$ rpki-client -vvf rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft File: AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft (raw, json) Hash identifier: Y4mTsR7Q9X767Eak20KR76oZNozp8jQzUxCMU9+zvb4= Subject key identifier: F0:6F:8D:56:A3:53:49:37:9E:84:A4:EF:A6:40:6B:87:D8:FE:59:0D Authority key identifier: 00:FD:31:FD:06:B4:20:4C:3D:DC:B6:35:07:18:95:33:77:8C:CC:F8 Certificate issuer: /CN=A91C09EA/serialNumber=00FD31FD06B4204C3DDCB63507189533778CCCF8 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AP0x_Qa0IEw93LY1BxiVM3eMzPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft Manifest number: 31 Signing time: Sat 03 May 2025 06:58:25 +0000 Manifest this update: Sat 03 May 2025 06:58:24 +0000 Manifest next update: Sat 10 May 2025 06:58:24 +0000 Files and hashes: 1: AP0x_Qa0IEw93LY1BxiVM3eMzPg.crl (hash: EzS0ExJyNqsONTIsA8SVY2SbRt/rhjDPJFYrxhwuydk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.crl rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AP0x_Qa0IEw93LY1BxiVM3eMzPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 06:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C09EA, serialNumber=00FD31FD06B4204C3DDCB63507189533778CCCF8 Validity Not Before: May 3 06:58:24 2025 GMT Not After : May 10 06:58:24 2025 GMT Subject: CN=6815be90-ede4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2a:20:ff:fc:15:ae:bf:92:a5:35:2f:84:3b: f5:73:36:81:c2:19:49:af:89:80:d5:c2:54:1e:92: fd:fa:60:19:e6:54:8c:3f:a2:08:81:dc:16:d7:c0: a6:24:69:40:ea:a6:3b:81:ce:9c:ad:d7:d1:55:73: 4e:55:3a:30:05:38:5f:52:62:cb:02:e0:81:41:97: b9:f2:63:3e:65:62:40:db:a0:9b:b2:45:86:40:df: 96:3d:f4:e3:7c:d1:75:63:e6:c2:ee:20:e3:79:76: 3c:c2:4a:c4:e5:e7:cb:88:b8:b9:d2:d1:51:56:7d: 05:a0:5e:48:bc:14:01:2a:59:8d:c9:d9:80:57:01: ef:0b:0a:d4:56:e1:78:4b:30:af:ca:16:c9:c9:cf: 3b:77:52:92:d3:f9:3a:1f:bd:99:13:78:38:1a:64: 3f:55:54:e3:28:b4:2f:3c:57:3d:bd:e8:c6:c8:14: 39:e0:6a:af:0d:2a:46:ef:c5:11:a5:07:4e:79:7f: 3c:ce:2d:57:a6:ba:48:11:a8:b9:f6:a5:f8:c4:97: f9:85:a3:7f:29:cd:fc:7e:48:b4:04:81:9e:ec:fc: 0c:6a:7a:1b:14:4a:28:bb:56:9f:37:49:c1:e3:ea: 08:3e:41:57:fa:24:fa:34:de:78:fc:24:c7:be:1c: 33:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6F:8D:56:A3:53:49:37:9E:84:A4:EF:A6:40:6B:87:D8:FE:59:0D X509v3 Authority Key Identifier: keyid:00:FD:31:FD:06:B4:20:4C:3D:DC:B6:35:07:18:95:33:77:8C:CC:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AP0x_Qa0IEw93LY1BxiVM3eMzPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:f0:07:96:83:53:e9:b4:ae:89:bc:64:2d:e8:25:65:d7:64: c0:ed:78:d1:25:c9:c4:1e:b6:79:34:3a:c5:47:fb:f5:fe:68: d1:56:76:a5:24:e9:0c:1e:ae:70:01:4d:4b:a9:36:a7:b4:29: 27:b6:64:71:e6:ed:13:a5:4a:50:50:c9:a7:25:a3:7d:b6:6a: 0c:5a:1e:64:c5:84:60:d9:91:28:85:ed:46:c3:e3:57:78:50: 44:28:8e:95:6c:9b:e7:cf:a0:29:c7:e9:a1:8c:1b:19:63:0f: 07:e6:68:64:41:cf:1d:0f:c6:39:43:35:3b:ca:dc:50:c8:6f: 62:7d:fe:48:7b:c0:62:88:b6:3f:f9:dc:c2:88:c6:1e:ad:a9: b8:c0:06:7c:9c:fa:38:69:31:9d:99:8c:79:29:78:52:7c:2f: f3:55:4d:7a:13:b8:e7:be:0f:80:fe:90:c9:73:76:47:18:4f: f5:c5:e0:17:00:ab:b7:ef:56:ac:ee:63:0c:26:b8:96:ef:8f: 64:47:ab:75:97:d3:44:13:62:99:d5:90:7b:ef:f2:b3:35:fe: f7:1e:da:1d:be:73:90:8b:82:80:ca:dd:5a:23:96:23:43:56: 14:88:70:42:da:e5:ae:5b:3a:7e:40:ab:e5:ea:3b:2a:9c:4d: 84:c9:a6:d9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MDlFQTExMC8GA1UEBRMoMDBGRDMxRkQwNkI0MjA0QzNERENCNjM1MDcxODk1MzM3 NzhDQ0NGODAeFw0yNTA1MDMwNjU4MjRaFw0yNTA1MTAwNjU4MjRaMBgxFjAUBgNV BAMTDTY4MTViZTkwLWVkZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzKiD//BWuv5KlNS+EO/VzNoHCGUmviYDVwlQekv36YBnmVIw/ogiB3BbXwKYk aUDqpjuBzpyt19FVc05VOjAFOF9SYssC4IFBl7nyYz5lYkDboJuyRYZA35Y99ON8 0XVj5sLuION5djzCSsTl58uIuLnS0VFWfQWgXki8FAEqWY3J2YBXAe8LCtRW4XhL MK/KFsnJzzt3UpLT+TofvZkTeDgaZD9VVOMotC88Vz296MbIFDngaq8NKkbvxRGl B055fzzOLVemukgRqLn2pfjEl/mFo38pzfx+SLQEgZ7s/AxqehsUSii7Vp83ScHj 6gg+QVf6JPo03nj8JMe+HDN7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8G+NVqNT STeehKTvpkBrh9j+WQ0wHwYDVR0jBBgwFoAUAP0x/Qa0IEw93LY1BxiVM3eMzPgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwOUVBLzhDNTkxMkZFRTEz QjExRUZCQTdCREYzQkM0RjlBRTAyL0FQMHhfUWEwSUV3OTNMWTFCeGlWTTNlTXpQ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQVAweF9RYTBJRXc5M0xZMUJ4aVZNM2VNelBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMw OUVBLzhDNTkxMkZFRTEzQjExRUZCQTdCREYzQkM0RjlBRTAyL0FQMHhfUWEwSUV3 OTNMWTFCeGlWTTNlTXpQZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKjwB5aDU+m0rom8ZC3oJWXXZMDteNElycQetnk0OsVH+/X+aNFWdqUk 6QwernABTUupNqe0KSe2ZHHm7ROlSlBQyaclo322agxaHmTFhGDZkSiF7UbD41d4 UEQojpVsm+fPoCnH6aGMGxljDwfmaGRBzx0PxjlDNTvK3FDIb2J9/kh7wGKItj/5 3MKIxh6tqbjABnyc+jhpMZ2ZjHkpeFJ8L/NVTXoTuOe+D4D+kMlzdkcYT/XF4BcA q7fvVqzuYwwmuJbvj2RHq3WX00QTYpnVkHvv8rM1/vce2h2+c5CLgoDK3VojliND VhSIcELa5a5bOn5Aq+XqOyqcTYTJptk= -----END CERTIFICATE-----Generated at Mon May 5 06:25:43 2025 by rpki-client