$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft File: efXtpMcOLgPpCLgYwXdY8qZpd1c.mft (raw, json) Hash identifier: GQMpx2pUe6rHqsadvcjCJiSnV0LwaVI8utO2Qpxxoq8= Subject key identifier: AE:06:25:87:83:E0:91:1C:7C:13:B6:3A:90:F4:D2:DE:FF:5F:41:39 Authority key identifier: 79:F5:ED:A4:C7:0E:2E:03:E9:08:B8:18:C1:77:58:F2:A6:69:77:57 Certificate issuer: /CN=A91FEB37/serialNumber=79F5EDA4C70E2E03E908B818C17758F2A6697757 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/efXtpMcOLgPpCLgYwXdY8qZpd1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft Manifest number: 2F Signing time: Sat 31 May 2025 07:14:14 +0000 Manifest this update: Sat 31 May 2025 07:14:14 +0000 Manifest next update: Sat 07 Jun 2025 07:14:14 +0000 Files and hashes: 1: efXtpMcOLgPpCLgYwXdY8qZpd1c.crl (hash: 76HmEBW2QPVphrDRztzyi6hb5OLuTlGVpM1o3IyPmU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.crl rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/efXtpMcOLgPpCLgYwXdY8qZpd1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEB37, serialNumber=79F5EDA4C70E2E03E908B818C17758F2A6697757 Validity Not Before: May 31 07:14:14 2025 GMT Not After : Jun 7 07:14:14 2025 GMT Subject: CN=683aac46-2ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2a:e2:1d:a1:6f:95:fc:a5:d1:9a:8b:eb:3d: f1:bd:bc:38:53:ea:8e:a7:b9:04:4b:09:6b:48:d7: 28:16:a2:1a:e7:1f:9e:84:f2:d0:63:4c:c2:87:3b: 8d:95:03:da:e3:cc:eb:99:31:bf:9f:0a:1f:da:37: 45:7e:f1:f9:33:d1:57:42:f6:03:73:fe:2f:4e:da: f1:e7:8f:0d:68:fd:a4:7d:cc:07:a7:89:92:cc:48: 4e:58:75:df:ba:ab:9a:50:35:ac:4b:10:b8:05:06: 26:c6:2c:59:a1:45:7a:54:f7:81:f4:72:fc:ac:0b: 32:cd:f0:bc:91:4f:15:98:dd:e5:87:eb:e3:d4:74: e5:87:dc:54:12:a6:21:38:7e:d6:64:27:b7:fe:71: de:c1:a4:de:a4:a1:21:9e:1e:19:6d:34:6d:31:f2: 50:51:08:a0:c3:75:b4:7e:91:1a:4b:e4:33:54:57: 10:9b:c0:e7:b1:50:04:e1:f9:8c:63:ad:96:b0:0c: fd:60:6e:e6:3b:6c:15:d4:f2:58:7a:fa:2f:65:05: aa:96:80:31:c6:77:db:ae:85:2e:63:ac:a3:a6:50: e8:94:fb:9a:bf:fc:30:c6:ee:96:ef:a2:a3:ec:7f: a6:52:cb:73:de:b9:61:4d:f1:1a:4d:a7:92:c5:bc: bc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:06:25:87:83:E0:91:1C:7C:13:B6:3A:90:F4:D2:DE:FF:5F:41:39 X509v3 Authority Key Identifier: keyid:79:F5:ED:A4:C7:0E:2E:03:E9:08:B8:18:C1:77:58:F2:A6:69:77:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/efXtpMcOLgPpCLgYwXdY8qZpd1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:2e:d3:88:0c:3b:27:a7:42:72:42:d3:e7:b8:4d:ab:4c:1f: 68:02:fd:c5:fb:2c:f1:2c:5d:1d:3d:35:c1:5c:7d:9f:5c:ea: 93:06:b6:31:4c:b8:eb:87:30:0d:e6:af:01:c5:32:63:80:7f: 0f:a0:c1:a1:90:0a:8a:36:33:50:92:cd:d3:54:28:e0:3b:ad: f7:fd:d1:a0:e3:9d:46:26:67:17:9d:f8:c1:91:eb:3f:99:21: 64:4f:01:78:c7:7a:50:59:e4:b9:e2:70:30:81:0a:03:ad:a2: 55:91:2d:54:87:13:ad:35:bc:ba:05:f5:1f:cd:37:99:42:2c: aa:21:1e:27:81:3f:f5:cc:42:09:62:66:d8:0c:f8:8a:be:c8: dc:f7:c1:95:6e:d0:a2:9f:47:6d:31:4f:b8:9d:3d:02:2f:f9: d3:31:f2:da:05:f4:69:eb:48:ae:26:17:f8:f0:79:c7:c9:bd: 03:80:0c:5e:cc:15:62:91:8d:07:0f:47:d9:f5:11:09:6f:09: 05:8f:71:ca:1b:bb:5e:00:d4:1e:94:0d:cf:50:04:f5:b0:ff: 8d:ff:c4:ad:e3:fc:b2:94:1f:54:d8:c5:9f:e2:57:72:73:09: 97:0d:0e:6a:5c:27:4f:b7:a9:4d:9b:35:dd:3f:ae:d7:7b:95: fe:69:2c:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RUIzNzExMC8GA1UEBRMoNzlGNUVEQTRDNzBFMkUwM0U5MDhCODE4QzE3NzU4RjJB NjY5Nzc1NzAeFw0yNTA1MzEwNzE0MTRaFw0yNTA2MDcwNzE0MTRaMBgxFjAUBgNV BAMTDTY4M2FhYzQ2LTJhYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8KuIdoW+V/KXRmovrPfG9vDhT6o6nuQRLCWtI1ygWohrnH56E8tBjTMKHO42V A9rjzOuZMb+fCh/aN0V+8fkz0VdC9gNz/i9O2vHnjw1o/aR9zAeniZLMSE5Ydd+6 q5pQNaxLELgFBibGLFmhRXpU94H0cvysCzLN8LyRTxWY3eWH6+PUdOWH3FQSpiE4 ftZkJ7f+cd7BpN6koSGeHhltNG0x8lBRCKDDdbR+kRpL5DNUVxCbwOexUATh+Yxj rZawDP1gbuY7bBXU8lh6+i9lBaqWgDHGd9uuhS5jrKOmUOiU+5q//DDG7pbvoqPs f6ZSy3PeuWFN8RpNp5LFvLyPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrgYlh4Pg kRx8E7Y6kPTS3v9fQTkwHwYDVR0jBBgwFoAUefXtpMcOLgPpCLgYwXdY8qZpd1cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFQjM3LzQ5RUUyMzE2RjVG NzExRUZCODJFRkQ2QkM0RjlBRTAyL2VmWHRwTWNPTGdQcENMZ1l3WGRZOHFacGQx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZWZYdHBNY09MZ1BwQ0xnWXdYZFk4cVpwZDFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF QjM3LzQ5RUUyMzE2RjVGNzExRUZCODJFRkQ2QkM0RjlBRTAyL2VmWHRwTWNPTGdQ cENMZ1l3WGRZOHFacGQxYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJEu04gMOyenQnJC0+e4TatMH2gC/cX7LPEsXR09NcFcfZ9c6pMGtjFM uOuHMA3mrwHFMmOAfw+gwaGQCoo2M1CSzdNUKOA7rff90aDjnUYmZxed+MGR6z+Z IWRPAXjHelBZ5LnicDCBCgOtolWRLVSHE601vLoF9R/NN5lCLKohHieBP/XMQgli ZtgM+Iq+yNz3wZVu0KKfR20xT7idPQIv+dMx8toF9GnrSK4mF/jwecfJvQOADF7M FWKRjQcPR9n1EQlvCQWPccobu14A1B6UDc9QBPWw/43/xK3j/LKUH1TYxZ/iV3Jz CZcNDmpcJ0+3qU2bNd0/rtd7lf5pLPU= -----END CERTIFICATE-----Generated at Sat May 31 16:35:48 2025 by rpki-client