$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft File: RuPL70om399mDjVsdEBr4caZKlE.mft (raw, json) Hash identifier: NBENEb5mQSKMyQkV5YyEHEKjY3nLAVmj49+SrsGzRaU= Subject key identifier: F1:4F:87:37:74:BB:BF:1E:D9:BB:79:9B:60:41:98:E3:50:2A:67:F7 Authority key identifier: 46:E3:CB:EF:4A:26:DF:DF:66:0E:35:6C:74:40:6B:E1:C6:99:2A:51 Certificate issuer: /CN=A9113C02/serialNumber=46E3CBEF4A26DFDF660E356C74406BE1C6992A51 Certificate serial: 1A63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RuPL70om399mDjVsdEBr4caZKlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft Manifest number: 2494 Signing time: Fri 30 May 2025 16:31:19 +0000 Manifest this update: Fri 30 May 2025 16:31:18 +0000 Manifest next update: Fri 06 Jun 2025 16:31:18 +0000 Files and hashes: 1: RuPL70om399mDjVsdEBr4caZKlE.crl (hash: N7Cvz7+ER6ByhC51P1YTCQbZXtpxVe+L7xucpXK+uvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RuPL70om399mDjVsdEBr4caZKlE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:31:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6755 (0x1a63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=46E3CBEF4A26DFDF660E356C74406BE1C6992A51 Validity Not Before: May 30 16:31:18 2025 GMT Not After : Jun 6 16:31:18 2025 GMT Subject: CN=6839dd56-dd78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fa:db:78:a2:61:4c:04:62:74:da:56:6b:e4: 86:c6:f2:00:7f:18:c0:89:14:30:33:d7:f5:81:33: da:cd:c6:46:83:96:8a:d3:17:c4:16:a7:b1:15:fa: dc:6f:7e:59:41:37:12:7b:52:4d:9c:2c:ce:a6:69: b1:95:d8:83:58:11:a8:0a:03:d5:31:19:3a:fe:68: c8:28:f3:fd:ea:73:f5:69:89:63:a7:2c:5c:5b:be: 15:46:28:d0:51:ba:9f:a1:cf:34:68:e2:16:22:c9: 63:5d:26:79:d5:99:c7:0a:db:cd:8b:56:29:cc:42: 57:cf:64:ba:d4:e9:04:3a:e8:58:7d:53:b7:5c:21: 40:78:27:e8:17:b5:b4:51:3e:78:d7:e5:47:2d:e7: a2:13:c8:51:28:b8:fc:a5:e1:6a:fb:0b:7b:4a:ff: 66:8c:2a:4b:66:ea:b2:85:f8:01:1f:ae:c4:bc:b7: 52:e2:98:fa:31:32:b0:c5:c6:f0:00:d4:e3:ed:e1: 2a:4a:a2:9b:e2:d3:0b:8f:3a:d1:01:4c:b3:ca:74: 16:80:68:19:df:eb:98:81:ba:9f:a6:70:fa:5c:c2: cc:df:93:c8:f9:f3:03:91:01:fc:cf:49:d7:80:83: 87:9a:9e:97:58:19:d3:97:10:78:8c:b7:c5:c3:04: 73:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:4F:87:37:74:BB:BF:1E:D9:BB:79:9B:60:41:98:E3:50:2A:67:F7 X509v3 Authority Key Identifier: keyid:46:E3:CB:EF:4A:26:DF:DF:66:0E:35:6C:74:40:6B:E1:C6:99:2A:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RuPL70om399mDjVsdEBr4caZKlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:46:c9:39:c2:9d:3e:56:6e:45:63:d5:2b:22:03:50:84:6c: 74:d3:33:2c:cd:38:7e:a9:68:50:11:9f:09:87:30:0a:8b:08: 30:95:75:ae:c8:25:67:1e:cb:84:39:ca:2e:e0:6b:66:46:c9: 04:7d:58:b7:07:fe:0b:21:5e:52:0c:68:31:b9:e3:2d:d4:1e: 25:fa:78:8c:58:a9:d4:dd:64:02:a0:91:80:ed:7f:9c:3d:44: 0d:ef:75:70:44:c2:64:15:1f:43:1b:64:32:7a:d7:a0:87:79: 19:8e:0e:4d:c4:1a:97:60:5f:fe:69:12:99:0e:ae:16:e7:7b: 77:24:48:18:db:80:fb:43:14:46:44:7e:b3:12:5d:29:e0:d8: 23:4c:32:12:1d:23:dc:0e:7f:ae:fc:e8:12:b1:40:ed:9e:58: ae:87:c0:58:23:fc:1d:bb:c3:35:4c:53:da:61:fa:ea:ed:d9: a6:64:53:b2:a1:a5:fd:2f:d2:f6:2a:7f:e0:90:98:1f:8d:16: 5b:de:ca:ac:58:c8:88:31:26:ee:e0:6b:b9:e9:1f:e0:2e:83: b4:c3:99:15:e1:0c:ca:d4:17:5a:09:77:d9:08:df:69:31:bb: 78:6a:65:97:bb:63:5f:0b:f4:2e:e2:19:7b:3f:8c:02:35:27: 84:e4:82:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNDMDIxMTAvBgNVBAUTKDQ2RTNDQkVGNEEyNkRGREY2NjBFMzU2Qzc0NDA2QkUx QzY5OTJBNTEwHhcNMjUwNTMwMTYzMTE4WhcNMjUwNjA2MTYzMTE4WjAYMRYwFAYD VQQDEw02ODM5ZGQ1Ni1kZDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxfrbeKJhTARidNpWa+SGxvIAfxjAiRQwM9f1gTPazcZGg5aK0xfEFqexFfrc b35ZQTcSe1JNnCzOpmmxldiDWBGoCgPVMRk6/mjIKPP96nP1aYljpyxcW74VRijQ Ubqfoc80aOIWIsljXSZ51ZnHCtvNi1YpzEJXz2S61OkEOuhYfVO3XCFAeCfoF7W0 UT541+VHLeeiE8hRKLj8peFq+wt7Sv9mjCpLZuqyhfgBH67EvLdS4pj6MTKwxcbw ANTj7eEqSqKb4tMLjzrRAUyzynQWgGgZ3+uYgbqfpnD6XMLM35PI+fMDkQH8z0nX gIOHmp6XWBnTlxB4jLfFwwRz7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFPhzd0 u78e2bt5m2BBmONQKmf3MB8GA1UdIwQYMBaAFEbjy+9KJt/fZg41bHRAa+HGmSpR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9SdVBMNzBvbTM5OW1EalZzZEVCcjRjYVpL bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J1UEw3MG9tMzk5bURqVnNkRUJyNGNhWktsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9SdVBMNzBvbTM5 OW1EalZzZEVCcjRjYVpLbEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZRsk5wp0+Vm5FY9UrIgNQhGx00zMszTh+qWhQEZ8JhzAKiwgwlXWu yCVnHsuEOcou4GtmRskEfVi3B/4LIV5SDGgxueMt1B4l+niMWKnU3WQCoJGA7X+c PUQN73VwRMJkFR9DG2Qyetegh3kZjg5NxBqXYF/+aRKZDq4W53t3JEgY24D7QxRG RH6zEl0p4NgjTDISHSPcDn+u/OgSsUDtnliuh8BYI/wdu8M1TFPaYfrq7dmmZFOy oaX9L9L2Kn/gkJgfjRZb3sqsWMiIMSbu4Gu56R/gLoO0w5kV4QzK1BdaCXfZCN9p Mbt4amWXu2NfC/Qu4hl7P4wCNSeE5ILn -----END CERTIFICATE-----Generated at Sat May 31 15:28:23 2025 by rpki-client