$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft File: UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft (raw, json) Hash identifier: b9Lv0B0CPG2EjZUK4VRE0pCBgGZymGGVybPVflaksSM= Subject key identifier: BC:CC:96:8F:AD:1F:68:EE:07:77:10:47:52:F5:FF:D6:9F:15:DB:B4 Authority key identifier: 50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A Certificate issuer: /CN=A916ED18/serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A Certificate serial: 191E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft Manifest number: 191E Signing time: Sat 10 May 2025 16:20:46 +0000 Manifest this update: Sat 10 May 2025 16:20:46 +0000 Manifest next update: Sat 17 May 2025 16:20:46 +0000 Files and hashes: 1: UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl (hash: tT7lVKhgv6TPSpGXtd6GLfArderPWeuA0T+IDYOenic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:20:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6430 (0x191e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED18, serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A Validity Not Before: May 10 16:20:46 2025 GMT Not After : May 17 16:20:46 2025 GMT Subject: CN=681f7cde-f579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d1:7b:d2:9a:e1:73:f6:2b:dd:0f:78:d2:d0: 86:02:d6:3a:5a:ef:ee:92:19:68:06:26:8d:60:38: a3:aa:17:21:e6:6f:22:51:de:66:f6:cc:5d:77:49: bb:20:c4:b0:e0:4f:60:00:21:73:80:01:97:f3:31: 90:30:6b:78:31:53:4b:09:6e:df:d4:5c:47:d0:56: 4e:c8:7c:56:c8:47:41:4b:99:b3:3d:00:2c:0a:b4: 4c:5d:71:c5:c2:50:31:f7:9b:6e:e1:06:3a:0f:3c: 11:f1:6d:a8:1f:52:9b:77:e8:55:ed:bc:bc:f6:ab: c4:14:3c:ff:47:be:87:31:aa:41:8c:00:cc:2b:7b: 1c:c9:dc:e0:33:a0:82:c6:c8:6e:aa:ba:e6:5a:e4: b0:81:df:5a:bf:c2:74:3f:e2:7a:d3:de:9e:03:a6: 41:15:a5:cd:18:a7:4e:f7:bc:1c:aa:19:b3:31:c8: 86:03:9b:56:7b:80:2f:b8:b2:6f:b9:97:09:e2:d9: ed:83:0d:b0:3a:07:bd:af:6d:ac:95:bf:ad:5a:70: c3:a1:1f:50:cb:bf:a3:0e:46:e2:1a:a0:31:0d:6b: a3:e4:00:1a:34:88:f6:ec:a1:b1:1d:5e:06:65:1d: c7:5e:ed:1b:7b:bf:59:dd:09:d2:11:c9:ac:27:60: 11:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CC:96:8F:AD:1F:68:EE:07:77:10:47:52:F5:FF:D6:9F:15:DB:B4 X509v3 Authority Key Identifier: keyid:50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:e1:fb:29:94:52:27:70:e1:40:68:a3:9b:cc:a9:0d:2c:05: 2c:fc:ab:e5:2f:71:36:e5:5d:48:6a:f9:0e:d7:d1:fe:d4:a4: 7c:2b:d1:49:c2:0d:03:85:1f:c9:7d:9c:95:93:0b:7f:f5:40: b6:16:ee:f4:e8:a5:4d:f0:01:05:61:dd:55:ff:69:02:5a:8a: dc:f1:06:ac:ec:55:7b:20:c0:4d:c8:94:ff:dc:1f:32:f9:41: 88:7a:ed:83:e1:f8:20:05:17:4e:f4:1a:08:b3:a5:e9:18:62: 25:62:07:0a:76:c7:e8:4c:42:8b:4f:ea:1c:0a:f3:47:6f:c0: 3d:0c:53:c6:80:c0:99:cd:ff:b0:e5:48:37:2c:a4:b6:3e:22: 35:a5:92:7e:ae:ff:29:86:ad:4c:1b:98:d3:95:72:a3:9b:44: 40:11:1c:1a:9b:2f:1b:7a:b0:da:17:19:1a:73:62:1d:66:19: ce:3c:4b:84:43:45:47:ab:6e:94:d2:b0:dd:69:a8:16:09:47: 40:4d:fa:68:fb:3a:6d:1f:2b:ff:63:e5:59:b5:c9:ed:87:98: aa:ea:65:3f:6b:52:d0:a9:59:58:35:ef:5d:1a:0b:70:83:09: 90:cb:be:08:5d:f1:96:7f:70:34:31:08:94:b3:55:77:3f:09: 84:b9:ec:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMTgxMTAvBgNVBAUTKDUwM0QyNzY1MTEzQ0I2RDEzQjk4NkZCQjRDQjc5RkYx OENBQjc3NUEwHhcNMjUwNTEwMTYyMDQ2WhcNMjUwNTE3MTYyMDQ2WjAYMRYwFAYD VQQDEw02ODFmN2NkZS1mNTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdF70prhc/Yr3Q940tCGAtY6Wu/ukhloBiaNYDijqhch5m8iUd5m9sxdd0m7 IMSw4E9gACFzgAGX8zGQMGt4MVNLCW7f1FxH0FZOyHxWyEdBS5mzPQAsCrRMXXHF wlAx95tu4QY6DzwR8W2oH1Kbd+hV7by89qvEFDz/R76HMapBjADMK3scydzgM6CC xshuqrrmWuSwgd9av8J0P+J6096eA6ZBFaXNGKdO97wcqhmzMciGA5tWe4AvuLJv uZcJ4tntgw2wOge9r22slb+tWnDDoR9Qy7+jDkbiGqAxDWuj5AAaNIj27KGxHV4G ZR3HXu0be79Z3QnSEcmsJ2ARWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzMlo+t H2juB3cQR1L1/9afFdu0MB8GA1UdIwQYMBaAFFA9J2URPLbRO5hvu0y3n/GMq3da MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQxOC9GNzI3RkU5RTdB RjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9VRDBuWlJFOHR0RTdtRy03VExlZjhZeXJk MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VEMG5aUkU4dHRFN21HLTdUTGVmOFl5cmQxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQxOC9GNzI3RkU5RTdBRjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9VRDBuWlJFOHR0 RTdtRy03VExlZjhZeXJkMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI4fsplFIncOFAaKObzKkNLAUs/KvlL3E25V1IavkO19H+1KR8K9FJ wg0DhR/JfZyVkwt/9UC2Fu706KVN8AEFYd1V/2kCWorc8Qas7FV7IMBNyJT/3B8y +UGIeu2D4fggBRdO9BoIs6XpGGIlYgcKdsfoTEKLT+ocCvNHb8A9DFPGgMCZzf+w 5Ug3LKS2PiI1pZJ+rv8phq1MG5jTlXKjm0RAERwamy8berDaFxkac2IdZhnOPEuE Q0VHq26U0rDdaagWCUdATfpo+zptHyv/Y+VZtcnth5iq6mU/a1LQqVlYNe9dGgtw gwmQy74IXfGWf3A0MQiUs1V3PwmEuew3 -----END CERTIFICATE-----Generated at Sun May 11 04:42:37 2025 by rpki-client