$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft File: G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft (raw, json) Hash identifier: 58VXKJzNZpCpn4CR84XCsBe5IkseGwENQJ6x140O7kg= Subject key identifier: FD:9E:29:42:9B:B4:C3:1C:5F:E9:23:1D:34:12:60:C0:F2:30:FB:B5 Authority key identifier: 1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE Certificate issuer: /CN=A9139322/serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE Certificate serial: 0184 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft Manifest number: 0184 Signing time: Mon 12 May 2025 23:17:07 +0000 Manifest this update: Mon 12 May 2025 23:17:07 +0000 Manifest next update: Mon 19 May 2025 23:17:07 +0000 Files and hashes: 1: G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl (hash: l/uwM/XSV+FqhgdmuTT8cW97VCbpmoztfBcMkonXPx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:17:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322, serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE Validity Not Before: May 12 23:17:07 2025 GMT Not After : May 19 23:17:07 2025 GMT Subject: CN=68228173-ac55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9c:31:8a:67:fb:50:61:25:47:c0:9a:11:70: 3c:9b:3a:6b:b5:5c:84:23:5e:16:8b:79:1f:d6:4d: f9:7b:57:22:2a:26:a9:87:9a:05:bb:e7:63:8f:02: 3b:56:91:b8:87:ae:86:00:cb:65:af:a4:50:00:7a: 41:56:f6:4e:77:da:87:24:d7:e8:e0:4b:a1:31:86: a3:24:e3:fc:5a:91:27:62:1b:cf:1a:42:64:52:04: 53:c6:4a:93:c9:05:a8:42:ac:20:30:c4:65:44:35: a3:b4:9a:c5:f9:2e:88:00:b6:7c:0f:8f:a2:56:83: 1e:73:28:97:8e:3a:24:11:df:67:27:52:5e:5b:6a: 83:3e:68:bc:a0:7a:3b:da:fe:b7:55:a3:d3:30:48: bc:09:f0:4f:87:93:cb:5c:54:8d:fd:40:86:1e:92: 73:4c:69:bc:90:66:0a:31:90:c2:d7:d4:3f:86:33: f5:e1:72:c9:f8:61:8a:0d:5f:87:86:26:6d:95:33: 46:c8:fc:74:91:b3:c1:43:f4:4c:99:1d:c2:a0:ea: 83:48:f2:3b:64:2e:99:a8:7a:76:5d:8e:b0:19:ec: 01:87:bd:e7:6c:e7:27:d6:cd:4f:a7:0c:02:d3:ad: c6:a7:c4:61:05:d1:aa:0c:38:e7:ad:8d:40:a9:71: 42:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:9E:29:42:9B:B4:C3:1C:5F:E9:23:1D:34:12:60:C0:F2:30:FB:B5 X509v3 Authority Key Identifier: keyid:1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:e0:cf:b3:5c:8b:11:cd:0d:e9:41:f4:59:d2:df:93:c9:86: fb:a7:0b:e3:78:16:e9:16:dc:22:73:77:9e:67:8f:5d:28:71: 72:d0:0d:9e:38:77:75:2e:fc:ff:d8:5b:25:25:6e:bd:63:40: 9b:27:6b:8b:d8:0f:bf:22:c5:07:6b:77:9d:c4:25:9f:f6:67: 29:fd:3f:f4:d3:d9:78:ba:c9:3c:0a:ce:bc:a1:fe:b9:70:fa: 32:78:82:97:c2:3d:f0:aa:db:e1:43:ed:aa:f1:1a:0c:4c:1e: a8:08:0f:21:d3:d3:c6:53:9a:56:07:a7:6b:c5:26:28:b9:35: 3d:6c:ac:be:e7:11:0e:45:61:b7:53:87:02:7e:14:8e:19:55: 50:21:43:74:36:f3:9a:63:a0:36:d5:53:c2:59:e0:72:4c:7b: 61:33:74:ce:52:6b:67:9d:4a:f0:16:cf:0b:af:33:0a:06:83: 65:28:0a:2a:bf:a5:6e:0a:33:9a:d5:37:89:42:a3:5f:8b:74: 61:5a:0e:40:9f:b6:22:70:f8:d0:f9:f2:27:d2:db:7e:07:32: a7:cd:09:d6:e6:6c:4f:d1:a9:20:0a:3f:e3:48:f8:fc:ce:30: bc:44:c9:0d:a2:c3:56:84:0e:06:66:cc:fe:4d:83:9d:46:48: bd:9f:0c:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKDFCRkNENTk1QUQ1RkZEQjlDMDQzNzM3QkNBRkVDNzJF MDQ2QzZCRUUwHhcNMjUwNTEyMjMxNzA3WhcNMjUwNTE5MjMxNzA3WjAYMRYwFAYD VQQDEw02ODIyODE3My1hYzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZwximf7UGElR8CaEXA8mzprtVyEI14Wi3kf1k35e1ciKiaph5oFu+djjwI7 VpG4h66GAMtlr6RQAHpBVvZOd9qHJNfo4EuhMYajJOP8WpEnYhvPGkJkUgRTxkqT yQWoQqwgMMRlRDWjtJrF+S6IALZ8D4+iVoMecyiXjjokEd9nJ1JeW2qDPmi8oHo7 2v63VaPTMEi8CfBPh5PLXFSN/UCGHpJzTGm8kGYKMZDC19Q/hjP14XLJ+GGKDV+H hiZtlTNGyPx0kbPBQ/RMmR3CoOqDSPI7ZC6ZqHp2XY6wGewBh73nbOcn1s1PpwwC 063Gp8RhBdGqDDjnrY1AqXFCYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2eKUKb tMMcX+kjHTQSYMDyMPu1MB8GA1UdIwQYMBaAFBv81ZWtX/25wENze8r+xy4EbGvu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi85MUZFMDU2QURG RkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9ibkFRM043eXY3SExnUnNh LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dfelZsYTFmX2JuQVEzTjd5djdITGdSc2EtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTMyMi85MUZFMDU2QURGRkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9i bkFRM043eXY3SExnUnNhLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv4M+zXIsRzQ3pQfRZ0t+TyYb7pwvjeBbpFtwic3eeZ49dKHFy0A2e OHd1Lvz/2FslJW69Y0CbJ2uL2A+/IsUHa3edxCWf9mcp/T/009l4usk8Cs68of65 cPoyeIKXwj3wqtvhQ+2q8RoMTB6oCA8h09PGU5pWB6drxSYouTU9bKy+5xEORWG3 U4cCfhSOGVVQIUN0NvOaY6A21VPCWeByTHthM3TOUmtnnUrwFs8LrzMKBoNlKAoq v6VuCjOa1TeJQqNfi3RhWg5An7YicPjQ+fIn0tt+BzKnzQnW5mxP0akgCj/jSPj8 zjC8RMkNosNWhA4GZsz+TYOdRki9nwzi -----END CERTIFICATE-----Generated at Wed May 14 19:57:27 2025 by rpki-client