$ rpki-client -vvf rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft File: 5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft (raw, json) Hash identifier: jG8ei/RsRrfN6wepbcURDhRvr1uoyjpm6nm36DjhxII= Subject key identifier: 04:AB:F9:DC:9C:10:0D:5E:91:30:A1:38:05:90:44:B1:4B:0D:DE:A7 Authority key identifier: E6:0E:21:41:D7:1D:B9:FC:89:FA:BF:B5:FD:AD:03:72:DF:A3:37:D0 Certificate issuer: /CN=A917B633/serialNumber=E60E2141D71DB9FC89FABFB5FDAD0372DFA337D0 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft Manifest number: 70 Signing time: Tue 13 May 2025 06:02:10 +0000 Manifest this update: Tue 13 May 2025 06:02:09 +0000 Manifest next update: Tue 20 May 2025 06:02:09 +0000 Files and hashes: 1: 5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl (hash: x7XyDWac9rGBF/sLQPKXW5Y2tWnntFIWw6Smps36+lo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B633, serialNumber=E60E2141D71DB9FC89FABFB5FDAD0372DFA337D0 Validity Not Before: May 13 06:02:09 2025 GMT Not After : May 20 06:02:09 2025 GMT Subject: CN=6822e062-a891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:6a:03:36:42:23:c7:70:7e:c1:eb:94:83:2a: a8:fe:c2:a6:29:2c:dd:be:fa:58:0e:3f:6a:1a:1d: a7:24:22:c5:7c:c0:a6:38:bf:79:ed:ba:97:91:4e: 0a:a6:b4:5e:4e:2e:4f:96:0f:fe:63:c2:4e:d5:2e: 43:70:87:44:94:85:dd:de:b5:11:c2:00:c8:ce:49: f7:f7:71:34:81:d5:86:7c:09:ba:0e:51:ec:ef:94: 97:4b:69:cd:5d:2f:e0:e4:c0:53:ed:22:ab:50:b9: 11:9e:8d:28:2c:72:01:b2:81:a1:72:d1:34:1b:b9: ee:a5:48:53:e4:57:c2:b3:b7:71:28:90:8d:83:de: 26:11:ed:3e:e6:2c:9f:9d:a1:c2:0b:f8:a9:c8:18: a0:20:bd:00:b8:f4:a5:ff:c0:8b:fa:f2:43:21:63: 3b:82:30:49:da:e8:2b:d3:87:51:94:9e:62:f1:9f: 17:08:a9:e2:aa:e3:de:52:9e:ce:90:9c:05:65:b7: 93:63:9e:75:23:a6:ac:07:72:60:bf:43:1a:e3:37: 4a:64:5e:79:67:d4:cf:5f:5e:92:f2:c2:e1:33:83: 5a:ee:9f:02:d4:a8:76:9f:4c:68:26:f3:5c:83:65: 77:88:50:6c:60:a4:19:e9:8a:0a:44:b7:3b:45:8e: c0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:AB:F9:DC:9C:10:0D:5E:91:30:A1:38:05:90:44:B1:4B:0D:DE:A7 X509v3 Authority Key Identifier: keyid:E6:0E:21:41:D7:1D:B9:FC:89:FA:BF:B5:FD:AD:03:72:DF:A3:37:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:59:8c:ae:d4:a6:51:8c:93:6b:8f:1e:1d:d2:e0:6b:8b:5c: 58:24:f4:d1:3d:e3:56:5d:a7:c6:2e:c2:f2:4b:07:b4:7f:68: 40:ab:cb:0f:2a:9c:ea:5d:ca:98:85:be:dc:c0:27:af:63:8e: 6b:c5:a5:a4:74:2e:68:47:fb:fc:83:b5:22:e9:db:da:3f:15: f0:e2:a7:c5:28:b4:65:7b:44:bf:34:53:5d:19:41:61:2a:ff: 3d:3a:ed:87:0f:99:95:ed:2b:c5:24:74:19:61:c5:d3:ea:4e: 3b:0e:ce:9d:0b:dd:e6:fc:bb:a0:c8:c4:8d:9b:93:05:a8:85: 69:92:fa:31:18:75:15:29:84:a7:9d:7a:7f:c5:30:ee:18:6d: 00:1f:a4:2d:29:79:7f:22:f4:af:16:96:38:85:7c:5a:39:e5: 40:7d:30:e3:f7:46:32:5c:1a:06:a2:62:bd:37:47:65:ca:8d: 17:d6:2a:84:d0:f6:9c:d7:1c:25:de:77:cb:97:7d:cb:a1:1a: 5a:76:e2:60:84:93:7d:8f:f3:d5:c2:cd:9b:8f:6b:fd:fa:04: a2:3f:b5:67:ec:09:e7:ee:75:ac:06:6a:13:cc:b6:fc:5e:a5: 32:c0:da:67:8c:de:47:2a:8f:03:da:5b:9a:6c:fb:65:b7:21: 3d:fa:4d:36 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QjYzMzExMC8GA1UEBRMoRTYwRTIxNDFENzFEQjlGQzg5RkFCRkI1RkRBRDAzNzJE RkEzMzdEMDAeFw0yNTA1MTMwNjAyMDlaFw0yNTA1MjAwNjAyMDlaMBgxFjAUBgNV BAMTDTY4MjJlMDYyLWE4OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoagM2QiPHcH7B65SDKqj+wqYpLN2++lgOP2oaHackIsV8wKY4v3ntupeRTgqm tF5OLk+WD/5jwk7VLkNwh0SUhd3etRHCAMjOSff3cTSB1YZ8CboOUezvlJdLac1d L+DkwFPtIqtQuRGejSgscgGygaFy0TQbue6lSFPkV8Kzt3EokI2D3iYR7T7mLJ+d ocIL+KnIGKAgvQC49KX/wIv68kMhYzuCMEna6CvTh1GUnmLxnxcIqeKq495Sns6Q nAVlt5NjnnUjpqwHcmC/QxrjN0pkXnln1M9fXpLywuEzg1runwLUqHafTGgm81yD ZXeIUGxgpBnpigpEtztFjsCbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBKv53JwQ DV6RMKE4BZBEsUsN3qcwHwYDVR0jBBgwFoAU5g4hQdcdufyJ+r+1/a0Dct+jN9Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCNjMzL0Q5MTY1RUJBODZE OTExRUY4QjhCRUIxRkM0RjlBRTAyLzVnNGhRZGNkdWZ5Si1yLTFfYTBEY3Qtak45 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNWc0aFFkY2R1ZnlKLXItMV9hMERjdC1qTjlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC NjMzL0Q5MTY1RUJBODZEOTExRUY4QjhCRUIxRkM0RjlBRTAyLzVnNGhRZGNkdWZ5 Si1yLTFfYTBEY3Qtak45QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC5ZjK7UplGMk2uPHh3S4GuLXFgk9NE941Zdp8YuwvJLB7R/aECryw8q nOpdypiFvtzAJ69jjmvFpaR0LmhH+/yDtSLp29o/FfDip8UotGV7RL80U10ZQWEq /z067YcPmZXtK8UkdBlhxdPqTjsOzp0L3eb8u6DIxI2bkwWohWmS+jEYdRUphKed en/FMO4YbQAfpC0peX8i9K8WljiFfFo55UB9MOP3RjJcGgaiYr03R2XKjRfWKoTQ 9pzXHCXed8uXfcuhGlp24mCEk32P89XCzZuPa/36BKI/tWfsCefudawGahPMtvxe pTLA2meM3kcqjwPaW5ps+2W3IT36TTY= -----END CERTIFICATE-----Generated at Tue May 13 11:47:18 2025 by rpki-client