$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft File: 4NxstwnusRvCB181LrbtToGK5wU.mft (raw, json) Hash identifier: 1lkrKqHE9PPH/Qq+hucqC1cU8xSkN4ixPST4wKCXDG8= Subject key identifier: 6B:C7:AA:94:D2:CF:3B:94:0C:AF:49:4A:52:DC:F2:C6:02:C1:C4:CC Authority key identifier: E0:DC:6C:B7:09:EE:B1:1B:C2:07:5F:35:2E:B6:ED:4E:81:8A:E7:05 Certificate issuer: /CN=A91B87FC/serialNumber=E0DC6CB709EEB11BC2075F352EB6ED4E818AE705 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft Manifest number: 71 Signing time: Thu 15 May 2025 06:07:36 +0000 Manifest this update: Thu 15 May 2025 06:07:36 +0000 Manifest next update: Thu 22 May 2025 06:07:36 +0000 Files and hashes: 1: 4NxstwnusRvCB181LrbtToGK5wU.crl (hash: zkbOQIEfXimV+Ygy9uDppe9JejqLHV4V6timxYmlIpc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.crl rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B87FC, serialNumber=E0DC6CB709EEB11BC2075F352EB6ED4E818AE705 Validity Not Before: May 15 06:07:36 2025 GMT Not After : May 22 06:07:36 2025 GMT Subject: CN=682584a8-ab21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d1:5a:19:57:16:3c:69:f2:15:28:d4:23:00: 07:1d:41:a2:dc:6e:17:19:ec:52:85:46:08:76:ac: 4f:c4:5b:28:9b:01:d0:ac:a0:c8:aa:8f:6f:3a:45: bd:d0:c5:f4:c0:0b:1c:43:f5:6d:de:cc:fa:3b:37: 01:d3:1b:8e:34:10:47:77:cd:d6:38:12:22:90:66: ab:3b:bb:d7:6e:c6:1d:7e:b4:23:e6:2d:f4:82:7a: bd:6a:1e:e3:a3:df:4a:aa:e9:12:f0:e9:72:1a:40: 42:08:5a:4d:de:d2:34:76:bc:a2:50:6c:8c:00:5a: 10:ae:0d:73:54:5b:45:83:84:6e:d9:73:a1:47:ad: e2:07:1d:c6:6d:e4:a7:55:a7:3e:f2:d5:4c:e2:e2: e1:eb:6f:71:ee:b7:df:49:55:b5:b4:e8:a5:cb:3d: cc:32:ee:a5:a9:29:22:57:42:c8:de:dc:f0:fc:c6: 84:00:1e:f6:97:58:14:98:fe:41:06:ba:12:db:11: 2e:59:64:e2:76:f3:90:4e:6d:36:bd:5c:c3:36:95: 8c:43:a2:3d:58:01:65:33:18:e7:e9:95:57:1b:93: 84:8a:6f:a2:41:bd:43:fd:97:26:25:a9:f5:2e:a0: 01:58:ce:86:8c:c3:5e:25:a7:ce:42:a7:f7:fb:e4: fe:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C7:AA:94:D2:CF:3B:94:0C:AF:49:4A:52:DC:F2:C6:02:C1:C4:CC X509v3 Authority Key Identifier: keyid:E0:DC:6C:B7:09:EE:B1:1B:C2:07:5F:35:2E:B6:ED:4E:81:8A:E7:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:24:1e:35:23:a3:9e:ce:e9:0d:a1:11:41:11:56:57:42:3c: f2:9b:80:cb:1d:df:08:c6:88:db:21:b5:c1:d8:cc:74:25:f5: e8:a4:c3:de:be:f9:38:c9:14:df:08:50:09:9e:2e:91:6c:af: 31:bc:61:c4:88:b5:fb:9a:92:2d:13:a1:56:78:cd:18:e6:e0: dd:37:96:9f:fc:1a:d9:76:dc:8c:ba:87:b2:e7:29:d7:21:12: c8:a6:05:9f:6d:6f:74:91:6c:66:7c:58:02:62:43:ae:a0:78: 5d:f7:09:70:2a:27:e3:fc:69:83:5f:35:2c:27:24:7f:b6:af: c4:b7:78:2a:14:1c:f1:db:7a:77:be:0e:bf:f8:59:02:c1:7d: 81:9c:13:9f:38:30:b1:30:55:97:18:81:08:a8:48:95:73:0a: 14:57:5b:4f:f4:0f:72:a1:49:40:97:a1:29:be:c8:4a:57:3f: 2b:ef:a4:c9:2b:07:16:24:34:08:63:3a:ba:8a:f5:2b:24:71: 00:70:c3:80:50:ee:d2:8f:2a:6b:ca:03:01:de:a7:e7:b5:89: c2:c6:36:9b:7f:63:00:f0:06:d3:6d:69:b0:9e:3b:ff:bf:5d: 67:1d:41:37:42:d0:32:fd:2b:b6:aa:e5:07:dc:e4:e7:0a:bf: 11:1d:70:5f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODdGQzExMC8GA1UEBRMoRTBEQzZDQjcwOUVFQjExQkMyMDc1RjM1MkVCNkVENEU4 MThBRTcwNTAeFw0yNTA1MTUwNjA3MzZaFw0yNTA1MjIwNjA3MzZaMBgxFjAUBgNV BAMTDTY4MjU4NGE4LWFiMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC10VoZVxY8afIVKNQjAAcdQaLcbhcZ7FKFRgh2rE/EWyibAdCsoMiqj286Rb3Q xfTACxxD9W3ezPo7NwHTG440EEd3zdY4EiKQZqs7u9duxh1+tCPmLfSCer1qHuOj 30qq6RLw6XIaQEIIWk3e0jR2vKJQbIwAWhCuDXNUW0WDhG7Zc6FHreIHHcZt5KdV pz7y1Uzi4uHrb3Hut99JVbW06KXLPcwy7qWpKSJXQsje3PD8xoQAHvaXWBSY/kEG uhLbES5ZZOJ285BObTa9XMM2lYxDoj1YAWUzGOfplVcbk4SKb6JBvUP9lyYlqfUu oAFYzoaMw14lp85Cp/f75P6lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUa8eqlNLP O5QMr0lKUtzyxgLBxMwwHwYDVR0jBBgwFoAU4NxstwnusRvCB181LrbtToGK5wUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4N0ZDLzQyQTlCQjU0ODZF MTExRUY4Rjc3M0Y4MkM0RjlBRTAyLzROeHN0d251c1J2Q0IxODFMcmJ0VG9HSzV3 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNE54c3R3bnVzUnZDQjE4MUxyYnRUb0dLNXdVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 N0ZDLzQyQTlCQjU0ODZFMTExRUY4Rjc3M0Y4MkM0RjlBRTAyLzROeHN0d251c1J2 Q0IxODFMcmJ0VG9HSzV3VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJgkHjUjo57O6Q2hEUERVldCPPKbgMsd3wjGiNshtcHYzHQl9eikw96+ +TjJFN8IUAmeLpFsrzG8YcSItfuaki0ToVZ4zRjm4N03lp/8Gtl23Iy6h7LnKdch EsimBZ9tb3SRbGZ8WAJiQ66geF33CXAqJ+P8aYNfNSwnJH+2r8S3eCoUHPHbene+ Dr/4WQLBfYGcE584MLEwVZcYgQioSJVzChRXW0/0D3KhSUCXoSm+yEpXPyvvpMkr BxYkNAhjOrqK9SskcQBww4BQ7tKPKmvKAwHep+e1icLGNpt/YwDwBtNtabCeO/+/ XWcdQTdC0DL9K7aq5Qfc5OcKvxEdcF8= -----END CERTIFICATE-----Generated at Fri May 16 06:52:39 2025 by rpki-client