$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft File: hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft (raw, json) Hash identifier: 4kNUuxQ1goyYkKY4MVuxPErbZ106/kTIG7R9ljcNhLs= Subject key identifier: AD:95:C8:F0:47:B7:80:BE:CE:0A:02:76:D8:3A:3F:90:2F:2A:40:98 Authority key identifier: 86:22:33:3D:BC:07:73:38:0B:A3:76:47:DC:C3:F3:E6:55:F3:4B:C6 Certificate issuer: /CN=A91B3759/serialNumber=8622333DBC0773380BA37647DCC3F3E655F34BC6 Certificate serial: 079D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft Manifest number: 0799 Signing time: Fri 16 May 2025 21:36:10 +0000 Manifest this update: Fri 16 May 2025 21:36:08 +0000 Manifest next update: Fri 23 May 2025 21:36:08 +0000 Files and hashes: 1: hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl (hash: VGjLCLKjvgDOchStVeF/rRVODbq8EDIM8kJNP3anSkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 21:36:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1949 (0x79d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3759, serialNumber=8622333DBC0773380BA37647DCC3F3E655F34BC6 Validity Not Before: May 16 21:36:08 2025 GMT Not After : May 23 21:36:08 2025 GMT Subject: CN=6827afc9-c5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ae:6f:34:71:34:fb:e5:8b:5d:00:07:90:4e: e3:75:99:67:6c:0a:91:fa:7c:d6:ee:af:fd:ee:63: 68:13:cc:79:2f:1f:58:79:59:8d:01:e5:76:c4:21: d8:d7:ed:76:96:1f:ea:ce:0f:87:60:8c:2b:85:a4: 4c:56:c5:d3:3c:c3:72:e4:27:ba:01:e9:f3:01:56: 0d:d6:90:27:e2:86:59:43:f1:72:e6:a2:2c:16:a5: 87:e1:17:42:4c:72:68:eb:6f:75:a0:64:3c:1c:8f: b2:c0:0f:e4:28:25:28:e1:d7:95:f9:0c:0f:c5:16: c1:ab:70:0d:38:7f:03:28:a3:aa:4b:e4:da:7a:34: 55:c1:4f:28:37:ab:4c:00:c5:ca:2c:e1:be:6a:d6: 93:9a:79:cf:4b:37:91:0c:db:c4:ce:9f:ee:94:9c: 25:77:4b:33:28:54:50:7f:80:5a:bc:4f:ea:18:d5: 38:ee:ac:6e:25:28:1c:3b:71:b6:5a:36:81:ea:e7: 8e:85:e8:35:2b:69:62:d1:1b:e6:80:7c:6e:20:0e: 26:da:0c:b3:d5:f2:94:99:98:a2:1b:b8:9a:04:a1: c7:b8:d7:6a:bb:ab:bc:d6:a2:82:b2:d8:fc:b7:e5: 7d:1a:21:2f:34:46:31:9e:d5:f3:1c:bf:4e:8c:0a: fe:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:95:C8:F0:47:B7:80:BE:CE:0A:02:76:D8:3A:3F:90:2F:2A:40:98 X509v3 Authority Key Identifier: keyid:86:22:33:3D:BC:07:73:38:0B:A3:76:47:DC:C3:F3:E6:55:F3:4B:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:17:7d:9c:fa:fb:8f:a5:7a:f0:20:a1:a1:87:dd:60:bc:d7: c2:b6:30:67:cb:95:4d:89:8d:c6:f3:1b:c1:77:38:2f:44:68: f1:6d:fd:87:64:c8:95:7b:d3:9c:79:da:54:b3:01:68:a0:6f: 14:b4:54:d1:dc:15:ec:e8:cc:07:4f:22:08:5f:e9:ee:ca:84: 55:c2:f8:90:22:12:77:19:71:22:5b:43:e4:e3:08:32:a4:7d: ce:14:64:3b:49:69:00:a6:40:f4:e5:77:af:2c:66:39:e1:f0: a6:4c:10:d9:8d:13:d7:2f:c7:49:0d:f3:23:d4:f9:6e:7d:07: 59:1e:7f:49:be:37:a3:d5:48:d7:3b:04:d2:75:ac:51:c1:87: 5d:4b:be:25:80:cb:6a:c5:32:98:5d:86:eb:ad:36:1f:2e:8b: 02:04:01:54:23:cd:e9:60:31:d2:22:e3:27:40:0f:d3:7f:47: 8e:37:df:45:5f:3b:5f:fe:d0:6b:a4:34:e5:1b:5c:a0:f5:74: 8a:8d:33:49:86:8f:e5:79:d4:d1:be:2b:be:d9:4d:8d:0c:b0: 91:33:f9:ab:b1:03:c1:ca:a2:47:21:75:2d:e7:14:7c:a4:d3: 6d:12:04:72:09:63:94:83:fb:58:f3:d1:2a:66:f7:26:fe:22: 15:c0:ba:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM3NTkxMTAvBgNVBAUTKDg2MjIzMzNEQkMwNzczMzgwQkEzNzY0N0RDQzNGM0U2 NTVGMzRCQzYwHhcNMjUwNTE2MjEzNjA4WhcNMjUwNTIzMjEzNjA4WjAYMRYwFAYD VQQDEw02ODI3YWZjOS1jNWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvK5vNHE0++WLXQAHkE7jdZlnbAqR+nzW7q/97mNoE8x5Lx9YeVmNAeV2xCHY 1+12lh/qzg+HYIwrhaRMVsXTPMNy5Ce6AenzAVYN1pAn4oZZQ/Fy5qIsFqWH4RdC THJo6291oGQ8HI+ywA/kKCUo4deV+QwPxRbBq3ANOH8DKKOqS+TaejRVwU8oN6tM AMXKLOG+ataTmnnPSzeRDNvEzp/ulJwld0szKFRQf4BavE/qGNU47qxuJSgcO3G2 WjaB6ueOheg1K2li0RvmgHxuIA4m2gyz1fKUmZiiG7iaBKHHuNdqu6u81qKCstj8 t+V9GiEvNEYxntXzHL9OjAr+MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2VyPBH t4C+zgoCdtg6P5AvKkCYMB8GA1UdIwQYMBaAFIYiMz28B3M4C6N2R9zD8+ZV80vG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzc1OS8wOTBGNUFBQTA1 MTkxMUVCOUQ1MERENkVDNEY5QUUwMi9oaUl6UGJ3SGN6Z0xvM1pIM01QejVsWHpT OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hpSXpQYndIY3pnTG8zWkgzTVB6NWxYelM4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Mzc1OS8wOTBGNUFBQTA1MTkxMUVCOUQ1MERENkVDNEY5QUUwMi9oaUl6UGJ3SGN6 Z0xvM1pIM01QejVsWHpTOFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGF32c+vuPpXrwIKGhh91gvNfCtjBny5VNiY3G8xvBdzgvRGjxbf2H ZMiVe9OcedpUswFooG8UtFTR3BXs6MwHTyIIX+nuyoRVwviQIhJ3GXEiW0Pk4wgy pH3OFGQ7SWkApkD05XevLGY54fCmTBDZjRPXL8dJDfMj1PlufQdZHn9Jvjej1UjX OwTSdaxRwYddS74lgMtqxTKYXYbrrTYfLosCBAFUI83pYDHSIuMnQA/Tf0eON99F Xztf/tBrpDTlG1yg9XSKjTNJho/ledTRviu+2U2NDLCRM/mrsQPByqJHIXUt5xR8 pNNtEgRyCWOUg/tY89EqZvcm/iIVwLpc -----END CERTIFICATE-----Generated at Sat May 17 04:20:22 2025 by rpki-client