$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft File: 0I2GgcK-TUfCopBV9m5olVhGF_c.mft (raw, json) Hash identifier: 3d6+M3MP7IpoCdDiIgCST/IryU1avLEuGCRZilMDmuQ= Subject key identifier: 1A:76:6B:C5:21:50:37:18:8E:A2:B0:F4:5D:F2:02:E8:EF:5D:50:4F Authority key identifier: D0:8D:86:81:C2:BE:4D:47:C2:A2:90:55:F6:6E:68:95:58:46:17:F7 Certificate issuer: /CN=A91FCEB1/serialNumber=D08D8681C2BE4D47C2A29055F66E6895584617F7 Certificate serial: 1A55 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft Manifest number: 2132 Signing time: Fri 28 Mar 2025 16:04:41 +0000 Manifest this update: Fri 28 Mar 2025 16:04:40 +0000 Manifest next update: Fri 04 Apr 2025 16:04:40 +0000 Files and hashes: 1: 0I2GgcK-TUfCopBV9m5olVhGF_c.crl (hash: NBKtwTBiDFOMJuLIHFie4B63ZPZYLGR1cmSASyMpkFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 16:04:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6741 (0x1a55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1 Validity Not Before: Mar 28 16:04:40 2025 GMT Not After : Apr 4 16:04:40 2025 GMT Subject: CN=67e6c898-0bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8e:9b:08:9d:1e:9a:71:55:e9:d5:4f:cb:5c: 25:6a:a5:e8:c5:08:15:ae:44:26:41:df:83:92:46: ed:82:fe:5f:06:c8:d4:85:ce:c1:0e:9a:62:3d:c0: 68:06:af:ca:b8:02:be:84:0f:40:30:80:de:55:21: df:f5:06:f8:d9:68:95:49:28:29:39:b3:53:c2:10: 13:ee:3a:bf:ad:e3:c9:f5:ee:5f:8f:85:7b:09:fe: eb:0c:73:a0:ce:8d:c5:0e:74:6e:ad:1c:d0:a8:a9: 0d:13:34:4d:89:2a:1c:f2:36:fe:8f:ce:b2:97:a1: 8e:c8:94:68:db:96:f8:85:e4:8e:bc:f5:a7:71:b9: 5c:7c:d2:61:0e:08:70:a2:d2:37:ce:74:e4:58:7f: 00:ce:13:60:15:a5:d1:da:04:86:50:19:ba:c1:f8: dd:16:2a:9a:96:fb:ec:04:b7:71:85:4b:d7:e8:eb: 55:1b:e8:ec:f1:4a:81:dd:c5:31:47:9d:1c:9c:7a: 00:8d:41:19:33:fd:61:fc:26:5c:f4:a5:1e:80:2f: fd:42:8e:b8:3d:e9:33:c4:6e:64:88:70:c5:75:b5: 08:56:ec:f9:32:03:4b:31:ad:43:6c:bd:af:66:75: d1:94:57:c4:e3:42:67:7a:8f:4e:6c:ef:0a:84:af: 15:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:76:6B:C5:21:50:37:18:8E:A2:B0:F4:5D:F2:02:E8:EF:5D:50:4F X509v3 Authority Key Identifier: keyid:D0:8D:86:81:C2:BE:4D:47:C2:A2:90:55:F6:6E:68:95:58:46:17:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:3f:97:b5:d0:76:7c:fc:22:e7:dc:ec:34:55:fe:ce:c8:83: 00:47:e1:2a:ea:84:37:35:d1:79:c5:2d:64:f4:32:0e:38:77: 0f:a5:70:16:1f:05:5f:b6:37:b1:24:8e:da:3c:b1:e0:1b:56: 83:ec:d2:3c:08:da:9f:89:c7:a2:8f:ad:c5:3e:b0:df:48:aa: 47:b1:ef:5b:03:6b:e3:f9:e9:74:80:e0:3c:6b:08:b8:25:e6: 0d:6c:18:ef:ce:08:fd:f4:0d:0f:97:01:4a:4b:96:c1:a6:59: 65:a8:7f:79:20:ca:42:19:c9:e5:a0:d2:37:5d:84:c4:ad:05: ef:ea:1f:38:e0:53:85:aa:d4:42:dc:65:86:3d:14:a4:73:5a: 2c:4e:bc:e9:ac:af:6a:f8:02:d2:82:39:d3:8b:3a:4d:35:6c: 88:76:6a:7d:e7:aa:6c:69:fb:44:72:8b:e9:81:1e:e4:be:17: b5:3b:2e:7f:8b:b7:46:f7:89:72:ec:47:e5:da:b8:90:0a:8c: ba:0a:12:b7:d9:49:e9:44:4e:d4:bc:cc:82:54:be:48:0f:ce: ed:33:95:3c:8a:f9:e9:d5:f8:bc:cb:04:68:5b:12:d5:14:67: 62:2c:b7:79:65:b8:63:66:8d:a9:2e:b7:16:15:1b:42:eb:18: 50:dd:b3:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKEQwOEQ4NjgxQzJCRTRENDdDMkEyOTA1NUY2NkU2ODk1 NTg0NjE3RjcwHhcNMjUwMzI4MTYwNDQwWhcNMjUwNDA0MTYwNDQwWjAYMRYwFAYD VQQDEw02N2U2Yzg5OC0wYmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxI6bCJ0emnFV6dVPy1wlaqXoxQgVrkQmQd+Dkkbtgv5fBsjUhc7BDppiPcBo Bq/KuAK+hA9AMIDeVSHf9Qb42WiVSSgpObNTwhAT7jq/rePJ9e5fj4V7Cf7rDHOg zo3FDnRurRzQqKkNEzRNiSoc8jb+j86yl6GOyJRo25b4heSOvPWncblcfNJhDghw otI3znTkWH8AzhNgFaXR2gSGUBm6wfjdFiqalvvsBLdxhUvX6OtVG+js8UqB3cUx R50cnHoAjUEZM/1h/CZc9KUegC/9Qo64PekzxG5kiHDFdbUIVuz5MgNLMa1DbL2v ZnXRlFfE40Jneo9ObO8KhK8VdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBp2a8Uh UDcYjqKw9F3yAujvXVBPMB8GA1UdIwQYMBaAFNCNhoHCvk1HwqKQVfZuaJVYRhf3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS85QzE0QjQwNjNB MjExMUU3OUFBMEQ1MUNDNEY5QUUwMi8wSTJHZ2NLLVRVZkNvcEJWOW01b2xWaEdG X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBJMkdnY0stVFVmQ29wQlY5bTVvbFZoR0ZfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS85QzE0QjQwNjNBMjExMUU3OUFBMEQ1MUNDNEY5QUUwMi8wSTJHZ2NLLVRV ZkNvcEJWOW01b2xWaEdGX2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiP5e10HZ8/CLn3Ow0Vf7OyIMAR+Eq6oQ3NdF5xS1k9DIOOHcPpXAW HwVftjexJI7aPLHgG1aD7NI8CNqficeij63FPrDfSKpHse9bA2vj+el0gOA8awi4 JeYNbBjvzgj99A0PlwFKS5bBplllqH95IMpCGcnloNI3XYTErQXv6h844FOFqtRC 3GWGPRSkc1osTrzprK9q+ALSgjnTizpNNWyIdmp956psaftEcovpgR7kvhe1Oy5/ i7dG94ly7Efl2riQCoy6ChK32UnpRE7UvMyCVL5ID87tM5U8ivnp1fi8ywRoWxLV FGdiLLd5ZbhjZo2pLrcWFRtC6xhQ3bNJ -----END CERTIFICATE-----Generated at Thu Apr 3 18:59:51 2025 by rpki-client