$ rpki-client -vvf rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft File: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft (raw, json) Hash identifier: Nk8OXc/c5Gt1C59uFBOqbsabcDbhK22ZQa7qDS+Dn5o= Subject key identifier: 31:30:D9:02:21:A3:50:E6:18:E3:82:A8:B1:E2:A0:6C:01:12:28:A8 Authority key identifier: FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C Certificate issuer: /CN=A919A3F0/serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft Manifest number: 0158 Signing time: Thu 15 May 2025 03:31:26 +0000 Manifest this update: Thu 15 May 2025 03:31:26 +0000 Manifest next update: Thu 22 May 2025 03:31:26 +0000 Files and hashes: 1: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl (hash: zzs4Llh4q7ECczRwE5abNY4HDd2p6RAhp69cE9BtKb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A3F0, serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C Validity Not Before: May 15 03:31:26 2025 GMT Not After : May 22 03:31:26 2025 GMT Subject: CN=6825600e-d7e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:54:0f:66:f5:c0:d3:3b:7d:2c:96:45:f3:b0: 10:e0:6e:cc:51:c4:94:82:9c:65:cc:2e:a7:43:37: 32:73:a1:3b:c2:65:b9:51:b6:52:23:a5:a0:a8:04: 4f:12:08:6f:d4:44:da:05:b0:a1:a5:e5:7c:98:01: 82:f4:6d:56:61:2a:31:e6:98:f7:17:21:cb:9c:e6: 86:e3:89:86:02:b5:0e:b7:09:10:8f:c5:0c:80:b6: f5:38:00:76:66:38:56:b8:78:21:e4:fb:53:a0:0f: 6a:b0:c4:ed:94:67:6e:89:2f:8b:ef:22:44:07:47: 96:6b:cc:95:47:ef:74:88:e9:48:e3:51:de:ec:90: d4:80:a6:04:83:ad:96:28:9d:90:59:1c:ac:f1:a5: 58:ec:08:ad:fe:f7:01:2c:d6:13:8e:53:70:c0:b4: e7:cd:38:6d:af:f6:a0:3b:36:20:a3:04:10:b0:80: 94:c7:c1:68:8b:22:ff:29:51:33:b8:10:95:bd:01: 7f:75:66:45:dd:36:d0:ca:fc:69:4a:13:cc:bd:c6: 10:81:f8:b2:7a:e5:37:d7:13:09:0a:77:ff:4b:e2: db:14:c4:bc:c4:f1:ea:f7:d3:c2:fb:20:ef:e4:e4: da:0e:f2:62:3b:16:0c:6c:c3:8f:ac:9b:2c:2d:4a: f3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:30:D9:02:21:A3:50:E6:18:E3:82:A8:B1:E2:A0:6C:01:12:28:A8 X509v3 Authority Key Identifier: keyid:FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:37:e3:a6:20:c4:68:70:b1:87:9d:24:fd:2a:47:e9:9e:c6: b7:d3:94:99:9d:b1:6a:f5:a9:7f:54:7b:21:b9:bc:28:4f:25: d6:76:7d:46:9d:a7:87:db:9d:89:8d:2f:11:6f:74:29:4b:2c: a0:1d:e5:64:07:a7:41:43:2d:27:3f:38:46:91:a4:63:56:7b: 47:01:be:d9:ae:80:ad:97:35:69:b6:b8:c0:97:26:7a:7e:f4: b7:98:64:dc:31:f7:4f:67:0f:2e:ca:f2:c1:d9:e6:2d:7a:72: 0b:f1:86:18:17:59:02:4b:f1:95:41:e4:62:12:a5:ae:c8:bd: 31:79:5c:1d:71:7f:f1:5a:ca:64:e9:10:4c:54:5c:81:e6:d8: ad:d1:8c:35:ba:d2:b6:f7:91:2e:5d:b1:d9:cb:90:e7:87:8b: bf:3a:a9:5c:bb:34:78:65:e2:76:3f:6f:75:8f:46:80:66:85: 12:a0:4d:bd:72:e0:b7:ff:9e:6b:fb:7d:8c:27:91:54:b7:f1: 97:0b:43:ec:40:d6:dd:b4:9b:9b:a5:48:6b:2e:d0:68:92:7d: ff:41:65:fe:e8:d1:6e:81:41:fd:8d:99:b2:0b:51:cb:59:96: cf:8c:67:22:c8:c0:bb:2a:11:6d:37:bf:1b:76:35:18:71:31: c3:dd:d6:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUEzRjAxMTAvBgNVBAUTKEZFMDVFRkI3MDEyNUQ1MjA0NzZGNjNCQzYwOUY1NTRE QzQ5QUM1OUMwHhcNMjUwNTE1MDMzMTI2WhcNMjUwNTIyMDMzMTI2WjAYMRYwFAYD VQQDEw02ODI1NjAwZS1kN2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFQPZvXA0zt9LJZF87AQ4G7MUcSUgpxlzC6nQzcyc6E7wmW5UbZSI6WgqARP Eghv1ETaBbChpeV8mAGC9G1WYSox5pj3FyHLnOaG44mGArUOtwkQj8UMgLb1OAB2 ZjhWuHgh5PtToA9qsMTtlGduiS+L7yJEB0eWa8yVR+90iOlI41He7JDUgKYEg62W KJ2QWRys8aVY7Ait/vcBLNYTjlNwwLTnzThtr/agOzYgowQQsICUx8FoiyL/KVEz uBCVvQF/dWZF3TbQyvxpShPMvcYQgfiyeuU31xMJCnf/S+LbFMS8xPHq99PC+yDv 5OTaDvJiOxYMbMOPrJssLUrzLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDEw2QIh o1DmGOOCqLHioGwBEiioMB8GA1UdIwQYMBaAFP4F77cBJdUgR29jvGCfVU3EmsWc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTNGMC9GM0MyQTkyMjJC OEExMUVFQUREMjIxMENDNEY5QUUwMi9fZ1h2dHdFbDFTQkhiMk84WUo5VlRjU2F4 WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19nWHZ0d0VsMVNCSGIyTzhZSjlWVGNTYXhady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTNGMC9GM0MyQTkyMjJCOEExMUVFQUREMjIxMENDNEY5QUUwMi9fZ1h2dHdFbDFT QkhiMk84WUo5VlRjU2F4WncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTN+OmIMRocLGHnST9Kkfpnsa305SZnbFq9al/VHshubwoTyXWdn1G naeH252JjS8Rb3QpSyygHeVkB6dBQy0nPzhGkaRjVntHAb7ZroCtlzVptrjAlyZ6 fvS3mGTcMfdPZw8uyvLB2eYtenIL8YYYF1kCS/GVQeRiEqWuyL0xeVwdcX/xWspk 6RBMVFyB5tit0Yw1utK295EuXbHZy5Dnh4u/OqlcuzR4ZeJ2P291j0aAZoUSoE29 cuC3/55r+32MJ5FUt/GXC0PsQNbdtJubpUhrLtBokn3/QWX+6NFugUH9jZmyC1HL WZbPjGciyMC7KhFtN78bdjUYcTHD3dap -----END CERTIFICATE-----Generated at Thu May 15 10:06:03 2025 by rpki-client