$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft File: g1sFZ9k-rArjJOofFrPDnLGzOI4.mft (raw, json) Hash identifier: RwTKdyrCErNLsq06WDLsJZyLGkpb1EMHvvFigQLF4ls= Subject key identifier: 66:98:7F:59:2F:B8:CA:C3:7B:DF:D9:58:44:14:FD:63:14:91:4E:07 Authority key identifier: 83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E Certificate issuer: /CN=A911F5B7/serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E Certificate serial: 0ABF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft Manifest number: 0C2C Signing time: Wed 14 May 2025 19:37:05 +0000 Manifest this update: Wed 14 May 2025 19:37:05 +0000 Manifest next update: Wed 21 May 2025 19:37:05 +0000 Files and hashes: 1: g1sFZ9k-rArjJOofFrPDnLGzOI4.crl (hash: 73Rqo26YYbfm/x+XCzPf6qks4C9LD/K4ykU3db4phNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2751 (0xabf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5B7, serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E Validity Not Before: May 14 19:37:05 2025 GMT Not After : May 21 19:37:05 2025 GMT Subject: CN=6824f0e1-b3e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:50:d4:73:9c:49:66:3f:58:0e:f4:10:b0:1e: be:05:60:da:b8:41:e5:b1:0c:f7:11:76:69:3f:ba: 85:97:bb:f7:27:12:5d:ed:dd:38:1a:e6:65:99:cf: ff:d7:1e:e9:81:dc:3e:7f:f2:00:c3:c1:53:b0:55: 98:9b:83:43:47:db:38:73:a9:21:d7:d4:e7:a6:8d: 80:de:91:77:7a:2a:1f:51:ad:5d:06:f4:9d:17:fd: b5:0e:dc:d0:27:a4:94:76:a4:57:4f:5c:f8:2f:0f: a5:6d:78:99:78:fa:32:66:4d:f9:4b:4f:d8:96:2b: ce:48:86:25:44:e7:e2:40:2b:22:27:b7:ae:b6:a0: 59:22:3f:83:65:eb:b4:8f:8f:22:c6:b3:f9:4b:86: 47:1a:98:92:1f:01:31:59:df:f8:ad:f5:13:82:dd: 66:64:61:16:e1:7e:1f:d2:4e:98:3a:6a:00:f3:f0: f6:78:20:4b:58:e5:6d:28:76:0d:5b:b8:fe:24:48: 14:71:0c:48:1c:13:41:87:ab:0a:d3:d1:e6:f8:f5: fb:fd:d6:b6:1f:41:4e:f3:81:c1:a7:40:f9:19:c0: 3b:63:58:f9:93:ea:6d:46:8c:44:7e:3b:81:f9:15: 67:be:53:9e:0f:df:fd:6e:20:16:07:11:4a:a9:17: 0a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:98:7F:59:2F:B8:CA:C3:7B:DF:D9:58:44:14:FD:63:14:91:4E:07 X509v3 Authority Key Identifier: keyid:83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:e8:69:ce:4f:2e:6b:d5:d2:bd:d6:9a:b7:03:6d:a1:f0:26: dc:d5:c4:61:fe:07:80:d2:94:87:f6:be:0d:73:b6:cc:86:64: e9:b9:dd:b2:1f:22:d9:10:36:5a:25:3b:83:d5:96:2d:7e:7c: af:35:39:14:59:fc:a7:9a:51:4a:b8:57:0b:ee:46:f0:12:73: de:38:58:bb:d5:d5:c6:e0:43:a4:75:3b:e1:99:05:27:44:65: 34:4c:a3:58:4e:81:54:a1:c0:50:fa:7a:1f:30:ea:fc:fe:57: 93:3c:a2:6d:fb:57:3f:af:8f:b9:81:a1:68:62:2d:23:b0:3c: df:c4:01:48:a5:ad:1b:40:34:1a:27:e3:02:63:0c:a2:05:08: c2:a1:b8:9b:35:e1:64:d3:cb:a5:23:1a:40:e9:c1:fa:eb:fa: 51:12:35:a1:d1:1a:16:6c:2b:f6:21:e4:98:ab:d3:67:75:08: 68:dc:10:68:a8:b7:8c:e1:e4:d7:43:6f:25:df:10:1a:c9:8c: b6:00:62:79:31:c3:89:7b:d7:27:b8:92:c2:0c:14:ae:28:96: 2d:c0:a7:93:79:ec:cd:48:e3:49:76:bc:83:34:4d:63:85:a1: 4c:b4:a7:27:5e:2b:d5:3a:6d:2b:40:42:5e:40:4b:43:5e:80: 04:3e:ec:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1QjcxMTAvBgNVBAUTKDgzNUIwNTY3RDkzRUFDMEFFMzI0RUExRjE2QjNDMzlD QjFCMzM4OEUwHhcNMjUwNTE0MTkzNzA1WhcNMjUwNTIxMTkzNzA1WjAYMRYwFAYD VQQDEw02ODI0ZjBlMS1iM2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6FDUc5xJZj9YDvQQsB6+BWDauEHlsQz3EXZpP7qFl7v3JxJd7d04GuZlmc// 1x7pgdw+f/IAw8FTsFWYm4NDR9s4c6kh19Tnpo2A3pF3eiofUa1dBvSdF/21DtzQ J6SUdqRXT1z4Lw+lbXiZePoyZk35S0/YlivOSIYlROfiQCsiJ7eutqBZIj+DZeu0 j48ixrP5S4ZHGpiSHwExWd/4rfUTgt1mZGEW4X4f0k6YOmoA8/D2eCBLWOVtKHYN W7j+JEgUcQxIHBNBh6sK09Hm+PX7/da2H0FO84HBp0D5GcA7Y1j5k+ptRoxEfjuB +RVnvlOeD9/9biAWBxFKqRcKLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaYf1kv uMrDe9/ZWEQU/WMUkU4HMB8GA1UdIwQYMBaAFINbBWfZPqwK4yTqHxazw5yxsziO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVCNy83MUU3QTIyMjUx OTUxMUVBODQ2NEJBNzhDNEY5QUUwMi9nMXNGWjlrLXJBcmpKT29mRnJQRG5MR3pP STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cxc0ZaOWstckFyakpPb2ZGclBEbkxHek9JNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVCNy83MUU3QTIyMjUxOTUxMUVBODQ2NEJBNzhDNEY5QUUwMi9nMXNGWjlrLXJB cmpKT29mRnJQRG5MR3pPSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf6GnOTy5r1dK91pq3A22h8Cbc1cRh/geA0pSH9r4Nc7bMhmTpud2y HyLZEDZaJTuD1ZYtfnyvNTkUWfynmlFKuFcL7kbwEnPeOFi71dXG4EOkdTvhmQUn RGU0TKNYToFUocBQ+nofMOr8/leTPKJt+1c/r4+5gaFoYi0jsDzfxAFIpa0bQDQa J+MCYwyiBQjCobibNeFk08ulIxpA6cH66/pREjWh0RoWbCv2IeSYq9NndQho3BBo qLeM4eTXQ28l3xAayYy2AGJ5McOJe9cnuJLCDBSuKJYtwKeTeezNSONJdryDNE1j haFMtKcnXivVOm0rQEJeQEtDXoAEPuxw -----END CERTIFICATE-----Generated at Thu May 15 00:22:29 2025 by rpki-client