$ rpki-client -vvf rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft File: 11KsJgWV3m0QKce5SPSUl-SD6s4.mft (raw, json) Hash identifier: lLYRVpj7Kfj+1vROMn2OhsmikXdhXTXDl2LJapbZY2Y= Subject key identifier: 5C:1A:D6:FF:6D:07:AA:22:34:91:E5:9E:6D:EE:C9:8B:74:D8:5C:81 Authority key identifier: D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE Certificate issuer: /CN=A91383B0/serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE Certificate serial: 2B9E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft Manifest number: 2B9E Signing time: Wed 14 May 2025 15:35:42 +0000 Manifest this update: Wed 14 May 2025 15:35:41 +0000 Manifest next update: Wed 21 May 2025 15:35:41 +0000 Files and hashes: 1: 11KsJgWV3m0QKce5SPSUl-SD6s4.crl (hash: ZG9AXCyB+26DclWTV7iy14sOVMXTsMyQTQOr9KZerYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 15:35:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11166 (0x2b9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383B0, serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE Validity Not Before: May 14 15:35:41 2025 GMT Not After : May 21 15:35:41 2025 GMT Subject: CN=6824b84e-f1be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:03:ad:db:5c:d1:72:da:95:4f:de:07:9d:7a: 77:e9:5f:5d:e2:9a:11:cd:50:6a:bb:f8:68:f5:e5: b4:d3:79:fc:18:1b:a1:97:4c:4a:ae:a8:e3:9a:45: a5:61:5b:97:66:80:93:59:bb:89:2c:d6:3f:a2:ee: 21:98:8d:df:64:55:14:3a:12:88:77:29:46:c1:ae: c4:61:76:2c:43:f3:63:97:04:39:47:96:24:51:2c: b6:ab:c1:4b:61:0e:a9:ce:cd:f4:a9:a5:87:4d:8d: cd:f3:fd:87:1d:cb:4c:51:6e:63:65:29:b7:94:82: c9:8b:af:60:cc:db:6d:c5:3a:98:08:45:3b:02:df: 97:f0:20:82:1d:93:77:ab:97:55:28:ed:c5:73:f0: af:5c:f3:d6:02:65:bb:6d:d5:4b:ff:10:b9:ea:e7: db:fd:d9:33:1b:19:74:64:58:c0:1e:03:f1:ca:58: 0c:3d:6a:c2:c6:4a:b0:a2:1a:fa:13:9b:a3:c7:40: 95:35:f8:ec:62:87:21:ba:8e:a9:9f:9e:09:9e:1e: 9c:80:e8:7b:5b:c0:c5:47:f2:57:18:89:ed:9e:07: 86:4b:7c:0a:24:27:b1:fb:2b:1e:2a:aa:e4:86:17: e8:59:96:7a:7a:0c:86:2e:0d:5f:31:9f:fa:71:d4: fd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:1A:D6:FF:6D:07:AA:22:34:91:E5:9E:6D:EE:C9:8B:74:D8:5C:81 X509v3 Authority Key Identifier: keyid:D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:39:27:17:9d:1e:03:66:d4:c8:49:c9:dc:77:69:83:0e:5c: 6e:41:f4:b7:83:aa:43:af:fa:76:4a:ad:52:27:d6:25:3a:4f: 42:4a:30:db:19:5e:42:f2:93:b6:1d:5a:6a:47:d7:56:f9:48: 24:9f:0b:74:ec:03:28:03:91:2a:25:20:4a:63:ad:d1:e0:4d: a0:b7:39:6f:0a:db:ae:00:52:a0:9a:e9:63:88:37:f1:4d:7d: 5a:08:5c:2f:be:45:aa:31:c9:f4:88:84:65:d3:73:5b:bb:e9: 1c:56:2e:07:11:70:d8:78:5a:73:64:9f:43:7b:53:af:22:89: 80:5b:76:44:69:87:e5:88:14:2b:ef:b3:13:fa:e1:e6:a6:fc: b0:22:d3:58:69:19:18:bf:15:67:6b:53:f8:ce:8d:5e:82:9d: bd:ac:99:cb:57:d3:d5:70:7c:b1:d4:b0:ef:a6:bb:7d:30:27: 40:98:e3:cf:c3:31:21:fc:c6:04:79:0d:22:a9:d1:a0:05:98: 8b:64:c6:e3:58:b1:a3:a0:a7:77:c4:39:59:a0:ce:ea:55:e9: 4b:bb:d9:27:84:97:ae:74:8f:8a:ba:85:e3:9c:e8:e3:e6:0f: e5:8c:84:fb:ea:4d:f2:3b:a1:93:34:51:33:a4:97:9b:fc:f5: 55:bd:ac:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzQjAxMTAvBgNVBAUTKEQ3NTJBQzI2MDU5NURFNkQxMDI5QzdCOTQ4RjQ5NDk3 RTQ4M0VBQ0UwHhcNMjUwNTE0MTUzNTQxWhcNMjUwNTIxMTUzNTQxWjAYMRYwFAYD VQQDEw02ODI0Yjg0ZS1mMWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgOt21zRctqVT94HnXp36V9d4poRzVBqu/ho9eW003n8GBuhl0xKrqjjmkWl YVuXZoCTWbuJLNY/ou4hmI3fZFUUOhKIdylGwa7EYXYsQ/NjlwQ5R5YkUSy2q8FL YQ6pzs30qaWHTY3N8/2HHctMUW5jZSm3lILJi69gzNttxTqYCEU7At+X8CCCHZN3 q5dVKO3Fc/CvXPPWAmW7bdVL/xC56ufb/dkzGxl0ZFjAHgPxylgMPWrCxkqwohr6 E5ujx0CVNfjsYochuo6pn54Jnh6cgOh7W8DFR/JXGIntngeGS3wKJCex+yseKqrk hhfoWZZ6egyGLg1fMZ/6cdT98QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwa1v9t B6oiNJHlnm3uyYt02FyBMB8GA1UdIwQYMBaAFNdSrCYFld5tECnHuUj0lJfkg+rO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCMC8zRDNGRTlCNkRC QzIxMUUzOEY1NTE0NEY1OTExRUEzMi8xMUtzSmdXVjNtMFFLY2U1U1BTVWwtU0Q2 czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzExS3NKZ1dWM20wUUtjZTVTUFNVbC1TRDZzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNCMC8zRDNGRTlCNkRCQzIxMUUzOEY1NTE0NEY1OTExRUEzMi8xMUtzSmdXVjNt MFFLY2U1U1BTVWwtU0Q2czQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiOScXnR4DZtTIScncd2mDDlxuQfS3g6pDr/p2Sq1SJ9YlOk9CSjDb GV5C8pO2HVpqR9dW+Ugknwt07AMoA5EqJSBKY63R4E2gtzlvCtuuAFKgmuljiDfx TX1aCFwvvkWqMcn0iIRl03Nbu+kcVi4HEXDYeFpzZJ9De1OvIomAW3ZEaYfliBQr 77MT+uHmpvywItNYaRkYvxVna1P4zo1egp29rJnLV9PVcHyx1LDvprt9MCdAmOPP wzEh/MYEeQ0iqdGgBZiLZMbjWLGjoKd3xDlZoM7qVelLu9knhJeudI+KuoXjnOjj 5g/ljIT76k3yO6GTNFEzpJeb/PVVvaws -----END CERTIFICATE-----Generated at Fri May 16 14:30:35 2025 by rpki-client