$ rpki-client -vvf rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft File: MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft (raw, json) Hash identifier: vefo6l4lhH2Ch4FZJ6ywu5wMvU2ODfspqWWk0wT55zM= Subject key identifier: F6:44:7D:9B:18:CA:6B:26:18:84:6E:E4:99:08:B0:BC:1D:B1:F8:37 Authority key identifier: 31:B3:D9:04:57:D1:FD:F8:3C:35:74:CB:D1:7F:C2:8B:2C:DD:56:EF Certificate issuer: /CN=A91222CD/serialNumber=31B3D90457D1FDF83C3574CBD17FC28B2CDD56EF Certificate serial: 1B20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft Manifest number: 1B1F Signing time: Mon 12 May 2025 16:14:36 +0000 Manifest this update: Mon 12 May 2025 16:14:36 +0000 Manifest next update: Mon 19 May 2025 16:14:36 +0000 Files and hashes: 1: MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl (hash: 1ZpNyYz3KWlRXWJ34uNkYuDtMJzTGlbb7H3rZNh/Yek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:14:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6944 (0x1b20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91222CD, serialNumber=31B3D90457D1FDF83C3574CBD17FC28B2CDD56EF Validity Not Before: May 12 16:14:36 2025 GMT Not After : May 19 16:14:36 2025 GMT Subject: CN=68221e6c-bc80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0a:4a:ae:54:4a:72:01:6f:01:76:c0:89:63: 2b:dd:9a:e3:25:e4:c6:da:64:6c:df:e5:41:ed:58: 65:10:3d:38:70:90:a0:3b:f9:cb:38:07:99:bf:86: 72:ea:83:e9:d5:8b:36:1f:e3:c2:d2:95:fb:14:36: 72:1b:15:05:7b:19:71:21:91:94:46:59:05:9c:df: 12:cb:e1:9c:c1:49:4e:10:b2:08:26:12:2f:da:68: b0:86:75:6c:c4:76:d7:76:ac:ed:2f:77:68:2f:fe: 8e:39:65:24:3a:24:74:09:fa:6f:b3:dd:65:96:2e: 80:fc:8b:03:24:42:13:f3:ce:86:ac:d0:16:d2:3e: 28:e5:b2:be:2d:9e:7d:8a:eb:ad:64:84:90:fb:fc: d7:0d:72:ea:9e:74:32:43:c4:a0:df:f9:16:3d:57: 5f:8c:b0:03:a6:8e:f5:1c:fe:5a:27:46:d5:f7:8b: da:86:fc:04:df:8d:6a:ce:36:c9:cf:51:31:b6:0b: 8a:8a:3c:f5:21:ba:0f:23:e6:55:b6:46:a1:61:b8: 8a:cb:03:21:29:f8:d8:a5:96:f3:0b:85:5e:ac:d8: 5e:63:df:08:a3:c3:e7:b8:49:4f:58:a2:4a:87:e0: 1d:30:45:dd:11:dc:2f:22:23:0e:64:06:a6:3a:1e: 0f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:44:7D:9B:18:CA:6B:26:18:84:6E:E4:99:08:B0:BC:1D:B1:F8:37 X509v3 Authority Key Identifier: keyid:31:B3:D9:04:57:D1:FD:F8:3C:35:74:CB:D1:7F:C2:8B:2C:DD:56:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:18:43:cb:6a:c8:a3:52:90:05:ce:81:68:bf:c8:7f:c5:84: 69:0f:6a:c2:54:8c:03:e5:20:99:32:27:1c:c5:12:76:c1:b2: 54:15:b3:60:a2:d0:ba:8d:7e:ce:9d:a8:c6:7d:a9:36:04:6d: 0d:82:3e:41:9c:78:c2:38:f4:44:83:41:08:75:23:d2:e4:9c: d6:dc:e7:d3:57:10:b1:14:c0:4a:6f:d3:e8:b9:50:9b:d3:8c: ad:3a:6b:88:1e:8c:3d:f5:a6:f7:bc:1b:7f:50:7c:e7:8f:97: 8a:44:dd:76:4e:ad:e4:11:b5:57:49:67:da:6a:fc:ae:0e:0d: 93:4b:df:38:09:57:97:74:95:1e:b1:e3:d0:a3:17:97:82:ed: c7:5b:d9:d0:43:51:ba:d1:1f:b2:32:7c:ef:fb:52:90:14:7f: 3e:2b:8d:a4:de:1e:84:55:e6:d3:90:f1:f5:28:ae:54:00:44: 39:b9:82:08:5f:5a:ba:88:dd:e8:a4:89:01:f8:c4:5a:a7:83: 13:f0:15:35:33:60:ea:fb:9f:9b:6b:45:89:21:75:93:76:21: b4:c6:25:92:4e:66:fd:92:3c:43:8c:e5:7d:09:5d:09:cb:03: b9:f4:82:de:72:dd:05:32:86:9a:e7:93:99:46:90:a9:5c:c8: 42:f6:c5:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIyQ0QxMTAvBgNVBAUTKDMxQjNEOTA0NTdEMUZERjgzQzM1NzRDQkQxN0ZDMjhC MkNERDU2RUYwHhcNMjUwNTEyMTYxNDM2WhcNMjUwNTE5MTYxNDM2WjAYMRYwFAYD VQQDEw02ODIyMWU2Yy1iYzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQpKrlRKcgFvAXbAiWMr3ZrjJeTG2mRs3+VB7VhlED04cJCgO/nLOAeZv4Zy 6oPp1Ys2H+PC0pX7FDZyGxUFexlxIZGURlkFnN8Sy+GcwUlOELIIJhIv2miwhnVs xHbXdqztL3doL/6OOWUkOiR0Cfpvs91lli6A/IsDJEIT886GrNAW0j4o5bK+LZ59 iuutZISQ+/zXDXLqnnQyQ8Sg3/kWPVdfjLADpo71HP5aJ0bV94vahvwE341qzjbJ z1ExtguKijz1IboPI+ZVtkahYbiKywMhKfjYpZbzC4VerNheY98Io8PnuElPWKJK h+AdMEXdEdwvIiMOZAamOh4PGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZEfZsY ymsmGIRu5JkIsLwdsfg3MB8GA1UdIwQYMBaAFDGz2QRX0f34PDV0y9F/woss3Vbv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjJDRC83RTMxMTVDODE2 NUExMUU3QjI3RjlCNDZDNEY5QUUwMi9NYlBaQkZmUl9mZzhOWFRMMFhfQ2l5emRW dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01iUFpCRmZSX2ZnOE5YVEwwWF9DaXl6ZFZ1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjJDRC83RTMxMTVDODE2NUExMUU3QjI3RjlCNDZDNEY5QUUwMi9NYlBaQkZmUl9m ZzhOWFRMMFhfQ2l5emRWdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCGEPLasijUpAFzoFov8h/xYRpD2rCVIwD5SCZMiccxRJ2wbJUFbNg otC6jX7OnajGfak2BG0Ngj5BnHjCOPREg0EIdSPS5JzW3OfTVxCxFMBKb9PouVCb 04ytOmuIHow99ab3vBt/UHznj5eKRN12Tq3kEbVXSWfaavyuDg2TS984CVeXdJUe sePQoxeXgu3HW9nQQ1G60R+yMnzv+1KQFH8+K42k3h6EVebTkPH1KK5UAEQ5uYII X1q6iN3opIkB+MRap4MT8BU1M2Dq+5+ba0WJIXWTdiG0xiWSTmb9kjxDjOV9CV0J ywO59ILect0FMoaa55OZRpCpXMhC9sUI -----END CERTIFICATE-----Generated at Wed May 14 04:32:37 2025 by rpki-client