$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft File: gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft (raw, json) Hash identifier: UEV9Q1M7/dmtYhS5ZfUuEaXnwpGPbuOIqSg6sxUuzj8= Subject key identifier: 2C:6A:BB:DF:28:CE:CA:34:C1:5C:15:0E:76:37:F1:9C:3A:B1:CA:5D Authority key identifier: 82:1F:4D:B2:2E:E5:9A:FD:59:3A:7E:68:9E:DA:9F:C9:4B:E5:85:DD Certificate issuer: /CN=A91C1C49/serialNumber=821F4DB22EE59AFD593A7E689EDA9FC94BE585DD Certificate serial: 3480 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft Manifest number: 4083 Signing time: Sat 10 May 2025 15:01:19 +0000 Manifest this update: Sat 10 May 2025 15:01:18 +0000 Manifest next update: Sat 17 May 2025 15:01:18 +0000 Files and hashes: 1: gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl (hash: J0xePkzm396w1jerq7mKctWASZ5AznnZhhau60QVY90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13440 (0x3480) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1C49, serialNumber=821F4DB22EE59AFD593A7E689EDA9FC94BE585DD Validity Not Before: May 10 15:01:18 2025 GMT Not After : May 17 15:01:18 2025 GMT Subject: CN=681f6a3e-dfe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:08:96:a4:10:9e:4f:f7:d6:f3:06:f7:3d:95: 74:32:ec:f3:25:a4:b8:ce:95:b3:a6:a4:64:de:dc: e2:0e:24:26:f1:2f:b4:83:39:1f:60:f5:41:04:53: 2a:b7:de:3e:ac:9e:fb:1c:2b:27:a2:1a:fa:2b:7a: dd:67:e2:d0:19:90:9e:d2:c3:24:29:95:78:1c:45: a9:76:32:f9:58:2e:43:20:79:5d:a9:1c:e0:53:ab: ee:9b:85:0d:90:a2:c7:20:5a:30:e0:60:15:17:41: f8:2f:b9:1d:66:36:da:88:23:9f:69:58:bf:a8:bd: 63:c7:a5:5a:88:02:41:eb:ab:1f:24:4a:b4:6f:46: ac:61:3e:3a:21:b2:a9:1f:f4:8a:41:02:8f:c6:a3: 8f:aa:0e:63:68:0e:e9:b4:7a:0d:f8:83:d6:43:7f: 01:4c:0a:07:69:50:f0:fb:7f:eb:29:3e:7d:c3:6f: f0:09:16:a3:87:1b:ae:11:42:dd:b0:f1:69:0d:b2: f1:b9:20:3d:07:ce:06:90:f0:52:0b:c5:fc:81:05: 67:bf:d3:9c:66:9d:19:e5:e5:ba:35:32:a6:d9:a1: b6:9b:96:6d:48:53:c8:0f:46:61:88:d7:fd:df:c1: 8e:1c:a4:2f:df:96:3c:44:a1:92:4a:2f:fb:34:b6: b9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:6A:BB:DF:28:CE:CA:34:C1:5C:15:0E:76:37:F1:9C:3A:B1:CA:5D X509v3 Authority Key Identifier: keyid:82:1F:4D:B2:2E:E5:9A:FD:59:3A:7E:68:9E:DA:9F:C9:4B:E5:85:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:57:3b:00:3f:66:4d:36:b6:1f:8e:34:c7:37:3f:31:a0:3e: c0:4d:d7:df:7a:c0:97:10:56:0c:e2:72:ed:c9:ab:a2:46:d8: 87:17:86:5d:e4:2e:33:23:74:46:95:cb:36:30:f4:28:ba:96: 9a:5b:89:1d:62:63:21:5c:a0:e2:0a:1e:97:a2:47:3a:ac:b3: 70:2d:87:5e:35:88:24:2f:ad:ec:67:c0:93:ed:dc:4f:c2:21: 56:f4:64:aa:26:54:55:4d:db:a4:6e:ca:93:97:bd:11:4d:f1: 1e:50:f0:67:53:e7:d3:94:1f:96:3f:05:99:9d:fe:24:10:77: cd:94:64:bd:9c:88:cf:29:40:16:80:4a:75:a1:b1:a4:5a:df: 65:27:31:12:2e:e6:5e:22:8e:31:f3:60:5c:c3:38:6c:85:74: 74:ac:a8:5f:57:4a:6e:ea:f9:b9:05:14:04:37:9f:1b:f4:c8: d8:61:44:f5:c1:b2:b4:df:87:44:c1:2b:a4:02:dc:36:2e:01: 90:18:81:72:a1:b1:96:8d:af:e0:75:c0:59:0a:0b:eb:dc:bc: 9e:ea:dc:d7:a3:9f:b3:9f:ed:8a:6c:1f:e8:ef:3d:b3:e3:30: cb:dd:eb:0f:53:ea:a1:2a:ab:eb:98:57:91:08:95:88:18:8d: c7:b9:b0:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFDNDkxMTAvBgNVBAUTKDgyMUY0REIyMkVFNTlBRkQ1OTNBN0U2ODlFREE5RkM5 NEJFNTg1REQwHhcNMjUwNTEwMTUwMTE4WhcNMjUwNTE3MTUwMTE4WjAYMRYwFAYD VQQDEw02ODFmNmEzZS1kZmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5giWpBCeT/fW8wb3PZV0MuzzJaS4zpWzpqRk3tziDiQm8S+0gzkfYPVBBFMq t94+rJ77HCsnohr6K3rdZ+LQGZCe0sMkKZV4HEWpdjL5WC5DIHldqRzgU6vum4UN kKLHIFow4GAVF0H4L7kdZjbaiCOfaVi/qL1jx6VaiAJB66sfJEq0b0asYT46IbKp H/SKQQKPxqOPqg5jaA7ptHoN+IPWQ38BTAoHaVDw+3/rKT59w2/wCRajhxuuEULd sPFpDbLxuSA9B84GkPBSC8X8gQVnv9OcZp0Z5eW6NTKm2aG2m5ZtSFPID0ZhiNf9 38GOHKQv35Y8RKGSSi/7NLa5UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCxqu98o zso0wVwVDnY38Zw6scpdMB8GA1UdIwQYMBaAFIIfTbIu5Zr9WTp+aJ7an8lL5YXd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUM0OS9DNDlGNzVGODFE OUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9naDlOc2k3bG12MVpPbjVvbnRxZnlVdmxo ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doOU5zaTdsbXYxWk9uNW9udHFmeVV2bGhkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUM0OS9DNDlGNzVGODFEOUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9naDlOc2k3bG12 MVpPbjVvbnRxZnlVdmxoZDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJVzsAP2ZNNrYfjjTHNz8xoD7ATdffesCXEFYM4nLtyauiRtiHF4Zd 5C4zI3RGlcs2MPQoupaaW4kdYmMhXKDiCh6Xokc6rLNwLYdeNYgkL63sZ8CT7dxP wiFW9GSqJlRVTdukbsqTl70RTfEeUPBnU+fTlB+WPwWZnf4kEHfNlGS9nIjPKUAW gEp1obGkWt9lJzESLuZeIo4x82BcwzhshXR0rKhfV0pu6vm5BRQEN58b9MjYYUT1 wbK034dEwSukAtw2LgGQGIFyobGWja/gdcBZCgvr3Lye6tzXo5+zn+2KbB/o7z2z 4zDL3esPU+qhKqvrmFeRCJWIGI3HubCj -----END CERTIFICATE-----Generated at Sat May 10 20:27:00 2025 by rpki-client