$ rpki-client -vvf rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.mft File: Ym10UmNzXXYYZJvVMYyB-6it3MA.mft (raw, json) Hash identifier: 2Q+mlivoltVKrXjEgwSBnHa3qgGl+CnaoYpwODeNUD0= Subject key identifier: E9:F0:42:0B:6F:63:C5:0D:87:52:9F:9D:A4:71:1A:74:4E:AF:CF:36 Authority key identifier: 62:6D:74:52:63:73:5D:76:18:64:9B:D5:31:8C:81:FB:A8:AD:DC:C0 Certificate issuer: /CN=A916B7FC/serialNumber=626D745263735D7618649BD5318C81FBA8ADDCC0 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ym10UmNzXXYYZJvVMYyB-6it3MA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.mft Manifest number: 1F Signing time: Tue 13 May 2025 07:07:28 +0000 Manifest this update: Tue 13 May 2025 07:07:27 +0000 Manifest next update: Tue 20 May 2025 07:07:27 +0000 Files and hashes: 1: Ym10UmNzXXYYZJvVMYyB-6it3MA.crl (hash: spTswekTGKAQ2w7EcbL0wyL6ToGd/MxjFW/UO8c8unc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.crl rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ym10UmNzXXYYZJvVMYyB-6it3MA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 07:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B7FC, serialNumber=626D745263735D7618649BD5318C81FBA8ADDCC0 Validity Not Before: May 13 07:07:27 2025 GMT Not After : May 20 07:07:27 2025 GMT Subject: CN=6822efaf-dacf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:97:dd:10:7b:86:be:86:4c:ee:8d:2d:4a:c4: 83:32:98:b0:4c:17:67:72:c0:c9:61:9e:00:7b:e2: b4:94:27:fa:35:0c:64:05:b1:a1:2f:f3:ae:33:91: 2b:cd:60:fb:2d:90:01:a6:04:ce:b6:71:6c:1e:b5: 7c:08:00:d9:9b:98:4a:a0:98:b3:a8:d9:fc:b9:f4: 17:38:9d:30:2c:60:71:3a:60:4a:5e:ef:34:c4:d4: 9c:08:41:73:8c:5c:f8:39:40:9b:f3:91:11:d0:dc: 85:97:9c:75:e1:43:f0:a0:ea:92:86:f9:ae:71:43: aa:a4:2e:62:90:27:77:e0:4a:ac:c9:88:fb:18:6d: 1a:16:30:bd:e9:ad:1a:e0:04:b0:4f:bc:fd:bd:88: 9c:06:75:02:05:57:13:3b:cd:dd:cd:66:50:da:40: 95:b3:81:4b:25:9d:a1:e9:1e:5a:cf:64:64:b1:94: e3:af:bb:f0:c1:de:23:7c:12:e4:03:44:62:f6:d3: ad:07:5e:42:04:be:db:38:e9:40:1b:97:4b:9c:97: e4:f0:53:cc:c0:fc:3f:31:db:26:3b:37:95:be:ff: f5:bb:db:70:63:2f:01:b1:c7:97:d0:ab:75:5b:38: d7:f9:12:02:c6:2c:6c:94:84:69:7e:e2:01:98:34: 69:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F0:42:0B:6F:63:C5:0D:87:52:9F:9D:A4:71:1A:74:4E:AF:CF:36 X509v3 Authority Key Identifier: keyid:62:6D:74:52:63:73:5D:76:18:64:9B:D5:31:8C:81:FB:A8:AD:DC:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ym10UmNzXXYYZJvVMYyB-6it3MA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:66:ab:2e:20:3a:d6:7e:aa:8a:ed:2a:23:8f:44:4b:08:ac: 63:76:4e:56:bd:a3:03:f7:b4:d1:9a:8d:8a:79:52:d2:ec:d7: 6f:77:ce:7d:6a:a5:92:b9:75:35:61:67:28:05:28:dc:1a:92: bf:f1:28:83:71:75:b2:41:40:64:d1:af:aa:07:e0:14:54:e5: 36:4f:78:a5:ff:12:33:c7:06:28:5c:f6:32:f0:a8:3e:e7:83: 95:b1:d7:ef:71:08:dd:31:05:72:9d:6c:cb:d4:17:3a:a9:0b: de:50:c6:8b:8f:70:d8:4c:73:15:9c:cd:1c:62:fb:d0:88:fd: 1c:51:0a:1d:b7:f4:c4:9f:ae:c7:44:d6:78:64:22:67:a6:23: 4d:ea:a4:9e:db:78:97:f6:af:6a:84:13:ff:02:c0:a9:1f:39: 35:bf:a3:3c:23:69:c6:5a:14:d1:20:ee:b5:7c:50:63:31:6f: eb:93:9f:1f:38:81:72:47:ad:32:ef:b5:5b:3c:d7:26:c6:a5: c7:5b:5c:ca:f0:61:bd:02:cc:1f:4b:11:e1:db:a5:39:4e:65: aa:87:f9:7f:ab:46:d9:00:7e:4c:7e:68:3e:61:ee:32:73:84: 13:75:d8:11:8a:45:59:70:cd:b4:7b:c4:e4:94:f9:83:27:8f: dc:5b:0e:b8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QjdGQzExMC8GA1UEBRMoNjI2RDc0NTI2MzczNUQ3NjE4NjQ5QkQ1MzE4QzgxRkJB OEFERENDMDAeFw0yNTA1MTMwNzA3MjdaFw0yNTA1MjAwNzA3MjdaMBgxFjAUBgNV BAMTDTY4MjJlZmFmLWRhY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCRl90Qe4a+hkzujS1KxIMymLBMF2dywMlhngB74rSUJ/o1DGQFsaEv864zkSvN YPstkAGmBM62cWwetXwIANmbmEqgmLOo2fy59Bc4nTAsYHE6YEpe7zTE1JwIQXOM XPg5QJvzkRHQ3IWXnHXhQ/Cg6pKG+a5xQ6qkLmKQJ3fgSqzJiPsYbRoWML3prRrg BLBPvP29iJwGdQIFVxM7zd3NZlDaQJWzgUslnaHpHlrPZGSxlOOvu/DB3iN8EuQD RGL2060HXkIEvts46UAbl0ucl+TwU8zA/D8x2yY7N5W+//W723BjLwGxx5fQq3Vb ONf5EgLGLGyUhGl+4gGYNGkPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6fBCC29j xQ2HUp+dpHEadE6vzzYwHwYDVR0jBBgwFoAUYm10UmNzXXYYZJvVMYyB+6it3MAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCN0ZDL0NGOEUzMDE2MDNB NzExRjBBN0ZGOUM4N0M0RjlBRTAyL1ltMTBVbU56WFhZWVpKdlZNWXlCLTZpdDNN QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWW0xMFVtTnpYWFlZWkp2Vk1ZeUItNml0M01BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC N0ZDL0NGOEUzMDE2MDNBNzExRjBBN0ZGOUM4N0M0RjlBRTAyL1ltMTBVbU56WFhZ WVpKdlZNWXlCLTZpdDNNQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKtmqy4gOtZ+qortKiOPREsIrGN2Tla9owP3tNGajYp5UtLs1293zn1q pZK5dTVhZygFKNwakr/xKINxdbJBQGTRr6oH4BRU5TZPeKX/EjPHBihc9jLwqD7n g5Wx1+9xCN0xBXKdbMvUFzqpC95QxouPcNhMcxWczRxi+9CI/RxRCh239MSfrsdE 1nhkImemI03qpJ7beJf2r2qEE/8CwKkfOTW/ozwjacZaFNEg7rV8UGMxb+uTnx84 gXJHrTLvtVs81ybGpcdbXMrwYb0CzB9LEeHbpTlOZaqH+X+rRtkAfkx+aD5h7jJz hBN12BGKRVlwzbR7xOSU+YMnj9xbDrg= -----END CERTIFICATE-----Generated at Wed May 14 22:18:52 2025 by rpki-client