$ rpki-client -vvf rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft File: IdPtIffN68fQDxu3oJURuVze_iM.mft (raw, json) Hash identifier: Rt4tZDoQmIdM88rVeAMR6SGAlAh7euLI5oxDpDtWgl8= Subject key identifier: DA:98:8A:27:17:6C:3B:AC:6D:B9:FA:63:0B:01:0E:4D:22:29:10:BB Authority key identifier: 21:D3:ED:21:F7:CD:EB:C7:D0:0F:1B:B7:A0:95:11:B9:5C:DE:FE:23 Certificate issuer: /CN=A917336A/serialNumber=21D3ED21F7CDEBC7D00F1BB7A09511B95CDEFE23 Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft Manifest number: 8E Signing time: Sun 11 May 2025 05:13:57 +0000 Manifest this update: Sun 11 May 2025 05:13:56 +0000 Manifest next update: Sun 18 May 2025 05:13:56 +0000 Files and hashes: 1: IdPtIffN68fQDxu3oJURuVze_iM.crl (hash: k0stM6JAre0uSJVcQHpe6k/sfveZnJs7T3p8Nhm1IHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.crl rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917336A, serialNumber=21D3ED21F7CDEBC7D00F1BB7A09511B95CDEFE23 Validity Not Before: May 11 05:13:56 2025 GMT Not After : May 18 05:13:56 2025 GMT Subject: CN=68203214-00e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5e:08:cc:33:7c:5c:3e:3c:61:94:27:9a:3b: c4:17:57:01:7d:d0:d8:38:ec:46:6b:79:dd:fa:ac: 10:0f:44:6b:5b:42:84:c1:ae:0e:40:47:0f:90:c0: 84:a0:ad:b1:47:12:55:fa:83:f6:96:11:64:3f:39: a2:46:40:79:14:15:c5:eb:22:d0:a5:5b:c9:fa:ef: df:92:3f:a0:84:e5:c8:e2:61:75:aa:f7:ef:68:ed: 00:d5:ec:d2:83:38:22:35:fd:ed:e5:1f:2f:39:bf: 7f:b4:b5:54:c6:1c:c2:46:35:6a:26:ef:de:56:6f: f1:c9:31:5a:a5:f6:24:8a:46:8c:c7:88:cd:5b:6e: d8:f7:0e:21:2d:8a:5d:de:01:8a:1f:3b:78:df:fb: d4:c4:7b:36:4d:68:55:8c:65:da:25:5f:8c:c5:e8: 1e:f3:0e:73:34:32:fc:c6:c0:71:63:9f:2e:6c:06: a6:a5:a3:7f:9d:6c:96:93:1d:52:41:4c:09:f0:4a: 96:ec:20:28:99:d4:2b:bb:b4:4a:d5:3c:b6:35:3d: a3:42:72:e3:30:df:c0:cd:5c:7a:17:a5:e0:38:d6: ff:f8:c7:c6:0b:b4:30:3e:af:37:54:9f:ee:c5:57: 22:5a:a5:cf:07:7a:65:1d:7f:e3:9d:39:55:7d:ec: ce:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:98:8A:27:17:6C:3B:AC:6D:B9:FA:63:0B:01:0E:4D:22:29:10:BB X509v3 Authority Key Identifier: keyid:21:D3:ED:21:F7:CD:EB:C7:D0:0F:1B:B7:A0:95:11:B9:5C:DE:FE:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:45:33:4a:c6:2a:3a:71:4b:96:77:b6:a9:37:7b:42:79:00: 38:97:99:dd:36:25:fb:1d:40:d4:4e:2f:55:b5:f8:96:38:22: 4a:e9:d9:11:91:57:95:84:af:4c:02:cc:34:49:0e:c8:be:dc: 6d:7e:0a:ae:63:61:05:09:46:06:70:7c:bb:f5:fa:15:d5:43: 64:57:48:ac:1e:88:bd:49:b0:32:4a:d8:35:96:01:fb:5e:a2: 20:00:f6:14:2b:2d:cb:d5:9f:be:82:01:9d:9a:94:8e:e8:43: 54:2a:21:44:f8:8c:ca:57:9a:af:9d:25:7e:f1:52:67:94:88: 51:20:01:a8:76:3f:bc:28:98:8f:e3:ad:25:1b:83:47:d3:dc: 0e:72:d9:cb:fa:15:2f:10:ea:a8:cc:bd:c2:98:47:ff:fc:25: 0a:06:b9:e2:9d:9a:b7:0f:e8:e2:33:18:c1:40:a2:8e:62:c4: d2:d8:b0:7b:86:15:40:bf:6b:64:35:bc:7c:2e:d8:b6:31:38: 5d:c0:67:40:06:07:8e:8b:d2:93:d3:99:15:34:57:31:2f:30: 11:b1:ae:51:1d:5c:c7:ca:c8:07:79:4c:44:af:d3:9b:06:80: 2f:ca:ec:2b:a1:63:1d:37:47:5e:ad:70:fc:8b:f5:90:c2:45: 70:f4:de:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMzNkExMTAvBgNVBAUTKDIxRDNFRDIxRjdDREVCQzdEMDBGMUJCN0EwOTUxMUI5 NUNERUZFMjMwHhcNMjUwNTExMDUxMzU2WhcNMjUwNTE4MDUxMzU2WjAYMRYwFAYD VQQDEw02ODIwMzIxNC0wMGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw14IzDN8XD48YZQnmjvEF1cBfdDYOOxGa3nd+qwQD0RrW0KEwa4OQEcPkMCE oK2xRxJV+oP2lhFkPzmiRkB5FBXF6yLQpVvJ+u/fkj+ghOXI4mF1qvfvaO0A1ezS gzgiNf3t5R8vOb9/tLVUxhzCRjVqJu/eVm/xyTFapfYkikaMx4jNW27Y9w4hLYpd 3gGKHzt43/vUxHs2TWhVjGXaJV+Mxege8w5zNDL8xsBxY58ubAampaN/nWyWkx1S QUwJ8EqW7CAomdQru7RK1Ty2NT2jQnLjMN/AzVx6F6XgONb/+MfGC7QwPq83VJ/u xVciWqXPB3plHX/jnTlVfezOaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNqYiicX bDusbbn6YwsBDk0iKRC7MB8GA1UdIwQYMBaAFCHT7SH3zevH0A8bt6CVEblc3v4j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzM2QS84RjVBOTM1NjVB RUExMUVGOTRFOTNENkVDNEY5QUUwMi9JZFB0SWZmTjY4ZlFEeHUzb0pVUnVWemVf aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lkUHRJZmZONjhmUUR4dTNvSlVSdVZ6ZV9pTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzM2QS84RjVBOTM1NjVBRUExMUVGOTRFOTNENkVDNEY5QUUwMi9JZFB0SWZmTjY4 ZlFEeHUzb0pVUnVWemVfaU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRRTNKxio6cUuWd7apN3tCeQA4l5ndNiX7HUDUTi9VtfiWOCJK6dkR kVeVhK9MAsw0SQ7IvtxtfgquY2EFCUYGcHy79foV1UNkV0isHoi9SbAyStg1lgH7 XqIgAPYUKy3L1Z++ggGdmpSO6ENUKiFE+IzKV5qvnSV+8VJnlIhRIAGodj+8KJiP 460lG4NH09wOctnL+hUvEOqozL3CmEf//CUKBrninZq3D+jiMxjBQKKOYsTS2LB7 hhVAv2tkNbx8Lti2MThdwGdABgeOi9KT05kVNFcxLzARsa5RHVzHysgHeUxEr9Ob BoAvyuwroWMdN0derXD8i/WQwkVw9N5V -----END CERTIFICATE-----Generated at Sun May 11 13:12:30 2025 by rpki-client