$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft File: ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft (raw, json) Hash identifier: jU4NaTDDecZcdutTZAGjpC+/GAcp3ddpSt0z+ELrrVY= Subject key identifier: C5:12:FF:AB:07:BC:3B:13:05:DA:71:5D:61:B6:FF:90:81:8C:17:DB Authority key identifier: 13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77 Certificate issuer: /CN=A91F89D9/serialNumber=131570B4535F840302530DD1317442316309C177 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft Manifest number: 6C Signing time: Sat 05 Apr 2025 06:11:34 +0000 Manifest this update: Sat 05 Apr 2025 06:11:33 +0000 Manifest next update: Sat 12 Apr 2025 06:11:33 +0000 Files and hashes: 1: ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl (hash: xw3UQ5urrX/6yzsLj1A9y2Bo3CGCaOHsAN0t82l8O2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 06:11:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89D9 Validity Not Before: Apr 5 06:11:33 2025 GMT Not After : Apr 12 06:11:33 2025 GMT Subject: CN=67f0c995-d888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:75:1f:58:5a:3a:f0:d6:53:d8:e7:71:4e:8a: 49:c4:0e:6a:84:85:9f:07:96:fe:54:8a:1d:03:24: 20:16:5a:ee:2a:2e:a0:66:da:38:b6:7c:f3:fd:96: 51:39:bb:53:e6:aa:08:ad:6e:02:02:74:3a:e6:27: f0:bd:a7:41:df:74:f4:73:d9:f4:4c:db:5d:ea:e8: a4:fb:00:65:5e:66:04:fe:58:12:7f:be:d1:c4:bd: 08:08:9e:86:1e:45:04:32:a1:ba:34:a2:bb:06:a4: 02:6a:94:9f:16:fb:a9:80:08:83:cc:d4:2d:8f:83: 3d:e7:73:0c:4b:64:7a:a0:19:d6:51:1a:df:42:ef: 08:9d:0d:0e:f2:2c:f5:fa:be:c0:2f:b0:a6:39:9e: e8:f0:fc:13:a7:30:ce:5f:ca:6d:be:fc:bc:47:ce: 41:4d:fb:b5:ce:a3:89:1d:78:19:af:a1:2e:be:a8: ec:21:0f:8d:f2:9d:58:79:c3:af:c8:54:fe:7a:64: bf:6d:93:af:71:67:5a:d1:74:6e:29:80:46:94:61: 9d:40:1f:c7:0a:fb:04:22:bf:cf:fa:c8:a4:12:a3: e7:f4:ec:3b:92:29:b9:9c:1b:c7:e8:08:db:fd:4c: 44:3d:61:b6:57:4a:b8:bb:25:31:28:4f:1d:9c:22: c0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:12:FF:AB:07:BC:3B:13:05:DA:71:5D:61:B6:FF:90:81:8C:17:DB X509v3 Authority Key Identifier: keyid:13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:4b:16:dc:78:59:ae:bb:c8:a2:82:7f:37:96:1f:d8:96:87: d0:cb:ce:a1:48:d9:66:6b:cd:12:f7:ef:1a:5c:e1:49:6a:09: 49:01:d4:19:78:30:6b:90:1d:1a:7f:e0:78:9f:0b:05:e3:35: 6f:ab:ca:91:dd:fd:8d:5a:e6:4f:39:b7:ff:2a:e5:5d:61:b8: 01:d3:8b:eb:15:32:e1:90:2d:72:3a:60:e4:c5:9b:5b:c6:87: 62:50:b6:aa:82:f3:8c:71:5d:bf:b0:7c:e1:83:e0:f8:2c:c9: 7a:1d:70:11:30:aa:7b:e2:c9:f7:e5:47:72:cc:85:0b:f0:7a: 15:95:d4:9a:6c:15:aa:4a:28:ad:af:42:6a:98:59:59:9e:0c: d8:e9:3f:a8:c3:51:37:43:30:3f:51:c0:aa:9c:13:c3:f4:64: 9a:7e:5e:53:3b:ab:d2:f5:86:f9:ee:f3:eb:5a:da:32:84:10: 2b:6b:94:80:c3:66:91:f6:c0:65:31:f4:76:03:b5:bf:67:6d: 3e:9d:47:d0:ca:06:9d:73:4b:5c:01:8f:f4:4b:45:61:79:c9: 9d:25:f8:b9:14:a8:dd:fa:bc:a2:31:25:cd:a3:ae:f1:d8:70: a8:25:77:42:11:96:85:75:e7:5b:ad:12:82:1f:97:d4:32:65: dc:90:0e:b7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODlEOTExMC8GA1UEBRMoMTMxNTcwQjQ1MzVGODQwMzAyNTMwREQxMzE3NDQyMzE2 MzA5QzE3NzAeFw0yNTA0MDUwNjExMzNaFw0yNTA0MTIwNjExMzNaMBgxFjAUBgNV BAMTDTY3ZjBjOTk1LWQ4ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAdR9YWjrw1lPY53FOiknEDmqEhZ8Hlv5Uih0DJCAWWu4qLqBm2ji2fPP9llE5 u1PmqgitbgICdDrmJ/C9p0HfdPRz2fRM213q6KT7AGVeZgT+WBJ/vtHEvQgInoYe RQQyobo0orsGpAJqlJ8W+6mACIPM1C2Pgz3ncwxLZHqgGdZRGt9C7widDQ7yLPX6 vsAvsKY5nujw/BOnMM5fym2+/LxHzkFN+7XOo4kdeBmvoS6+qOwhD43ynVh5w6/I VP56ZL9tk69xZ1rRdG4pgEaUYZ1AH8cK+wQiv8/6yKQSo+f07DuSKbmcG8foCNv9 TEQ9YbZXSri7JTEoTx2cIsCzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxRL/qwe8 OxMF2nFdYbb/kIGMF9swHwYDVR0jBBgwFoAUExVwtFNfhAMCUw3RMXRCMWMJwXcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4OUQ5L0Y1NjAzN0E2NkY1 QzExRUY4MzVBN0I2NkM0RjlBRTAyL0V4Vnd0Rk5maEFNQ1V3M1JNWFJDTVdNSndY Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRXhWd3RGTmZoQU1DVXczUk1YUkNNV01Kd1hjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 OUQ5L0Y1NjAzN0E2NkY1QzExRUY4MzVBN0I2NkM0RjlBRTAyL0V4Vnd0Rk5maEFN Q1V3M1JNWFJDTVdNSndYYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA9LFtx4Wa67yKKCfzeWH9iWh9DLzqFI2WZrzRL37xpc4UlqCUkB1Bl4 MGuQHRp/4HifCwXjNW+rypHd/Y1a5k85t/8q5V1huAHTi+sVMuGQLXI6YOTFm1vG h2JQtqqC84xxXb+wfOGD4PgsyXodcBEwqnviyfflR3LMhQvwehWV1JpsFapKKK2v QmqYWVmeDNjpP6jDUTdDMD9RwKqcE8P0ZJp+XlM7q9L1hvnu8+ta2jKEECtrlIDD ZpH2wGUx9HYDtb9nbT6dR9DKBp1zS1wBj/RLRWF5yZ0l+LkUqN36vKIxJc2jrvHY cKgld0IRloV151utEoIfl9QyZdyQDrc= -----END CERTIFICATE-----Generated at Sun Apr 6 07:13:32 2025 by rpki-client