$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft File: cBtV7SDYPjSNgjfON1l5WevAGCQ.mft (raw, json) Hash identifier: zwSW2s9aOllMq5iwv5WO2fChVZmD/wI9VNYBNOagwwY= Subject key identifier: 67:B1:AB:A8:95:63:60:7D:11:9F:EB:FF:25:F7:3C:AA:A6:FE:23:57 Authority key identifier: 70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24 Certificate issuer: /CN=A91E5D61/serialNumber=701B55ED20D83E348D8237CE37597959EBC01824 Certificate serial: 1266 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft Manifest number: 46DF Signing time: Wed 12 Mar 2025 14:20:56 +0000 Manifest this update: Wed 12 Mar 2025 14:20:55 +0000 Manifest next update: Wed 19 Mar 2025 14:20:55 +0000 Files and hashes: 1: cBtV7SDYPjSNgjfON1l5WevAGCQ.crl (hash: muxNZ9CLgwr6DAx7rIjwXmWczUXKviIc33ytPJo1EN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 14:20:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4710 (0x1266) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61 Validity Not Before: Mar 12 14:20:55 2025 GMT Not After : Mar 19 14:20:55 2025 GMT Subject: CN=67d19847-6303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:40:3a:52:75:47:ff:7e:9a:52:8c:f5:12:44: c4:83:ed:5d:42:67:1d:21:aa:ee:c6:00:0a:b4:e0: 9b:55:fd:39:45:9a:36:c8:6a:a3:7e:78:34:10:86: c5:b8:19:02:27:18:95:0d:3e:9c:44:c1:b6:34:51: 86:44:64:9e:21:d0:e9:f1:19:97:d4:af:fa:bc:63: ef:16:e0:12:92:3a:14:58:72:91:75:98:8c:7e:7e: 24:c4:bc:79:30:5c:a8:8e:ef:8e:e4:2a:95:80:5f: c9:2f:d9:e0:da:37:9f:0a:25:78:20:ac:0f:68:b7: 89:19:61:a9:ef:91:91:30:6b:b0:58:d9:60:e6:6f: 58:12:d1:d3:2c:61:54:0d:dd:8f:8a:c8:08:46:33: 6b:1c:46:72:e3:cf:5e:01:80:52:62:7f:c1:75:c3: e9:99:24:2c:57:54:bc:fa:3b:6c:9c:3a:7b:c6:39: e4:86:12:a5:93:83:8b:83:05:ed:8a:d9:19:ab:31: ae:21:39:dc:1e:c0:da:1b:a5:25:29:74:0f:9a:7a: be:47:18:b5:6f:99:11:fb:17:ed:e5:88:b6:a1:51: 45:7b:4a:80:11:00:8c:c7:e6:db:0a:c9:78:e3:60: b3:e1:ec:73:82:6e:16:82:76:41:d2:9d:95:3a:9f: 4d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B1:AB:A8:95:63:60:7D:11:9F:EB:FF:25:F7:3C:AA:A6:FE:23:57 X509v3 Authority Key Identifier: keyid:70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:61:63:13:dd:d3:ba:89:58:35:48:ee:3e:5e:c6:c2:55:45: c3:24:e2:34:02:7a:34:4c:4e:78:3d:d9:84:00:cd:b7:22:ed: dd:c6:49:96:c0:09:f9:f1:29:26:7a:e6:fa:09:5c:2a:81:f3: dc:19:56:1a:6e:d6:42:a1:2c:9e:7c:1c:5e:11:62:f6:c5:ea: e8:4d:2f:f5:7a:42:5d:79:bb:6e:06:10:8a:4f:a0:83:b9:fc: 5d:96:04:06:4f:13:5e:11:f2:76:31:77:d6:b3:04:fd:28:e2: e3:14:2c:ba:f2:8c:ac:51:e8:66:46:5b:40:87:99:6a:41:bc: 2a:c9:da:99:14:c9:dd:42:f0:5d:6c:24:62:01:d1:11:d3:d4: 34:59:19:84:0c:84:de:04:53:be:32:88:9b:a4:93:01:3e:87: 0c:65:c8:a5:d3:85:80:c9:36:f6:91:f1:3f:64:65:0e:2b:79: a4:98:98:4e:5d:fa:0f:a1:73:3b:21:72:c2:f6:8c:e3:87:c1: 1d:48:f7:1d:af:16:ca:d3:05:79:30:ab:8b:0e:84:7d:40:0d: 0e:49:62:25:b1:7f:36:6e:47:bc:af:43:23:58:1d:0a:db:73: 74:d6:e4:73:94:df:9d:7f:ce:de:99:57:82:9a:24:34:d1:d6: bb:5c:7a:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDcwMUI1NUVEMjBEODNFMzQ4RDgyMzdDRTM3NTk3OTU5 RUJDMDE4MjQwHhcNMjUwMzEyMTQyMDU1WhcNMjUwMzE5MTQyMDU1WjAYMRYwFAYD VQQDEw02N2QxOTg0Ny02MzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0A6UnVH/36aUoz1EkTEg+1dQmcdIaruxgAKtOCbVf05RZo2yGqjfng0EIbF uBkCJxiVDT6cRMG2NFGGRGSeIdDp8RmX1K/6vGPvFuASkjoUWHKRdZiMfn4kxLx5 MFyoju+O5CqVgF/JL9ng2jefCiV4IKwPaLeJGWGp75GRMGuwWNlg5m9YEtHTLGFU Dd2PisgIRjNrHEZy489eAYBSYn/BdcPpmSQsV1S8+jtsnDp7xjnkhhKlk4OLgwXt itkZqzGuITncHsDaG6UlKXQPmnq+Rxi1b5kR+xft5Yi2oVFFe0qAEQCMx+bbCsl4 42Cz4exzgm4WgnZB0p2VOp9NfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGexq6iV Y2B9EZ/r/yX3PKqm/iNXMB8GA1UdIwQYMBaAFHAbVe0g2D40jYI3zjdZeVnrwBgk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS9FRTY3RDhDMDFE NzgxMUUyODc5RTM4QzUwOEIwMkNEMi9jQnRWN1NEWVBqU05namZPTjFsNVdldkFH Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NCdFY3U0RZUGpTTmdqZk9OMWw1V2V2QUdDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS9FRTY3RDhDMDFENzgxMUUyODc5RTM4QzUwOEIwMkNEMi9jQnRWN1NEWVBq U05namZPTjFsNVdldkFHQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbYWMT3dO6iVg1SO4+XsbCVUXDJOI0Ano0TE54PdmEAM23Iu3dxkmW wAn58Skmeub6CVwqgfPcGVYabtZCoSyefBxeEWL2xeroTS/1ekJdebtuBhCKT6CD ufxdlgQGTxNeEfJ2MXfWswT9KOLjFCy68oysUehmRltAh5lqQbwqydqZFMndQvBd bCRiAdER09Q0WRmEDITeBFO+MoibpJMBPocMZcil04WAyTb2kfE/ZGUOK3mkmJhO XfoPoXM7IXLC9ozjh8EdSPcdrxbK0wV5MKuLDoR9QA0OSWIlsX82bke8r0MjWB0K 23N01uRzlN+df87emVeCmiQ00da7XHoX -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:48 2025 by rpki-client