$ rpki-client -vvf rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft File: F4xrtHazfF8V5ulTq-TLzwhhCCs.mft (raw, json) Hash identifier: ENPe7M4UNmw4vvE1TjIKOEfQKRYOuZxRPUDWhmnEvFE= Subject key identifier: 70:9C:99:34:DB:A9:91:D2:A9:D4:62:1F:31:EA:84:DE:FB:92:2B:73 Authority key identifier: 17:8C:6B:B4:76:B3:7C:5F:15:E6:E9:53:AB:E4:CB:CF:08:61:08:2B Certificate issuer: /CN=A91709F5/serialNumber=178C6BB476B37C5F15E6E953ABE4CBCF0861082B Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft Manifest number: 36 Signing time: Tue 13 May 2025 06:48:10 +0000 Manifest this update: Tue 13 May 2025 06:48:10 +0000 Manifest next update: Tue 20 May 2025 06:48:10 +0000 Files and hashes: 1: F4xrtHazfF8V5ulTq-TLzwhhCCs.crl (hash: vYeUjaC+xpGmtE8KNt82aE1VLd+TB541BrSdbl6MOog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.crl rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:48:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91709F5, serialNumber=178C6BB476B37C5F15E6E953ABE4CBCF0861082B Validity Not Before: May 13 06:48:10 2025 GMT Not After : May 20 06:48:10 2025 GMT Subject: CN=6822eb2a-19f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c5:3f:c7:4f:95:c5:39:2a:3d:43:e2:28:51: 09:44:bc:86:5c:74:38:b1:e7:01:54:ab:d3:2f:27: cf:4e:b5:aa:1f:19:cd:0b:6e:ef:ef:76:54:4c:75: d3:ec:ba:bc:f5:1d:2b:c2:99:fc:7b:df:e7:b0:c2: 81:53:53:f9:bd:73:3a:f2:3c:27:7f:5f:aa:9c:2c: 3b:93:0e:5d:b7:17:b2:d9:69:9f:55:e6:65:68:fc: 70:b5:4c:f6:48:d3:5e:75:a4:62:8a:0f:e9:a8:4e: e8:58:d9:f5:8f:6d:49:df:95:77:f9:f6:53:2c:6f: a1:e1:0b:83:24:7a:16:2c:fe:04:f9:ac:a8:ba:a0: ec:28:2d:a6:b9:71:bd:14:49:69:ff:23:cd:38:69: 84:1f:cb:d4:e5:a6:70:38:8c:5d:6e:15:b4:4c:19: a2:79:1c:a2:be:b5:9d:ea:0e:7a:09:36:ea:e8:e4: 1e:d7:77:02:cc:8a:45:f2:ce:ff:dd:84:92:e0:b8: e0:cf:f9:8f:f2:88:35:c7:d3:f5:cf:06:06:42:93: 6d:a5:a2:15:de:50:1b:30:00:21:1e:6e:e4:ac:d2: 35:26:dc:23:81:a9:45:4f:96:5d:d9:3a:7a:c7:4f: 2c:9e:b8:08:88:62:5a:fa:78:8e:34:ba:68:a2:08: 6f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:9C:99:34:DB:A9:91:D2:A9:D4:62:1F:31:EA:84:DE:FB:92:2B:73 X509v3 Authority Key Identifier: keyid:17:8C:6B:B4:76:B3:7C:5F:15:E6:E9:53:AB:E4:CB:CF:08:61:08:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c2:e2:68:ad:10:25:d4:d3:9c:ca:c5:59:91:ec:fa:5d:f5: d9:fb:e5:9f:74:87:07:30:7f:59:cb:30:9c:d5:cb:c6:d2:a3: a3:2f:a5:ce:dc:35:c7:be:3c:ff:99:b3:b7:9a:60:f3:e1:f6: 75:88:df:53:66:5f:f2:32:25:4b:6c:e7:f7:fa:9a:f7:6d:35: 9e:84:d9:87:d0:22:6f:29:84:2a:d8:df:25:24:14:29:3b:3a: aa:e1:90:b0:64:c2:7d:0e:f6:71:b4:e2:81:d6:c9:be:ff:4f: 62:65:4e:99:5f:81:cb:46:5f:37:81:53:39:72:fa:33:0c:0f: c3:d5:50:26:d0:1c:88:6b:53:12:a2:61:88:6b:72:3d:66:b3: 20:79:fb:27:1f:da:a1:fd:d3:dc:1e:b5:9b:5e:62:e5:af:86: 3e:cb:a9:5b:53:16:8e:e6:7e:04:f7:a8:ce:c3:87:0a:f1:6e: ae:23:15:45:30:b2:08:5f:6e:95:b2:18:ea:1f:4b:bd:16:c6: 35:6c:4b:06:2c:22:6e:a8:b1:0e:ad:af:a5:5b:a7:1f:20:24: 63:29:eb:13:44:f3:ee:c1:04:eb:9e:d9:10:b4:27:9b:42:5d: 85:5e:be:8d:f6:69:a9:5d:5b:85:f0:58:af:52:79:7f:92:24: 18:ac:f3:cf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDlGNTExMC8GA1UEBRMoMTc4QzZCQjQ3NkIzN0M1RjE1RTZFOTUzQUJFNENCQ0Yw ODYxMDgyQjAeFw0yNTA1MTMwNjQ4MTBaFw0yNTA1MjAwNjQ4MTBaMBgxFjAUBgNV BAMTDTY4MjJlYjJhLTE5ZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbxT/HT5XFOSo9Q+IoUQlEvIZcdDix5wFUq9MvJ89OtaofGc0Lbu/vdlRMddPs urz1HSvCmfx73+ewwoFTU/m9czryPCd/X6qcLDuTDl23F7LZaZ9V5mVo/HC1TPZI 0151pGKKD+moTuhY2fWPbUnflXf59lMsb6HhC4MkehYs/gT5rKi6oOwoLaa5cb0U SWn/I804aYQfy9TlpnA4jF1uFbRMGaJ5HKK+tZ3qDnoJNuro5B7XdwLMikXyzv/d hJLguODP+Y/yiDXH0/XPBgZCk22lohXeUBswACEebuSs0jUm3COBqUVPll3ZOnrH TyyeuAiIYlr6eI40umiiCG/rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcJyZNNup kdKp1GIfMeqE3vuSK3MwHwYDVR0jBBgwFoAUF4xrtHazfF8V5ulTq+TLzwhhCCsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwOUY1LzNBODI5MEU4REZE QTExRUY4QjQ3ODYyNEM0RjlBRTAyL0Y0eHJ0SGF6ZkY4VjV1bFRxLVRMendoaEND cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRjR4cnRIYXpmRjhWNXVsVHEtVEx6d2hoQ0NzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw OUY1LzNBODI5MEU4REZEQTExRUY4QjQ3ODYyNEM0RjlBRTAyL0Y0eHJ0SGF6ZkY4 VjV1bFRxLVRMendoaENDcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA/C4mitECXU05zKxVmR7Ppd9dn75Z90hwcwf1nLMJzVy8bSo6Mvpc7c Nce+PP+Zs7eaYPPh9nWI31NmX/IyJUts5/f6mvdtNZ6E2YfQIm8phCrY3yUkFCk7 OqrhkLBkwn0O9nG04oHWyb7/T2JlTplfgctGXzeBUzly+jMMD8PVUCbQHIhrUxKi YYhrcj1msyB5+ycf2qH909wetZteYuWvhj7LqVtTFo7mfgT3qM7Dhwrxbq4jFUUw sghfbpWyGOofS70WxjVsSwYsIm6osQ6tr6Vbpx8gJGMp6xNE8+7BBOue2RC0J5tC XYVevo32aaldW4XwWK9SeX+SJBis888= -----END CERTIFICATE-----Generated at Wed May 14 13:34:34 2025 by rpki-client