$ rpki-client -vvf rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft File: rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft (raw, json) Hash identifier: +QFQJOipFCeiWBZNOvZ8N7DFlLMMJyOAf0f2M9UKBMg= Subject key identifier: 6D:62:F6:A7:D2:7C:8F:5C:CB:81:EB:A0:41:58:E7:EB:55:DE:D7:ED Authority key identifier: AC:5F:6F:EF:08:B2:2E:F5:FF:64:73:DB:3D:56:C8:EB:26:E5:50:38 Certificate issuer: /CN=A91580A1/serialNumber=AC5F6FEF08B22EF5FF6473DB3D56C8EB26E55038 Certificate serial: 0B41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rF9v7wiyLvX_ZHPbPVbI6yblUDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft Manifest number: 1331 Signing time: Fri 16 May 2025 19:22:45 +0000 Manifest this update: Fri 16 May 2025 19:22:44 +0000 Manifest next update: Fri 23 May 2025 19:22:44 +0000 Files and hashes: 1: rF9v7wiyLvX_ZHPbPVbI6yblUDg.crl (hash: 5G/YHeN48ftkPIFKC209I7YdNtjQEed+A7PQMy+0MF4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.crl rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rF9v7wiyLvX_ZHPbPVbI6yblUDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 19:22:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2881 (0xb41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91580A1, serialNumber=AC5F6FEF08B22EF5FF6473DB3D56C8EB26E55038 Validity Not Before: May 16 19:22:44 2025 GMT Not After : May 23 19:22:44 2025 GMT Subject: CN=68279085-6631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5f:43:4f:24:81:1e:f5:de:8e:c8:11:81:11: 28:85:84:5f:56:1f:0f:92:e4:6b:e5:7b:35:73:43: c7:77:16:f4:06:10:23:1b:82:5a:26:6a:ea:09:70: a1:59:3b:0f:0a:88:bf:9b:f2:d5:b3:55:87:f9:02: c8:e3:ac:b2:c1:cd:07:61:15:b7:9e:c0:f3:9a:f7: dc:0e:fb:58:36:4d:e8:43:db:a0:57:df:f2:84:d5: e8:e1:58:6a:01:56:51:8d:64:51:f3:71:1e:4b:5b: 38:81:5d:e2:c2:60:51:50:58:64:15:d7:2d:6f:76: 83:35:55:c7:4f:eb:ec:01:c3:bc:28:09:12:b3:75: db:86:27:dc:d8:be:32:ac:91:f3:db:49:93:b9:ee: 04:fe:72:ba:8e:18:be:86:38:37:2d:dd:08:02:fc: f4:df:81:25:b3:01:06:cc:06:88:34:6c:be:d4:e2: 25:de:19:67:89:e5:19:b0:fe:94:a5:cc:aa:b3:d0: 0c:43:7b:25:ef:d0:e2:2b:d1:5a:27:fb:cb:ae:f1: e4:d5:68:85:92:60:a0:80:8e:ea:23:9d:2d:15:1e: 3e:ff:62:81:f7:4b:b6:06:f5:d0:c1:79:c0:7e:89: 0c:ab:00:d3:14:26:98:3d:6b:ef:01:fe:12:17:fa: 23:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:62:F6:A7:D2:7C:8F:5C:CB:81:EB:A0:41:58:E7:EB:55:DE:D7:ED X509v3 Authority Key Identifier: keyid:AC:5F:6F:EF:08:B2:2E:F5:FF:64:73:DB:3D:56:C8:EB:26:E5:50:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rF9v7wiyLvX_ZHPbPVbI6yblUDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:2f:30:3a:ba:31:f9:3a:c0:96:c4:6e:f5:b8:5c:17:30:88: e1:90:c0:e0:8a:64:36:9a:37:6a:7a:78:5b:8f:6e:4d:90:02: 0d:d2:5b:2a:0e:3a:25:90:7f:6b:08:42:e8:d6:26:c4:87:5d: c3:69:ae:53:ff:bc:3e:68:34:b7:90:1b:49:b3:60:35:11:fc: fc:9b:36:5e:51:7a:e0:1f:ea:03:96:6d:79:c2:4a:be:2c:60: 5b:02:cc:6e:26:de:dd:5e:cd:90:cd:06:27:db:6e:27:56:2b: 34:8d:f9:a9:67:96:68:65:a8:99:8d:fd:31:cd:d4:5d:3e:8a: 12:6d:73:18:68:a5:41:95:f5:ec:28:ca:c8:70:0a:18:fd:55: cb:97:bf:8d:34:0a:05:74:f6:69:16:f8:89:76:60:a2:73:7c: 0d:f1:df:5d:2f:79:84:24:f4:12:2d:13:1e:4f:6a:88:30:b0: 62:d0:e6:28:c1:6f:a0:44:3a:20:a6:43:31:70:90:fd:c0:a3: d2:e5:9a:dd:3b:98:06:ed:f6:d8:66:9d:76:d6:8c:f7:23:df: 33:a0:02:41:b5:fe:d6:32:6c:68:1f:82:4e:3b:5f:26:a4:7e: f6:1b:05:62:76:20:b2:23:b4:8f:ed:20:fb:d9:2f:da:4b:32: 00:cd:b6:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwQTExMTAvBgNVBAUTKEFDNUY2RkVGMDhCMjJFRjVGRjY0NzNEQjNENTZDOEVC MjZFNTUwMzgwHhcNMjUwNTE2MTkyMjQ0WhcNMjUwNTIzMTkyMjQ0WjAYMRYwFAYD VQQDEw02ODI3OTA4NS02NjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr19DTySBHvXejsgRgREohYRfVh8PkuRr5Xs1c0PHdxb0BhAjG4JaJmrqCXCh WTsPCoi/m/LVs1WH+QLI46yywc0HYRW3nsDzmvfcDvtYNk3oQ9ugV9/yhNXo4Vhq AVZRjWRR83EeS1s4gV3iwmBRUFhkFdctb3aDNVXHT+vsAcO8KAkSs3Xbhifc2L4y rJHz20mTue4E/nK6jhi+hjg3Ld0IAvz034ElswEGzAaINGy+1OIl3hlnieUZsP6U pcyqs9AMQ3sl79DiK9FaJ/vLrvHk1WiFkmCggI7qI50tFR4+/2KB90u2BvXQwXnA fokMqwDTFCaYPWvvAf4SF/ojKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1i9qfS fI9cy4HroEFY5+tV3tftMB8GA1UdIwQYMBaAFKxfb+8Isi71/2Rz2z1WyOsm5VA4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBBMS85MjU2MEE2QTM3 NEQxMUVBQTBBM0JFNTVDNEY5QUUwMi9yRjl2N3dpeUx2WF9aSFBiUFZiSTZ5YmxV RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JGOXY3d2l5THZYX1pIUGJQVmJJNnlibFVEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODBBMS85MjU2MEE2QTM3NEQxMUVBQTBBM0JFNTVDNEY5QUUwMi9yRjl2N3dpeUx2 WF9aSFBiUFZiSTZ5YmxVRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwLzA6ujH5OsCWxG71uFwXMIjhkMDgimQ2mjdqenhbj25NkAIN0lsq DjolkH9rCELo1ibEh13Daa5T/7w+aDS3kBtJs2A1Efz8mzZeUXrgH+oDlm15wkq+ LGBbAsxuJt7dXs2QzQYn224nVis0jfmpZ5ZoZaiZjf0xzdRdPooSbXMYaKVBlfXs KMrIcAoY/VXLl7+NNAoFdPZpFviJdmCic3wN8d9dL3mEJPQSLRMeT2qIMLBi0OYo wW+gRDogpkMxcJD9wKPS5ZrdO5gG7fbYZp121oz3I98zoAJBtf7WMmxoH4JOO18m pH72GwVidiCyI7SP7SD72S/aSzIAzbZK -----END CERTIFICATE-----Generated at Sat May 17 19:43:11 2025 by rpki-client