$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft File: 89pR_oC82pcIdSXiBGIeqfVXQZk.mft (raw, json) Hash identifier: oK4zXEbzpe/9dcc0M7EmRWVqYRZerQM8jk6fohOGeRo= Subject key identifier: DE:E6:20:1F:88:4C:74:C9:99:95:07:FD:FC:4E:89:C1:43:99:D8:17 Authority key identifier: F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99 Certificate issuer: /CN=A9147CDA/serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199 Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft Manifest number: 0196 Signing time: Sun 11 May 2025 02:47:47 +0000 Manifest this update: Sun 11 May 2025 02:47:46 +0000 Manifest next update: Sun 18 May 2025 02:47:46 +0000 Files and hashes: 1: 89pR_oC82pcIdSXiBGIeqfVXQZk.crl (hash: aFcSTj1166m0GV/cC2WgR4OhJor2NRE/jglwkKrhoKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.crl rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147CDA, serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199 Validity Not Before: May 11 02:47:46 2025 GMT Not After : May 18 02:47:46 2025 GMT Subject: CN=68200fd2-ecf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8f:3e:ff:4b:0b:01:a0:ef:41:ec:88:35:76: 25:bc:be:16:3d:39:61:c8:9e:11:92:00:f7:5e:39: b5:d7:e9:35:bd:1e:93:01:aa:51:c5:ec:de:01:2f: b7:14:49:39:82:53:1a:c6:cf:26:4a:40:10:ce:29: a5:77:4e:07:e6:1d:0f:95:48:a6:ec:e9:52:61:8c: 39:60:92:9b:2a:38:5e:9f:d6:84:57:07:61:2f:f7: 50:77:35:49:d6:bb:b4:8b:58:7f:f0:42:d5:fa:88: 13:40:37:f4:88:72:96:c9:9c:72:f4:d4:c6:85:a5: 95:f7:2e:50:46:23:d8:8e:8d:c3:fb:59:4f:94:f4: 5b:1c:4e:b3:35:73:9b:ae:ee:43:5d:d1:46:9d:c6: 7f:19:7b:2e:2d:65:c7:da:4d:88:e2:a5:32:45:1f: 4c:ce:71:30:d1:9c:d2:e9:b2:51:21:7c:b1:ff:e2: d6:69:4f:80:d3:98:9c:ce:9e:98:b5:db:7e:35:2e: 81:29:4d:d8:33:6d:99:3f:0d:f1:a4:b7:6f:02:78: f8:bd:3f:96:8d:8f:04:d2:51:98:51:74:47:75:15: 93:a9:b3:d1:53:9f:a3:eb:68:bf:57:ca:d6:cb:af: bb:c0:55:3e:8c:a9:0c:56:08:fe:87:01:4b:5a:fe: 0f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E6:20:1F:88:4C:74:C9:99:95:07:FD:FC:4E:89:C1:43:99:D8:17 X509v3 Authority Key Identifier: keyid:F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:a1:d2:45:55:0b:d5:d6:e0:16:af:e6:c9:0a:2b:74:52:b6: e1:09:d1:25:1c:ec:01:95:bc:19:b9:44:49:7a:5a:6b:d2:91: 57:0f:ce:9d:45:bf:4a:a6:05:9d:6c:56:c9:f6:a8:6b:72:c8: b4:5a:43:4f:6f:41:4c:9a:88:4f:b9:80:50:4b:c1:79:e4:d3: 3d:d3:63:2e:0e:7b:ed:a3:6b:b2:88:6a:00:94:81:20:1e:fa: db:fd:69:87:e9:53:03:d9:2c:3b:5e:37:56:f8:7b:e1:76:d0: 8a:a7:52:05:07:47:c8:f6:33:53:03:b5:4f:c3:ed:f8:19:64: c6:bd:d1:81:14:d3:80:1e:60:e9:50:b9:f4:52:a3:56:9c:5f: 13:2c:9f:6f:0c:28:30:75:f2:ae:b4:8f:95:15:e8:8e:d5:e9: e2:54:33:8c:a3:24:ba:d0:8e:81:fe:7c:a4:9f:d9:7c:a7:cd: 84:05:1e:43:65:c4:e7:ae:69:ee:60:5b:fe:63:69:51:2f:fb: 57:f6:ff:ad:a6:58:b4:ea:ba:b2:62:4b:6b:7c:3d:d5:39:09: 98:05:49:c7:61:ad:82:ca:a3:98:51:b0:bf:59:97:c4:04:51: bd:86:e3:89:56:82:14:d2:7f:b2:b4:c2:8e:f5:b0:b1:cf:de: 53:76:f9:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdDREExMTAvBgNVBAUTKEYzREE1MUZFODBCQ0RBOTcwODc1MjVFMjA0NjIxRUE5 RjU1NzQxOTkwHhcNMjUwNTExMDI0NzQ2WhcNMjUwNTE4MDI0NzQ2WjAYMRYwFAYD VQQDEw02ODIwMGZkMi1lY2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoo8+/0sLAaDvQeyINXYlvL4WPTlhyJ4RkgD3Xjm11+k1vR6TAapRxezeAS+3 FEk5glMaxs8mSkAQzimld04H5h0PlUim7OlSYYw5YJKbKjhen9aEVwdhL/dQdzVJ 1ru0i1h/8ELV+ogTQDf0iHKWyZxy9NTGhaWV9y5QRiPYjo3D+1lPlPRbHE6zNXOb ru5DXdFGncZ/GXsuLWXH2k2I4qUyRR9MznEw0ZzS6bJRIXyx/+LWaU+A05iczp6Y tdt+NS6BKU3YM22ZPw3xpLdvAnj4vT+WjY8E0lGYUXRHdRWTqbPRU5+j62i/V8rW y6+7wFU+jKkMVgj+hwFLWv4P4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7mIB+I THTJmZUH/fxOicFDmdgXMB8GA1UdIwQYMBaAFPPaUf6AvNqXCHUl4gRiHqn1V0GZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0NEQS80OUIyN0Q4QTA1 NEQxMUVFOURGQzE2MjRDNEY5QUUwMi84OXBSX29DODJwY0lkU1hpQkdJZXFmVlhR WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5cFJfb0M4MnBjSWRTWGlCR0llcWZWWFFaay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0NEQS80OUIyN0Q4QTA1NEQxMUVFOURGQzE2MjRDNEY5QUUwMi84OXBSX29DODJw Y0lkU1hpQkdJZXFmVlhRWmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOodJFVQvV1uAWr+bJCit0UrbhCdElHOwBlbwZuURJelpr0pFXD86d Rb9KpgWdbFbJ9qhrcsi0WkNPb0FMmohPuYBQS8F55NM902MuDnvto2uyiGoAlIEg Hvrb/WmH6VMD2Sw7XjdW+HvhdtCKp1IFB0fI9jNTA7VPw+34GWTGvdGBFNOAHmDp ULn0UqNWnF8TLJ9vDCgwdfKutI+VFeiO1eniVDOMoyS60I6B/nykn9l8p82EBR5D ZcTnrmnuYFv+Y2lRL/tX9v+tpli06rqyYktrfD3VOQmYBUnHYa2CyqOYUbC/WZfE BFG9huOJVoIU0n+ytMKO9bCxz95TdvkK -----END CERTIFICATE-----Generated at Sun May 11 22:17:32 2025 by rpki-client