d:dd:1b:d9:ea:dd:c9:42:ef:c9:0b: 97:29:94:36:a7:2a:f8:51:b2:8d:8d:8a:b0:18:b8: b6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:DE:47:C9:F5:3C:55:81:16:A7:67:C4:62:87:8C:BF:85:27:4C:C8 X509v3 Authority Key Identifier: keyid:A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:66:e7:5f:49:94:4c:98:2d:b7:68:ab:ff:8f:97:ba:3b:b6: 22:4a:d1:80:f5:7b:16:7c:fc:07:2f:dc:3d:f2:96:13:3d:58: e8:01:44:a3:bf:bd:a1:56:cc:e6:44:99:05:67:9b:de:27:40: 4a:39:17:d7:8d:83:57:83:07:88:a9:88:3f:7a:1b:18:88:50: 2e:cb:a8:07:4c:b3:71:44:78:cd:af:cf:d3:94:db:f0:af:10: 6e:25:25:8c:92:f2:a9:24:b7:13:54:f7:ce:44:4e:25:77:32: 4d:ab:90:80:68:e0:e2:e7:df:a4:97:08:02:d7:39:30:db:13: 4e:84:ba:92:d9:52:15:31:ae:f5:5c:1a:69:03:dc:19:5a:c0: 0c:62:20:ed:17:ca:62:9b:76:64:4f:26:eb:e1:c5:bd:a0:3a: ee:78:04:60:e9:1b:9b:87:90:d2:a4:38:24:57:49:f3:e1:11: bc:c8:5e:42:30:fa:12:19:41:6a:d1:09:b3:bd:f3:02:02:d2: 4b:0d:8b:3d:31:f2:b8:fb:38:61:3a:9e:28:45:53:fe:a6:62: cd:d9:c6:92:14:cd:fb:fc:64:fe:53:f6:a1:77:5b:cd:8e:d3: a8:5a:6a:ee:7a:b3:64:95:76:55:31:34:aa:59:ee:db:85:31: 0c:62:2e:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1NTIxMTAvBgNVBAUTKEE1NkUwNDMzQUVCOEIwRkNDNTlFRkU5MUYwRUFGNTA2 MUI3MEQxMTgwHhcNMjUwNDEyMTQ1MzQ5WhcNMjUwNDE5MTQ1MzQ5WjAYMRYwFAYD VQQDEw02N2ZhN2U3ZC03ODdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAQ8FC8IJmSuuevzsy/Q+n9DTjE3bMkRN4N/TQHv3OfbzyK3qfwSXCLBiy3z 4u7ua5sB7vzVuE1PMEn9MRU4/2vEtLn/ZBUZbpL97eJDinDxh+OuggFJ5P6iLqC2 QuhZaeUvVIYCJlN/74NMlIR+EgETSD5p574UiH5TbXVnWfrXzGfyd71l8v37kVPg eUqDxXavjDpKNMmYig2qRGpk+/BEUtiKjj7CuapHFaxl2xI1DStaEW7OTnWLIDpM W/VaMyzivDDBAaFvMzId6gSt890ZvKve/yXPYQRowNMRuPj6pDIMbd0b2erdyULv yQuXKZQ2pyr4UbKNjYqwGLi21wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfeR8n1 PFWBFqdnxGKHjL+FJ0zIMB8GA1UdIwQYMBaAFKVuBDOuuLD8xZ7+kfDq9QYbcNEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjU1Mi84ODdENzUxMjFE OTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQekZudjZSOE9yMUJodHcw UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXNEVNNjY0c1B6Rm52NlI4T3IxQmh0dzBSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjU1Mi84ODdENzUxMjFEOTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQ ekZudjZSOE9yMUJodHcwUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzZudfSZRMmC23aKv/j5e6O7YiStGA9XsWfPwHL9w98pYTPVjoAUSj v72hVszmRJkFZ5veJ0BKORfXjYNXgweIqYg/ehsYiFAuy6gHTLNxRHjNr8/TlNvw rxBuJSWMkvKpJLcTVPfORE4ldzJNq5CAaODi59+klwgC1zkw2xNOhLqS2VIVMa71 XBppA9wZWsAMYiDtF8pim3ZkTybr4cW9oDrueARg6Rubh5DSpDgkV0nz4RG8yF5C MPoSGUFq0QmzvfMCAtJLDYs9MfK4+zhhOp4oRVP+pmLN2caSFM37/GT+U/ahd1vN jtOoWmruerNklXZVMTSqWe7bhTEMYi5l -----END CERTIFICATE-----Generated at Sat Apr 12 23:12:08 2025 by rpki-client