$ rpki-client -vvf rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft File: 38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft (raw, json) Hash identifier: 4bU8lzq+9OKw8eo+iY/Fa+Dat2sX5K/dNmfOItXlB4M= Subject key identifier: 20:1F:8C:AC:80:BD:E3:B0:11:3E:C1:3C:4B:F6:8F:67:F4:7F:08:DF Authority key identifier: DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99 Certificate issuer: /CN=A91516FF/serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft Manifest number: 14 Signing time: Tue 13 May 2025 07:15:56 +0000 Manifest this update: Tue 13 May 2025 07:15:56 +0000 Manifest next update: Tue 20 May 2025 07:15:55 +0000 Files and hashes: 1: 38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl (hash: 36dQZpRirRd9QIOlCxR7hWF6KBCwZxViDDdZVgukYak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 07:15:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91516FF, serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99 Validity Not Before: May 13 07:15:56 2025 GMT Not After : May 20 07:15:55 2025 GMT Subject: CN=6822f1ac-f7c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d9:ca:ea:4f:bc:9b:7d:3f:b5:23:f0:3c:37: 77:85:d6:e4:35:bb:21:31:89:ac:46:6e:2d:97:d5: 13:c6:78:19:5a:03:d1:e9:e4:b4:e5:5d:d2:b7:52: 2e:99:22:02:fc:38:ad:dc:f9:99:f1:ee:0f:d4:af: 55:2f:69:da:6c:5c:f1:93:4c:60:aa:fa:a4:d5:9a: 3b:5a:81:5d:d4:6a:1f:f5:0f:28:e5:89:ac:82:b8: 9b:b9:f9:30:37:f4:06:a2:be:24:dd:7f:40:db:96: af:dd:16:b2:ae:a3:d9:37:ac:2f:a9:93:ba:87:46: 10:16:52:32:35:d5:aa:6c:12:fe:9d:f9:14:ae:d4: 1c:d2:40:b0:94:d7:ee:80:cd:90:a7:d2:f8:13:5d: 16:08:ee:02:57:9e:df:8e:96:61:5a:c9:f2:05:58: c5:a6:d1:19:6e:71:43:e6:a5:10:9f:e8:d9:72:aa: 04:47:ea:cb:46:51:6f:4f:0f:77:fb:ce:03:39:4b: c1:90:ef:31:1e:b1:87:59:1f:55:21:3b:4b:8d:6c: 7a:28:7b:82:e3:99:95:bf:f0:cd:2a:d4:a1:b1:92: 90:e0:74:75:1a:1d:47:58:94:73:55:2a:ed:3e:f5: f9:58:06:46:e7:c4:f4:66:eb:8b:86:7e:ac:b5:cd: d5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1F:8C:AC:80:BD:E3:B0:11:3E:C1:3C:4B:F6:8F:67:F4:7F:08:DF X509v3 Authority Key Identifier: keyid:DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:4f:b3:c4:4a:3e:3f:27:52:12:08:82:23:11:49:b2:33:97: d5:c4:01:72:8c:3e:d5:12:45:95:42:f8:a5:a3:d1:48:b9:0f: 3d:f4:35:18:85:a7:8d:76:e9:f8:6c:79:36:76:2c:f5:6b:7c: fd:6c:fd:5f:e7:be:4e:be:09:3f:84:17:02:94:3d:1c:3b:d5: af:3f:8f:e2:29:c7:04:aa:fb:ef:ee:61:32:bc:ef:a3:9e:c7: d4:58:8f:61:08:7c:c2:79:56:1d:22:fb:61:62:de:0b:b5:32: 90:6e:aa:d5:ec:3f:e1:06:32:15:b4:59:d2:2f:0d:f9:20:15: 57:4d:cc:e1:49:74:3d:c2:48:01:0c:4c:36:77:50:ce:f2:bc: 99:23:74:f0:dc:33:bd:15:45:d4:e8:db:90:4e:14:19:b2:7f: cb:ec:18:19:1a:b8:ce:5a:b7:52:50:12:f1:0c:31:63:78:91: 7c:c4:f4:8d:23:e8:48:ec:c9:16:fc:55:66:f5:90:a5:39:45: 63:65:b6:b1:e1:f4:48:08:08:c0:5c:d4:72:f2:4a:5b:5f:df: 14:1d:0b:b6:3f:45:de:cc:29:79:ff:52:0f:25:fa:69:7e:07: 35:20:4c:36:20:b8:56:2d:5f:f0:3c:ac:cc:9c:67:b8:21:50: c3:50:9e:d7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MTZGRjExMC8GA1UEBRMoREZDQThGREFBNUZFRjk0OEUwRUNGNkY5QzcwMzYzOUI1 NjUzOUQ5OTAeFw0yNTA1MTMwNzE1NTZaFw0yNTA1MjAwNzE1NTVaMBgxFjAUBgNV BAMTDTY4MjJmMWFjLWY3YzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDS2crqT7ybfT+1I/A8N3eF1uQ1uyExiaxGbi2X1RPGeBlaA9Hp5LTlXdK3Ui6Z IgL8OK3c+Znx7g/Ur1UvadpsXPGTTGCq+qTVmjtagV3Uah/1DyjliayCuJu5+TA3 9AaiviTdf0Dblq/dFrKuo9k3rC+pk7qHRhAWUjI11apsEv6d+RSu1BzSQLCU1+6A zZCn0vgTXRYI7gJXnt+OlmFayfIFWMWm0RlucUPmpRCf6NlyqgRH6stGUW9PD3f7 zgM5S8GQ7zEesYdZH1UhO0uNbHooe4LjmZW/8M0q1KGxkpDgdHUaHUdYlHNVKu0+ 9flYBkbnxPRm64uGfqy1zdUXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIB+MrIC9 47ARPsE8S/aPZ/R/CN8wHwYDVR0jBBgwFoAU38qP2qX++Ujg7Pb5xwNjm1ZTnZkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxNkZGLzJEQTU1OTEyMTQx NjExRjBBODUyMzIxOUM0RjlBRTAyLzM4cVAycVgtLVVqZzdQYjV4d05qbTFaVG5a ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMzhxUDJxWC0tVWpnN1BiNXh3TmptMVpUblprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx NkZGLzJEQTU1OTEyMTQxNjExRjBBODUyMzIxOUM0RjlBRTAyLzM4cVAycVgtLVVq ZzdQYjV4d05qbTFaVG5aay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKZPs8RKPj8nUhIIgiMRSbIzl9XEAXKMPtUSRZVC+KWj0Ui5Dz30NRiF p4126fhseTZ2LPVrfP1s/V/nvk6+CT+EFwKUPRw71a8/j+IpxwSq++/uYTK876Oe x9RYj2EIfMJ5Vh0i+2Fi3gu1MpBuqtXsP+EGMhW0WdIvDfkgFVdNzOFJdD3CSAEM TDZ3UM7yvJkjdPDcM70VRdTo25BOFBmyf8vsGBkauM5at1JQEvEMMWN4kXzE9I0j 6EjsyRb8VWb1kKU5RWNltrHh9EgICMBc1HLySltf3xQdC7Y/Rd7MKXn/Ug8l+ml+ BzUgTDYguFYtX/A8rMycZ7ghUMNQntc= -----END CERTIFICATE-----Generated at Wed May 14 16:37:25 2025 by rpki-client