$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft File: x67AwRtt8SmLElCYMaTMAkTa3PI.mft (raw, json) Hash identifier: KJz/7+HgwgjTcq33ratZpEfTrPZeALoA3I+RofxE0uw= Subject key identifier: 99:D1:AB:7D:9F:4A:05:3E:A9:30:C9:AE:57:BF:B0:5C:EB:A3:05:91 Authority key identifier: C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2 Certificate issuer: /CN=A91C612E/serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2 Certificate serial: 06AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft Manifest number: 12AC Signing time: Sat 10 May 2025 18:25:39 +0000 Manifest this update: Sat 10 May 2025 18:25:39 +0000 Manifest next update: Sat 17 May 2025 18:25:39 +0000 Files and hashes: 1: x67AwRtt8SmLElCYMaTMAkTa3PI.crl (hash: IUPmQG0HtT69bs2BCfYK2yBMeBP1kCHZf87XIoU7axA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1709 (0x6ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C612E, serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2 Validity Not Before: May 10 18:25:39 2025 GMT Not After : May 17 18:25:39 2025 GMT Subject: CN=681f9a23-1654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fb:b8:f6:ba:1d:60:e9:23:bb:5a:31:7c:94: 8a:67:ba:76:38:3c:2c:f7:e3:5c:24:30:67:11:6a: b1:d2:47:a2:07:c6:80:88:99:d7:e4:3c:fa:4f:49: 95:24:19:1f:e6:6a:7d:ff:02:b8:ed:97:f8:54:b1: 73:d2:39:5b:ff:98:ef:26:4d:81:ef:81:44:2e:84: 1d:fd:ab:a5:8d:6f:e6:7b:2f:56:3a:73:d6:de:1d: 8c:62:ba:e2:8b:10:78:dc:c9:d0:09:06:32:3f:57: 50:4f:22:72:0b:a3:e8:92:05:e7:26:19:21:fd:3c: a3:0f:4a:7d:f7:40:89:66:b7:c8:60:99:b2:f4:a0: 2a:bb:b4:d4:f2:b4:30:db:4f:5d:ff:16:d6:51:7f: d0:2d:70:cb:ea:dc:fa:5c:d3:98:59:12:c2:5d:06: 80:9b:28:33:38:ad:7d:75:1e:43:9b:ec:36:4e:38: 41:a6:ac:30:54:a7:98:8f:b4:65:0f:a5:c4:ac:bf: 04:f5:b0:14:3a:85:66:73:36:21:db:c1:89:33:5d: 54:d1:9e:8f:1d:c2:8c:be:ba:ea:c9:1c:a0:8f:40: 22:03:94:5a:b3:cb:9e:7d:42:a3:e0:ed:cc:ab:17: 1b:4b:6a:43:f8:8d:c1:a1:55:e8:8b:06:e1:54:2a: 46:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D1:AB:7D:9F:4A:05:3E:A9:30:C9:AE:57:BF:B0:5C:EB:A3:05:91 X509v3 Authority Key Identifier: keyid:C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:2e:f8:ba:85:30:36:a2:41:e3:70:e7:9a:a0:c6:3c:3d:3b: 9d:c2:93:be:05:29:17:02:ec:52:b6:67:34:44:25:81:f8:74: 48:b5:ff:8f:6f:0b:00:ac:53:6f:c3:05:22:7f:5d:21:69:73: 21:ec:17:60:b6:1d:2c:65:6c:9d:9b:aa:27:fe:10:32:a4:bd: bf:77:d0:6e:6c:dc:84:1d:a1:38:92:ef:83:fe:6f:c1:d3:ab: da:31:ff:e3:74:e8:84:cc:38:01:db:53:45:f4:a7:9b:a1:7e: c1:5b:8e:3a:68:70:cc:1c:28:ad:75:b2:de:5c:79:0b:65:45: 39:9d:d9:94:c8:1a:f1:70:db:b2:c4:a7:47:6b:3b:88:02:e8: 20:a1:34:e8:d3:9d:58:59:fa:cd:0d:c1:5d:9a:7c:53:03:81: d4:45:e8:cb:4d:e7:0d:20:ca:cd:3f:24:9e:4e:54:d9:f5:a4: 0b:cf:da:16:08:ba:8c:48:20:ae:f5:77:6b:09:3b:87:95:d1: 9b:37:08:53:8a:cc:c3:89:42:b7:70:75:cf:cf:12:82:d7:83: 31:59:d0:54:ef:8a:9a:d9:fe:89:e0:9f:a8:63:95:39:9b:b9: d0:17:61:cb:8a:2b:dd:bc:2d:66:1f:61:8c:bc:28:1b:15:d4: 93:27:33:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYxMkUxMTAvBgNVBAUTKEM3QUVDMEMxMUI2REYxMjk4QjEyNTA5ODMxQTRDQzAy NDREQURDRjIwHhcNMjUwNTEwMTgyNTM5WhcNMjUwNTE3MTgyNTM5WjAYMRYwFAYD VQQDEw02ODFmOWEyMy0xNjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfu49rodYOkju1oxfJSKZ7p2ODws9+NcJDBnEWqx0keiB8aAiJnX5Dz6T0mV JBkf5mp9/wK47Zf4VLFz0jlb/5jvJk2B74FELoQd/auljW/mey9WOnPW3h2MYrri ixB43MnQCQYyP1dQTyJyC6PokgXnJhkh/TyjD0p990CJZrfIYJmy9KAqu7TU8rQw 209d/xbWUX/QLXDL6tz6XNOYWRLCXQaAmygzOK19dR5Dm+w2TjhBpqwwVKeYj7Rl D6XErL8E9bAUOoVmczYh28GJM11U0Z6PHcKMvrrqyRygj0AiA5Ras8uefUKj4O3M qxcbS2pD+I3BoVXoiwbhVCpGQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJnRq32f SgU+qTDJrle/sFzrowWRMB8GA1UdIwQYMBaAFMeuwMEbbfEpixJQmDGkzAJE2tzy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjEyRS82NUJDMTdEMjBC NjExMUVBQUYwNDJGNjhDNEY5QUUwMi94NjdBd1J0dDhTbUxFbENZTWFUTUFrVGEz UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g2N0F3UnR0OFNtTEVsQ1lNYVRNQWtUYTNQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjEyRS82NUJDMTdEMjBCNjExMUVBQUYwNDJGNjhDNEY5QUUwMi94NjdBd1J0dDhT bUxFbENZTWFUTUFrVGEzUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBALvi6hTA2okHjcOeaoMY8PTudwpO+BSkXAuxStmc0RCWB+HRItf+P bwsArFNvwwUif10haXMh7Bdgth0sZWydm6on/hAypL2/d9BubNyEHaE4ku+D/m/B 06vaMf/jdOiEzDgB21NF9KeboX7BW446aHDMHCitdbLeXHkLZUU5ndmUyBrxcNuy xKdHazuIAuggoTTo051YWfrNDcFdmnxTA4HURejLTecNIMrNPySeTlTZ9aQLz9oW CLqMSCCu9XdrCTuHldGbNwhTiszDiUK3cHXPzxKC14MxWdBU74qa2f6J4J+oY5U5 m7nQF2HLiivdvC1mH2GMvCgbFdSTJzPS -----END CERTIFICATE-----Generated at Sun May 11 01:35:48 2025 by rpki-client