$ rpki-client -vvf rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/4hlMc0IL1P2sKL9jO7OvjNcg0LE.mft File: 4hlMc0IL1P2sKL9jO7OvjNcg0LE.mft (raw, json) Hash identifier: ijPY08FRheztYC8d6EAsxcN7rxYRPjWgwhviXUBrmec= Subject key identifier: 91:11:CF:72:F4:37:BD:69:48:41:AF:F1:45:02:71:9C:AE:81:DA:91 Authority key identifier: E2:19:4C:73:42:0B:D4:FD:AC:28:BF:63:3B:B3:AF:8C:D7:20:D0:B1 Certificate issuer: /CN=A91536B7/serialNumber=E2194C73420BD4FDAC28BF633BB3AF8CD720D0B1 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hlMc0IL1P2sKL9jO7OvjNcg0LE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/4hlMc0IL1P2sKL9jO7OvjNcg0LE.mft Manifest number: 500C Signing time: Sun 04 May 2025 16:19:39 +0000 Manifest this update: Sun 04 May 2025 16:19:39 +0000 Manifest next update: Sun 11 May 2025 16:19:39 +0000 Files and hashes: 1: 4hlMc0IL1P2sKL9jO7OvjNcg0LE.crl (hash: DwEpfnZm87sIiPDmwh5BHrPAV0nVsJ+kD5oxCJNcYNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/4hlMc0IL1P2sKL9jO7OvjNcg0LE.crl rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/4hlMc0IL1P2sKL9jO7OvjNcg0LE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hlMc0IL1P2sKL9jO7OvjNcg0LE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 16:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91536B7, serialNumber=E2194C73420BD4FDAC28BF633BB3AF8CD720D0B1 Validity Not Before: May 4 16:19:39 2025 GMT Not After : May 11 16:19:39 2025 GMT Subject: CN=6817939b-e11b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8c:d2:d7:7c:9a:07:11:fe:5f:d3:44:a1:58: 1c:09:7f:db:2a:cd:c2:39:ad:95:06:d7:89:f1:31: 50:cb:bd:25:dd:b1:f8:ee:db:05:fa:01:a5:ec:f7: 73:19:4c:63:65:b3:b6:ab:2d:46:e4:d4:5a:bd:21: b3:2c:b7:6e:9b:ae:07:54:bb:3f:5b:01:8b:68:ef: 8e:6a:10:96:49:65:84:6a:0c:3b:6b:a2:bd:fc:ec: 9d:61:44:c7:bb:50:27:de:2f:e7:8c:e9:2e:85:77: a7:60:08:76:a7:51:4f:1d:ec:49:a9:db:ea:a9:4c: a9:bd:d2:72:e7:99:7e:56:81:c3:0e:e2:ee:a0:e4: e5:b0:50:87:c0:08:b8:2b:26:3b:ba:dc:2c:1d:72: e7:d1:f7:03:14:04:7d:f6:03:29:f4:ef:82:90:48: 13:de:8e:c3:56:65:05:24:68:fb:cf:e7:4b:ed:50: 33:93:2c:6b:3d:7a:81:7c:2e:01:ea:61:ac:a4:12: 4f:04:22:d7:23:f8:ab:dc:3c:05:16:47:66:f6:9f: f7:8a:f8:4f:98:d5:57:03:09:2e:db:d9:38:5f:e7: ad:67:25:b1:9b:59:46:53:aa:64:e3:67:da:bc:88: ed:10:09:4a:a6:75:ad:20:cc:dd:19:71:35:33:33: 41:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:11:CF:72:F4:37:BD:69:48:41:AF:F1:45:02:71:9C:AE:81:DA:91 X509v3 Authority Key Identifier: keyid:E2:19:4C:73:42:0B:D4:FD:AC:28:BF:63:3B:B3:AF:8C:D7:20:D0:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/4hlMc0IL1P2sKL9jO7OvjNcg0LE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hlMc0IL1P2sKL9jO7OvjNcg0LE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/4hlMc0IL1P2sKL9jO7OvjNcg0LE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:9a:91:7a:00:2c:50:c9:fb:12:14:4c:08:ce:40:62:0f:5c: 32:41:b4:e2:73:f6:53:56:b8:75:78:08:6b:02:84:34:de:6a: ed:f5:b6:e2:75:f7:8a:af:5b:2e:86:d6:e9:42:fd:b6:01:b7: 91:72:8a:7a:12:f3:8a:3b:98:55:0b:3b:f6:7f:8a:02:52:e4: 81:ed:fa:fe:ec:73:6a:6f:51:a0:d9:f6:cc:f0:e8:c8:e6:15: 1f:77:d7:de:42:51:b6:b5:2b:3e:4c:0a:ab:bc:96:8f:1d:38: d0:2c:b1:94:3b:00:7e:2f:c9:23:0f:9e:4b:0f:04:59:27:8a: a2:72:0a:b7:75:f3:f4:8d:1a:eb:97:be:60:8d:ec:51:6c:ab: 28:0d:00:80:2c:bd:e1:33:67:ec:96:2b:b9:46:d3:91:bd:7e: 8b:0d:38:8c:33:b0:ce:bf:c8:a1:e1:35:4e:5d:69:ea:15:e5: e0:24:2e:64:5a:0b:ac:2e:37:0f:f4:4c:65:06:f1:25:41:37: 79:47:93:43:c1:42:2a:97:70:8e:c8:99:64:e9:84:e0:83:21: e2:de:e5:dc:c3:dc:45:74:77:7b:b5:18:74:e4:b5:7f:e1:28: 62:a6:e5:76:5d:4b:7c:83:05:8d:28:c4:e9:09:a8:67:10:24: 64:ab:b4:7d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzZCNzExMC8GA1UEBRMoRTIxOTRDNzM0MjBCRDRGREFDMjhCRjYzM0JCM0FGOENE NzIwRDBCMTAeFw0yNTA1MDQxNjE5MzlaFw0yNTA1MTExNjE5MzlaMBgxFjAUBgNV BAMTDTY4MTc5MzliLWUxMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChjNLXfJoHEf5f00ShWBwJf9sqzcI5rZUG14nxMVDLvSXdsfju2wX6AaXs93MZ TGNls7arLUbk1Fq9IbMst26brgdUuz9bAYto745qEJZJZYRqDDtror387J1hRMe7 UCfeL+eM6S6Fd6dgCHanUU8d7Emp2+qpTKm90nLnmX5WgcMO4u6g5OWwUIfACLgr Jju63CwdcufR9wMUBH32Ayn074KQSBPejsNWZQUkaPvP50vtUDOTLGs9eoF8LgHq YaykEk8EItcj+KvcPAUWR2b2n/eK+E+Y1VcDCS7b2Thf561nJbGbWUZTqmTjZ9q8 iO0QCUqmda0gzN0ZcTUzM0GhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkRHPcvQ3 vWlIQa/xRQJxnK6B2pEwHwYDVR0jBBgwFoAU4hlMc0IL1P2sKL9jO7OvjNcg0LEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzNkI3L0YxQ0QyN0I0NzNB RDExRTdBQ0JEMDI1RUM0RjlBRTAyLzRobE1jMElMMVAyc0tMOWpPN092ak5jZzBM RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNGhsTWMwSUwxUDJzS0w5ak83T3ZqTmNnMExFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz NkI3L0YxQ0QyN0I0NzNBRDExRTdBQ0JEMDI1RUM0RjlBRTAyLzRobE1jMElMMVAy c0tMOWpPN092ak5jZzBMRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI+akXoALFDJ+xIUTAjOQGIPXDJBtOJz9lNWuHV4CGsChDTeau31tuJ1 94qvWy6G1ulC/bYBt5FyinoS84o7mFULO/Z/igJS5IHt+v7sc2pvUaDZ9szw6Mjm FR93195CUba1Kz5MCqu8lo8dONAssZQ7AH4vySMPnksPBFkniqJyCrd18/SNGuuX vmCN7FFsqygNAIAsveEzZ+yWK7lG05G9fosNOIwzsM6/yKHhNU5daeoV5eAkLmRa C6wuNw/0TGUG8SVBN3lHk0PBQiqXcI7ImWTphOCDIeLe5dzD3EV0d3u1GHTktX/h KGKm5XZdS3yDBY0oxOkJqGcQJGSrtH0= -----END CERTIFICATE-----Generated at Mon May 5 13:21:41 2025 by rpki-client