$ rpki-client -vvf rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft File: MfrsXjAsGCKfmftHpyPypHmHF6w.mft (raw, json) Hash identifier: 2+JSh4Y+F56PUkzxhioHqfO7+Y/82CSm+x6CFiRaFlQ= Subject key identifier: 27:78:6E:7A:06:11:06:34:DB:31:A5:DF:67:4E:BB:B2:C0:BE:74:D3 Authority key identifier: 31:FA:EC:5E:30:2C:18:22:9F:99:FB:47:A7:23:F2:A4:79:87:17:AC Certificate issuer: /CN=A91417B0/serialNumber=31FAEC5E302C18229F99FB47A723F2A4798717AC Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft Manifest number: 3C Signing time: Thu 15 May 2025 06:50:03 +0000 Manifest this update: Thu 15 May 2025 06:50:03 +0000 Manifest next update: Thu 22 May 2025 06:50:03 +0000 Files and hashes: 1: MfrsXjAsGCKfmftHpyPypHmHF6w.crl (hash: 6/CZM49/Ws2snJgcercZzxPUmTk4SKxR7PxrTRqFIsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.crl rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91417B0, serialNumber=31FAEC5E302C18229F99FB47A723F2A4798717AC Validity Not Before: May 15 06:50:03 2025 GMT Not After : May 22 06:50:03 2025 GMT Subject: CN=68258e9b-843e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:f4:42:8c:50:6d:12:f7:2f:c3:c5:94:09:f9: 72:91:00:ba:74:02:18:67:38:9b:89:ed:f8:a5:12: db:23:82:96:f4:b7:12:da:e7:e9:4e:d3:ca:8b:f6: 51:e1:95:ff:49:8b:13:e2:ba:9a:df:8a:07:bc:0f: 64:ac:85:b3:e3:93:e3:b1:89:90:4b:a5:d8:c4:bd: ab:e4:ae:f8:59:e2:e4:27:e6:f4:33:67:5c:31:2b: e5:ff:8d:59:dd:d1:3f:62:05:34:47:86:43:f2:cc: 3b:5a:18:e0:f9:6d:97:01:e6:21:0a:12:3b:78:8f: 10:fc:e8:e7:83:08:89:ee:d4:bb:02:31:e7:e7:27: d6:4f:73:3e:53:ac:96:a4:25:51:72:7f:97:ec:59: dd:a1:43:3c:45:d9:8e:ee:30:29:75:4d:c3:d2:9c: a1:c5:48:6c:6a:7f:f6:9f:74:06:01:de:39:68:e0: 3e:b5:c6:3e:f1:84:02:7b:0e:23:c0:4f:66:63:5a: 22:b6:d3:ec:bd:4e:a7:30:90:87:d4:36:44:ba:2f: b8:d9:fe:72:12:43:10:30:72:43:52:a1:62:f5:09: bc:2b:54:bc:34:0e:73:d9:bb:56:1c:a9:5e:ad:d6: 9a:e6:13:ee:23:86:d9:9e:af:73:b0:60:fc:4b:61: 59:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:78:6E:7A:06:11:06:34:DB:31:A5:DF:67:4E:BB:B2:C0:BE:74:D3 X509v3 Authority Key Identifier: keyid:31:FA:EC:5E:30:2C:18:22:9F:99:FB:47:A7:23:F2:A4:79:87:17:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:91:f6:a7:0f:bb:da:d9:8d:c9:af:46:02:a7:59:f8:dc:c4: 36:14:2b:15:99:36:e8:b0:0f:64:f7:c0:2c:46:49:28:42:cc: 0c:f5:82:18:b9:e5:19:80:4f:9b:ba:4c:1e:5d:3f:ac:f7:43: 31:9e:3a:82:05:ff:f1:14:21:fb:cd:d0:de:47:c7:d0:60:b0: d2:ea:5b:0d:3e:13:4b:42:36:19:47:cb:0a:a5:93:c7:c9:3a: fc:28:39:58:d0:67:82:82:6b:05:71:01:08:4f:84:5e:f2:ed: 14:4d:a3:2f:60:2a:d2:bd:6e:a5:61:78:14:ed:06:4f:80:95: 93:46:0b:3e:8a:67:df:3a:e4:31:73:6c:f3:f8:c5:eb:65:54: 53:76:ac:70:ec:35:40:91:92:11:12:91:6e:d1:73:bf:f2:9e: 7f:1a:5a:7e:fb:ee:1c:10:48:ad:29:ef:d7:2b:e6:e6:11:89: 4c:3b:30:2b:44:2b:5d:8c:47:b4:e5:23:ea:3f:33:45:87:8e: 70:ba:cc:d1:3e:3f:e7:e5:69:38:07:25:2e:3a:1d:5e:98:98: c6:ff:8b:11:54:f5:84:94:17:6b:61:cf:98:8a:8c:b7:fa:e1: 8d:bd:b9:07:a6:39:7e:c5:84:f2:2a:06:80:9c:43:12:18:74: 77:fb:12:07 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTdCMDExMC8GA1UEBRMoMzFGQUVDNUUzMDJDMTgyMjlGOTlGQjQ3QTcyM0YyQTQ3 OTg3MTdBQzAeFw0yNTA1MTUwNjUwMDNaFw0yNTA1MjIwNjUwMDNaMBgxFjAUBgNV BAMTDTY4MjU4ZTliLTg0M2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD69EKMUG0S9y/DxZQJ+XKRALp0AhhnOJuJ7filEtsjgpb0txLa5+lO08qL9lHh lf9JixPiuprfige8D2SshbPjk+OxiZBLpdjEvavkrvhZ4uQn5vQzZ1wxK+X/jVnd 0T9iBTRHhkPyzDtaGOD5bZcB5iEKEjt4jxD86OeDCInu1LsCMefnJ9ZPcz5TrJak JVFyf5fsWd2hQzxF2Y7uMCl1TcPSnKHFSGxqf/afdAYB3jlo4D61xj7xhAJ7DiPA T2ZjWiK20+y9TqcwkIfUNkS6L7jZ/nISQxAwckNSoWL1CbwrVLw0DnPZu1YcqV6t 1prmE+4jhtmer3OwYPxLYVkrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJ3huegYR BjTbMaXfZ067ssC+dNMwHwYDVR0jBBgwFoAUMfrsXjAsGCKfmftHpyPypHmHF6ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxN0IwL0VCMDgyNDcyRDg4 MzExRUY5NTRBM0Q3MEM0RjlBRTAyL01mcnNYakFzR0NLZm1mdEhweVB5cEhtSEY2 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTWZyc1hqQXNHQ0tmbWZ0SHB5UHlwSG1IRjZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx N0IwL0VCMDgyNDcyRDg4MzExRUY5NTRBM0Q3MEM0RjlBRTAyL01mcnNYakFzR0NL Zm1mdEhweVB5cEhtSEY2dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAESR9qcPu9rZjcmvRgKnWfjcxDYUKxWZNuiwD2T3wCxGSShCzAz1ghi5 5RmAT5u6TB5dP6z3QzGeOoIF//EUIfvN0N5Hx9BgsNLqWw0+E0tCNhlHywqlk8fJ OvwoOVjQZ4KCawVxAQhPhF7y7RRNoy9gKtK9bqVheBTtBk+AlZNGCz6KZ9865DFz bPP4xetlVFN2rHDsNUCRkhESkW7Rc7/ynn8aWn777hwQSK0p79cr5uYRiUw7MCtE K12MR7TlI+o/M0WHjnC6zNE+P+flaTgHJS46HV6YmMb/ixFU9YSUF2thz5iKjLf6 4Y29uQemOX7FhPIqBoCcQxIYdHf7Egc= -----END CERTIFICATE-----Generated at Fri May 16 00:51:51 2025 by rpki-client