$ rpki-client -vvf rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft File: 9US5wrG96hw7N0NIuNFeNn5qD0I.mft (raw, json) Hash identifier: Y9IcIwOFuGFBERfYdyd4c0VOvpAuOjK3FT9FVuUkINg= Subject key identifier: CB:B9:45:2A:C7:33:11:57:E2:93:AF:F2:B1:B6:46:76:0D:E8:64:75 Authority key identifier: F5:44:B9:C2:B1:BD:EA:1C:3B:37:43:48:B8:D1:5E:36:7E:6A:0F:42 Certificate issuer: /CN=A91139AB/serialNumber=F544B9C2B1BDEA1C3B374348B8D15E367E6A0F42 Certificate serial: 0748 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft Manifest number: 0865 Signing time: Mon 12 May 2025 21:28:04 +0000 Manifest this update: Mon 12 May 2025 21:28:03 +0000 Manifest next update: Mon 19 May 2025 21:28:03 +0000 Files and hashes: 1: 9US5wrG96hw7N0NIuNFeNn5qD0I.crl (hash: ynMySRjkY6PsHKf1p6MBsUh07ixjRw7UNnHjrWe+U2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.crl rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1864 (0x748) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91139AB, serialNumber=F544B9C2B1BDEA1C3B374348B8D15E367E6A0F42 Validity Not Before: May 12 21:28:03 2025 GMT Not After : May 19 21:28:03 2025 GMT Subject: CN=682267e3-698b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c7:17:40:53:24:a7:3c:cb:3c:2e:89:bb:86: 66:10:b2:1c:f0:8e:12:24:b5:e3:df:63:d4:33:1a: 32:68:7d:d6:d0:d2:fa:e2:2d:f4:53:e2:64:af:c2: 45:28:a9:57:8e:08:1d:78:f3:86:6e:40:19:f5:1c: 81:e2:96:24:60:ce:1e:2f:7a:d2:36:6f:31:d4:c9: 92:cc:26:95:dd:3b:2d:91:2f:ad:ef:e9:bf:03:d8: 56:de:bf:6d:db:46:24:95:64:bf:f9:e9:87:f8:2f: a1:e0:2e:5d:19:e5:ec:a1:d6:2d:2f:28:96:7a:17: 3b:f5:9d:f4:fa:16:fb:cd:3d:4b:b5:70:e6:1a:6d: 25:eb:46:0e:78:6c:d3:0c:0c:a6:6d:33:3c:e1:19: 22:bb:e7:1d:06:21:aa:87:1b:c1:48:9f:96:57:65: df:2a:92:29:6e:0d:23:62:b7:e8:6c:05:ad:9d:05: a8:97:39:10:ce:e5:47:3c:eb:16:5b:93:9b:2c:c4: 22:1d:bf:e7:0b:49:2e:4b:1e:8c:50:ca:4e:7b:60: d6:4c:4e:ab:10:a4:db:f8:f8:88:2d:1b:ac:46:e4: 25:a9:97:60:22:1b:e4:68:f7:ee:cc:e9:2a:73:29: b4:11:37:4f:4c:d9:87:e2:3d:6d:2a:e0:ee:a6:59: 08:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B9:45:2A:C7:33:11:57:E2:93:AF:F2:B1:B6:46:76:0D:E8:64:75 X509v3 Authority Key Identifier: keyid:F5:44:B9:C2:B1:BD:EA:1C:3B:37:43:48:B8:D1:5E:36:7E:6A:0F:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:51:18:f0:3c:c8:a8:c5:1c:f3:e6:21:38:ec:4e:00:f2:04: d5:15:3e:3e:d0:22:59:99:48:02:44:07:1f:c8:c5:43:4b:76: 5d:ed:f5:bc:4c:88:62:e5:19:91:16:18:2c:42:0c:8a:59:70: 2b:91:b9:14:fb:36:68:ea:da:31:d9:be:27:bd:8d:60:24:5d: 76:88:7f:4d:09:89:84:70:ea:5b:19:52:80:65:6a:b5:14:76: a7:d1:0a:8a:6e:b9:06:d7:c6:4f:de:33:b5:d4:9c:4a:33:89: 04:14:9b:21:b2:15:e4:d4:15:cd:7a:c0:22:33:6f:6d:92:66: 0b:5c:7c:d8:a3:a8:f5:6e:25:28:ac:05:7c:08:98:7b:2a:70: 1c:a3:3f:3c:62:58:30:a7:d7:30:ab:35:00:eb:f8:c1:b9:fa: 5a:a8:75:1a:f5:26:12:99:0c:57:4b:63:5d:68:90:6f:a5:5e: b0:f3:0a:23:3e:d3:da:10:9f:c4:20:bd:cb:c2:7e:d3:0a:b1: f6:f9:05:76:57:ca:2f:21:77:55:c5:e9:35:df:4d:33:cb:2c: 11:b9:91:c6:47:98:a6:a4:fa:80:5f:ce:80:7d:f4:56:04:f8: 3f:cc:a8:1f:14:8f:77:3f:d3:22:55:74:2c:bf:4c:91:a3:cb: 39:3f:a8:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM5QUIxMTAvBgNVBAUTKEY1NDRCOUMyQjFCREVBMUMzQjM3NDM0OEI4RDE1RTM2 N0U2QTBGNDIwHhcNMjUwNTEyMjEyODAzWhcNMjUwNTE5MjEyODAzWjAYMRYwFAYD VQQDEw02ODIyNjdlMy02OThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvscXQFMkpzzLPC6Ju4ZmELIc8I4SJLXj32PUMxoyaH3W0NL64i30U+Jkr8JF KKlXjggdePOGbkAZ9RyB4pYkYM4eL3rSNm8x1MmSzCaV3TstkS+t7+m/A9hW3r9t 20YklWS/+emH+C+h4C5dGeXsodYtLyiWehc79Z30+hb7zT1LtXDmGm0l60YOeGzT DAymbTM84Rkiu+cdBiGqhxvBSJ+WV2XfKpIpbg0jYrfobAWtnQWolzkQzuVHPOsW W5ObLMQiHb/nC0kuSx6MUMpOe2DWTE6rEKTb+PiILRusRuQlqZdgIhvkaPfuzOkq cym0ETdPTNmH4j1tKuDuplkINwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMu5RSrH MxFX4pOv8rG2RnYN6GR1MB8GA1UdIwQYMBaAFPVEucKxveocOzdDSLjRXjZ+ag9C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzlBQi8xNThENDkwNjI1 NUIxMUVCQTlGNTYwMUFDNEY5QUUwMi85VVM1d3JHOTZodzdOME5JdU5GZU5uNXFE MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlVUzV3ckc5Nmh3N04wTkl1TkZlTm41cUQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzlBQi8xNThENDkwNjI1NUIxMUVCQTlGNTYwMUFDNEY5QUUwMi85VVM1d3JHOTZo dzdOME5JdU5GZU5uNXFEMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrURjwPMioxRzz5iE47E4A8gTVFT4+0CJZmUgCRAcfyMVDS3Zd7fW8 TIhi5RmRFhgsQgyKWXArkbkU+zZo6tox2b4nvY1gJF12iH9NCYmEcOpbGVKAZWq1 FHan0QqKbrkG18ZP3jO11JxKM4kEFJshshXk1BXNesAiM29tkmYLXHzYo6j1biUo rAV8CJh7KnAcoz88Ylgwp9cwqzUA6/jBufpaqHUa9SYSmQxXS2NdaJBvpV6w8woj PtPaEJ/EIL3Lwn7TCrH2+QV2V8ovIXdVxek1300zyywRuZHGR5impPqAX86AffRW BPg/zKgfFI93P9MiVXQsv0yRo8s5P6hc -----END CERTIFICATE-----Generated at Wed May 14 19:46:28 2025 by rpki-client