$ rpki-client -vvf rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft File: rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft (raw, json) Hash identifier: Q2lmC0jVhzBbxtJ8YXVRCZ+Vnu0Ab4fxuJ8bZt3wNZU= Subject key identifier: 21:A0:48:91:F0:BC:AB:44:C9:2B:A2:D1:15:0D:61:49:6F:45:FD:33 Authority key identifier: AD:01:9F:03:5B:FF:3F:3B:17:32:3C:DB:BB:14:A0:7D:5D:E8:EC:33 Certificate issuer: /CN=A91D837B/serialNumber=AD019F035BFF3F3B17323CDBBB14A07D5DE8EC33 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft Manifest number: 3E Signing time: Wed 09 Apr 2025 06:20:54 +0000 Manifest this update: Wed 09 Apr 2025 06:20:54 +0000 Manifest next update: Wed 16 Apr 2025 06:20:54 +0000 Files and hashes: 1: rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl (hash: Q0gtuEbNw/WFC9ZfsISQG/1KogAwAImNrTlvkmgG05E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 06:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D837B Validity Not Before: Apr 9 06:20:54 2025 GMT Not After : Apr 16 06:20:54 2025 GMT Subject: CN=67f611c6-dc11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b8:ee:cc:0a:b2:61:4f:d0:e0:ac:8b:7a:20: bb:d9:dd:8f:2f:e1:7a:0e:06:9d:b3:65:06:0c:66: a6:63:5b:a2:fa:88:41:d6:ef:e4:42:fc:04:f3:a4: 2f:a9:9f:c5:ce:1f:f9:0a:e7:6a:73:b2:f3:86:aa: e5:4f:f4:ba:14:8a:97:40:4a:e2:b7:cf:d8:8c:95: 3b:21:4d:ff:42:ce:87:d2:f6:1a:54:cd:51:e9:f3: 2b:41:37:3d:21:b4:84:93:85:f3:a9:d0:a3:8f:c1: 05:4e:e2:5e:96:d5:5f:bd:83:96:7d:65:50:cb:7d: 6b:bc:ca:fb:8a:d2:37:d8:74:08:52:d9:be:f0:cd: 5e:7e:4d:5f:22:6a:28:e2:61:1a:2f:44:71:97:cb: 7d:8e:e7:a3:f5:51:cd:63:41:a4:07:a3:0a:d7:d5: f4:8d:64:41:11:2a:43:ad:b8:8e:fd:09:91:0a:c5: 4f:3e:9e:64:34:7d:e0:c3:04:c4:c9:59:19:e7:96: 9e:98:b7:ed:82:62:00:58:e3:f4:cb:2a:b9:ae:21: ea:36:c1:36:b3:2e:5b:04:94:92:5a:29:ee:48:8c: 73:0d:fc:41:49:9a:28:0e:46:a8:69:08:19:93:c2: e4:a1:fa:9d:8b:87:10:49:43:a0:56:c6:1f:72:22: 7f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A0:48:91:F0:BC:AB:44:C9:2B:A2:D1:15:0D:61:49:6F:45:FD:33 X509v3 Authority Key Identifier: keyid:AD:01:9F:03:5B:FF:3F:3B:17:32:3C:DB:BB:14:A0:7D:5D:E8:EC:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:8d:0a:61:50:82:c4:34:48:37:c9:8d:8c:fc:a9:a5:c3:58: 2c:92:90:39:b8:d7:5c:17:c8:0b:64:d9:03:c0:89:1b:3d:eb: 1c:b7:80:44:87:15:e6:2f:e7:89:1d:21:2f:07:45:44:a5:21: 33:ae:b8:b7:65:6a:90:c2:f3:81:cc:7f:90:2e:25:be:66:03: 33:56:9f:a3:c4:74:12:75:e6:1c:99:eb:de:65:74:a6:d4:82: bf:72:c3:f2:9e:48:86:fb:25:70:0f:c2:30:b6:1e:a2:89:7a: 8a:4e:42:52:ec:d8:8e:93:df:32:d9:5a:ce:56:91:84:61:42: 2d:10:3e:fd:6f:b5:d4:99:5f:f3:03:41:8c:6f:e9:2f:6c:8a: 09:52:bf:a8:0f:6f:c5:73:0b:92:24:4c:a5:e6:4f:e8:49:1c: ba:dc:1e:67:7b:8f:bd:74:46:f7:62:d0:e6:6a:fa:e6:f4:a1: 94:df:a2:32:34:b2:9f:c7:e2:13:5f:af:22:d4:d9:06:c5:13: 4d:c1:d3:ad:c8:de:0c:15:5f:78:29:a7:63:09:97:bc:b9:6a: 37:91:be:15:9e:e9:e7:48:89:14:a0:33:6b:c4:e3:37:4a:2f: 9b:73:26:4b:7c:6f:e4:5f:fe:1d:16:2d:ff:50:e0:bd:4d:cb: e0:74:58:61 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODM3QjExMC8GA1UEBRMoQUQwMTlGMDM1QkZGM0YzQjE3MzIzQ0RCQkIxNEEwN0Q1 REU4RUMzMzAeFw0yNTA0MDkwNjIwNTRaFw0yNTA0MTYwNjIwNTRaMBgxFjAUBgNV BAMTDTY3ZjYxMWM2LWRjMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQuO7MCrJhT9DgrIt6ILvZ3Y8v4XoOBp2zZQYMZqZjW6L6iEHW7+RC/ATzpC+p n8XOH/kK52pzsvOGquVP9LoUipdASuK3z9iMlTshTf9CzofS9hpUzVHp8ytBNz0h tISThfOp0KOPwQVO4l6W1V+9g5Z9ZVDLfWu8yvuK0jfYdAhS2b7wzV5+TV8iaiji YRovRHGXy32O56P1Uc1jQaQHowrX1fSNZEERKkOtuI79CZEKxU8+nmQ0feDDBMTJ WRnnlp6Yt+2CYgBY4/TLKrmuIeo2wTazLlsElJJaKe5IjHMN/EFJmigORqhpCBmT wuSh+p2LhxBJQ6BWxh9yIn+TAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIaBIkfC8 q0TJK6LRFQ1hSW9F/TMwHwYDVR0jBBgwFoAUrQGfA1v/PzsXMjzbuxSgfV3o7DMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MzdCLzFEN0I2M0JDQjk5 QzExRUY5NjM4Rjc2OUM0RjlBRTAyL3JRR2ZBMXZfUHpzWE1qemJ1eFNnZlYzbzdE TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvclFHZkExdl9QenNYTWp6YnV4U2dmVjNvN0RNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 MzdCLzFEN0I2M0JDQjk5QzExRUY5NjM4Rjc2OUM0RjlBRTAyL3JRR2ZBMXZfUHpz WE1qemJ1eFNnZlYzbzdETS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEaNCmFQgsQ0SDfJjYz8qaXDWCySkDm411wXyAtk2QPAiRs96xy3gESH FeYv54kdIS8HRUSlITOuuLdlapDC84HMf5AuJb5mAzNWn6PEdBJ15hyZ695ldKbU gr9yw/KeSIb7JXAPwjC2HqKJeopOQlLs2I6T3zLZWs5WkYRhQi0QPv1vtdSZX/MD QYxv6S9siglSv6gPb8VzC5IkTKXmT+hJHLrcHmd7j710Rvdi0OZq+ub0oZTfojI0 sp/H4hNfryLU2QbFE03B063I3gwVX3gpp2MJl7y5ajeRvhWe6edIiRSgM2vE4zdK L5tzJkt8b+Rf/h0WLf9Q4L1Ny+B0WGE= -----END CERTIFICATE-----Generated at Thu Apr 10 16:33:00 2025 by rpki-client