$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft File: RuPL70om399mDjVsdEBr4caZKlE.mft (raw, json) Hash identifier: 8TmKGBczOfxDyNzY4CRzRguO0U3Py0uU1HmNhD2gdDg= Subject key identifier: DA:36:6C:67:57:3F:A4:75:56:FD:3C:80:33:1D:EA:42:F0:0A:A4:7C Authority key identifier: 46:E3:CB:EF:4A:26:DF:DF:66:0E:35:6C:74:40:6B:E1:C6:99:2A:51 Certificate issuer: /CN=A9113C02/serialNumber=46E3CBEF4A26DFDF660E356C74406BE1C6992A51 Certificate serial: 1A59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RuPL70om399mDjVsdEBr4caZKlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft Manifest number: 246C Signing time: Sat 10 May 2025 16:16:10 +0000 Manifest this update: Sat 10 May 2025 16:16:09 +0000 Manifest next update: Sat 17 May 2025 16:16:09 +0000 Files and hashes: 1: RuPL70om399mDjVsdEBr4caZKlE.crl (hash: kueZM4a7iLD8QSyDJeqbSW6F1Ct3GVgfnnTIq8Ax59Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RuPL70om399mDjVsdEBr4caZKlE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:16:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6745 (0x1a59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=46E3CBEF4A26DFDF660E356C74406BE1C6992A51 Validity Not Before: May 10 16:16:09 2025 GMT Not After : May 17 16:16:09 2025 GMT Subject: CN=681f7bc9-b4cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:90:1f:d4:47:88:c3:ba:ba:00:95:bb:0f:2d: 40:8e:e9:e7:6b:ef:7d:bc:0c:8a:03:84:2d:ee:0a: 73:1c:2b:c8:6b:a3:ad:ef:ac:55:5f:c2:37:6e:be: de:dd:31:b6:3e:b2:6f:9f:d2:e9:4f:cb:d2:dc:7a: 7f:3f:d5:dd:ae:45:9a:b2:e1:64:a6:7e:16:11:e9: b7:0a:be:53:50:70:54:1d:4e:1f:ec:aa:ab:8e:49: d6:80:3d:0a:1a:e0:4e:da:c2:8d:3f:70:5b:96:b0: ea:20:ea:c2:2a:14:a6:67:17:18:90:9e:cb:18:64: a1:62:d3:23:d6:c0:b0:1d:ba:d5:aa:c9:80:23:e9: da:73:a2:39:66:90:de:50:9a:e2:71:e3:22:6c:14: 66:8b:8f:c0:46:aa:a8:b7:d5:d8:d6:28:0e:87:88: 69:8a:9f:26:13:c2:2f:c5:ee:86:d2:b3:f5:20:a2: 28:1f:fc:02:59:10:11:ff:da:dc:17:4f:90:b6:70: 67:2b:1a:2e:b2:48:a3:4a:10:c3:e5:5a:a6:75:a1: 83:5d:18:ae:8c:53:2b:8c:4f:b8:3f:d2:28:db:6a: 97:54:ce:1d:f3:b9:50:d5:a3:0d:e6:8e:9f:3d:c3: ae:09:11:1c:87:79:0e:47:e5:39:44:16:16:9e:58: e3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:36:6C:67:57:3F:A4:75:56:FD:3C:80:33:1D:EA:42:F0:0A:A4:7C X509v3 Authority Key Identifier: keyid:46:E3:CB:EF:4A:26:DF:DF:66:0E:35:6C:74:40:6B:E1:C6:99:2A:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RuPL70om399mDjVsdEBr4caZKlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:7c:48:52:49:44:21:36:3c:0c:86:89:b4:cd:69:0b:c2:5c: c7:9d:71:98:30:f5:21:ba:e8:52:42:a2:22:0f:68:43:37:e5: 04:12:a0:94:a5:71:23:1f:13:25:17:03:24:4e:8c:79:b5:bf: 3d:2a:a2:bb:69:70:c7:d7:42:f3:11:60:29:35:72:87:58:28: 35:ae:d7:3f:53:03:33:fb:8a:b6:71:69:a1:70:62:a4:15:27: 04:77:97:53:cb:21:4c:57:5c:ec:15:0b:e2:d7:65:7d:aa:43: e3:6b:8c:bc:bf:87:73:cc:9a:5f:c5:8a:50:2e:9c:de:23:53: 77:ec:d5:6e:89:2a:ed:be:60:27:83:42:8e:cd:28:a0:e7:01: 7f:6f:69:47:27:ba:d9:5d:1d:ff:89:00:43:9f:db:a5:51:93: 97:a4:19:cd:40:bc:93:8a:b5:bb:0b:dc:b1:1c:83:10:72:11: 48:49:8a:8f:73:cd:42:16:36:e9:ce:61:54:84:39:f1:3e:c7: b9:cd:75:f4:2b:7e:dd:23:a3:81:bf:21:73:62:1d:0f:6f:32: 45:ed:e6:07:21:c2:d1:1d:1f:84:83:1a:ad:69:a1:ce:e6:27: 80:48:2c:4e:6c:72:2a:ae:30:12:9e:df:d4:37:57:70:a6:96: 9b:00:07:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNDMDIxMTAvBgNVBAUTKDQ2RTNDQkVGNEEyNkRGREY2NjBFMzU2Qzc0NDA2QkUx QzY5OTJBNTEwHhcNMjUwNTEwMTYxNjA5WhcNMjUwNTE3MTYxNjA5WjAYMRYwFAYD VQQDEw02ODFmN2JjOS1iNGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJAf1EeIw7q6AJW7Dy1Ajunna+99vAyKA4Qt7gpzHCvIa6Ot76xVX8I3br7e 3TG2PrJvn9LpT8vS3Hp/P9XdrkWasuFkpn4WEem3Cr5TUHBUHU4f7KqrjknWgD0K GuBO2sKNP3BblrDqIOrCKhSmZxcYkJ7LGGShYtMj1sCwHbrVqsmAI+nac6I5ZpDe UJriceMibBRmi4/ARqqot9XY1igOh4hpip8mE8Ivxe6G0rP1IKIoH/wCWRAR/9rc F0+QtnBnKxouskijShDD5VqmdaGDXRiujFMrjE+4P9Io22qXVM4d87lQ1aMN5o6f PcOuCREch3kOR+U5RBYWnljj8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNo2bGdX P6R1Vv08gDMd6kLwCqR8MB8GA1UdIwQYMBaAFEbjy+9KJt/fZg41bHRAa+HGmSpR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9SdVBMNzBvbTM5OW1EalZzZEVCcjRjYVpL bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J1UEw3MG9tMzk5bURqVnNkRUJyNGNhWktsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9SdVBMNzBvbTM5 OW1EalZzZEVCcjRjYVpLbEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAfEhSSUQhNjwMhom0zWkLwlzHnXGYMPUhuuhSQqIiD2hDN+UEEqCU pXEjHxMlFwMkTox5tb89KqK7aXDH10LzEWApNXKHWCg1rtc/UwMz+4q2cWmhcGKk FScEd5dTyyFMV1zsFQvi12V9qkPja4y8v4dzzJpfxYpQLpzeI1N37NVuiSrtvmAn g0KOzSig5wF/b2lHJ7rZXR3/iQBDn9ulUZOXpBnNQLyTirW7C9yxHIMQchFISYqP c81CFjbpzmFUhDnxPse5zXX0K37dI6OBvyFzYh0PbzJF7eYHIcLRHR+EgxqtaaHO 5ieASCxObHIqrjASnt/UN1dwppabAAca -----END CERTIFICATE-----Generated at Sun May 11 19:39:11 2025 by rpki-client