$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft File: 1mk-41xy689CY8aYRW2C9o5xT1w.mft (raw, json) Hash identifier: p0X5CcNhVh+pA6tGM8DKU2rmmoaKNwcp8LLXxoOVUKw= Subject key identifier: D9:13:06:63:98:49:01:76:E3:D9:DD:40:E6:6B:E6:42:18:CB:41:7D Authority key identifier: D6:69:3E:E3:5C:72:EB:CF:42:63:C6:98:45:6D:82:F6:8E:71:4F:5C Certificate issuer: /CN=A916EF5E/serialNumber=D6693EE35C72EBCF4263C698456D82F68E714F5C Certificate serial: 0974 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft Manifest number: 0974 Signing time: Sat 10 May 2025 16:37:54 +0000 Manifest this update: Sat 10 May 2025 16:37:54 +0000 Manifest next update: Sat 17 May 2025 16:37:54 +0000 Files and hashes: 1: 1mk-41xy689CY8aYRW2C9o5xT1w.crl (hash: NstJdPX/d2YfLw4AFqwNwruMt9aAm/y7KZxLTTMn2iU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.crl rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2420 (0x974) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EF5E, serialNumber=D6693EE35C72EBCF4263C698456D82F68E714F5C Validity Not Before: May 10 16:37:54 2025 GMT Not After : May 17 16:37:54 2025 GMT Subject: CN=681f80e2-e48e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:dc:41:da:28:71:36:b4:4b:8a:6b:ad:02:d4: 6f:34:87:99:79:33:06:19:6a:a5:d6:02:60:a3:54: 95:72:ab:78:fd:8d:9a:07:e3:1e:fb:50:e8:b5:b8: 0b:62:e6:39:6f:a4:ab:31:40:34:b4:5d:d8:36:bc: 4a:39:f1:0b:96:87:64:4f:4c:7d:a9:8d:72:03:0e: fe:ba:1c:1d:5f:d4:58:6f:f2:f8:33:4e:c4:6d:ac: 4f:da:d4:14:ab:a0:11:e4:0c:60:27:e7:0d:2f:3a: 65:c3:eb:45:60:f7:bc:4a:55:df:5c:1a:6c:8c:e1: be:79:e9:5c:b5:d8:fc:0e:ce:b8:a0:7d:f1:45:e0: 59:70:b8:6d:96:b4:8b:af:cb:43:c6:ab:02:f9:b0: 2c:44:03:64:34:3f:6e:6e:94:6b:e6:5f:2d:4e:d4: 52:cf:dd:2e:04:98:9b:0d:7f:f1:8f:27:46:b4:81: 77:1e:8c:50:06:31:d1:66:dd:45:95:52:52:40:04: 4d:bd:01:aa:f6:27:0e:c0:04:69:ba:4e:1b:4a:aa: e0:de:b1:fa:fc:bc:05:d2:92:ea:2b:5f:4c:4f:12: 4c:d6:fb:5a:d5:de:b4:76:8f:4c:37:0e:e0:0f:e1: bf:71:d2:f9:8d:32:b4:a9:a1:81:d0:4c:22:be:8b: a7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:13:06:63:98:49:01:76:E3:D9:DD:40:E6:6B:E6:42:18:CB:41:7D X509v3 Authority Key Identifier: keyid:D6:69:3E:E3:5C:72:EB:CF:42:63:C6:98:45:6D:82:F6:8E:71:4F:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:31:d3:fe:9b:a7:08:23:e6:f0:7d:e4:ae:d5:f0:46:d7:25: b2:88:db:96:1a:79:0c:6c:dd:7a:f0:cd:82:19:bc:44:48:60: f4:75:b1:26:4c:67:99:d3:d3:03:57:c7:27:32:08:de:2c:3b: 94:bb:1e:0c:19:0a:28:0b:22:70:ab:ca:40:9b:f1:bb:48:d0: 06:fa:ee:4f:3b:48:41:32:b4:90:2a:e3:43:6d:df:7a:32:e9: 23:77:9d:91:cf:53:19:2d:51:e2:c5:cf:13:eb:f0:09:83:12: 82:09:2a:8e:4d:18:d8:f7:33:b9:31:2b:b0:9f:79:68:63:ed: 2f:d7:3c:77:bd:97:32:f1:d1:18:84:af:d2:56:f9:6b:c2:9a: 25:ab:05:f9:2f:29:d6:c9:e2:4e:53:e5:61:6c:42:0c:3b:db: 64:45:4f:7f:b7:21:9f:a9:c2:80:eb:81:22:98:81:42:45:85: 17:6b:50:0a:fb:ca:c5:49:9d:7c:ea:7d:04:51:99:f5:e9:af: 90:84:15:24:91:8c:3e:07:13:4c:0d:45:48:0f:a5:3f:fd:f2: 77:5d:94:fe:84:73:a6:09:7d:ce:83:b8:a2:7c:ec:96:48:27: 24:8e:00:c7:5c:a2:3e:1b:ec:91:9e:4f:1c:a1:bc:29:cb:5a: 00:6b:fe:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVGNUUxMTAvBgNVBAUTKEQ2NjkzRUUzNUM3MkVCQ0Y0MjYzQzY5ODQ1NkQ4MkY2 OEU3MTRGNUMwHhcNMjUwNTEwMTYzNzU0WhcNMjUwNTE3MTYzNzU0WjAYMRYwFAYD VQQDEw02ODFmODBlMi1lNDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9xB2ihxNrRLimutAtRvNIeZeTMGGWql1gJgo1SVcqt4/Y2aB+Me+1DotbgL YuY5b6SrMUA0tF3YNrxKOfELlodkT0x9qY1yAw7+uhwdX9RYb/L4M07EbaxP2tQU q6AR5AxgJ+cNLzplw+tFYPe8SlXfXBpsjOG+eelctdj8Ds64oH3xReBZcLhtlrSL r8tDxqsC+bAsRANkND9ubpRr5l8tTtRSz90uBJibDX/xjydGtIF3HoxQBjHRZt1F lVJSQARNvQGq9icOwARpuk4bSqrg3rH6/LwF0pLqK19MTxJM1vta1d60do9MNw7g D+G/cdL5jTK0qaGB0EwivounnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNkTBmOY SQF249ndQOZr5kIYy0F9MB8GA1UdIwQYMBaAFNZpPuNccuvPQmPGmEVtgvaOcU9c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY1RS8yQ0U0OTRDMDhG OTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi8xbWstNDF4eTY4OUNZOGFZUlcyQzlvNXhU MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFtay00MXh5Njg5Q1k4YVlSVzJDOW81eFQxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUY1RS8yQ0U0OTRDMDhGOTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi8xbWstNDF4eTY4 OUNZOGFZUlcyQzlvNXhUMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjMdP+m6cII+bwfeSu1fBG1yWyiNuWGnkMbN168M2CGbxESGD0dbEm TGeZ09MDV8cnMgjeLDuUux4MGQooCyJwq8pAm/G7SNAG+u5PO0hBMrSQKuNDbd96 Mukjd52Rz1MZLVHixc8T6/AJgxKCCSqOTRjY9zO5MSuwn3loY+0v1zx3vZcy8dEY hK/SVvlrwpolqwX5LynWyeJOU+VhbEIMO9tkRU9/tyGfqcKA64EimIFCRYUXa1AK +8rFSZ186n0EUZn16a+QhBUkkYw+BxNMDUVID6U//fJ3XZT+hHOmCX3Og7iifOyW SCckjgDHXKI+G+yRnk8cobwpy1oAa/7X -----END CERTIFICATE-----Generated at Sun May 11 15:40:37 2025 by rpki-client