$ rpki-client -vvf rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft File: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft (raw, json) Hash identifier: dB3B2D4Rbc4/EP8G4RECkhX982qb+2Le65Mn3BCt9N8= Subject key identifier: 22:A6:03:9F:BE:6B:C1:09:F8:E0:EB:9F:BA:04:49:B0:7A:E9:F0:5D Authority key identifier: 4E:27:6F:E9:48:13:A5:D7:08:AF:86:6D:61:D6:21:34:0F:C0:51:B2 Certificate issuer: /CN=A91733A8/serialNumber=4E276FE94813A5D708AF866D61D621340FC051B2 Certificate serial: 017A Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft Manifest number: 017A Signing time: Sat 10 May 2025 20:02:15 +0000 Manifest this update: Sat 10 May 2025 20:02:14 +0000 Manifest next update: Sat 17 May 2025 20:02:14 +0000 Files and hashes: 1: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl (hash: ZBjvlBba6CgDPjlR3LPnsCOGE4ORxbrkB6US55Zycaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 378 (0x17a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91733A8, serialNumber=4E276FE94813A5D708AF866D61D621340FC051B2 Validity Not Before: May 10 20:02:14 2025 GMT Not After : May 17 20:02:14 2025 GMT Subject: CN=681fb0c7-1809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fa:99:d6:3a:8a:ba:88:a4:cb:e9:b8:79:e9: f9:0d:ff:4c:42:8a:61:2a:21:e0:3e:4a:5c:c6:92: 24:f4:d0:6f:3c:86:8d:44:47:7d:44:d3:ae:f1:f6: c3:90:2c:0c:06:bd:60:9c:d3:e6:70:3f:ad:a3:29: ee:bf:95:27:de:17:87:c6:6c:ac:42:c0:97:84:69: 86:bb:b6:30:35:ec:b5:0b:d4:12:a7:86:4e:a7:dd: 24:1d:ea:83:aa:2c:b6:f7:19:87:f9:e1:bc:63:ba: 82:b2:1c:e8:78:85:3a:a4:82:32:4a:a4:08:12:32: bd:06:bb:0e:03:11:12:91:2d:68:cc:4c:7e:ef:8b: 1f:77:55:da:ce:8e:17:05:90:06:31:02:59:0f:64: 2a:22:53:dc:2e:f3:25:2a:a5:5f:cc:8b:74:4b:a8: 52:f0:7f:f0:56:2f:68:97:b3:89:22:02:22:40:d8: 9c:fc:c2:d8:36:ab:75:48:a4:93:e9:28:de:58:13: 05:40:7c:b5:8c:8b:4c:7b:e2:e1:27:a7:c3:09:95: 96:ff:11:af:c5:f5:b7:3b:55:64:5e:59:4b:9f:c2: 60:4d:a8:e9:20:53:15:3b:00:43:cb:48:2b:13:56: ee:30:9c:f1:ae:b6:a6:2b:b6:1e:76:7b:93:fb:f6: a8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A6:03:9F:BE:6B:C1:09:F8:E0:EB:9F:BA:04:49:B0:7A:E9:F0:5D X509v3 Authority Key Identifier: keyid:4E:27:6F:E9:48:13:A5:D7:08:AF:86:6D:61:D6:21:34:0F:C0:51:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:e8:3d:56:5a:f8:1d:01:0e:e0:6c:ca:a7:d4:e6:d4:b4:b4: 37:55:da:15:58:71:06:e6:b3:8a:a5:06:a3:6f:d3:e4:03:13: f9:18:ca:49:c3:c5:9f:48:41:bf:3c:67:e3:f9:ef:15:65:ff: 61:83:82:61:7b:d5:fd:b3:7e:09:87:3e:38:b7:97:00:b7:d8: 5f:1f:e7:58:18:ee:e0:84:4b:fc:70:cd:41:83:cc:be:ca:50: 9a:13:20:25:6e:8f:b2:cb:11:bf:c2:4a:d4:65:34:bb:d8:2e: db:e8:84:78:07:93:47:90:54:d7:59:d3:28:f4:06:bc:2e:20: ac:91:68:67:4d:7b:c9:3d:8c:5b:50:f8:57:ac:9a:a5:e2:40: ab:90:b7:ac:42:c2:9b:d9:3e:58:94:65:a7:43:94:bc:67:7a: 18:25:76:d9:fd:d5:be:78:58:93:23:b1:10:04:1f:a7:89:12: 41:21:a2:e2:dd:00:21:d1:8e:9d:10:35:a7:d5:46:3d:86:f3: f9:3a:87:36:09:b6:d5:e6:ad:7e:8c:ff:d2:d3:e6:62:85:70: 7b:ee:4d:e2:c9:a4:a1:2d:43:68:ea:6f:f3:35:f9:7e:8e:e5: f5:76:f4:99:03:b7:85:ae:52:9e:70:d0:82:9a:48:a4:12:56: 68:45:c8:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMzQTgxMTAvBgNVBAUTKDRFMjc2RkU5NDgxM0E1RDcwOEFGODY2RDYxRDYyMTM0 MEZDMDUxQjIwHhcNMjUwNTEwMjAwMjE0WhcNMjUwNTE3MjAwMjE0WjAYMRYwFAYD VQQDEw02ODFmYjBjNy0xODA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPqZ1jqKuoiky+m4een5Df9MQophKiHgPkpcxpIk9NBvPIaNREd9RNOu8fbD kCwMBr1gnNPmcD+toynuv5Un3heHxmysQsCXhGmGu7YwNey1C9QSp4ZOp90kHeqD qiy29xmH+eG8Y7qCshzoeIU6pIIySqQIEjK9BrsOAxESkS1ozEx+74sfd1Xazo4X BZAGMQJZD2QqIlPcLvMlKqVfzIt0S6hS8H/wVi9ol7OJIgIiQNic/MLYNqt1SKST 6SjeWBMFQHy1jItMe+LhJ6fDCZWW/xGvxfW3O1VkXllLn8JgTajpIFMVOwBDy0gr E1buMJzxrramK7YednuT+/aoawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKmA5++ a8EJ+ODrn7oESbB66fBdMB8GA1UdIwQYMBaAFE4nb+lIE6XXCK+GbWHWITQPwFGy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzNBOC9FODY0NDBEOEVG QzQxMUVEQTBGMTYzNDhDNEY5QUUwMi9UaWR2NlVnVHBkY0lyNFp0WWRZaE5BX0FV YkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL1RpZHY2VWdUcGRjSXI0WnRZZFloTkFfQVViSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzNBOC9FODY0NDBEOEVGQzQxMUVEQTBGMTYzNDhDNEY5QUUwMi9UaWR2NlVnVHBk Y0lyNFp0WWRZaE5BX0FVYkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD6D1WWvgdAQ7gbMqn1ObUtLQ3VdoVWHEG5rOKpQajb9PkAxP5GMpJ w8WfSEG/PGfj+e8VZf9hg4Jhe9X9s34Jhz44t5cAt9hfH+dYGO7ghEv8cM1Bg8y+ ylCaEyAlbo+yyxG/wkrUZTS72C7b6IR4B5NHkFTXWdMo9Aa8LiCskWhnTXvJPYxb UPhXrJql4kCrkLesQsKb2T5YlGWnQ5S8Z3oYJXbZ/dW+eFiTI7EQBB+niRJBIaLi 3QAh0Y6dEDWn1UY9hvP5Ooc2CbbV5q1+jP/S0+ZihXB77k3iyaShLUNo6m/zNfl+ juX1dvSZA7eFrlKecNCCmkikElZoRcir -----END CERTIFICATE-----Generated at Mon May 12 16:37:08 2025 by rpki-client