$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft File: iS3iAjP9DGSOLnuflZUPOpaBfL8.mft (raw, json) Hash identifier: AwKzOG23NDsd5zFZfyg22fYSOcpCECkKJaoOoeoQiG0= Subject key identifier: 88:DA:CB:25:43:07:E7:C9:39:8E:01:B0:2C:A1:84:03:38:33:A6:2A Authority key identifier: 89:2D:E2:02:33:FD:0C:64:8E:2E:7B:9F:95:95:0F:3A:96:81:7C:BF Certificate issuer: /CN=A91C7175/serialNumber=892DE20233FD0C648E2E7B9F95950F3A96817CBF Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft Manifest number: 82 Signing time: Sun 11 May 2025 05:22:23 +0000 Manifest this update: Sun 11 May 2025 05:22:23 +0000 Manifest next update: Sun 18 May 2025 05:22:23 +0000 Files and hashes: 1: iS3iAjP9DGSOLnuflZUPOpaBfL8.crl (hash: Il7RH/+3IBeDlNFXaYLeGu5/SOcTRR9aJt+bLC2sVCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.crl rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7175, serialNumber=892DE20233FD0C648E2E7B9F95950F3A96817CBF Validity Not Before: May 11 05:22:23 2025 GMT Not After : May 18 05:22:23 2025 GMT Subject: CN=6820340f-2e02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:98:4d:e1:f4:69:84:ed:c5:db:c6:28:58:d3: 2e:f1:76:49:91:d3:f8:c0:90:3d:ab:94:05:37:35: 70:2e:d7:8a:eb:7c:db:d7:54:f7:24:0e:1f:ba:b2: fe:03:9b:ff:55:e5:8c:aa:40:e0:b8:cc:f8:91:d6: 0d:71:fd:a8:bb:ab:1f:e2:14:80:2c:74:e5:c4:02: c6:2b:c8:45:69:b3:53:08:ec:f6:ff:0e:16:0d:fe: 4d:d9:84:90:95:5f:4f:ee:07:aa:0f:b8:56:dc:9d: fa:67:16:44:8d:fe:95:b0:eb:35:65:a2:b3:9f:61: ef:a0:91:ef:79:cc:d2:9d:53:79:91:d2:72:cc:6a: 93:47:f5:cd:c2:60:84:18:27:8d:a9:0b:ae:e2:83: b3:03:6d:b8:bd:55:75:fd:0c:80:07:71:d4:b6:95: bf:a0:b9:f5:78:5a:ed:32:fc:bf:26:70:e0:12:a8: 52:d4:cf:b2:09:0f:09:ac:3c:d6:59:c7:1c:1b:74: 29:fc:bd:d7:33:db:90:19:62:9a:3a:39:85:a8:d0: b1:77:fc:39:8d:7e:44:c6:7d:d8:c0:0a:03:9f:72: 1e:72:14:82:79:ab:12:0d:f8:fd:4a:35:d8:f4:65: 3d:e1:92:16:eb:c3:fa:4b:3d:65:03:93:e6:fe:54: 8b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:DA:CB:25:43:07:E7:C9:39:8E:01:B0:2C:A1:84:03:38:33:A6:2A X509v3 Authority Key Identifier: keyid:89:2D:E2:02:33:FD:0C:64:8E:2E:7B:9F:95:95:0F:3A:96:81:7C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:ff:74:c3:88:01:ee:71:21:7e:8e:5b:7f:6f:b7:92:3e:11: b5:f9:26:a7:a0:46:18:89:f4:51:90:c4:45:54:9d:f0:d8:90: 1c:10:ce:5d:67:4f:05:73:f3:5a:ab:02:f4:41:22:39:46:55: 31:d7:74:d0:7b:f9:5c:a1:67:18:04:21:c1:32:e9:24:5b:6e: ad:41:dc:77:b2:67:3f:d9:c1:b4:02:11:2f:89:60:e1:74:d8: 6c:c2:0e:89:37:28:db:f5:1d:5e:a6:d8:6f:1b:61:ff:f6:90: fe:32:49:85:b2:2b:29:ba:74:c9:3e:8d:2a:76:2c:a4:70:16: e8:3c:e3:9b:2e:b5:f6:fa:25:da:15:ab:8c:af:b5:da:af:07: d1:08:0f:82:09:11:bc:09:e9:aa:e2:7c:3e:84:70:2d:6b:40: b8:ac:b4:3d:08:68:25:f1:e6:0c:f5:08:92:82:f5:c7:ce:74: 13:c1:f1:d4:f0:0e:ec:9d:7b:4d:94:39:38:e2:11:ba:e1:43: 29:c2:d8:a1:06:54:12:5d:db:67:79:8d:5e:6e:9d:2c:c5:82: e2:5a:5f:07:31:5b:2b:14:df:a2:79:d4:9a:be:2b:94:f4:5f: 43:26:97:37:53:e3:4b:7b:8c:f6:00:16:29:73:5b:2a:dd:5b: 31:e2:3b:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcxNzUxMTAvBgNVBAUTKDg5MkRFMjAyMzNGRDBDNjQ4RTJFN0I5Rjk1OTUwRjNB OTY4MTdDQkYwHhcNMjUwNTExMDUyMjIzWhcNMjUwNTE4MDUyMjIzWjAYMRYwFAYD VQQDEw02ODIwMzQwZi0yZTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA45hN4fRphO3F28YoWNMu8XZJkdP4wJA9q5QFNzVwLteK63zb11T3JA4furL+ A5v/VeWMqkDguMz4kdYNcf2ou6sf4hSALHTlxALGK8hFabNTCOz2/w4WDf5N2YSQ lV9P7geqD7hW3J36ZxZEjf6VsOs1ZaKzn2HvoJHveczSnVN5kdJyzGqTR/XNwmCE GCeNqQuu4oOzA224vVV1/QyAB3HUtpW/oLn1eFrtMvy/JnDgEqhS1M+yCQ8JrDzW WcccG3Qp/L3XM9uQGWKaOjmFqNCxd/w5jX5Exn3YwAoDn3IechSCeasSDfj9SjXY 9GU94ZIW68P6Sz1lA5Pm/lSLTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjayyVD B+fJOY4BsCyhhAM4M6YqMB8GA1UdIwQYMBaAFIkt4gIz/Qxkji57n5WVDzqWgXy/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzE3NS9GMjJCOUNDQTY4 RkQxMUVGQTk1MDAxODdDNEY5QUUwMi9pUzNpQWpQOURHU09MbnVmbFpVUE9wYUJm TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lTM2lBalA5REdTT0xudWZsWlVQT3BhQmZMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzE3NS9GMjJCOUNDQTY4RkQxMUVGQTk1MDAxODdDNEY5QUUwMi9pUzNpQWpQOURH U09MbnVmbFpVUE9wYUJmTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn/3TDiAHucSF+jlt/b7eSPhG1+SanoEYYifRRkMRFVJ3w2JAcEM5d Z08Fc/NaqwL0QSI5RlUx13TQe/lcoWcYBCHBMukkW26tQdx3smc/2cG0AhEviWDh dNhswg6JNyjb9R1epthvG2H/9pD+MkmFsispunTJPo0qdiykcBboPOObLrX2+iXa FauMr7XarwfRCA+CCRG8Cemq4nw+hHAta0C4rLQ9CGgl8eYM9QiSgvXHznQTwfHU 8A7snXtNlDk44hG64UMpwtihBlQSXdtneY1ebp0sxYLiWl8HMVsrFN+iedSaviuU 9F9DJpc3U+NLe4z2ABYpc1sq3Vsx4jv9 -----END CERTIFICATE-----Generated at Sun May 11 20:02:59 2025 by rpki-client