$ rpki-client -vvf rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft File: mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft (raw, json) Hash identifier: u5V+Qt77g9/ly/1MAGWaqKrRTryaFOX4YjIitxpd+Z0= Subject key identifier: 8F:2D:3E:F1:99:3D:49:4C:5E:42:15:6C:BA:77:65:6E:4B:BC:F5:48 Authority key identifier: 98:1F:A2:27:A2:A4:35:C2:B7:6E:06:C9:C4:52:D3:EC:75:19:84:D3 Certificate issuer: /CN=A91536B7/serialNumber=981FA227A2A435C2B76E06C9C452D3EC751984D3 Certificate serial: 0723 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft Manifest number: 5013 Signing time: Mon 12 May 2025 16:21:27 +0000 Manifest this update: Mon 12 May 2025 16:21:26 +0000 Manifest next update: Mon 19 May 2025 16:21:26 +0000 Files and hashes: 1: mB-iJ6KkNcK3bgbJxFLT7HUZhNM.crl (hash: aruBbjljHsVdBEAM3/zE8t4ozP5DPKA6uL9/rPAGdgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.crl rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:21:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1827 (0x723) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91536B7, serialNumber=981FA227A2A435C2B76E06C9C452D3EC751984D3 Validity Not Before: May 12 16:21:26 2025 GMT Not After : May 19 16:21:26 2025 GMT Subject: CN=68222007-bbaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cc:69:a3:6a:17:eb:66:81:be:c4:5b:03:79: 26:c8:2d:8c:68:a6:0e:d0:59:ae:81:6f:c8:26:9e: 24:b7:c9:dc:1d:b2:83:86:78:db:c0:a4:29:7b:6f: 19:df:da:10:6f:21:6d:88:c6:38:fc:b8:80:ca:41: 70:0c:b2:3f:1f:33:18:56:1c:8e:f7:a9:0b:a3:e0: d6:27:ad:a8:03:39:35:1e:24:03:aa:5a:5d:52:c8: a2:38:23:84:d1:a6:3f:30:42:95:5a:e6:f5:fe:0f: ee:e1:a0:7d:3f:20:71:4b:69:f4:e7:29:65:dd:72: d8:8c:b1:b1:98:2c:f2:ef:fe:f5:77:2c:ed:bf:7a: e7:f2:07:34:af:b4:39:51:da:81:cd:b1:14:05:25: 0e:cb:88:6c:d4:7e:ba:c0:c3:f4:37:03:73:bf:94: 75:02:a2:f4:95:e4:2a:3a:5e:f8:30:07:7e:ea:7f: c7:eb:aa:d4:59:ef:1e:e5:65:ba:99:d2:18:ea:c1: 67:4c:63:9f:f0:c3:09:ac:aa:61:e3:8c:a3:82:ab: 82:20:0c:71:fd:af:63:a8:86:42:d7:33:ed:07:c9: f3:4f:7e:94:75:d9:a3:af:d8:96:62:e9:c9:3e:c4: 1a:8f:e9:8e:41:28:8d:df:24:73:e8:d0:8e:6e:fd: d3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2D:3E:F1:99:3D:49:4C:5E:42:15:6C:BA:77:65:6E:4B:BC:F5:48 X509v3 Authority Key Identifier: keyid:98:1F:A2:27:A2:A4:35:C2:B7:6E:06:C9:C4:52:D3:EC:75:19:84:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:80:29:3f:80:3c:9e:92:08:cd:81:02:a7:0c:dd:d8:16:58: 49:53:46:8d:5c:4b:2e:b3:5e:1d:5c:d7:1f:d2:e2:d2:79:ff: 93:da:35:f6:7d:45:53:1c:55:f6:ac:c0:3f:e7:ce:56:8c:fd: bb:9e:92:4f:7e:9c:65:6a:e5:68:7b:9a:f1:83:46:af:f1:11: c9:b8:87:24:04:56:85:6b:20:3f:41:89:01:35:a0:d7:d9:5a: aa:c6:91:23:05:fa:27:d3:ee:7f:c2:e0:45:00:09:1a:86:93: ac:e4:11:f7:7b:37:8c:5e:70:d8:e7:64:92:1f:a4:a7:2f:67: 9d:1b:85:0c:0b:8f:a8:4b:dc:21:49:5f:78:44:48:f8:d5:ea: 85:a4:6f:50:05:8a:74:c1:b1:9a:f5:1a:8b:41:b2:d1:6e:74: 09:02:10:b0:66:32:9d:e2:90:50:26:f6:90:07:54:ec:c3:c1: d5:53:84:4e:f1:93:c5:af:e7:98:71:b2:99:9e:c9:13:96:17: 49:e6:b0:75:22:7f:3e:1d:46:14:a1:92:70:e3:ad:c5:64:5e: 81:2c:c8:55:fc:ba:b8:e5:93:a2:2b:c1:a3:4f:6b:30:88:a5: 01:5f:a3:e9:63:77:fd:78:9c:a5:62:ce:ab:d1:be:b5:63:dd: 2c:5c:b5:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM2QjcxMTAvBgNVBAUTKDk4MUZBMjI3QTJBNDM1QzJCNzZFMDZDOUM0NTJEM0VD NzUxOTg0RDMwHhcNMjUwNTEyMTYyMTI2WhcNMjUwNTE5MTYyMTI2WjAYMRYwFAYD VQQDEw02ODIyMjAwNy1iYmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMxpo2oX62aBvsRbA3kmyC2MaKYO0FmugW/IJp4kt8ncHbKDhnjbwKQpe28Z 39oQbyFtiMY4/LiAykFwDLI/HzMYVhyO96kLo+DWJ62oAzk1HiQDqlpdUsiiOCOE 0aY/MEKVWub1/g/u4aB9PyBxS2n05yll3XLYjLGxmCzy7/71dyztv3rn8gc0r7Q5 UdqBzbEUBSUOy4hs1H66wMP0NwNzv5R1AqL0leQqOl74MAd+6n/H66rUWe8e5WW6 mdIY6sFnTGOf8MMJrKph44yjgquCIAxx/a9jqIZC1zPtB8nzT36Uddmjr9iWYunJ PsQaj+mOQSiN3yRz6NCObv3TTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI8tPvGZ PUlMXkIVbLp3ZW5LvPVIMB8GA1UdIwQYMBaAFJgfoieipDXCt24GycRS0+x1GYTT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzZCNy9GMUNEMjdCNDcz QUQxMUU3QUNCRDAyNUVDNEY5QUUwMi9tQi1pSjZLa05jSzNiZ2JKeEZMVDdIVVpo Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21CLWlKNktrTmNLM2JnYkp4RkxUN0hVWmhOTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzZCNy9GMUNEMjdCNDczQUQxMUU3QUNCRDAyNUVDNEY5QUUwMi9tQi1pSjZLa05j SzNiZ2JKeEZMVDdIVVpoTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0gCk/gDyekgjNgQKnDN3YFlhJU0aNXEsus14dXNcf0uLSef+T2jX2 fUVTHFX2rMA/585WjP27npJPfpxlauVoe5rxg0av8RHJuIckBFaFayA/QYkBNaDX 2VqqxpEjBfon0+5/wuBFAAkahpOs5BH3ezeMXnDY52SSH6SnL2edG4UMC4+oS9wh SV94REj41eqFpG9QBYp0wbGa9RqLQbLRbnQJAhCwZjKd4pBQJvaQB1Tsw8HVU4RO 8ZPFr+eYcbKZnskTlhdJ5rB1In8+HUYUoZJw463FZF6BLMhV/Lq45ZOiK8GjT2sw iKUBX6PpY3f9eJylYs6r0b61Y90sXLXO -----END CERTIFICATE-----Generated at Tue May 13 20:56:27 2025 by rpki-client