$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft File: Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft (raw, json) Hash identifier: CqLgkO8XfQTL8o8cQsG5GNA75o/jLTI2mi9FMkCBDuk= Subject key identifier: 58:71:6E:29:55:6E:BE:53:DD:93:72:C8:74:D4:6B:F5:1B:4A:61:6F Authority key identifier: 16:2E:95:6F:88:DD:3E:09:A6:B0:44:D8:B2:B4:2D:EB:10:A8:3D:A1 Certificate issuer: /CN=A91E6F07/serialNumber=162E956F88DD3E09A6B044D8B2B42DEB10A83DA1 Certificate serial: 0C24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft Manifest number: 1452 Signing time: Tue 08 Apr 2025 18:25:12 +0000 Manifest this update: Tue 08 Apr 2025 18:25:11 +0000 Manifest next update: Tue 15 Apr 2025 18:25:11 +0000 Files and hashes: 1: Fi6Vb4jdPgmmsETYsrQt6xCoPaE.crl (hash: cbHpGLxxjngZ6BugYoy5cTUbhF4X8tL/glBt/aUtUGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.crl rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 18:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3108 (0xc24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6F07 Validity Not Before: Apr 8 18:25:11 2025 GMT Not After : Apr 15 18:25:11 2025 GMT Subject: CN=67f56a07-f548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b2:80:d6:84:76:78:e8:3c:ce:31:b8:ce:d4: 2a:7b:29:16:84:9a:77:a0:c6:af:49:25:88:85:50: 6e:27:18:55:48:bc:b3:96:f5:ba:21:1f:0f:28:d3: e5:a3:64:3a:1c:66:74:fa:d6:18:0d:0a:d6:f4:66: 49:8e:61:51:bf:d7:69:9b:22:6c:b6:e5:28:c9:e0: f9:3f:08:d9:59:55:d6:1d:9e:1c:a9:1d:7c:ec:0a: aa:0a:cf:92:c3:22:e7:f5:1c:f1:5c:e2:c0:ca:91: 6f:3a:a6:62:23:6a:b8:49:ca:b8:87:13:44:06:0d: b2:44:a5:64:77:a8:30:67:b8:57:51:3a:37:dc:eb: 5a:28:18:e8:02:62:79:e0:c9:6a:d1:c9:f4:b9:d7: d8:9b:86:6b:23:c9:02:b1:71:6c:55:d2:64:85:61: 94:1b:fd:bc:e0:57:b5:5d:63:6d:3d:b8:05:7f:e8: fe:79:6a:5b:fb:e8:81:42:18:a8:72:ae:b1:9f:75: 04:cb:7a:c0:ef:bd:3d:22:3e:e5:0a:35:cf:64:fe: 92:40:80:05:35:ed:8b:78:01:05:38:7f:b4:79:40: 26:b6:8d:7d:4e:40:d9:4b:fe:db:49:78:c9:3b:83: 59:8e:56:1d:1d:c3:92:56:c4:2b:82:1e:6d:a6:3d: d8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:71:6E:29:55:6E:BE:53:DD:93:72:C8:74:D4:6B:F5:1B:4A:61:6F X509v3 Authority Key Identifier: keyid:16:2E:95:6F:88:DD:3E:09:A6:B0:44:D8:B2:B4:2D:EB:10:A8:3D:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:aa:59:91:48:59:8d:ca:da:3d:76:4d:6b:32:60:4d:4f:1f: 1b:14:63:ce:7a:8c:b3:e9:cf:c1:6c:18:6c:b8:57:53:fd:37: e8:88:79:b5:ba:b8:f6:83:38:9d:b8:a3:fe:d5:3c:c4:28:d8: 32:f0:b5:8b:8e:ff:97:8f:bf:a8:49:66:1a:11:fd:84:a0:02: b4:a3:d8:3d:df:c7:44:b4:50:d3:3d:cb:f2:df:6f:73:9f:14: 86:b6:1b:57:1e:18:2a:09:28:94:79:44:80:8c:6e:76:03:73: b1:2b:56:d7:a3:07:0e:0f:23:5e:0a:2c:37:42:13:de:0d:48: ed:b7:28:2c:14:62:d4:5b:bd:cb:fb:3e:27:39:e3:c5:78:c8: 6f:aa:bb:31:bf:75:e7:95:94:3f:a3:4f:7a:26:66:2f:06:a8: 39:6f:72:fa:2c:58:aa:d3:05:fa:4e:4c:ba:b8:23:05:f1:1a: 80:bf:ab:58:f7:01:71:50:0a:0e:e1:4c:34:93:65:1f:5e:55: f2:87:f5:d1:3d:ba:47:84:c6:d2:60:eb:ef:17:bf:cf:b0:40: 5b:f5:1d:53:8e:d9:60:78:9d:93:f9:b5:48:a5:83:30:a8:3c: 0f:3c:a7:d1:76:db:df:91:25:b6:45:77:0a:70:51:df:1f:ff: 39:5a:e0:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZGMDcxMTAvBgNVBAUTKDE2MkU5NTZGODhERDNFMDlBNkIwNDREOEIyQjQyREVC MTBBODNEQTEwHhcNMjUwNDA4MTgyNTExWhcNMjUwNDE1MTgyNTExWjAYMRYwFAYD VQQDEw02N2Y1NmEwNy1mNTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1bKA1oR2eOg8zjG4ztQqeykWhJp3oMavSSWIhVBuJxhVSLyzlvW6IR8PKNPl o2Q6HGZ0+tYYDQrW9GZJjmFRv9dpmyJstuUoyeD5PwjZWVXWHZ4cqR187AqqCs+S wyLn9RzxXOLAypFvOqZiI2q4Scq4hxNEBg2yRKVkd6gwZ7hXUTo33OtaKBjoAmJ5 4Mlq0cn0udfYm4ZrI8kCsXFsVdJkhWGUG/284Fe1XWNtPbgFf+j+eWpb++iBQhio cq6xn3UEy3rA7709Ij7lCjXPZP6SQIAFNe2LeAEFOH+0eUAmto19TkDZS/7bSXjJ O4NZjlYdHcOSVsQrgh5tpj3YnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFhxbilV br5T3ZNyyHTUa/UbSmFvMB8GA1UdIwQYMBaAFBYulW+I3T4JprBE2LK0LesQqD2h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkYwNy9DMTNEODFEODA1 MjkxMUVBODJENzQzMzdDNEY5QUUwMi9GaTZWYjRqZFBnbW1zRVRZc3JRdDZ4Q29Q YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZpNlZiNGpkUGdtbXNFVFlzclF0NnhDb1BhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkYwNy9DMTNEODFEODA1MjkxMUVBODJENzQzMzdDNEY5QUUwMi9GaTZWYjRqZFBn bW1zRVRZc3JRdDZ4Q29QYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJqlmRSFmNyto9dk1rMmBNTx8bFGPOeoyz6c/BbBhsuFdT/TfoiHm1 urj2gziduKP+1TzEKNgy8LWLjv+Xj7+oSWYaEf2EoAK0o9g938dEtFDTPcvy329z nxSGthtXHhgqCSiUeUSAjG52A3OxK1bXowcODyNeCiw3QhPeDUjttygsFGLUW73L +z4nOePFeMhvqrsxv3XnlZQ/o096JmYvBqg5b3L6LFiq0wX6Tky6uCMF8RqAv6tY 9wFxUAoO4Uw0k2UfXlXyh/XRPbpHhMbSYOvvF7/PsEBb9R1TjtlgeJ2T+bVIpYMw qDwPPKfRdtvfkSW2RXcKcFHfH/85WuCm -----END CERTIFICATE-----Generated at Thu Apr 10 01:38:48 2025 by rpki-client