$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft File: MRUQtiC24M1CLhwrbpUrYEil8eI.mft (raw, json) Hash identifier: 8S0bJbjbXNNHdHzITL3ZdjRhAOWiJwYdtFLZGyakPlY= Subject key identifier: E6:86:53:5F:8F:F7:4B:A2:E7:35:61:9C:08:EE:F4:01:FE:E2:22:10 Authority key identifier: 31:15:10:B6:20:B6:E0:CD:42:2E:1C:2B:6E:95:2B:60:48:A5:F1:E2 Certificate issuer: /CN=A91BF979/serialNumber=311510B620B6E0CD422E1C2B6E952B6048A5F1E2 Certificate serial: 0388 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft Manifest number: 0387 Signing time: Sun 11 May 2025 00:24:13 +0000 Manifest this update: Sun 11 May 2025 00:24:12 +0000 Manifest next update: Sun 18 May 2025 00:24:12 +0000 Files and hashes: 1: MRUQtiC24M1CLhwrbpUrYEil8eI.crl (hash: 7YKf0KZWeMVp6YUW6O38kq880pM0vBtgRr6PZ4PoopQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.crl rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 904 (0x388) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF979, serialNumber=311510B620B6E0CD422E1C2B6E952B6048A5F1E2 Validity Not Before: May 11 00:24:12 2025 GMT Not After : May 18 00:24:12 2025 GMT Subject: CN=681fee2c-b4d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e2:33:a2:d4:c2:d7:4c:34:6f:aa:a0:65:18: a5:4d:ca:b5:81:91:98:ee:52:56:c1:00:68:eb:b0: c3:6a:f4:00:c0:96:72:d1:c3:e5:ea:c8:ad:61:3d: 4b:53:0e:c5:b8:1b:b9:b5:93:0f:62:9a:f2:f8:f1: ae:c6:a4:1c:aa:55:43:2f:49:43:06:95:11:d7:d1: 0c:a2:eb:cc:d1:5d:92:af:3f:3d:44:4b:9d:ef:04: 55:65:b6:e9:3e:c3:f2:d6:e6:bf:da:78:57:bf:10: e9:b6:d4:c3:62:86:73:bc:1e:76:f3:da:65:a8:f9: 28:51:d3:82:9f:de:9a:6b:2f:6f:ba:d9:88:89:26: 44:d4:d6:f8:5a:50:08:28:75:02:fe:fa:2b:87:8c: 55:7b:d9:35:30:55:48:e8:29:4a:3c:ea:a8:1a:8e: 6e:d4:b0:a2:24:ac:7f:8d:2a:a6:36:9c:70:25:ab: ce:05:3b:c8:b3:b7:ee:fc:99:cd:30:38:dc:8f:46: db:2c:b0:a6:88:c3:62:8c:fc:cd:7d:5a:d1:c2:e5: 8e:d5:cb:e6:ba:ac:5f:b7:0c:54:55:62:80:70:50: 99:3b:b4:28:42:ed:d6:1e:84:6f:ab:44:1f:c5:b3: 35:60:68:b2:dc:41:d4:08:bf:8e:31:8f:8e:9d:e6: 38:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:86:53:5F:8F:F7:4B:A2:E7:35:61:9C:08:EE:F4:01:FE:E2:22:10 X509v3 Authority Key Identifier: keyid:31:15:10:B6:20:B6:E0:CD:42:2E:1C:2B:6E:95:2B:60:48:A5:F1:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:c2:f5:c5:06:2c:1a:b3:41:06:27:4a:da:38:46:01:d7:52: ce:89:4e:0a:eb:56:6d:d7:ba:0b:12:e2:27:d0:87:ad:08:f0: 1d:f8:0f:ab:20:9e:24:42:79:71:86:85:d8:92:c5:a0:9a:0f: d2:1f:61:47:48:43:be:58:0b:96:70:b5:02:f3:89:e8:0e:12: 67:a5:dc:da:2e:b9:c4:1f:91:f8:1f:e8:f8:89:a8:12:de:1e: 78:2d:43:55:ff:85:a7:77:85:2b:ce:28:23:d8:11:62:15:3a: 2d:8b:e5:4e:9e:67:1c:a0:ba:fc:39:3d:1c:25:5c:36:76:b3: 6d:9f:7b:5b:4a:c6:bc:b2:5f:f3:50:8b:68:65:bc:ae:db:c7: bf:e2:86:b5:eb:1a:f8:21:a6:33:4c:a0:21:ad:7a:0f:6f:f8: 54:ca:ff:62:d2:61:97:98:7b:01:99:fb:a3:bf:c3:8c:45:dc: 5b:d2:ed:31:0a:91:b3:8e:74:23:0f:bc:cc:51:0a:1e:df:2b: 04:df:f3:31:ae:94:2e:a4:ce:2a:c7:be:0f:f5:ef:f9:e6:e5: 8a:5f:04:87:73:10:6a:12:a2:21:de:02:92:3a:63:19:e5:15: d3:ef:ed:bc:36:1d:1a:24:75:89:ec:47:62:30:ce:19:03:c8: a4:8b:dd:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY5NzkxMTAvBgNVBAUTKDMxMTUxMEI2MjBCNkUwQ0Q0MjJFMUMyQjZFOTUyQjYw NDhBNUYxRTIwHhcNMjUwNTExMDAyNDEyWhcNMjUwNTE4MDAyNDEyWjAYMRYwFAYD VQQDEw02ODFmZWUyYy1iNGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2uIzotTC10w0b6qgZRilTcq1gZGY7lJWwQBo67DDavQAwJZy0cPl6sitYT1L Uw7FuBu5tZMPYpry+PGuxqQcqlVDL0lDBpUR19EMouvM0V2Srz89REud7wRVZbbp PsPy1ua/2nhXvxDpttTDYoZzvB5289plqPkoUdOCn96aay9vutmIiSZE1Nb4WlAI KHUC/vorh4xVe9k1MFVI6ClKPOqoGo5u1LCiJKx/jSqmNpxwJavOBTvIs7fu/JnN MDjcj0bbLLCmiMNijPzNfVrRwuWO1cvmuqxftwxUVWKAcFCZO7QoQu3WHoRvq0Qf xbM1YGiy3EHUCL+OMY+OneY4RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOaGU1+P 90ui5zVhnAju9AH+4iIQMB8GA1UdIwQYMBaAFDEVELYgtuDNQi4cK26VK2BIpfHi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjk3OS8xQjQ2NUFBNjlF RUQxMUVDOTM4MURGMENDNEY5QUUwMi9NUlVRdGlDMjRNMUNMaHdyYnBVcllFaWw4 ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01SVVF0aUMyNE0xQ0xod3JicFVyWUVpbDhlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjk3OS8xQjQ2NUFBNjlFRUQxMUVDOTM4MURGMENDNEY5QUUwMi9NUlVRdGlDMjRN MUNMaHdyYnBVcllFaWw4ZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRwvXFBiwas0EGJ0raOEYB11LOiU4K61Zt17oLEuIn0IetCPAd+A+r IJ4kQnlxhoXYksWgmg/SH2FHSEO+WAuWcLUC84noDhJnpdzaLrnEH5H4H+j4iagS 3h54LUNV/4Wnd4Urzigj2BFiFToti+VOnmccoLr8OT0cJVw2drNtn3tbSsa8sl/z UItoZbyu28e/4oa16xr4IaYzTKAhrXoPb/hUyv9i0mGXmHsBmfujv8OMRdxb0u0x CpGzjnQjD7zMUQoe3ysE3/MxrpQupM4qx74P9e/55uWKXwSHcxBqEqIh3gKSOmMZ 5RXT7+28Nh0aJHWJ7EdiMM4ZA8iki93h -----END CERTIFICATE-----Generated at Sun May 11 16:51:46 2025 by rpki-client