$ rpki-client -vvf rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft File: Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft (raw, json) Hash identifier: xWnkyy4MWq46LB04X1y1F0W44OwNsP7GG4X8ZHrjmjU= Subject key identifier: 31:6B:B5:F4:04:3C:CA:BA:10:6D:EE:93:D8:5A:AC:D7:1C:23:C1:6E Authority key identifier: 55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6 Certificate issuer: /CN=A91127C1/serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6 Certificate serial: 01D1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft Manifest number: 01D1 Signing time: Sat 10 May 2025 19:45:29 +0000 Manifest this update: Sat 10 May 2025 19:45:28 +0000 Manifest next update: Sat 17 May 2025 19:45:28 +0000 Files and hashes: 1: Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl (hash: OaQdwZ9/YjBtqXqEziq3+yD9Fj9JfEiEXjxdYgIGyZk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 465 (0x1d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91127C1, serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6 Validity Not Before: May 10 19:45:28 2025 GMT Not After : May 17 19:45:28 2025 GMT Subject: CN=681facd9-dbca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e8:33:eb:08:50:cc:8b:d6:d7:45:d9:04:0a: 26:c6:f3:76:0f:a8:dd:50:9e:0e:32:30:a7:dd:22: 4a:aa:ae:da:8f:77:e0:61:90:bc:d1:dc:8c:4a:ed: ce:2b:35:61:be:8c:89:87:80:f0:41:6d:2b:e5:66: 48:bf:4b:c8:c9:26:f6:af:77:84:81:ce:30:be:e7: 54:29:94:0d:38:5c:c0:02:b2:a3:3b:01:da:02:2a: f8:eb:41:6b:02:3c:13:b5:ab:a1:80:c1:e6:a2:f1: 10:10:dd:ee:0c:fe:8e:72:2b:fa:56:3a:45:b2:98: 0a:0c:31:fd:a9:c2:90:7c:14:d9:18:48:18:d8:e6: d7:47:38:b4:bc:60:72:62:78:4a:23:9f:da:35:19: f1:18:e9:1e:a9:ca:04:19:9b:94:e8:0c:db:24:88: 80:2b:fe:b4:dc:92:4d:a1:75:de:2e:cc:3f:90:64: 98:90:a3:88:c1:9f:b9:3b:66:35:d7:76:1b:0e:a9: b5:73:f4:58:eb:b8:a3:60:c4:24:37:e4:0c:e1:76: 4f:50:64:43:31:02:76:5d:87:80:83:df:ac:d2:75: e2:61:0c:e6:37:21:01:ca:06:07:b8:e5:bc:06:87: 85:cf:c4:90:a8:f3:f1:1e:81:7c:ac:bf:3d:c6:8d: 6b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:6B:B5:F4:04:3C:CA:BA:10:6D:EE:93:D8:5A:AC:D7:1C:23:C1:6E X509v3 Authority Key Identifier: keyid:55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:22:2d:81:a8:ad:52:2f:c4:02:1b:fe:f3:59:69:3c:a7:67: ce:86:6a:f2:0e:44:4c:4b:dd:08:4d:a5:cd:8c:05:a4:ff:a7: cb:f9:d5:85:d6:8e:86:5d:b6:a1:a2:82:09:21:fa:29:a5:47: 70:ee:39:f3:85:61:2f:66:3a:78:ad:62:ea:79:0b:fa:35:de: 16:4b:2f:79:80:09:ee:e5:ce:a4:0f:19:66:c4:98:33:ea:e1: f1:71:d7:dc:2a:ac:96:f0:f6:f7:8d:52:22:46:de:86:6c:24: b7:a0:c8:67:98:f0:1f:7e:e2:1e:f1:42:cf:4b:67:36:db:87: 09:ec:7a:ed:a1:cb:88:5c:f0:36:b5:5a:63:0c:e1:04:f2:b2: 0d:c6:b1:7d:ac:a7:6f:c0:9c:a4:84:13:a4:cf:e0:b3:59:8a: d2:95:76:12:ce:df:20:5d:d7:3d:a7:77:82:b7:32:34:42:d2: a5:b5:33:95:89:cb:03:ae:9f:ad:b4:72:af:bf:66:bd:fc:7b: 76:8c:da:b4:e3:69:39:66:dd:71:36:b9:4b:79:2e:82:30:3f: db:2e:fa:9a:13:18:0e:53:b6:75:40:f5:f4:c0:f9:e3:99:5d: 15:a2:f3:46:b5:8f:68:37:d8:c2:54:21:8e:6b:4d:d0:df:72: ba:9f:f5:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3QzExMTAvBgNVBAUTKDU1RkI3QkNDQTc0MDI4NUZDODFBQTM2MEYwMkNFMzJG OTU4MTZEQjYwHhcNMjUwNTEwMTk0NTI4WhcNMjUwNTE3MTk0NTI4WjAYMRYwFAYD VQQDEw02ODFmYWNkOS1kYmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+gz6whQzIvW10XZBAomxvN2D6jdUJ4OMjCn3SJKqq7aj3fgYZC80dyMSu3O KzVhvoyJh4DwQW0r5WZIv0vIySb2r3eEgc4wvudUKZQNOFzAArKjOwHaAir460Fr AjwTtauhgMHmovEQEN3uDP6Ociv6VjpFspgKDDH9qcKQfBTZGEgY2ObXRzi0vGBy YnhKI5/aNRnxGOkeqcoEGZuU6AzbJIiAK/603JJNoXXeLsw/kGSYkKOIwZ+5O2Y1 13YbDqm1c/RY67ijYMQkN+QM4XZPUGRDMQJ2XYeAg9+s0nXiYQzmNyEBygYHuOW8 BoeFz8SQqPPxHoF8rL89xo1rwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFrtfQE PMq6EG3uk9harNccI8FuMB8GA1UdIwQYMBaAFFX7e8ynQChfyBqjYPAs4y+VgW22 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdDMS9EQ0Y5OEExNjc3 ODExMUVEOTZCMzY0NjRDNEY5QUUwMi9WZnQ3ektkQUtGX0lHcU5nOEN6akw1V0Ji YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZmdDd6S2RBS0ZfSUdxTmc4Q3pqTDVXQmJiWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjdDMS9EQ0Y5OEExNjc3ODExMUVEOTZCMzY0NjRDNEY5QUUwMi9WZnQ3ektkQUtG X0lHcU5nOEN6akw1V0JiYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANIi2BqK1SL8QCG/7zWWk8p2fOhmryDkRMS90ITaXNjAWk/6fL+dWF 1o6GXbahooIJIfoppUdw7jnzhWEvZjp4rWLqeQv6Nd4WSy95gAnu5c6kDxlmxJgz 6uHxcdfcKqyW8Pb3jVIiRt6GbCS3oMhnmPAffuIe8ULPS2c224cJ7HrtocuIXPA2 tVpjDOEE8rINxrF9rKdvwJykhBOkz+CzWYrSlXYSzt8gXdc9p3eCtzI0QtKltTOV icsDrp+ttHKvv2a9/Ht2jNq042k5Zt1xNrlLeS6CMD/bLvqaExgOU7Z1QPX0wPnj mV0VovNGtY9oN9jCVCGOa03Q33K6n/X0 -----END CERTIFICATE-----Generated at Mon May 12 18:00:36 2025 by rpki-client