$ rpki-client -vvf rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.mft File: adr8x94-0cCfTDZqTKThf_sRqEk.mft (raw, json) Hash identifier: CdaGQi0doprVfi6EVEvYF7EHWurN6vULvLlUSc0UqFA= Subject key identifier: 1E:66:2B:31:1B:C3:3D:C2:F3:51:02:0E:4C:9E:DB:A7:3E:C8:CD:78 Authority key identifier: 69:DA:FC:C7:DE:3E:D1:C0:9F:4C:36:6A:4C:A4:E1:7F:FB:11:A8:49 Certificate issuer: /CN=A91879AC/serialNumber=69DAFCC7DE3ED1C09F4C366A4CA4E17FFB11A849 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adr8x94-0cCfTDZqTKThf_sRqEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.mft Manifest number: 5B Signing time: Thu 15 May 2025 06:25:22 +0000 Manifest this update: Thu 15 May 2025 06:25:21 +0000 Manifest next update: Thu 22 May 2025 06:25:21 +0000 Files and hashes: 1: adr8x94-0cCfTDZqTKThf_sRqEk.crl (hash: 06iEJQC0ILe7t0XjKaG7LHX/TqvEVyTtoPQPaxrY7Ac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.crl rsync://rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adr8x94-0cCfTDZqTKThf_sRqEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:25:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91879AC, serialNumber=69DAFCC7DE3ED1C09F4C366A4CA4E17FFB11A849 Validity Not Before: May 15 06:25:21 2025 GMT Not After : May 22 06:25:21 2025 GMT Subject: CN=682588d2-1f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:79:3f:02:a9:9a:37:d3:0b:2e:01:b7:a2:d3: 28:3f:3a:6b:84:50:b8:3d:7a:fc:76:1f:91:74:f9: 70:5a:da:bf:d8:a5:35:3f:40:cf:9f:ca:28:c0:96: 80:e2:38:52:de:5f:93:53:45:f7:39:d5:44:30:a1: c4:7c:83:72:a5:04:85:29:ff:53:53:d6:7b:a9:9a: ac:50:75:90:87:31:d9:38:7c:11:0b:9a:c7:05:f1: 4a:eb:d3:76:11:d2:11:57:e0:6b:c0:7f:ba:26:b5: 9a:7f:f0:9f:e7:a7:a2:86:19:25:f0:65:8c:80:55: 94:9f:9a:b9:7a:66:7c:11:5f:09:26:88:a9:06:c3: c9:7f:b0:44:5c:ea:4a:57:d6:ec:07:f2:92:4f:3e: 56:4d:d2:56:5f:85:62:85:29:88:5a:b8:5f:5e:31: b4:72:8e:fd:53:d3:53:3f:55:69:13:10:90:2e:3f: 1c:02:40:56:8f:24:30:97:f0:86:cc:d0:f8:6b:43: e2:ef:a7:53:9a:e4:60:07:f7:d8:f5:2d:ab:0a:3d: 62:06:c0:ce:dc:9e:6c:5b:25:cf:af:b1:ca:b3:f3: 0b:f3:d5:c1:88:be:02:19:eb:62:59:0e:57:df:f0: b6:e8:a5:fe:a7:49:73:e8:03:fd:05:90:4c:33:ae: c0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:66:2B:31:1B:C3:3D:C2:F3:51:02:0E:4C:9E:DB:A7:3E:C8:CD:78 X509v3 Authority Key Identifier: keyid:69:DA:FC:C7:DE:3E:D1:C0:9F:4C:36:6A:4C:A4:E1:7F:FB:11:A8:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adr8x94-0cCfTDZqTKThf_sRqEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:56:f3:84:72:7b:8a:08:6a:53:57:21:b3:e5:4f:c2:d7:6c: 7e:3e:14:c0:e2:a1:01:97:08:e1:22:02:b3:79:b3:1e:73:b0: 52:60:5b:41:1a:53:40:f1:44:1c:46:bf:66:08:81:35:9b:fb: 79:61:c2:e3:4c:d5:4b:a0:72:97:03:fa:9f:85:6e:2d:17:f2: 9f:13:6d:19:fc:24:a7:22:d2:b1:41:ee:bc:40:61:f5:ed:b3: a6:3f:51:e9:4b:36:20:83:6d:f8:8f:c6:f7:f2:39:a4:b0:5d: 5d:32:e6:a5:01:ba:ef:34:9c:25:2a:ca:82:9c:e2:11:fe:b7: e0:ce:31:85:99:e5:1e:1b:ce:e2:9f:01:80:33:ac:7d:5e:b9: 79:ff:14:8a:22:b7:24:c5:58:f8:73:5e:1e:56:01:ce:8b:a9: 71:1a:b8:1a:98:75:09:0d:98:5d:7d:e5:68:e8:69:8e:eb:5b: df:61:b4:63:10:76:61:a6:aa:31:5c:54:da:e8:ba:d8:3d:58: 20:ec:25:66:88:76:47:75:1a:bd:37:db:dd:ac:b7:4a:6b:10: 57:a0:65:a2:cb:d9:66:71:06:79:68:47:ab:c1:56:23:0a:e3: 2f:05:a3:bb:dc:03:b8:bc:d0:26:e3:30:29:b9:ba:45:c6:db: 75:4a:4b:69 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NzlBQzExMC8GA1UEBRMoNjlEQUZDQzdERTNFRDFDMDlGNEMzNjZBNENBNEUxN0ZG QjExQTg0OTAeFw0yNTA1MTUwNjI1MjFaFw0yNTA1MjIwNjI1MjFaMBgxFjAUBgNV BAMTDTY4MjU4OGQyLTFmNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8eT8CqZo30wsuAbei0yg/OmuEULg9evx2H5F0+XBa2r/YpTU/QM+fyijAloDi OFLeX5NTRfc51UQwocR8g3KlBIUp/1NT1nupmqxQdZCHMdk4fBELmscF8Urr03YR 0hFX4GvAf7omtZp/8J/np6KGGSXwZYyAVZSfmrl6ZnwRXwkmiKkGw8l/sERc6kpX 1uwH8pJPPlZN0lZfhWKFKYhauF9eMbRyjv1T01M/VWkTEJAuPxwCQFaPJDCX8IbM 0PhrQ+Lvp1Oa5GAH99j1LasKPWIGwM7cnmxbJc+vscqz8wvz1cGIvgIZ62JZDlff 8Lbopf6nSXPoA/0FkEwzrsD9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHmYrMRvD PcLzUQIOTJ7bpz7IzXgwHwYDVR0jBBgwFoAUadr8x94+0cCfTDZqTKThf/sRqEkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3OUFDLzY4Rjc5MjJDQTgw MTExRUZBNDA2NzUzQkM0RjlBRTAyL2Fkcjh4OTQtMGNDZlREWnFUS1RoZl9zUnFF ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWRyOHg5NC0wY0NmVERacVRLVGhmX3NScUVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 OUFDLzY4Rjc5MjJDQTgwMTExRUZBNDA2NzUzQkM0RjlBRTAyL2Fkcjh4OTQtMGND ZlREWnFUS1RoZl9zUnFFay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEdW84Rye4oIalNXIbPlT8LXbH4+FMDioQGXCOEiArN5sx5zsFJgW0Ea U0DxRBxGv2YIgTWb+3lhwuNM1UugcpcD+p+Fbi0X8p8TbRn8JKci0rFB7rxAYfXt s6Y/UelLNiCDbfiPxvfyOaSwXV0y5qUBuu80nCUqyoKc4hH+t+DOMYWZ5R4bzuKf AYAzrH1euXn/FIoityTFWPhzXh5WAc6LqXEauBqYdQkNmF195WjoaY7rW99htGMQ dmGmqjFcVNroutg9WCDsJWaIdkd1Gr03292st0prEFegZaLL2WZxBnloR6vBViMK 4y8Fo7vcA7i80CbjMCm5ukXG23VKS2k= -----END CERTIFICATE-----Generated at Thu May 15 08:49:37 2025 by rpki-client