$ rpki-client -vvf rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft File: 4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft (raw, json) Hash identifier: loWhXPrhHvQHrtpx7A3egqVs37I7oqbcgCJT78K5cRc= Subject key identifier: C9:86:57:B9:EE:98:EA:01:CE:19:6E:06:97:0D:61:24:B1:6C:8D:98 Authority key identifier: E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29 Certificate issuer: /CN=A917A93E/serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft Manifest number: 57 Signing time: Tue 13 May 2025 06:30:21 +0000 Manifest this update: Tue 13 May 2025 06:30:20 +0000 Manifest next update: Tue 20 May 2025 06:30:20 +0000 Files and hashes: 1: 4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl (hash: gqgecftn0aXkt5S8RoIp5U0miabd1vWUhip1+wGMqKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:30:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A93E, serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29 Validity Not Before: May 13 06:30:20 2025 GMT Not After : May 20 06:30:20 2025 GMT Subject: CN=6822e6fc-f81e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7e:6a:c0:73:73:da:82:5e:2b:5d:18:81:f0: 6c:ae:2c:5c:0a:c4:b5:b1:8a:54:22:8d:b0:ad:bb: 9e:ae:7d:c3:11:19:ff:1e:23:cf:7f:a9:bf:25:0d: 2e:87:5a:2d:ea:f8:b6:1e:60:e1:eb:7c:78:22:47: c7:bb:72:0b:ff:8c:5d:3d:79:fd:79:7a:38:56:10: 60:fc:a0:1d:6b:65:b4:a0:14:40:96:c2:ba:2f:fb: c9:5c:c1:08:77:fe:c1:ec:f0:7f:23:cc:97:34:ba: 65:95:dc:2b:15:0b:19:4c:c4:fa:8a:20:08:59:03: de:46:81:81:0b:2d:7a:c3:75:26:e3:e5:7b:8d:4f: b9:87:32:72:4e:c5:bf:eb:b4:58:89:30:e6:0b:58: 78:f7:e9:ec:9a:35:a8:48:82:66:2f:19:af:fe:c6: 21:21:d7:79:f5:82:d5:83:5a:fa:43:43:f5:a3:f6: 94:a1:41:5d:30:f3:cc:a7:c6:40:cd:94:6c:57:8c: 77:86:73:db:21:d6:bf:33:c9:f2:81:1e:90:c1:07: 2d:30:b7:f9:eb:da:08:51:74:99:51:06:1a:51:8c: de:13:4e:97:c7:0b:e9:29:12:91:a4:c9:de:3d:b8: 2a:49:2e:e9:32:de:43:39:f9:61:0e:79:87:5f:b0: 8f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:86:57:B9:EE:98:EA:01:CE:19:6E:06:97:0D:61:24:B1:6C:8D:98 X509v3 Authority Key Identifier: keyid:E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:cb:57:4a:67:ee:a4:db:d4:7f:12:a6:7c:60:c2:bb:e3:a6: 18:10:0a:b4:95:7d:9b:d5:e3:21:59:67:bd:7b:8e:0c:60:b5: 61:66:63:60:b1:cf:de:9c:1a:fd:80:e4:76:a8:40:df:70:23: ff:e8:7e:38:46:35:78:3b:a1:88:a3:dd:9c:6e:0c:1e:4f:12: 55:52:18:aa:aa:76:7a:f2:ad:c4:ef:11:80:df:da:6c:6b:41: 07:a1:6f:7d:24:03:b0:63:3f:c1:0a:7f:80:e2:3b:a3:aa:1f: 8d:f6:85:bb:88:1e:40:cb:95:74:bf:16:bb:e7:a7:33:af:c9: da:bf:7b:aa:0c:cf:76:d7:93:3c:36:8a:63:87:c0:7b:5c:c1: 20:e9:ef:95:7b:c4:3d:3d:af:53:80:2a:0c:ee:e2:9b:0e:9a: 14:4c:d1:28:9f:98:37:50:ee:9f:75:81:27:e8:64:77:b7:77: 29:01:7a:c2:ff:86:e0:ae:3c:fd:87:eb:1f:01:7a:53:e2:a0: bf:bf:19:b0:71:21:55:a5:53:98:33:ef:95:45:64:55:50:65: 99:9f:d6:b4:3f:8e:34:fa:3b:53:ce:95:5b:ac:67:98:cf:0d: 0d:dd:bd:a0:20:86:33:37:3d:8a:e4:6c:06:aa:e0:31:f6:d0: 01:b4:d0:7d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTkzRTExMC8GA1UEBRMoRTBBQjZEOTc3MjY1REIwRDVDNThENDMzQTI4QjNDQzIw NTFBMEMyOTAeFw0yNTA1MTMwNjMwMjBaFw0yNTA1MjAwNjMwMjBaMBgxFjAUBgNV BAMTDTY4MjJlNmZjLWY4MWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXfmrAc3Pagl4rXRiB8GyuLFwKxLWxilQijbCtu56ufcMRGf8eI89/qb8lDS6H Wi3q+LYeYOHrfHgiR8e7cgv/jF09ef15ejhWEGD8oB1rZbSgFECWwrov+8lcwQh3 /sHs8H8jzJc0umWV3CsVCxlMxPqKIAhZA95GgYELLXrDdSbj5XuNT7mHMnJOxb/r tFiJMOYLWHj36eyaNahIgmYvGa/+xiEh13n1gtWDWvpDQ/Wj9pShQV0w88ynxkDN lGxXjHeGc9sh1r8zyfKBHpDBBy0wt/nr2ghRdJlRBhpRjN4TTpfHC+kpEpGkyd49 uCpJLuky3kM5+WEOeYdfsI8xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyYZXue6Y 6gHOGW4Glw1hJLFsjZgwHwYDVR0jBBgwFoAU4Kttl3Jl2w1cWNQzoos8wgUaDCkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBOTNFLzQ3MUIzNzI4Qjc5 QTExRUY4RUM0OTk1MUM0RjlBRTAyLzRLdHRsM0psMncxY1dOUXpvb3M4d2dVYURD ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNEt0dGwzSmwydzFjV05Rem9vczh3Z1VhRENrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB OTNFLzQ3MUIzNzI4Qjc5QTExRUY4RUM0OTk1MUM0RjlBRTAyLzRLdHRsM0psMncx Y1dOUXpvb3M4d2dVYURDay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABzLV0pn7qTb1H8SpnxgwrvjphgQCrSVfZvV4yFZZ717jgxgtWFmY2Cx z96cGv2A5HaoQN9wI//ofjhGNXg7oYij3ZxuDB5PElVSGKqqdnryrcTvEYDf2mxr QQehb30kA7BjP8EKf4DiO6OqH432hbuIHkDLlXS/FrvnpzOvydq/e6oMz3bXkzw2 imOHwHtcwSDp75V7xD09r1OAKgzu4psOmhRM0SifmDdQ7p91gSfoZHe3dykBesL/ huCuPP2H6x8BelPioL+/GbBxIVWlU5gz75VFZFVQZZmf1rQ/jjT6O1POlVusZ5jP DQ3dvaAghjM3PYrkbAaq4DH20AG00H0= -----END CERTIFICATE-----Generated at Wed May 14 03:22:27 2025 by rpki-client