$ rpki-client -vvf rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft File: dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft (raw, json) Hash identifier: I1MEZo385BtHS8oOHx1IZmg5F7hVf/gGS+uFqimlFoU= Subject key identifier: 30:D8:E3:66:96:9C:1B:0E:09:AA:BC:07:19:13:2F:F1:48:B4:1D:79 Authority key identifier: 75:BA:91:3D:BA:BF:E9:4A:34:C7:04:0D:AB:47:5C:35:A2:58:A1:52 Certificate issuer: /CN=A91C654A/serialNumber=75BA913DBABFE94A34C7040DAB475C35A258A152 Certificate serial: 072B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft Manifest number: 089B Signing time: Mon 12 May 2025 21:37:32 +0000 Manifest this update: Mon 12 May 2025 21:37:31 +0000 Manifest next update: Mon 19 May 2025 21:37:31 +0000 Files and hashes: 1: dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl (hash: b9A3h3kugs8ondSzvVnd0nYHsWi6Ihbsx4Gbn9bszd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1835 (0x72b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C654A, serialNumber=75BA913DBABFE94A34C7040DAB475C35A258A152 Validity Not Before: May 12 21:37:31 2025 GMT Not After : May 19 21:37:31 2025 GMT Subject: CN=68226a1b-acc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c8:4f:88:e7:4a:e6:9f:86:0d:d0:6f:f9:5c: 82:ee:9e:6c:78:c9:a9:d4:3f:90:e0:63:30:b3:2e: 41:d9:9b:30:24:10:43:67:b2:7e:05:99:03:f2:06: d8:49:32:ee:9f:bc:15:fe:05:9f:1a:19:ca:be:d1: 2b:10:b5:0c:16:6e:71:5f:05:b2:f8:bc:43:44:35: 16:79:2a:42:b0:ec:62:75:98:49:46:63:fc:a6:43: 00:ac:d7:77:0e:d0:cb:ab:ec:52:11:13:fc:3e:e2: 9e:cf:04:50:f2:23:25:08:bc:3a:cd:bb:3a:1e:91: 29:41:d6:10:c1:01:88:92:e9:0d:c0:57:53:0c:9e: f4:d5:a5:75:36:ba:2b:89:b8:43:ca:04:80:24:43: 23:e2:05:bf:85:8a:ba:53:be:2e:27:5e:e5:a5:be: 1a:ce:c8:16:16:39:27:4d:01:2b:15:50:d4:32:21: 85:03:56:0e:4a:9e:7e:27:fa:7e:7f:c6:0a:4e:84: e8:d4:a0:d6:e5:bf:41:5e:cd:9f:e1:6f:4e:22:65: 8d:d8:2a:97:6e:7a:12:ad:10:3b:b5:74:d5:b9:33: 5c:c6:02:92:cc:6a:cb:b5:1c:83:1c:c5:0a:af:bf: fd:7b:7b:69:e6:9e:2f:6d:27:57:a9:ea:24:d9:14: 0b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D8:E3:66:96:9C:1B:0E:09:AA:BC:07:19:13:2F:F1:48:B4:1D:79 X509v3 Authority Key Identifier: keyid:75:BA:91:3D:BA:BF:E9:4A:34:C7:04:0D:AB:47:5C:35:A2:58:A1:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:4b:58:fc:1f:f7:a5:3a:1a:c1:08:39:ef:40:c0:54:e1:e6: 66:f5:a3:00:76:80:1f:da:e8:a7:64:ae:a9:99:9a:26:f1:87: 0d:1d:76:cf:15:06:43:b6:64:29:30:fb:98:a3:c3:a9:b8:48: 52:58:3b:89:c1:7a:d1:1e:d4:d6:01:5b:9c:c5:96:c5:ef:9b: 37:13:03:1a:2c:96:0f:a1:24:9a:b3:ce:27:0f:b8:56:b1:9c: 9c:6d:81:87:a6:b6:12:e8:dd:c6:64:c1:90:dd:c4:7f:47:4e: 2b:27:3c:17:93:34:6b:ed:f5:56:f7:3b:e8:d8:b8:44:50:85: e2:24:2e:60:52:c4:89:2e:50:c3:2c:66:c8:14:24:15:a2:54: 82:a7:54:64:20:91:0f:bf:2d:4c:69:e2:b9:1f:11:4d:4a:88: 8a:55:1d:28:a8:44:f4:e2:11:89:38:a0:64:b5:de:a5:df:8f: a5:a1:57:95:67:73:0c:eb:cf:e1:d0:aa:f9:72:44:70:41:e2: 67:76:12:e0:fc:83:78:db:dd:d4:42:0b:36:6d:43:27:d3:1c: b5:53:f2:2c:eb:6a:61:26:43:aa:28:ec:b6:70:e8:8c:a4:55: 7e:04:63:d4:87:d2:c1:e7:57:51:c5:3c:52:1b:4d:de:ae:c4: 22:f1:95:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY1NEExMTAvBgNVBAUTKDc1QkE5MTNEQkFCRkU5NEEzNEM3MDQwREFCNDc1QzM1 QTI1OEExNTIwHhcNMjUwNTEyMjEzNzMxWhcNMjUwNTE5MjEzNzMxWjAYMRYwFAYD VQQDEw02ODIyNmExYi1hY2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMhPiOdK5p+GDdBv+VyC7p5seMmp1D+Q4GMwsy5B2ZswJBBDZ7J+BZkD8gbY STLun7wV/gWfGhnKvtErELUMFm5xXwWy+LxDRDUWeSpCsOxidZhJRmP8pkMArNd3 DtDLq+xSERP8PuKezwRQ8iMlCLw6zbs6HpEpQdYQwQGIkukNwFdTDJ701aV1Nror ibhDygSAJEMj4gW/hYq6U74uJ17lpb4azsgWFjknTQErFVDUMiGFA1YOSp5+J/p+ f8YKToTo1KDW5b9BXs2f4W9OImWN2CqXbnoSrRA7tXTVuTNcxgKSzGrLtRyDHMUK r7/9e3tp5p4vbSdXqeok2RQLlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDY42aW nBsOCaq8BxkTL/FItB15MB8GA1UdIwQYMBaAFHW6kT26v+lKNMcEDatHXDWiWKFS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjU0QS83MUZBQjBEODM1 MjkxMUVCQjgwRjEzNDlDNEY5QUUwMi9kYnFSUGJxXzZVbzB4d1FOcTBkY05hSllv VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RicVJQYnFfNlVvMHh3UU5xMGRjTmFKWW9WSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjU0QS83MUZBQjBEODM1MjkxMUVCQjgwRjEzNDlDNEY5QUUwMi9kYnFSUGJxXzZV bzB4d1FOcTBkY05hSllvVkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADS1j8H/elOhrBCDnvQMBU4eZm9aMAdoAf2uinZK6pmZom8YcNHXbP FQZDtmQpMPuYo8OpuEhSWDuJwXrRHtTWAVucxZbF75s3EwMaLJYPoSSas84nD7hW sZycbYGHprYS6N3GZMGQ3cR/R04rJzwXkzRr7fVW9zvo2LhEUIXiJC5gUsSJLlDD LGbIFCQVolSCp1RkIJEPvy1MaeK5HxFNSoiKVR0oqET04hGJOKBktd6l34+loVeV Z3MM68/h0Kr5ckRwQeJndhLg/IN4293UQgs2bUMn0xy1U/Is62phJkOqKOy2cOiM pFV+BGPUh9LB51dRxTxSG03ersQi8ZVS -----END CERTIFICATE-----Generated at Tue May 13 09:20:26 2025 by rpki-client