$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft File: nDt48kQmDsRjG6DfYZRgi3Gof0g.mft (raw, json) Hash identifier: /fSL/Af6iv5lyqjBcqRP2wJVUn/Gedx7c1v9odznalQ= Subject key identifier: 7F:04:2A:A4:E4:69:DF:BB:67:90:54:D4:49:9A:21:03:19:BB:E6:CB Authority key identifier: 9C:3B:78:F2:44:26:0E:C4:63:1B:A0:DF:61:94:60:8B:71:A8:7F:48 Certificate issuer: /CN=A91BA0F9/serialNumber=9C3B78F244260EC4631BA0DF6194608B71A87F48 Certificate serial: 3477 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft Manifest number: 50C3 Signing time: Sat 10 May 2025 15:13:36 +0000 Manifest this update: Sat 10 May 2025 15:13:35 +0000 Manifest next update: Sat 17 May 2025 15:13:35 +0000 Files and hashes: 1: nDt48kQmDsRjG6DfYZRgi3Gof0g.crl (hash: fYWFNEpI0QOH4a44aISPWiW3I/RA2jJKK3sDoEAYbOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.crl rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:13:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13431 (0x3477) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0F9, serialNumber=9C3B78F244260EC4631BA0DF6194608B71A87F48 Validity Not Before: May 10 15:13:35 2025 GMT Not After : May 17 15:13:35 2025 GMT Subject: CN=681f6d20-ce5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:91:c5:f0:3b:97:09:c8:75:0f:e2:6c:13:f3: f3:55:6d:73:44:31:07:22:83:01:b6:76:32:1c:3e: 5c:a8:24:a4:98:b9:ec:67:c3:04:5a:5c:b4:ca:bf: 50:ba:75:3e:82:ad:dc:f7:39:19:fb:21:31:a4:b4: f6:3f:f0:2d:b2:ef:73:64:ba:e0:e5:2b:0c:30:03: 55:a5:d2:74:79:5a:e2:0f:b4:6a:eb:b4:94:36:0f: ce:c8:0b:cc:91:8c:87:6e:4a:c8:af:4d:5f:fa:ea: 79:9e:5e:d2:3b:f5:94:71:61:e0:b7:79:c6:e9:66: fc:98:4c:9a:75:66:7e:83:90:13:0a:56:be:ae:bd: 8c:60:5e:22:5c:49:02:fa:ae:2f:9c:b3:23:e9:c9: dd:d2:6e:8f:24:ef:6f:31:1a:ea:34:c3:4a:d0:e9: 05:a0:a6:e4:b2:03:20:a2:e7:1a:13:80:f6:16:8b: 35:03:9c:51:8c:d7:1b:0f:9e:18:8d:df:5f:45:bf: 57:d8:88:4c:3d:96:24:b6:3e:7a:a8:65:cb:b8:19: 93:a1:35:89:b4:27:44:68:81:f0:79:f5:46:37:5d: 0d:2b:f1:4b:10:f2:8b:72:a7:40:96:88:71:b4:9a: 0f:eb:95:b2:08:0b:a8:9f:c5:be:ec:b7:d8:be:ba: 81:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:04:2A:A4:E4:69:DF:BB:67:90:54:D4:49:9A:21:03:19:BB:E6:CB X509v3 Authority Key Identifier: keyid:9C:3B:78:F2:44:26:0E:C4:63:1B:A0:DF:61:94:60:8B:71:A8:7F:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:26:46:7c:65:b3:65:c9:d5:79:e8:45:80:09:41:0c:ae:1b: 63:62:9c:0e:bf:87:f4:44:94:56:9a:bf:4f:4f:88:6a:70:77: df:48:af:ae:61:aa:76:1d:12:56:67:59:e2:49:d5:05:10:1a: 5b:fb:e4:33:e6:c6:ed:d9:18:85:53:89:82:db:f6:31:3d:3e: 23:d4:68:a3:80:c2:48:a7:d9:bd:84:11:65:cf:bf:ac:3e:d1: 89:0e:12:59:0d:29:a6:c1:8c:3c:c3:f9:b8:7b:83:95:b4:35: 71:86:9e:92:ab:c3:5b:6b:64:c0:6a:f4:f1:f2:2d:bd:b3:bf: 43:9f:77:b2:5e:ad:54:ce:99:04:60:1d:15:02:ec:9a:52:97: e8:93:74:f8:ed:92:8c:46:8b:e8:92:8e:77:4b:82:b4:06:5a: f1:d1:04:02:a8:21:8e:ef:ce:6e:64:2f:73:94:06:27:cc:0e: 77:26:88:95:ec:73:ae:4c:1b:6a:8d:e4:a4:ff:fe:a5:13:df: 20:bc:ff:b1:82:5e:77:ec:3e:e6:b6:9e:8e:87:88:60:f2:54: e2:0d:8c:81:94:3a:4a:07:3a:7f:bf:e4:1d:0a:9d:38:ad:5e: 23:08:1f:4a:3e:53:f7:e5:6f:7b:94:f9:1c:44:1b:8a:3b:1b: f1:92:4b:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwRjkxMTAvBgNVBAUTKDlDM0I3OEYyNDQyNjBFQzQ2MzFCQTBERjYxOTQ2MDhC NzFBODdGNDgwHhcNMjUwNTEwMTUxMzM1WhcNMjUwNTE3MTUxMzM1WjAYMRYwFAYD VQQDEw02ODFmNmQyMC1jZTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5HF8DuXCch1D+JsE/PzVW1zRDEHIoMBtnYyHD5cqCSkmLnsZ8MEWly0yr9Q unU+gq3c9zkZ+yExpLT2P/Atsu9zZLrg5SsMMANVpdJ0eVriD7Rq67SUNg/OyAvM kYyHbkrIr01f+up5nl7SO/WUcWHgt3nG6Wb8mEyadWZ+g5ATCla+rr2MYF4iXEkC +q4vnLMj6cnd0m6PJO9vMRrqNMNK0OkFoKbksgMgoucaE4D2Fos1A5xRjNcbD54Y jd9fRb9X2IhMPZYktj56qGXLuBmToTWJtCdEaIHwefVGN10NK/FLEPKLcqdAlohx tJoP65WyCAuon8W+7LfYvrqB5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH8EKqTk ad+7Z5BU1EmaIQMZu+bLMB8GA1UdIwQYMBaAFJw7ePJEJg7EYxug32GUYItxqH9I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBGOS9GQ0FBMkMwMDFE QTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9uRHQ0OGtRbURzUmpHNkRmWVpSZ2kzR29m MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25EdDQ4a1FtRHNSakc2RGZZWlJnaTNHb2YwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBGOS9GQ0FBMkMwMDFEQTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9uRHQ0OGtRbURz UmpHNkRmWVpSZ2kzR29mMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoJkZ8ZbNlydV56EWACUEMrhtjYpwOv4f0RJRWmr9PT4hqcHffSK+u Yap2HRJWZ1niSdUFEBpb++Qz5sbt2RiFU4mC2/YxPT4j1GijgMJIp9m9hBFlz7+s PtGJDhJZDSmmwYw8w/m4e4OVtDVxhp6Sq8Nba2TAavTx8i29s79Dn3eyXq1UzpkE YB0VAuyaUpfok3T47ZKMRovoko53S4K0Blrx0QQCqCGO785uZC9zlAYnzA53JoiV 7HOuTBtqjeSk//6lE98gvP+xgl537D7mtp6Oh4hg8lTiDYyBlDpKBzp/v+QdCp04 rV4jCB9KPlP35W97lPkcRBuKOxvxkkv8 -----END CERTIFICATE-----Generated at Sun May 11 17:00:55 2025 by rpki-client