$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft File: MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft (raw, json) Hash identifier: MT6RbRYJv0wqtLKkKmNGefWJI88eJVKa2D3G0+AGZbA= Subject key identifier: 68:AC:57:3C:C1:2E:02:92:DA:93:0A:D1:A1:31:27:BA:D6:76:92:EA Authority key identifier: 30:7A:D4:5E:01:B8:47:9F:A2:28:A1:23:DE:7A:FA:A5:D1:97:C1:7D Certificate issuer: /CN=A91B4F3C/serialNumber=307AD45E01B8479FA228A123DE7AFAA5D197C17D Certificate serial: 3479 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft Manifest number: 3479 Signing time: Sun 04 May 2025 15:10:26 +0000 Manifest this update: Sun 04 May 2025 15:10:25 +0000 Manifest next update: Sun 11 May 2025 15:10:25 +0000 Files and hashes: 1: MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl (hash: cbl4fWDxGz/6UHOUEk6FDYMEb8abmTl3HLpVXpFX46A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 15:10:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13433 (0x3479) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4F3C, serialNumber=307AD45E01B8479FA228A123DE7AFAA5D197C17D Validity Not Before: May 4 15:10:25 2025 GMT Not After : May 11 15:10:25 2025 GMT Subject: CN=68178362-d81c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:02:87:f4:3f:a9:77:c5:0c:b1:7a:68:fc:e1: 3d:63:9d:89:2e:ca:a1:04:8d:14:75:e0:c6:9d:a0: 2b:7e:54:22:ff:fd:7b:06:a9:ce:db:81:4c:b9:03: 41:69:d0:c6:84:7e:de:44:24:56:a6:4f:9e:41:0a: 0d:a3:2b:de:2c:40:47:ab:38:66:40:5b:ac:9c:da: 6c:b7:63:5e:f0:3d:b5:00:6a:40:ca:39:14:62:88: dd:90:6f:34:43:c6:b4:6d:d7:63:67:25:d2:c9:d5: cf:58:99:7a:24:13:33:3a:56:29:c2:f2:bd:f9:1c: 8b:02:f0:ee:23:2d:b9:b0:03:33:dc:73:19:f9:97: 54:6e:ce:75:a9:9d:a3:be:82:2e:2f:7d:12:d7:15: ef:61:1c:2f:fe:21:b5:f0:30:2d:c2:0e:65:78:51: 5d:79:8e:5e:bb:90:12:d6:c1:99:7a:fd:b2:ab:81: 71:77:84:13:d6:63:7f:61:50:87:34:b8:8a:9c:06: 18:86:79:be:6e:5e:e3:00:cb:a9:f9:d2:b7:12:e4: 5a:16:4e:df:10:e0:10:a1:52:9c:8c:8d:3b:84:12: ee:fe:a0:1a:32:db:38:08:2c:20:9e:41:04:9d:b8: 76:9f:6a:82:ef:90:a1:d9:98:cb:59:28:b5:93:ba: aa:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AC:57:3C:C1:2E:02:92:DA:93:0A:D1:A1:31:27:BA:D6:76:92:EA X509v3 Authority Key Identifier: keyid:30:7A:D4:5E:01:B8:47:9F:A2:28:A1:23:DE:7A:FA:A5:D1:97:C1:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:3d:67:fb:62:7b:40:da:6c:a3:1f:0d:1c:32:01:43:86:72: 76:b2:84:12:01:26:e3:49:ba:96:0a:f3:b2:97:04:d2:ab:3b: eb:49:fb:20:13:31:07:45:2d:61:62:bf:29:9b:94:a1:c0:3a: 28:3e:a1:e4:47:4e:8b:68:84:67:29:a0:cc:df:e4:fe:33:38: 66:a0:07:fd:23:59:94:eb:38:0c:0c:a0:fd:8c:89:26:d2:f1: c6:ee:9f:23:93:25:e3:92:6e:dc:a8:59:a7:7d:55:8b:ef:82: 67:74:bc:39:4a:b1:59:52:ce:d6:f3:f4:b9:a5:18:4a:43:95: 4b:fb:c2:76:d8:49:dd:a8:5b:7c:ca:4c:10:06:53:4b:d8:9a: a6:90:b8:9f:8f:86:db:71:c9:30:e5:0d:81:7e:09:02:8f:83: a8:68:13:e8:28:00:1b:eb:ed:e5:49:ff:95:d8:47:a5:ee:dc: e1:b5:14:76:8e:30:37:bb:29:91:65:69:cd:9d:d7:1c:af:df: fc:5f:a5:6b:73:2a:c6:3d:43:e2:48:b3:ad:1b:5a:5a:9b:e7: 43:0f:68:25:3a:1e:95:8c:47:b2:67:f3:e5:fd:b0:0f:dd:73: f8:11:60:be:f6:f7:b7:d3:f3:e8:2d:88:b8:be:b7:29:e3:cd: 8f:9c:e7:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRGM0MxMTAvBgNVBAUTKDMwN0FENDVFMDFCODQ3OUZBMjI4QTEyM0RFN0FGQUE1 RDE5N0MxN0QwHhcNMjUwNTA0MTUxMDI1WhcNMjUwNTExMTUxMDI1WjAYMRYwFAYD VQQDEw02ODE3ODM2Mi1kODFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4AKH9D+pd8UMsXpo/OE9Y52JLsqhBI0UdeDGnaArflQi//17BqnO24FMuQNB adDGhH7eRCRWpk+eQQoNoyveLEBHqzhmQFusnNpst2Ne8D21AGpAyjkUYojdkG80 Q8a0bddjZyXSydXPWJl6JBMzOlYpwvK9+RyLAvDuIy25sAMz3HMZ+ZdUbs51qZ2j voIuL30S1xXvYRwv/iG18DAtwg5leFFdeY5eu5AS1sGZev2yq4Fxd4QT1mN/YVCH NLiKnAYYhnm+bl7jAMup+dK3EuRaFk7fEOAQoVKcjI07hBLu/qAaMts4CCwgnkEE nbh2n2qC75Ch2ZjLWSi1k7qqSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGisVzzB LgKS2pMK0aExJ7rWdpLqMB8GA1UdIwQYMBaAFDB61F4BuEefoiihI956+qXRl8F9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEYzQy84QTU1QTZBNDFE QTYxMUUyQjkxQ0QyOUQwOEIwMkNEMi9NSHJVWGdHNFI1LWlLS0VqM25yNnBkR1h3 WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01IclVYZ0c0UjUtaUtLRWozbnI2cGRHWHdYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEYzQy84QTU1QTZBNDFEQTYxMUUyQjkxQ0QyOUQwOEIwMkNEMi9NSHJVWGdHNFI1 LWlLS0VqM25yNnBkR1h3WDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKPWf7YntA2myjHw0cMgFDhnJ2soQSASbjSbqWCvOylwTSqzvrSfsg EzEHRS1hYr8pm5ShwDooPqHkR06LaIRnKaDM3+T+MzhmoAf9I1mU6zgMDKD9jIkm 0vHG7p8jkyXjkm7cqFmnfVWL74JndLw5SrFZUs7W8/S5pRhKQ5VL+8J22EndqFt8 ykwQBlNL2JqmkLifj4bbcckw5Q2BfgkCj4OoaBPoKAAb6+3lSf+V2Eel7tzhtRR2 jjA3uymRZWnNndccr9/8X6VrcyrGPUPiSLOtG1pam+dDD2glOh6VjEeyZ/Pl/bAP 3XP4EWC+9ve30/PoLYi4vrcp482PnOc8 -----END CERTIFICATE-----Generated at Mon May 5 07:14:15 2025 by rpki-client