$ rpki-client -vvf rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft File: RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft (raw, json) Hash identifier: hMZK2OTqX1vvBVtC/iRcTCe5v7Bk84zdeLh7EoDO+Ss= Subject key identifier: 86:6B:B5:E8:62:76:EA:88:80:8B:6D:14:4F:13:F2:03:46:76:A8:F6 Authority key identifier: 44:F9:C4:DA:47:E6:37:1F:D1:C9:F9:F8:E5:64:D1:80:3A:0F:32:87 Certificate issuer: /CN=A91807BB/serialNumber=44F9C4DA47E6371FD1C9F9F8E564D1803A0F3287 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPnE2kfmNx_Ryfn45WTRgDoPMoc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft Manifest number: 75 Signing time: Sun 11 May 2025 05:32:10 +0000 Manifest this update: Sun 11 May 2025 05:32:10 +0000 Manifest next update: Sun 18 May 2025 05:32:10 +0000 Files and hashes: 1: RPnE2kfmNx_Ryfn45WTRgDoPMoc.crl (hash: ka70iuhVMUxLcV7CMpN2a4AdG0Bp5n/jT9VuxX7xQEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.crl rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPnE2kfmNx_Ryfn45WTRgDoPMoc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91807BB, serialNumber=44F9C4DA47E6371FD1C9F9F8E564D1803A0F3287 Validity Not Before: May 11 05:32:10 2025 GMT Not After : May 18 05:32:10 2025 GMT Subject: CN=6820365a-7aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ff:9c:ba:a2:e9:6d:0b:9d:72:79:eb:c8:7c: 78:5d:5d:98:0b:15:8a:b3:5f:2d:9e:ac:83:46:56: 06:9a:ad:a2:42:ff:ff:76:82:21:46:c1:ee:5b:ec: cd:32:bb:92:7b:a4:37:1c:74:1f:1d:89:62:87:41: d6:8b:69:59:bc:b0:0e:44:d3:a7:f7:d4:c2:b3:78: 00:6b:d2:bf:7e:16:ee:08:06:2c:07:8a:a7:39:b3: 4e:bd:7f:ca:6a:97:55:fa:cb:e9:db:20:dd:30:d9: 6e:76:52:76:89:9a:2b:a5:c1:3b:72:72:07:da:9b: c2:a4:6b:b8:f5:a8:01:fa:5f:89:33:c0:ae:60:7b: d2:68:c0:70:d0:48:19:44:6c:b9:ad:c1:aa:39:23: ae:9b:12:28:be:86:00:1a:f5:55:50:d0:42:af:5d: 9e:59:67:de:1e:25:fd:ee:b9:42:7d:b5:07:0c:47: d5:20:0c:34:a7:df:96:11:88:fa:fa:d5:5c:6c:fd: 20:40:f8:62:27:67:bc:52:c2:e1:d1:5b:06:f9:f5: 84:b7:6e:18:b3:95:71:73:d3:65:ca:e5:d4:2a:6a: 98:63:75:45:21:7a:8a:c4:2a:ab:57:15:cf:13:3d: 7b:33:30:67:00:72:b0:b2:d3:67:ee:5b:a4:34:22: c3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:6B:B5:E8:62:76:EA:88:80:8B:6D:14:4F:13:F2:03:46:76:A8:F6 X509v3 Authority Key Identifier: keyid:44:F9:C4:DA:47:E6:37:1F:D1:C9:F9:F8:E5:64:D1:80:3A:0F:32:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPnE2kfmNx_Ryfn45WTRgDoPMoc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:01:f1:fe:06:31:4c:c2:f4:c1:2d:9a:70:1a:cd:bb:ec:ff: f5:15:70:cf:21:f0:f0:a8:b1:cb:b7:e8:45:d7:b3:e5:00:7c: 69:a9:a8:ed:7b:35:92:f3:17:eb:e9:f9:8e:7e:3d:47:fb:8b: bd:a9:da:a5:70:32:95:9d:6d:08:dd:01:c9:64:d8:3c:7a:3a: 23:4f:af:30:25:df:cf:d7:3b:ab:89:11:c0:6e:ad:c1:47:68: 7d:49:35:4f:09:ca:d2:57:4d:d9:a8:93:87:ff:54:17:f4:a1: 95:5d:5f:b4:a6:51:85:eb:28:fa:e8:f9:58:ab:a7:68:2c:a0: bd:a0:fd:60:3d:8d:eb:c9:48:e3:28:64:11:c2:3f:e9:e9:b3: 01:73:bc:d9:fd:db:72:4d:90:21:66:67:61:72:01:c4:ca:ed: 7a:6a:f7:c3:e7:da:d2:86:1f:e8:d5:30:4c:fb:f8:22:ed:76: 72:39:45:b7:a0:7d:6b:3d:86:4a:a6:f4:5d:6d:5c:ba:88:d0: d6:0a:ba:9c:bd:c6:f2:85:d2:37:36:84:85:6e:87:04:4f:d4: b4:0b:dd:bc:ce:85:e3:cf:9e:a7:89:17:00:9e:4c:81:dc:67: d4:5b:8d:84:ef:64:2a:b8:1a:81:03:2e:49:5a:92:3d:38:51: 54:3c:b4:37 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MDdCQjExMC8GA1UEBRMoNDRGOUM0REE0N0U2MzcxRkQxQzlGOUY4RTU2NEQxODAz QTBGMzI4NzAeFw0yNTA1MTEwNTMyMTBaFw0yNTA1MTgwNTMyMTBaMBgxFjAUBgNV BAMTDTY4MjAzNjVhLTdhYTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCn/5y6oultC51yeevIfHhdXZgLFYqzXy2erINGVgaaraJC//92giFGwe5b7M0y u5J7pDccdB8diWKHQdaLaVm8sA5E06f31MKzeABr0r9+Fu4IBiwHiqc5s069f8pq l1X6y+nbIN0w2W52UnaJmiulwTtycgfam8Kka7j1qAH6X4kzwK5ge9JowHDQSBlE bLmtwao5I66bEii+hgAa9VVQ0EKvXZ5ZZ94eJf3uuUJ9tQcMR9UgDDSn35YRiPr6 1Vxs/SBA+GInZ7xSwuHRWwb59YS3bhizlXFz02XK5dQqaphjdUUheorEKqtXFc8T PXszMGcAcrCy02fuW6Q0IsM7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhmu16GJ2 6oiAi20UTxPyA0Z2qPYwHwYDVR0jBBgwFoAURPnE2kfmNx/Ryfn45WTRgDoPMocw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwN0JCLzBBRTQ4MjkwN0NC MzExRUY5NkM5RjI1MEM0RjlBRTAyL1JQbkUya2ZtTnhfUnlmbjQ1V1RSZ0RvUE1v Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUlBuRTJrZm1OeF9SeWZuNDVXVFJnRG9QTW9jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw N0JCLzBBRTQ4MjkwN0NCMzExRUY5NkM5RjI1MEM0RjlBRTAyL1JQbkUya2ZtTnhf UnlmbjQ1V1RSZ0RvUE1vYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB4B8f4GMUzC9MEtmnAazbvs//UVcM8h8PCoscu36EXXs+UAfGmpqO17 NZLzF+vp+Y5+PUf7i72p2qVwMpWdbQjdAclk2Dx6OiNPrzAl38/XO6uJEcBurcFH aH1JNU8JytJXTdmok4f/VBf0oZVdX7SmUYXrKPro+Virp2gsoL2g/WA9jevJSOMo ZBHCP+npswFzvNn923JNkCFmZ2FyAcTK7Xpq98Pn2tKGH+jVMEz7+CLtdnI5Rbeg fWs9hkqm9F1tXLqI0NYKupy9xvKF0jc2hIVuhwRP1LQL3bzOhePPnqeJFwCeTIHc Z9RbjYTvZCq4GoEDLklakj04UVQ8tDc= -----END CERTIFICATE-----Generated at Sun May 11 12:43:17 2025 by rpki-client