$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.mft File: v1I81vFmSFOJGRVeX58meDD28B4.mft (raw, json) Hash identifier: AXNTdkq+u1BvWCUy/1i6uC4NbOm6gkuZw2rhnafdP8A= Subject key identifier: FD:EA:48:E9:E2:2C:C6:B4:04:49:0E:16:00:48:B0:43:E7:4D:22:FE Authority key identifier: BF:52:3C:D6:F1:66:48:53:89:19:15:5E:5F:9F:26:78:30:F6:F0:1E Certificate issuer: /CN=A9169A3F/serialNumber=BF523CD6F16648538919155E5F9F267830F6F01E Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1I81vFmSFOJGRVeX58meDD28B4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.mft Manifest number: 5F Signing time: Tue 13 May 2025 06:17:42 +0000 Manifest this update: Tue 13 May 2025 06:17:42 +0000 Manifest next update: Tue 20 May 2025 06:17:42 +0000 Files and hashes: 1: v1I81vFmSFOJGRVeX58meDD28B4.crl (hash: i8Mmk5PThr8Qg2XH6e0SUZgBHctRDqs2TzLiN3e6YR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.crl rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1I81vFmSFOJGRVeX58meDD28B4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:17:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169A3F, serialNumber=BF523CD6F16648538919155E5F9F267830F6F01E Validity Not Before: May 13 06:17:42 2025 GMT Not After : May 20 06:17:42 2025 GMT Subject: CN=6822e406-caf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:00:c6:7f:b7:2d:92:2f:f8:bf:22:7d:7c:d8: 0e:36:2c:b2:4d:6f:9c:83:2d:96:5a:c6:a6:cb:bc: 37:bd:9a:31:b5:b2:6f:f1:9e:d9:d6:03:55:ea:3a: f3:91:2b:ff:23:67:d7:28:43:e0:01:e1:68:a4:3d: 9d:3d:c8:a2:40:03:06:0c:61:37:d2:44:1b:73:f7: f1:e5:70:76:dc:cb:37:e3:66:04:bd:4f:18:b6:f4: 43:10:16:2f:a4:3f:78:ba:78:ec:de:91:7a:63:d4: 66:a1:27:e6:20:14:6b:1b:89:e7:ec:ef:16:67:63: 6b:c9:41:d7:7a:2c:e7:84:22:78:3d:c2:38:4b:92: 17:f8:c8:f0:94:53:db:c1:e9:28:b1:65:44:25:7a: a5:cb:77:7a:60:26:7c:03:44:89:62:4a:9c:2f:39: 0e:f9:a9:02:d7:fd:0d:b8:f1:46:5e:9d:4e:69:8a: ef:ff:ec:38:aa:e9:b0:12:bf:2f:ff:7c:9b:15:09: 11:fa:28:d3:aa:bd:9d:af:9f:ac:e0:47:c1:3f:bb: 9d:da:bb:ab:52:7d:ef:8b:7a:e4:5f:c9:0b:24:53: 86:05:e8:3d:0f:c8:5c:5c:ee:11:48:0d:2e:db:c5: bd:c4:be:11:fa:85:b7:e8:ce:93:88:86:0b:b8:bb: 83:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:EA:48:E9:E2:2C:C6:B4:04:49:0E:16:00:48:B0:43:E7:4D:22:FE X509v3 Authority Key Identifier: keyid:BF:52:3C:D6:F1:66:48:53:89:19:15:5E:5F:9F:26:78:30:F6:F0:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1I81vFmSFOJGRVeX58meDD28B4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:f0:62:05:61:64:fb:53:cf:41:28:c3:30:8c:ad:eb:7e:fd: f0:72:4f:8c:24:83:f8:af:00:89:31:0f:b6:94:0c:9b:46:3b: c4:4c:82:7a:22:d1:ec:eb:4f:d0:10:68:21:6b:85:39:ab:df: 8e:53:1a:f7:4f:f5:43:43:ca:ae:0e:f1:0e:ad:25:92:9f:b9: b0:45:49:1c:5e:c6:a0:ce:73:4f:3f:f6:87:06:ff:cd:31:d6: 28:9b:47:5f:d8:71:03:58:5b:42:7e:c3:ad:38:6b:d2:5c:9c: 56:d6:66:58:16:1c:91:af:44:37:70:a3:47:29:36:90:df:3b: 3d:fe:ec:63:59:1b:a9:5c:d0:e1:8e:e3:b7:48:cd:23:28:1b: a9:33:ad:6f:6c:d8:84:ce:18:60:59:e2:4a:c8:50:3d:7f:49: ab:7f:41:16:e0:03:64:a5:e2:e1:fd:93:5d:61:3b:b5:2b:c4: cc:0c:17:d5:36:8c:09:64:af:a4:49:8f:9f:72:6c:14:27:9f: a0:d8:3b:50:06:8e:6f:fe:b8:cd:b8:a5:e4:13:dc:dd:70:a9: 00:de:de:a4:87:fb:c8:90:32:19:2c:b5:b5:2d:97:82:30:11: 3a:dd:e8:21:fe:a0:e5:d5:62:e7:6b:12:5f:4c:dd:4c:f1:83: 33:ab:69:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OUEzRjExMC8GA1UEBRMoQkY1MjNDRDZGMTY2NDg1Mzg5MTkxNTVFNUY5RjI2Nzgz MEY2RjAxRTAeFw0yNTA1MTMwNjE3NDJaFw0yNTA1MjAwNjE3NDJaMBgxFjAUBgNV BAMTDTY4MjJlNDA2LWNhZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFAMZ/ty2SL/i/In182A42LLJNb5yDLZZaxqbLvDe9mjG1sm/xntnWA1XqOvOR K/8jZ9coQ+AB4WikPZ09yKJAAwYMYTfSRBtz9/HlcHbcyzfjZgS9Txi29EMQFi+k P3i6eOzekXpj1GahJ+YgFGsbiefs7xZnY2vJQdd6LOeEIng9wjhLkhf4yPCUU9vB 6SixZUQleqXLd3pgJnwDRIliSpwvOQ75qQLX/Q248UZenU5piu//7Diq6bASvy// fJsVCRH6KNOqvZ2vn6zgR8E/u53au6tSfe+LeuRfyQskU4YF6D0PyFxc7hFIDS7b xb3EvhH6hbfozpOIhgu4u4OfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/epI6eIs xrQESQ4WAEiwQ+dNIv4wHwYDVR0jBBgwFoAUv1I81vFmSFOJGRVeX58meDD28B4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5QTNGL0EzNzFGNjg0QTI0 RjExRUZCNkIwRkY0OUM0RjlBRTAyL3YxSTgxdkZtU0ZPSkdSVmVYNThtZUREMjhC NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdjFJODF2Rm1TRk9KR1JWZVg1OG1lREQyOEI0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5 QTNGL0EzNzFGNjg0QTI0RjExRUZCNkIwRkY0OUM0RjlBRTAyL3YxSTgxdkZtU0ZP SkdSVmVYNThtZUREMjhCNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL/wYgVhZPtTz0EowzCMret+/fByT4wkg/ivAIkxD7aUDJtGO8RMgnoi 0ezrT9AQaCFrhTmr345TGvdP9UNDyq4O8Q6tJZKfubBFSRxexqDOc08/9ocG/80x 1iibR1/YcQNYW0J+w604a9JcnFbWZlgWHJGvRDdwo0cpNpDfOz3+7GNZG6lc0OGO 47dIzSMoG6kzrW9s2ITOGGBZ4krIUD1/Sat/QRbgA2Sl4uH9k11hO7UrxMwMF9U2 jAlkr6RJj59ybBQnn6DYO1AGjm/+uM24peQT3N1wqQDe3qSH+8iQMhkstbUtl4Iw ETrd6CH+oOXVYudrEl9M3UzxgzOraa4= -----END CERTIFICATE-----Generated at Wed May 14 04:56:01 2025 by rpki-client