$ rpki-client -vvf rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft File: 11KsJgWV3m0QKce5SPSUl-SD6s4.mft (raw, json) Hash identifier: iNdJRzQBERExkPkFVc9sKFE8VlMUv1cPxCcbS+BxGSw= Subject key identifier: 50:35:EC:5A:A9:C7:E9:AA:83:31:AA:A9:1D:D9:46:00:15:A2:01:2B Authority key identifier: D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE Certificate issuer: /CN=A91383B0/serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE Certificate serial: 2B7E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft Manifest number: 2B7E Signing time: Wed 12 Mar 2025 15:30:46 +0000 Manifest this update: Wed 12 Mar 2025 15:30:45 +0000 Manifest next update: Wed 19 Mar 2025 15:30:45 +0000 Files and hashes: 1: 11KsJgWV3m0QKce5SPSUl-SD6s4.crl (hash: jyGoZYdfLbjWFozW8H0yTmj9SNnUU4BaHhRQ5Fn13oU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 15:30:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11134 (0x2b7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383B0 Validity Not Before: Mar 12 15:30:45 2025 GMT Not After : Mar 19 15:30:45 2025 GMT Subject: CN=67d1a8a6-71c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:87:e3:a2:50:9d:7d:25:76:b8:b9:11:ee:fc: c3:cd:68:2e:eb:30:f9:39:fb:3d:93:4a:90:3a:4d: 4d:e9:bc:70:0d:b3:1d:50:11:0e:b9:dc:f6:c6:8b: ab:42:83:e1:85:73:35:55:94:39:0d:51:a3:8a:2b: 49:e2:fc:2e:90:06:8f:40:d1:77:b3:c4:93:2d:8f: e8:b3:31:3a:32:f5:9f:c6:5c:c8:11:e9:74:fb:2e: 28:6b:e6:e8:3d:25:ae:0f:b6:f6:e9:ea:13:85:d1: 11:17:12:10:0a:6e:3d:56:fa:d1:1e:37:e4:1a:79: 9a:ff:0f:05:f7:ca:9f:06:d9:fe:fe:fd:6c:9e:b9: 62:9a:dd:9c:03:35:01:2a:dd:4b:2b:16:e6:a5:97: 70:9c:f8:cc:a6:d0:35:d6:fd:61:cc:5b:7b:d8:71: 0a:a5:9b:02:5d:1f:14:ac:5e:5f:49:80:de:2e:88: 9d:b2:e0:db:4b:ae:83:ab:e0:3f:57:10:34:b4:a1: ed:92:2a:86:72:0b:6b:cb:3f:b2:3a:03:d8:11:03: 17:07:aa:87:1b:e9:45:89:c4:0b:10:bd:aa:4b:cd: bc:4f:b4:4c:37:7e:2f:f6:04:f8:11:c8:b1:70:82: 06:fd:a0:08:55:e3:45:93:5b:dc:ec:4c:b4:67:91: 53:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:35:EC:5A:A9:C7:E9:AA:83:31:AA:A9:1D:D9:46:00:15:A2:01:2B X509v3 Authority Key Identifier: keyid:D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:31:ae:ea:b5:09:ad:44:52:2b:a9:ad:33:2b:4a:c7:ad:8d: b3:6a:cd:d6:d0:86:47:88:ee:39:b3:52:b8:67:0c:66:67:1c: 69:10:66:50:f5:49:72:14:56:27:db:af:f2:90:3b:95:1e:33: 26:f4:b7:55:74:83:19:34:2e:9c:48:30:00:4e:7b:0b:44:2a: 3f:bd:8a:1d:b8:76:03:51:84:18:7f:be:38:47:c8:ec:3e:ff: 10:25:fe:87:0f:3f:85:24:60:6a:80:8c:f2:39:ec:4b:0f:7a: b7:ac:31:cd:6c:e0:1d:03:54:dd:6d:f5:8a:0e:c8:0f:ed:0d: c0:c3:09:4e:ec:ed:34:85:f1:48:6f:49:55:5c:75:ef:98:a5: d7:f8:e8:20:95:ab:5e:b9:80:b6:28:9e:84:15:7f:f1:22:7e: 51:bd:a2:b3:ce:5b:12:ac:8c:10:c2:61:f5:ea:c6:f8:f9:f3: 6a:a9:4e:0b:b8:a5:fa:a1:d0:9e:41:73:57:8b:38:9d:ae:28: ff:0a:9e:1a:1b:3b:b6:a0:5b:60:d9:b0:e9:c8:17:07:1d:7c: e4:a5:eb:e4:a8:69:12:40:fe:e4:a3:11:fd:79:0a:a3:27:98: 70:09:35:24:7a:7a:09:5b:67:d3:b9:9c:ef:35:63:f0:b1:17: 95:bf:35:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzQjAxMTAvBgNVBAUTKEQ3NTJBQzI2MDU5NURFNkQxMDI5QzdCOTQ4RjQ5NDk3 RTQ4M0VBQ0UwHhcNMjUwMzEyMTUzMDQ1WhcNMjUwMzE5MTUzMDQ1WjAYMRYwFAYD VQQDEw02N2QxYThhNi03MWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4fjolCdfSV2uLkR7vzDzWgu6zD5Ofs9k0qQOk1N6bxwDbMdUBEOudz2xour QoPhhXM1VZQ5DVGjiitJ4vwukAaPQNF3s8STLY/oszE6MvWfxlzIEel0+y4oa+bo PSWuD7b26eoThdERFxIQCm49VvrRHjfkGnma/w8F98qfBtn+/v1snrlimt2cAzUB Kt1LKxbmpZdwnPjMptA11v1hzFt72HEKpZsCXR8UrF5fSYDeLoidsuDbS66Dq+A/ VxA0tKHtkiqGcgtryz+yOgPYEQMXB6qHG+lFicQLEL2qS828T7RMN34v9gT4Ecix cIIG/aAIVeNFk1vc7Ey0Z5FTIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFA17Fqp x+mqgzGqqR3ZRgAVogErMB8GA1UdIwQYMBaAFNdSrCYFld5tECnHuUj0lJfkg+rO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCMC8zRDNGRTlCNkRC QzIxMUUzOEY1NTE0NEY1OTExRUEzMi8xMUtzSmdXVjNtMFFLY2U1U1BTVWwtU0Q2 czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzExS3NKZ1dWM20wUUtjZTVTUFNVbC1TRDZzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNCMC8zRDNGRTlCNkRCQzIxMUUzOEY1NTE0NEY1OTExRUEzMi8xMUtzSmdXVjNt MFFLY2U1U1BTVWwtU0Q2czQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVMa7qtQmtRFIrqa0zK0rHrY2zas3W0IZHiO45s1K4ZwxmZxxpEGZQ 9UlyFFYn26/ykDuVHjMm9LdVdIMZNC6cSDAATnsLRCo/vYoduHYDUYQYf744R8js Pv8QJf6HDz+FJGBqgIzyOexLD3q3rDHNbOAdA1TdbfWKDsgP7Q3AwwlO7O00hfFI b0lVXHXvmKXX+OgglateuYC2KJ6EFX/xIn5RvaKzzlsSrIwQwmH16sb4+fNqqU4L uKX6odCeQXNXizidrij/Cp4aGzu2oFtg2bDpyBcHHXzkpevkqGkSQP7koxH9eQqj J5hwCTUkenoJW2fTuZzvNWPwsReVvzXu -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:03 2025 by rpki-client