$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft File: CgFEnq6g-yiFx_PFZO6TMac_P_k.mft (raw, json) Hash identifier: 0lLPiYWBRLJdYa7of5vnAD5F4NuCXimzVAK3fvhxMsk= Subject key identifier: 89:C8:BE:38:3A:DB:F1:D7:3F:EF:EF:BB:E8:CD:B8:3D:03:C1:5E:FF Authority key identifier: 0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 Certificate issuer: /CN=A91567D5/serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Certificate serial: 01B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft Manifest number: 0243 Signing time: Sun 11 May 2025 02:17:59 +0000 Manifest this update: Sun 11 May 2025 02:17:59 +0000 Manifest next update: Sun 18 May 2025 02:17:59 +0000 Files and hashes: 1: CgFEnq6g-yiFx_PFZO6TMac_P_k.crl (hash: GWiK+2kUxvG+st4DWRwnfVIywKfke7iqWdbcTiNI7bo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:17:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5, serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Validity Not Before: May 11 02:17:59 2025 GMT Not After : May 18 02:17:59 2025 GMT Subject: CN=682008d7-f21c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:87:b9:58:49:da:f3:ae:2b:b6:55:0e:6a:47: 9f:1f:8e:cb:e2:b7:7d:fd:3d:14:4b:b2:e9:1d:29: 7e:7c:94:cb:29:3f:9f:4e:8d:d0:24:01:d2:d0:ee: 93:e6:8e:f7:94:1a:01:85:6c:ab:7a:17:24:a8:87: f6:98:06:5c:49:b3:3e:14:d8:4f:f2:05:42:7b:a4: 16:c0:0a:87:e3:99:3d:00:60:24:f8:ca:8d:e1:9d: f3:7c:1a:61:11:99:f1:ad:dc:19:ea:9a:4f:6b:c7: a9:6e:4b:14:af:90:9a:81:d9:23:e7:44:a7:bb:57: 2a:d6:1d:d4:a3:ca:a2:fa:3e:9a:19:b9:b7:49:43: 23:24:f9:e7:11:20:bd:a0:41:df:a5:8d:56:36:32: c4:86:5f:c0:1e:3c:ba:b0:4b:99:c0:a1:08:64:77: b8:2e:39:e4:f3:da:93:3d:db:40:c7:b9:ab:77:d2: 94:da:d0:22:6b:15:de:9b:6d:c8:1f:06:27:8e:ea: aa:7b:7d:83:92:1d:f4:b7:94:27:e9:fb:81:7f:0d: e3:14:24:64:c6:21:ce:8e:a4:4a:38:79:72:93:f9: bf:d3:87:71:7c:2b:f8:7a:aa:92:24:23:b7:eb:43: b9:6d:88:5f:e2:45:b9:f9:24:a7:45:9d:50:95:e2: 83:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C8:BE:38:3A:DB:F1:D7:3F:EF:EF:BB:E8:CD:B8:3D:03:C1:5E:FF X509v3 Authority Key Identifier: keyid:0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:b7:58:ee:89:85:f3:a5:00:e4:b8:a5:a0:ad:06:bd:61:d8: 7f:39:db:53:bc:9f:ea:c9:14:09:d4:d9:05:cc:ea:68:8d:ef: 6e:8a:21:1f:cf:db:d5:cd:81:43:cf:d9:91:10:1f:9e:b4:7c: d6:35:f5:ba:85:80:a0:e3:99:16:10:17:dd:94:59:22:37:92: 95:45:e3:bc:5d:fb:b8:16:41:b5:3f:1c:8a:d1:43:6a:bd:a2: c8:52:e5:2c:93:68:6a:07:eb:ca:2c:72:0a:b0:28:b9:3b:b6: 50:f1:e7:41:d9:9e:c1:dd:fc:28:41:08:d7:30:4d:3c:67:4f: 6f:ec:f3:3e:b6:3d:b5:11:a6:bb:47:61:91:1c:d2:bd:f2:62: ec:5e:d1:a6:66:19:4d:de:09:a7:44:e8:92:d2:06:1b:86:d7: ee:a7:73:ea:07:3c:24:80:4d:63:63:c5:dd:6f:f7:78:5e:1d: 92:82:30:88:d0:0f:b2:a6:95:cc:37:41:ee:57:12:26:93:04: af:b8:30:c9:7e:bf:67:34:c6:11:b3:23:37:85:98:5c:7a:8a: 02:68:f6:28:92:d1:cf:1e:92:44:b5:b9:57:87:67:0a:25:cb: 7d:b0:c6:a0:c5:ca:fd:bc:6a:7b:a6:35:76:7a:a9:e1:11:0e: 78:0f:24:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3RDUxMTAvBgNVBAUTKDBBMDE0NDlFQUVBMEZCMjg4NUM3RjNDNTY0RUU5MzMx QTczRjNGRjkwHhcNMjUwNTExMDIxNzU5WhcNMjUwNTE4MDIxNzU5WjAYMRYwFAYD VQQDEw02ODIwMDhkNy1mMjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYe5WEna864rtlUOakefH47L4rd9/T0US7LpHSl+fJTLKT+fTo3QJAHS0O6T 5o73lBoBhWyrehckqIf2mAZcSbM+FNhP8gVCe6QWwAqH45k9AGAk+MqN4Z3zfBph EZnxrdwZ6ppPa8epbksUr5Cagdkj50Snu1cq1h3Uo8qi+j6aGbm3SUMjJPnnESC9 oEHfpY1WNjLEhl/AHjy6sEuZwKEIZHe4Ljnk89qTPdtAx7mrd9KU2tAiaxXem23I HwYnjuqqe32Dkh30t5Qn6fuBfw3jFCRkxiHOjqRKOHlyk/m/04dxfCv4eqqSJCO3 60O5bYhf4kW5+SSnRZ1QleKDlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInIvjg6 2/HXP+/vu+jNuD0DwV7/MB8GA1UdIwQYMBaAFAoBRJ6uoPsohcfzxWTukzGnPz/5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjdENS9ERUZDQTQ1MkI0 MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15aUZ4X1BGWk82VE1hY19Q X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnRkVucTZnLXlpRnhfUEZaTzZUTWFjX1Bfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjdENS9ERUZDQTQ1MkI0MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15 aUZ4X1BGWk82VE1hY19QX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrt1juiYXzpQDkuKWgrQa9Ydh/OdtTvJ/qyRQJ1NkFzOpoje9uiiEf z9vVzYFDz9mREB+etHzWNfW6hYCg45kWEBfdlFkiN5KVReO8Xfu4FkG1PxyK0UNq vaLIUuUsk2hqB+vKLHIKsCi5O7ZQ8edB2Z7B3fwoQQjXME08Z09v7PM+tj21Eaa7 R2GRHNK98mLsXtGmZhlN3gmnROiS0gYbhtfup3PqBzwkgE1jY8Xdb/d4Xh2SgjCI 0A+yppXMN0HuVxImkwSvuDDJfr9nNMYRsyM3hZhceooCaPYoktHPHpJEtblXh2cK Jct9sMagxcr9vGp7pjV2eqnhEQ54DyT7 -----END CERTIFICATE-----Generated at Sun May 11 09:37:02 2025 by rpki-client