$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft File: mGsNU3ZLyD3A4HLsrzacefIqOdc.mft (raw, json) Hash identifier: ZAc8URk271D9ESyz1q9whW+t+Q14BsAmyh6uXE6bUeg= Subject key identifier: 9C:A9:CF:53:F3:76:19:F3:33:10:9D:03:9E:1F:94:93:04:48:6C:FF Authority key identifier: 98:6B:0D:53:76:4B:C8:3D:C0:E0:72:EC:AF:36:9C:79:F2:2A:39:D7 Certificate issuer: /CN=A91DD799/serialNumber=986B0D53764BC83DC0E072ECAF369C79F22A39D7 Certificate serial: 06F6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGsNU3ZLyD3A4HLsrzacefIqOdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft Manifest number: 06F6 Signing time: Fri 18 Apr 2025 14:50:30 +0000 Manifest this update: Fri 18 Apr 2025 14:50:30 +0000 Manifest next update: Fri 25 Apr 2025 14:50:30 +0000 Files and hashes: 1: mGsNU3ZLyD3A4HLsrzacefIqOdc.crl (hash: A/iMe5Rt6pvegei8cMq7iH0trobSKvn1jGAXcG9K+X0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.crl rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGsNU3ZLyD3A4HLsrzacefIqOdc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 14:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1782 (0x6f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD799, serialNumber=986B0D53764BC83DC0E072ECAF369C79F22A39D7 Validity Not Before: Apr 18 14:50:30 2025 GMT Not After : Apr 25 14:50:30 2025 GMT Subject: CN=680266b6-41ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e1:83:fb:11:78:ab:ba:bc:d9:5d:78:9a:2f: 0d:d2:e6:f9:83:23:ba:e7:5f:13:d3:d9:6b:58:50: b7:03:7d:05:ec:72:ef:a5:03:69:3a:5b:46:f5:ba: 2e:3f:25:10:52:72:80:70:64:b6:01:f1:df:a5:01: 38:84:82:27:1e:d6:0b:d6:67:81:4d:12:ec:ff:7c: a2:ac:f6:39:6c:7d:43:c6:16:82:aa:8d:80:45:c3: 7e:b7:fa:14:84:8d:2c:f4:ab:43:f0:27:7b:73:35: 4e:00:87:e4:af:a5:16:db:08:a8:8c:c7:a0:e6:7c: ba:bc:6b:00:56:3a:58:48:1b:53:45:a4:cc:8e:d6: 0b:0d:f2:78:72:d9:52:44:39:4c:d8:f7:25:ca:f4: 75:23:7f:6e:d6:a4:f4:af:75:88:70:97:8f:86:a3: e9:3c:73:8c:9e:96:22:3e:bb:a2:34:91:86:4d:07: 76:75:e0:9d:ed:1f:8a:13:df:76:a6:08:e9:eb:d7: 20:d8:e7:67:36:ba:08:ae:96:8a:10:d6:1e:85:94: b2:b2:ea:16:89:1a:76:7a:62:7e:d8:18:5c:f2:19: 07:5c:b7:90:c8:5e:64:1d:31:05:a8:30:4a:87:bc: d3:6b:76:0c:8a:8c:65:e9:ed:79:55:35:b7:a7:bf: dc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A9:CF:53:F3:76:19:F3:33:10:9D:03:9E:1F:94:93:04:48:6C:FF X509v3 Authority Key Identifier: keyid:98:6B:0D:53:76:4B:C8:3D:C0:E0:72:EC:AF:36:9C:79:F2:2A:39:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGsNU3ZLyD3A4HLsrzacefIqOdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:57:fd:d6:1e:5d:37:43:b6:d8:51:b0:e8:f2:e1:c5:8f:be: 27:b5:7c:3c:0e:5d:c2:10:a4:80:4f:b6:72:9d:c6:a8:48:1d: 94:55:3e:9c:75:86:46:75:fe:b6:1a:55:d1:e9:ed:76:3e:8f: b7:76:dc:1d:04:81:7a:2f:a3:e1:63:b6:c9:9b:d8:19:e7:5b: 91:ed:00:df:b0:0d:05:38:d0:4c:e8:5a:45:8d:2d:95:34:88: 5b:a3:31:b2:bc:2d:43:37:73:84:ec:dd:43:15:11:8e:c4:e3: b8:55:5c:52:41:4a:4e:85:32:c5:4b:30:f2:1f:7a:bf:7d:0f: 76:91:67:6e:f2:ea:ce:16:a7:e1:b3:e5:7e:7e:66:a6:ef:d0: c9:e8:39:10:33:ff:2f:04:36:86:d2:88:9b:be:97:30:ec:91: d7:0a:d7:90:2a:c8:b5:7a:e0:8d:c2:e8:bb:b9:ce:b1:47:ea: 28:71:f8:9f:83:bc:02:40:08:fb:37:68:b6:79:8a:1c:0a:33: 87:6f:f3:a7:bf:c9:a5:e5:59:76:a4:0d:77:ef:a2:42:6f:28: d4:39:bc:94:b5:ab:80:31:fb:44:87:35:be:90:16:1b:78:ba: ca:48:b9:f7:3b:fb:79:00:e2:e4:85:bb:3d:9c:d8:c5:93:2c: 26:95:0e:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ3OTkxMTAvBgNVBAUTKDk4NkIwRDUzNzY0QkM4M0RDMEUwNzJFQ0FGMzY5Qzc5 RjIyQTM5RDcwHhcNMjUwNDE4MTQ1MDMwWhcNMjUwNDI1MTQ1MDMwWjAYMRYwFAYD VQQDEw02ODAyNjZiNi00MWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3eGD+xF4q7q82V14mi8N0ub5gyO6518T09lrWFC3A30F7HLvpQNpOltG9bou PyUQUnKAcGS2AfHfpQE4hIInHtYL1meBTRLs/3yirPY5bH1DxhaCqo2ARcN+t/oU hI0s9KtD8Cd7czVOAIfkr6UW2wiojMeg5ny6vGsAVjpYSBtTRaTMjtYLDfJ4ctlS RDlM2PclyvR1I39u1qT0r3WIcJePhqPpPHOMnpYiPruiNJGGTQd2deCd7R+KE992 pgjp69cg2OdnNroIrpaKENYehZSysuoWiRp2emJ+2Bhc8hkHXLeQyF5kHTEFqDBK h7zTa3YMioxl6e15VTW3p7/c9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJypz1Pz dhnzMxCdA54flJMESGz/MB8GA1UdIwQYMBaAFJhrDVN2S8g9wOBy7K82nHnyKjnX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDc5OS8xM0NBODJGQTQz RkIxMUVCOUY3M0Q2M0NDNEY5QUUwMi9tR3NOVTNaTHlEM0E0SExzcnphY2VmSXFP ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21Hc05VM1pMeUQzQTRITHNyemFjZWZJcU9kYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDc5OS8xM0NBODJGQTQzRkIxMUVCOUY3M0Q2M0NDNEY5QUUwMi9tR3NOVTNaTHlE M0E0SExzcnphY2VmSXFPZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2V/3WHl03Q7bYUbDo8uHFj74ntXw8Dl3CEKSAT7ZyncaoSB2UVT6c dYZGdf62GlXR6e12Po+3dtwdBIF6L6PhY7bJm9gZ51uR7QDfsA0FONBM6FpFjS2V NIhbozGyvC1DN3OE7N1DFRGOxOO4VVxSQUpOhTLFSzDyH3q/fQ92kWdu8urOFqfh s+V+fmam79DJ6DkQM/8vBDaG0oibvpcw7JHXCteQKsi1euCNwui7uc6xR+oocfif g7wCQAj7N2i2eYocCjOHb/Onv8ml5Vl2pA1376JCbyjUObyUtauAMftEhzW+kBYb eLrKSLn3O/t5AOLkhbs9nNjFkywmlQ4s -----END CERTIFICATE-----Generated at Sat Apr 19 00:49:28 2025 by rpki-client