$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft File: MnuOg9VLpp18NcajREfRsbAR2WY.mft (raw, json) Hash identifier: pwKmbKIL11F9Z4mqkgK+JAR4wqtzAxsrnoo92Pc/ZgI= Subject key identifier: C2:EB:5F:8A:88:A9:D7:39:14:D8:EB:81:69:FF:47:BB:01:A1:09:FE Authority key identifier: 32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66 Certificate issuer: /CN=A91E6B9A/serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft Manifest number: 78 Signing time: Fri 11 Apr 2025 05:57:05 +0000 Manifest this update: Fri 11 Apr 2025 05:57:04 +0000 Manifest next update: Fri 18 Apr 2025 05:57:04 +0000 Files and hashes: 1: MnuOg9VLpp18NcajREfRsbAR2WY.crl (hash: jKzqwdJzVkc57uN8ohNnfKBsxMut6HENwBKF758v5c4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 05:57:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B9A, serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966 Validity Not Before: Apr 11 05:57:04 2025 GMT Not After : Apr 18 05:57:04 2025 GMT Subject: CN=67f8af30-bd21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e7:6c:12:cd:28:97:ea:20:77:4f:03:5d:f7: 8f:a1:f6:55:26:0f:c9:c9:ba:26:44:73:bb:b0:07: 4e:86:3e:3a:00:7d:58:35:cf:25:28:06:82:fa:6a: 4f:15:27:e5:05:ee:98:84:a4:8f:e9:60:b1:f4:42: 7d:22:92:aa:bc:db:04:e8:a2:81:6a:5c:00:fe:76: 0e:d0:a6:54:6c:07:a1:6f:9e:3c:ce:e8:f1:dc:f7: bc:45:86:69:57:89:c5:0c:87:54:43:70:4a:2b:53: 01:6f:4d:a7:d3:b9:78:d4:c1:f5:a9:0b:a9:22:56: 9f:21:91:d0:7e:34:f9:7c:f1:40:72:4c:c1:a5:6d: a2:bb:91:ec:13:ff:ce:98:5c:90:87:bb:50:dd:a7: 09:b7:86:46:b8:1e:34:0c:6e:03:22:3a:44:38:f0: e7:1e:c9:85:8b:2c:8f:74:65:0a:cc:c5:62:fb:16: 43:67:46:75:29:46:3f:ac:1f:f4:b1:3a:53:98:ac: e9:a2:12:38:fa:66:1c:bd:ba:18:33:87:ca:07:a6: e4:12:83:b1:ce:c2:a5:e9:c1:aa:d7:46:61:a0:20: 96:a7:bb:f6:b8:4e:f4:af:0c:0d:ed:bf:f5:58:66: 45:5b:bc:72:90:71:7a:5c:36:17:79:a0:54:49:6f: 65:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EB:5F:8A:88:A9:D7:39:14:D8:EB:81:69:FF:47:BB:01:A1:09:FE X509v3 Authority Key Identifier: keyid:32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:b3:e9:6f:0d:cb:d4:a1:2d:82:6f:a4:94:35:43:52:3f:f0: 1d:4e:ec:f4:d3:97:97:80:76:26:94:ca:2d:3d:03:47:7c:3e: ab:7d:1e:16:e6:ed:f0:41:ce:f2:93:48:66:d1:4f:8a:4e:f5: 6d:31:d8:5f:05:ec:2b:06:23:5d:14:f3:ea:39:be:c3:b2:a8: ea:46:e7:88:8b:b9:89:70:51:3b:43:a1:32:5b:9a:ee:10:86: bd:fa:b6:04:99:e9:1d:1e:ce:77:73:73:b1:be:f5:3e:d5:b5: fe:9b:b9:5f:aa:94:cd:24:d1:1c:5f:c0:51:20:e9:7c:8b:a7: 1e:fb:10:17:f8:15:50:69:c7:f9:e6:6b:82:82:cc:ee:43:eb: 0e:d9:8f:be:14:d5:27:3b:4e:1f:10:1b:38:27:fc:e5:ab:4c: 9b:82:c0:b2:85:ee:89:e8:28:f7:49:9b:d4:6d:8d:26:f7:10: 6f:b6:c4:53:ce:2f:57:dd:2d:44:3d:c8:d9:65:08:cd:c8:89: 6d:16:c2:16:64:35:53:82:68:95:4e:fb:74:78:c6:7c:f2:01: f1:93:40:75:d4:02:38:e6:2d:33:e7:b6:65:4e:2e:28:9d:2e: a0:91:e5:b5:20:de:5e:a4:8b:46:60:7e:16:26:8a:32:de:58: 88:e6:e8:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NkI5QTExMC8GA1UEBRMoMzI3QjhFODNENTRCQTY5RDdDMzVDNkEzNDQ0N0QxQjFC MDExRDk2NjAeFw0yNTA0MTEwNTU3MDRaFw0yNTA0MTgwNTU3MDRaMBgxFjAUBgNV BAMTDTY3ZjhhZjMwLWJkMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDL52wSzSiX6iB3TwNd94+h9lUmD8nJuiZEc7uwB06GPjoAfVg1zyUoBoL6ak8V J+UF7piEpI/pYLH0Qn0ikqq82wToooFqXAD+dg7QplRsB6FvnjzO6PHc97xFhmlX icUMh1RDcEorUwFvTafTuXjUwfWpC6kiVp8hkdB+NPl88UByTMGlbaK7kewT/86Y XJCHu1Ddpwm3hka4HjQMbgMiOkQ48OceyYWLLI90ZQrMxWL7FkNnRnUpRj+sH/Sx OlOYrOmiEjj6Zhy9uhgzh8oHpuQSg7HOwqXpwarXRmGgIJanu/a4TvSvDA3tv/VY ZkVbvHKQcXpcNhd5oFRJb2U1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwutfioip 1zkU2OuBaf9HuwGhCf4wHwYDVR0jBBgwFoAUMnuOg9VLpp18NcajREfRsbAR2WYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2QjlBLzFBMTA2Q0QwNjE1 MDExRUZBRTdBOEM3M0M0RjlBRTAyL01udU9nOVZMcHAxOE5jYWpSRWZSc2JBUjJX WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTW51T2c5VkxwcDE4TmNhalJFZlJzYkFSMldZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 QjlBLzFBMTA2Q0QwNjE1MDExRUZBRTdBOEM3M0M0RjlBRTAyL01udU9nOVZMcHAx OE5jYWpSRWZSc2JBUjJXWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACKz6W8Ny9ShLYJvpJQ1Q1I/8B1O7PTTl5eAdiaUyi09A0d8Pqt9Hhbm 7fBBzvKTSGbRT4pO9W0x2F8F7CsGI10U8+o5vsOyqOpG54iLuYlwUTtDoTJbmu4Q hr36tgSZ6R0ezndzc7G+9T7Vtf6buV+qlM0k0RxfwFEg6XyLpx77EBf4FVBpx/nm a4KCzO5D6w7Zj74U1Sc7Th8QGzgn/OWrTJuCwLKF7onoKPdJm9RtjSb3EG+2xFPO L1fdLUQ9yNllCM3IiW0WwhZkNVOCaJVO+3R4xnzyAfGTQHXUAjjmLTPntmVOLiid LqCR5bUg3l6ki0ZgfhYmijLeWIjm6Jw= -----END CERTIFICATE-----Generated at Sat Apr 12 21:19:06 2025 by rpki-client