$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft File: 1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft (raw, json) Hash identifier: n7IoJheEoDOkeRrV8ncKfCrPGm+CeU9CVI4ePQp/qrg= Subject key identifier: 14:FB:F7:8E:1E:3F:81:90:F5:B3:E9:0A:F0:49:DA:6C:DD:FE:E4:C3 Authority key identifier: D6:61:1A:34:2E:05:E6:DC:DC:19:24:3B:D5:2F:88:D0:2B:07:87:D2 Certificate issuer: /CN=A91BB629/serialNumber=D6611A342E05E6DCDC19243BD52F88D02B0787D2 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft Manifest number: 99 Signing time: Sun 11 May 2025 05:05:52 +0000 Manifest this update: Sun 11 May 2025 05:05:51 +0000 Manifest next update: Sun 18 May 2025 05:05:51 +0000 Files and hashes: 1: 1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl (hash: sfPbxGLl6BFqsZSVX/sX7XOzNdsQLFygSrllbl8NVwc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB629, serialNumber=D6611A342E05E6DCDC19243BD52F88D02B0787D2 Validity Not Before: May 11 05:05:51 2025 GMT Not After : May 18 05:05:51 2025 GMT Subject: CN=6820302f-3270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:28:09:36:43:9c:48:97:24:5c:f0:af:95:76: 70:bc:7a:f6:59:1d:75:6c:68:43:70:85:ec:2c:d6: c3:02:56:d3:7b:0c:52:da:a6:5a:26:56:65:df:94: d5:31:c7:e0:fe:c8:2e:5e:4b:1d:71:a6:5a:c8:4e: fb:1b:c7:23:3b:e3:a0:f7:ab:ce:eb:07:c0:b0:8f: 13:c1:3f:4e:be:9f:56:8d:01:ae:a0:8c:34:6e:1e: 47:78:44:33:af:32:86:6e:9a:94:e5:25:d6:50:4c: 4e:cf:a1:a1:0f:87:ba:d1:de:b1:01:9a:85:a0:38: e9:94:5c:55:57:da:fc:ee:c7:52:9a:2f:61:40:5c: 7a:c7:d1:ce:3b:54:51:49:3e:4e:2c:e6:06:91:81: 63:99:e1:83:aa:ea:ae:0f:c3:54:ae:5b:42:38:89: c9:9d:5e:ce:6e:c8:16:57:ab:69:e2:51:61:09:cc: 4b:e3:b7:81:df:86:70:19:88:5d:c3:4d:43:75:2b: d7:60:88:40:1a:09:89:1d:a7:72:49:5c:86:c3:aa: 7f:eb:41:1b:bd:e8:61:54:0a:f9:34:7a:0c:1c:11: 94:11:c4:2d:11:79:b8:f3:fa:f4:b1:98:59:e5:21: 2d:70:c6:e9:4c:96:38:ba:54:82:4f:9d:ee:a1:da: 05:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:FB:F7:8E:1E:3F:81:90:F5:B3:E9:0A:F0:49:DA:6C:DD:FE:E4:C3 X509v3 Authority Key Identifier: keyid:D6:61:1A:34:2E:05:E6:DC:DC:19:24:3B:D5:2F:88:D0:2B:07:87:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:fe:e6:d6:0e:80:94:48:b2:36:10:4a:64:a8:6e:42:d6:5a: 29:66:50:20:27:91:f8:7b:ce:8e:6a:ee:8f:de:64:cf:8d:5d: 17:82:de:c2:90:ca:83:81:ac:e8:df:ec:88:74:9a:70:97:13: 5b:ba:c8:95:8b:59:a0:b3:9d:02:32:c5:2c:5f:48:4e:d7:e6: 58:6c:9f:46:16:68:c2:97:19:0f:8c:57:b3:50:d6:e2:3e:94: 67:41:93:9f:7c:f7:c0:b9:62:05:4d:ab:46:8e:97:75:6c:d9: 48:45:0f:33:7c:54:b5:0e:89:3e:6e:53:7a:91:39:73:eb:ea: e3:9e:e7:ca:18:63:a9:e1:12:03:26:dc:4b:0e:1f:98:23:0d: 1a:84:ee:33:fe:91:a2:60:22:f0:27:37:00:b9:77:fc:4e:70: 27:d7:61:50:d0:da:0a:65:e1:ae:c5:e7:37:8b:1d:f4:d2:80: 80:6a:f4:94:1e:ad:95:ec:86:59:a3:e3:69:7d:cb:e6:6f:7b: 3c:d3:db:24:e5:fc:b9:b7:87:44:e0:ba:1f:59:f4:14:55:1f: 25:d7:12:ca:04:9b:d1:20:54:c1:fa:81:65:b2:3b:22:51:ea: 58:f2:c1:9b:97:3e:d7:c9:be:03:0b:40:fd:d7:ae:18:d3:07: ed:82:55:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI2MjkxMTAvBgNVBAUTKEQ2NjExQTM0MkUwNUU2RENEQzE5MjQzQkQ1MkY4OEQw MkIwNzg3RDIwHhcNMjUwNTExMDUwNTUxWhcNMjUwNTE4MDUwNTUxWjAYMRYwFAYD VQQDEw02ODIwMzAyZi0zMjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCgJNkOcSJckXPCvlXZwvHr2WR11bGhDcIXsLNbDAlbTewxS2qZaJlZl35TV Mcfg/sguXksdcaZayE77G8cjO+Og96vO6wfAsI8TwT9Ovp9WjQGuoIw0bh5HeEQz rzKGbpqU5SXWUExOz6GhD4e60d6xAZqFoDjplFxVV9r87sdSmi9hQFx6x9HOO1RR ST5OLOYGkYFjmeGDququD8NUrltCOInJnV7ObsgWV6tp4lFhCcxL47eB34ZwGYhd w01DdSvXYIhAGgmJHadySVyGw6p/60EbvehhVAr5NHoMHBGUEcQtEXm48/r0sZhZ 5SEtcMbpTJY4ulSCT53uodoFHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBT7944e P4GQ9bPpCvBJ2mzd/uTDMB8GA1UdIwQYMBaAFNZhGjQuBebc3BkkO9UviNArB4fS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjYyOS9FQUZCQjU1MDQ1 QjQxMUVGOEZEQjc0MURDNEY5QUUwMi8xbUVhTkM0RjV0emNHU1E3MVMtSTBDc0ho OUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFtRWFOQzRGNXR6Y0dTUTcxUy1JMENzSGg5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjYyOS9FQUZCQjU1MDQ1QjQxMUVGOEZEQjc0MURDNEY5QUUwMi8xbUVhTkM0RjV0 emNHU1E3MVMtSTBDc0hoOUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI/ubWDoCUSLI2EEpkqG5C1lopZlAgJ5H4e86Oau6P3mTPjV0Xgt7C kMqDgazo3+yIdJpwlxNbusiVi1mgs50CMsUsX0hO1+ZYbJ9GFmjClxkPjFezUNbi PpRnQZOffPfAuWIFTatGjpd1bNlIRQ8zfFS1Dok+blN6kTlz6+rjnufKGGOp4RID JtxLDh+YIw0ahO4z/pGiYCLwJzcAuXf8TnAn12FQ0NoKZeGuxec3ix300oCAavSU Hq2V7IZZo+Npfcvmb3s809sk5fy5t4dE4LofWfQUVR8l1xLKBJvRIFTB+oFlsjsi UepY8sGblz7Xyb4DC0D9164Y0wftglXc -----END CERTIFICATE-----Generated at Mon May 12 13:26:56 2025 by rpki-client