$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft File: g1sFZ9k-rArjJOofFrPDnLGzOI4.mft (raw, json) Hash identifier: 1sevz5lFJvMAHhIJhj0VXyQlTPMPWAv1Qq/6DczZmOg= Subject key identifier: 22:F8:FF:2B:D7:C1:D7:E3:5F:07:F8:C2:B0:C5:18:6F:F9:94:4B:61 Authority key identifier: 83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E Certificate issuer: /CN=A911F5B7/serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E Certificate serial: 0AC8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft Manifest number: 0C41 Signing time: Fri 30 May 2025 19:40:22 +0000 Manifest this update: Fri 30 May 2025 19:40:21 +0000 Manifest next update: Fri 06 Jun 2025 19:40:21 +0000 Files and hashes: 1: g1sFZ9k-rArjJOofFrPDnLGzOI4.crl (hash: 1JgAguIXibE7OUiU4noryoT+diFi3UkMOxj+G7HwvFY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2760 (0xac8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5B7, serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E Validity Not Before: May 30 19:40:21 2025 GMT Not After : Jun 6 19:40:21 2025 GMT Subject: CN=683a09a6-3e19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f2:59:dd:ab:6c:41:72:6e:be:49:9f:85:a4: 03:ea:64:64:f8:0c:79:17:b1:04:e3:ad:60:4e:ef: d1:de:be:8f:2c:a4:d3:bb:43:01:4b:05:e7:37:f6: 53:8a:2a:d9:b3:c4:55:e8:7d:8e:a2:d3:96:87:e2: a2:7e:40:c1:64:cb:e7:94:f0:ab:40:13:2a:8e:82: 92:f5:64:2d:92:c6:d7:5f:78:36:bc:51:d6:c9:c9: 9b:c2:72:92:89:0e:d3:55:f4:b0:bb:78:55:1b:d9: 90:5f:2e:b8:69:93:54:06:76:0f:2c:df:ca:5b:05: fd:6d:01:27:e1:e6:69:af:0d:34:98:ca:29:d6:2d: ed:0b:7b:00:91:55:85:ed:5d:be:e0:11:1d:3f:1b: d5:34:93:39:33:11:9d:69:35:14:d5:9d:2a:c2:19: 5c:31:9d:8e:22:b9:69:39:14:78:f6:76:ce:bf:e8: c8:f3:7e:16:e5:f9:81:04:67:da:8f:ff:94:7e:e9: 66:05:c8:16:c9:6e:d4:68:51:fa:12:a8:77:08:29: 41:12:6f:16:02:3f:db:43:b2:62:ec:8c:35:5b:84: 83:5f:d7:60:58:02:60:40:99:d4:5a:2b:7c:91:cf: c2:01:2d:47:49:51:79:c9:43:37:60:11:16:17:24: bc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F8:FF:2B:D7:C1:D7:E3:5F:07:F8:C2:B0:C5:18:6F:F9:94:4B:61 X509v3 Authority Key Identifier: keyid:83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:01:b8:ed:cd:5e:f0:05:08:8f:6b:83:81:91:b6:3e:76:ac: 22:0f:92:56:20:90:b6:26:f8:59:a7:80:af:3b:a7:73:dc:61: 50:03:c5:96:5d:83:7a:b5:7e:09:1a:2f:4c:62:62:61:7e:f1: a9:e7:a0:83:67:53:53:80:76:08:2e:bb:21:34:b2:6b:08:59: 11:5a:ca:0b:02:2c:d4:6d:79:38:d3:14:2f:90:f7:89:10:52: 52:10:50:a1:73:02:58:48:ea:12:64:b0:14:a0:49:39:9a:ab: a2:f9:93:a0:b7:bb:6e:8b:9a:e9:8f:4d:d7:8a:73:00:60:85: 0f:76:3f:9e:c3:81:98:0c:7f:a5:de:16:b1:50:36:f7:75:c8: 93:a5:f4:df:34:8d:0a:d2:e6:c5:fa:c6:4d:f5:d8:fc:ec:40: 2f:13:1f:a1:35:18:2d:66:c7:90:43:5d:75:e0:79:68:96:c0: 2c:db:56:c8:17:54:df:72:fc:16:aa:42:4c:27:cf:a9:53:e4: c4:ca:a5:7b:90:7c:53:a8:1b:d6:8d:82:58:25:dc:84:84:4a: 0d:e3:0f:22:d6:ca:dc:ab:d9:c4:83:a0:73:07:8f:aa:65:d8: 14:00:50:d0:70:50:84:a3:94:bf:10:63:36:15:c5:1f:87:d1: b0:82:12:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1QjcxMTAvBgNVBAUTKDgzNUIwNTY3RDkzRUFDMEFFMzI0RUExRjE2QjNDMzlD QjFCMzM4OEUwHhcNMjUwNTMwMTk0MDIxWhcNMjUwNjA2MTk0MDIxWjAYMRYwFAYD VQQDEw02ODNhMDlhNi0zZTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAovJZ3atsQXJuvkmfhaQD6mRk+Ax5F7EE461gTu/R3r6PLKTTu0MBSwXnN/ZT iirZs8RV6H2OotOWh+KifkDBZMvnlPCrQBMqjoKS9WQtksbXX3g2vFHWycmbwnKS iQ7TVfSwu3hVG9mQXy64aZNUBnYPLN/KWwX9bQEn4eZprw00mMop1i3tC3sAkVWF 7V2+4BEdPxvVNJM5MxGdaTUU1Z0qwhlcMZ2OIrlpORR49nbOv+jI834W5fmBBGfa j/+UfulmBcgWyW7UaFH6Eqh3CClBEm8WAj/bQ7Ji7Iw1W4SDX9dgWAJgQJnUWit8 kc/CAS1HSVF5yUM3YBEWFyS8+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCL4/yvX wdfjXwf4wrDFGG/5lEthMB8GA1UdIwQYMBaAFINbBWfZPqwK4yTqHxazw5yxsziO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVCNy83MUU3QTIyMjUx OTUxMUVBODQ2NEJBNzhDNEY5QUUwMi9nMXNGWjlrLXJBcmpKT29mRnJQRG5MR3pP STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cxc0ZaOWstckFyakpPb2ZGclBEbkxHek9JNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVCNy83MUU3QTIyMjUxOTUxMUVBODQ2NEJBNzhDNEY5QUUwMi9nMXNGWjlrLXJB cmpKT29mRnJQRG5MR3pPSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHAbjtzV7wBQiPa4OBkbY+dqwiD5JWIJC2JvhZp4CvO6dz3GFQA8WW XYN6tX4JGi9MYmJhfvGp56CDZ1NTgHYILrshNLJrCFkRWsoLAizUbXk40xQvkPeJ EFJSEFChcwJYSOoSZLAUoEk5mqui+ZOgt7tui5rpj03XinMAYIUPdj+ew4GYDH+l 3haxUDb3dciTpfTfNI0K0ubF+sZN9dj87EAvEx+hNRgtZseQQ1114HlolsAs21bI F1TfcvwWqkJMJ8+pU+TEyqV7kHxTqBvWjYJYJdyEhEoN4w8i1srcq9nEg6BzB4+q ZdgUAFDQcFCEo5S/EGM2FcUfh9GwghJT -----END CERTIFICATE-----Generated at Sat May 31 17:24:44 2025 by rpki-client