$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft File: tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft (raw, json) Hash identifier: TRO3NjQqoNh9JyvzGF5HDuCfE1GZRx4uT/7nHRmK7Nw= Subject key identifier: 65:FF:7D:82:39:C8:2A:B5:6B:D3:B8:42:59:8F:70:EA:04:D9:34:A8 Authority key identifier: B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94 Certificate issuer: /CN=A916988B/serialNumber=B58368616439C750D2C696643952ED4F15036594 Certificate serial: 0639 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft Manifest number: 0639 Signing time: Mon 12 May 2025 22:13:36 +0000 Manifest this update: Mon 12 May 2025 22:13:36 +0000 Manifest next update: Mon 19 May 2025 22:13:36 +0000 Files and hashes: 1: tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl (hash: 1Sim5HB756Vv6uQOYqdRr4/+kryEl2j1E3kE5EnNLu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:13:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1593 (0x639) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916988B, serialNumber=B58368616439C750D2C696643952ED4F15036594 Validity Not Before: May 12 22:13:36 2025 GMT Not After : May 19 22:13:36 2025 GMT Subject: CN=68227290-2355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:25:de:27:66:6b:77:09:44:90:2f:a6:bc:6e: 39:dd:fe:cb:a8:b7:95:1b:80:21:66:4a:c2:78:9f: d8:1b:76:92:3a:75:a7:cf:f2:e2:f0:01:a3:f6:e8: 29:91:d8:20:f5:4c:fd:6d:1f:d9:11:18:cc:ce:d4: e4:a2:eb:30:47:f5:c9:4b:e2:db:f6:24:75:23:97: ec:5d:e0:e7:83:db:bf:de:b3:09:d7:81:a3:d7:1d: 03:c9:97:ed:6f:87:f5:94:bd:e8:5f:25:fd:b0:b8: 49:98:5f:53:6e:a5:d5:d1:16:c1:68:99:95:ea:39: f0:bb:76:bc:80:ed:d6:fb:c8:46:54:5a:f7:56:06: aa:ed:03:38:b1:05:65:fa:da:6e:da:55:d6:ad:2a: 3d:f6:6a:d0:89:f1:ba:e5:6b:8b:9b:f4:b2:4c:ed: 3c:be:d2:1a:a5:1d:29:90:fb:fe:60:87:e1:05:d2: c4:bd:a0:00:31:c9:4a:e3:8e:d8:1a:32:c4:0f:70: 18:99:bd:63:cd:9b:39:08:ac:ff:b7:01:62:b3:c7: 25:8d:43:a3:d0:a3:28:9d:b6:cb:2f:9a:ca:16:cc: f1:f1:51:74:31:f6:72:a8:e6:37:e1:f0:23:ac:e4: 8d:c5:da:c0:c7:87:27:8a:77:4b:f9:b6:60:48:52: 3a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:FF:7D:82:39:C8:2A:B5:6B:D3:B8:42:59:8F:70:EA:04:D9:34:A8 X509v3 Authority Key Identifier: keyid:B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:b8:14:83:20:a3:df:ca:6a:ea:e6:57:b0:82:d3:24:d9:8c: b7:72:04:9e:4c:9c:aa:8d:be:4e:d6:04:de:a4:dc:f0:51:c4: 14:7b:3d:d4:ea:b4:54:28:bc:1f:aa:dd:fc:8d:b6:ea:0f:1a: 60:89:a5:ea:5e:e9:14:12:ca:3d:53:a7:c9:b6:86:39:7a:a4: de:8a:ca:fd:62:f4:09:8a:87:11:4d:f4:47:4a:4b:51:ef:b8: d5:17:38:aa:07:44:f9:d9:ee:d2:32:b3:f3:09:47:1e:e8:88: b7:dd:ea:56:79:ef:7a:b8:15:29:b3:e0:49:b7:3e:22:ac:2d: eb:c1:a2:bb:b7:03:61:3a:3c:58:cd:9d:19:04:5f:ea:06:79: 06:9f:57:f8:8b:f2:8a:63:81:47:29:03:20:11:71:ee:c2:4b: 86:97:a1:c3:ad:17:29:ef:6e:fb:69:9e:3c:3a:e9:c9:3f:0f: 29:63:6d:f6:2b:25:ae:07:a1:c8:be:c1:7f:74:85:5d:60:16: 8a:9a:37:6b:2b:b6:cd:74:24:e4:a7:6d:30:00:5c:f5:79:a4: b8:50:30:f2:64:ef:65:bf:94:8b:6c:49:58:3d:ba:77:0e:1c: 27:37:c6:8f:2c:31:c8:f1:6b:88:b9:f6:a4:48:87:01:da:4e: 3c:f2:8c:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4OEIxMTAvBgNVBAUTKEI1ODM2ODYxNjQzOUM3NTBEMkM2OTY2NDM5NTJFRDRG MTUwMzY1OTQwHhcNMjUwNTEyMjIxMzM2WhcNMjUwNTE5MjIxMzM2WjAYMRYwFAYD VQQDEw02ODIyNzI5MC0yMzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmSXeJ2ZrdwlEkC+mvG453f7LqLeVG4AhZkrCeJ/YG3aSOnWnz/Li8AGj9ugp kdgg9Uz9bR/ZERjMztTkouswR/XJS+Lb9iR1I5fsXeDng9u/3rMJ14Gj1x0DyZft b4f1lL3oXyX9sLhJmF9TbqXV0RbBaJmV6jnwu3a8gO3W+8hGVFr3Vgaq7QM4sQVl +tpu2lXWrSo99mrQifG65WuLm/SyTO08vtIapR0pkPv+YIfhBdLEvaAAMclK447Y GjLED3AYmb1jzZs5CKz/twFis8cljUOj0KMonbbLL5rKFszx8VF0MfZyqOY34fAj rOSNxdrAx4cnindL+bZgSFI6QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGX/fYI5 yCq1a9O4QlmPcOoE2TSoMB8GA1UdIwQYMBaAFLWDaGFkOcdQ0saWZDlS7U8VA2WU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTg4Qi80NjdFRTY5RThE NkQxMUVCOTg0MEUwNUZDNEY5QUUwMi90WU5vWVdRNXgxRFN4cFprT1ZMdFR4VURa WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RZTm9ZV1E1eDFEU3hwWmtPVkx0VHhVRFpaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTg4Qi80NjdFRTY5RThENkQxMUVCOTg0MEUwNUZDNEY5QUUwMi90WU5vWVdRNXgx RFN4cFprT1ZMdFR4VURaWlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmuBSDIKPfymrq5lewgtMk2Yy3cgSeTJyqjb5O1gTepNzwUcQUez3U 6rRUKLwfqt38jbbqDxpgiaXqXukUEso9U6fJtoY5eqTeisr9YvQJiocRTfRHSktR 77jVFziqB0T52e7SMrPzCUce6Ii33epWee96uBUps+BJtz4irC3rwaK7twNhOjxY zZ0ZBF/qBnkGn1f4i/KKY4FHKQMgEXHuwkuGl6HDrRcp7277aZ48OunJPw8pY232 KyWuB6HIvsF/dIVdYBaKmjdrK7bNdCTkp20wAFz1eaS4UDDyZO9lv5SLbElYPbp3 DhwnN8aPLDHI8WuIufakSIcB2k488oxR -----END CERTIFICATE-----Generated at Wed May 14 21:05:12 2025 by rpki-client