$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft File: efXtpMcOLgPpCLgYwXdY8qZpd1c.mft (raw, json) Hash identifier: IynobO5JwHJZcfIaZB0vWFq6nm1vIUvQjncz9E1Q2zM= Subject key identifier: CC:0B:53:0C:C4:E9:AE:93:AC:59:63:06:69:77:E3:0E:A1:39:1A:01 Authority key identifier: 79:F5:ED:A4:C7:0E:2E:03:E9:08:B8:18:C1:77:58:F2:A6:69:77:57 Certificate issuer: /CN=A91FEB37/serialNumber=79F5EDA4C70E2E03E908B818C17758F2A6697757 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/efXtpMcOLgPpCLgYwXdY8qZpd1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft Manifest number: 14 Signing time: Sat 05 Apr 2025 07:17:09 +0000 Manifest this update: Sat 05 Apr 2025 07:17:09 +0000 Manifest next update: Sat 12 Apr 2025 07:17:09 +0000 Files and hashes: 1: efXtpMcOLgPpCLgYwXdY8qZpd1c.crl (hash: pft8YfhRk3rR3QoTo+qH4yOP+k4WBQXkz983qnW/BGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.crl rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/efXtpMcOLgPpCLgYwXdY8qZpd1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEB37 Validity Not Before: Apr 5 07:17:09 2025 GMT Not After : Apr 12 07:17:09 2025 GMT Subject: CN=67f0d8f5-2576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b5:14:c4:8d:6c:4b:b0:da:80:b7:d7:6c:ec: 1c:9a:20:3d:c1:d6:ff:e6:04:ed:61:e3:61:25:85: 97:cc:40:93:eb:b6:e5:4f:c2:23:60:db:6f:1d:83: 75:41:bc:f7:90:12:d5:ad:4a:db:4e:dc:b0:04:53: 84:f3:52:56:16:4d:7d:27:d5:55:bc:d2:fa:15:22: 8c:ab:77:99:7e:c6:c5:3b:00:3b:c9:f1:16:7b:ea: a8:ed:dc:9b:25:6d:36:5f:0b:ba:72:33:59:bd:5d: 81:ea:6e:85:fc:80:e4:a0:43:9b:6b:5f:98:2e:42: 09:fa:1c:8d:06:88:59:15:90:54:68:06:93:95:b1: 63:74:27:2f:93:93:d9:f3:40:35:82:b3:31:b7:9c: 6d:56:bc:56:a4:9b:7e:ba:b7:1f:60:71:c7:39:3a: a4:67:04:90:69:58:f6:3f:14:8d:6c:fe:ed:7d:1f: 5d:d5:bf:5e:2a:4b:e0:0c:01:b8:c6:7b:f2:8a:26: 38:31:3b:c0:92:12:d4:1a:55:15:8e:a8:04:13:5e: 10:4f:12:c5:6d:ad:c6:bc:f8:df:5a:96:e4:a0:94: 6d:ed:08:46:4e:36:fe:48:02:9f:8e:86:b7:af:76: 17:f0:07:59:c7:c1:b3:31:1b:dc:8e:de:0e:69:4d: 41:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:0B:53:0C:C4:E9:AE:93:AC:59:63:06:69:77:E3:0E:A1:39:1A:01 X509v3 Authority Key Identifier: keyid:79:F5:ED:A4:C7:0E:2E:03:E9:08:B8:18:C1:77:58:F2:A6:69:77:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/efXtpMcOLgPpCLgYwXdY8qZpd1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:f8:bb:3a:76:03:a8:cb:40:5e:8e:87:73:77:7c:f7:39:0d: 1f:38:5d:33:7c:36:f9:6a:ed:6a:17:60:1f:b1:43:6a:48:f7: e5:29:c1:f9:70:c4:69:9b:1f:a8:24:96:99:ea:b6:c1:08:7a: 2e:48:77:ea:d2:ac:05:3f:17:56:16:76:ef:3a:d6:53:91:e4: 2c:f9:b4:43:b0:fe:fe:cc:1a:ca:61:22:14:4d:49:3c:38:71: b1:69:75:29:51:7f:46:f8:89:77:1c:2f:bf:04:2d:0e:ab:8f: 71:3a:ad:9d:a3:33:ff:9c:18:3c:35:1a:f3:e4:92:7e:28:c5: 65:1d:0f:c9:e2:ef:c7:85:4d:7a:ba:e5:f3:f8:df:aa:0e:6a: c6:58:35:71:3b:88:3a:62:07:e9:5a:6a:2b:01:40:70:1b:7f: a5:ac:5b:0a:69:47:d7:d0:d2:e3:96:54:a3:73:86:0b:9e:78: 7a:93:ed:68:d5:2d:89:fa:0f:1f:34:ec:b6:8b:6d:c3:fc:5d: e7:c4:80:ab:1e:03:62:79:06:a4:36:95:8a:ea:9e:5f:bc:f7: e4:af:3e:c4:cb:c2:1f:db:c7:f5:44:88:f6:ab:14:d2:e9:b9: 9b:a3:94:8e:66:41:3f:dd:fd:88:aa:2f:d4:b1:1d:b3:3a:70: 5e:2c:db:e9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RUIzNzExMC8GA1UEBRMoNzlGNUVEQTRDNzBFMkUwM0U5MDhCODE4QzE3NzU4RjJB NjY5Nzc1NzAeFw0yNTA0MDUwNzE3MDlaFw0yNTA0MTIwNzE3MDlaMBgxFjAUBgNV BAMTDTY3ZjBkOGY1LTI1NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvtRTEjWxLsNqAt9ds7ByaID3B1v/mBO1h42ElhZfMQJPrtuVPwiNg228dg3VB vPeQEtWtSttO3LAEU4TzUlYWTX0n1VW80voVIoyrd5l+xsU7ADvJ8RZ76qjt3Jsl bTZfC7pyM1m9XYHqboX8gOSgQ5trX5guQgn6HI0GiFkVkFRoBpOVsWN0Jy+Tk9nz QDWCszG3nG1WvFakm366tx9gccc5OqRnBJBpWPY/FI1s/u19H13Vv14qS+AMAbjG e/KKJjgxO8CSEtQaVRWOqAQTXhBPEsVtrca8+N9aluSglG3tCEZONv5IAp+Ohrev dhfwB1nHwbMxG9yO3g5pTUF/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzAtTDMTp rpOsWWMGaXfjDqE5GgEwHwYDVR0jBBgwFoAUefXtpMcOLgPpCLgYwXdY8qZpd1cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFQjM3LzQ5RUUyMzE2RjVG NzExRUZCODJFRkQ2QkM0RjlBRTAyL2VmWHRwTWNPTGdQcENMZ1l3WGRZOHFacGQx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZWZYdHBNY09MZ1BwQ0xnWXdYZFk4cVpwZDFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF QjM3LzQ5RUUyMzE2RjVGNzExRUZCODJFRkQ2QkM0RjlBRTAyL2VmWHRwTWNPTGdQ cENMZ1l3WGRZOHFacGQxYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACP4uzp2A6jLQF6Oh3N3fPc5DR84XTN8Nvlq7WoXYB+xQ2pI9+Upwflw xGmbH6gklpnqtsEIei5Id+rSrAU/F1YWdu861lOR5Cz5tEOw/v7MGsphIhRNSTw4 cbFpdSlRf0b4iXccL78ELQ6rj3E6rZ2jM/+cGDw1GvPkkn4oxWUdD8ni78eFTXq6 5fP436oOasZYNXE7iDpiB+laaisBQHAbf6WsWwppR9fQ0uOWVKNzhgueeHqT7WjV LYn6Dx807LaLbcP8XefEgKseA2J5BqQ2lYrqnl+89+SvPsTLwh/bx/VEiParFNLp uZujlI5mQT/d/YiqL9SxHbM6cF4s2+k= -----END CERTIFICATE-----Generated at Sat Apr 5 13:25:11 2025 by rpki-client