$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft File: woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft (raw, json) Hash identifier: QqFieGJo5sXo/NEPLURLtqAzQlQkjoEq/yoKr8vKdAI= Subject key identifier: 50:9B:16:7A:D1:DE:C2:3F:D2:96:D6:7C:24:2D:97:E4:92:06:2F:6D Authority key identifier: C2:84:BA:8A:88:A0:21:16:BE:E4:34:10:E0:39:E9:09:E3:02:9D:0D Certificate issuer: /CN=A91C7B68/serialNumber=C284BA8A88A02116BEE43410E039E909E3029D0D Certificate serial: 0907 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft Manifest number: 09C3 Signing time: Sat 10 May 2025 20:10:54 +0000 Manifest this update: Sat 10 May 2025 20:10:53 +0000 Manifest next update: Sat 17 May 2025 20:10:53 +0000 Files and hashes: 1: woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl (hash: FpfUt5cZi1LNpL4d9ZYrDd+X2MBQgFgjNz8bADxGtjY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:10:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2311 (0x907) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B68, serialNumber=C284BA8A88A02116BEE43410E039E909E3029D0D Validity Not Before: May 10 20:10:53 2025 GMT Not After : May 17 20:10:53 2025 GMT Subject: CN=681fb2ce-3813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d5:b7:6d:8b:f3:f1:05:4e:db:e5:5c:07:be: ff:43:b7:82:04:24:ef:90:e8:3f:8b:ee:6b:8d:49: e9:5b:6f:73:88:3c:43:ad:be:16:bd:d8:5d:97:73: bf:cf:7d:64:04:48:f5:6c:43:0d:b9:73:5c:8d:9c: 52:51:39:bb:80:ad:63:15:bb:7a:02:3a:78:24:af: 11:56:96:f9:b5:30:f3:8e:4b:87:88:f3:06:a4:38: b5:2a:d7:4e:1c:5d:f9:7c:70:3e:9f:84:83:d8:df: 9b:f4:e3:56:97:59:c1:c0:61:23:9c:b2:0b:12:4c: 9c:af:9b:94:fd:58:03:1b:7d:fe:94:05:7e:2b:ca: f7:3d:66:ef:ec:bf:14:8c:5b:5f:2a:b1:73:68:6c: b5:5c:46:18:29:b3:80:9b:46:36:dc:28:5e:f6:0b: b1:59:f5:06:82:fd:5b:67:61:33:45:ba:0b:78:3e: 3d:85:84:d6:24:da:74:e2:8e:f7:55:ba:54:d8:e2: ec:74:1e:34:66:bd:7a:0e:16:92:1b:5f:28:ff:90: 0e:dd:4b:40:09:82:4f:dd:80:5e:a2:96:74:04:a6: f8:cc:22:d4:39:c4:82:2c:74:dd:33:fd:a7:f9:52: af:c1:90:a7:b6:83:49:77:c1:f7:19:4c:41:97:28: f6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9B:16:7A:D1:DE:C2:3F:D2:96:D6:7C:24:2D:97:E4:92:06:2F:6D X509v3 Authority Key Identifier: keyid:C2:84:BA:8A:88:A0:21:16:BE:E4:34:10:E0:39:E9:09:E3:02:9D:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:b5:8f:41:d2:ee:75:3b:f4:fb:8d:cb:a1:16:83:00:09:fa: 81:e1:35:1d:29:e8:e1:b8:3e:3c:81:79:0f:43:27:7f:47:c4: 8c:1f:5c:6a:6c:9e:79:22:04:27:c8:66:9f:9b:05:42:72:7c: 2f:7d:c8:a9:be:7e:ab:8b:74:5a:2a:4b:60:04:66:0f:c2:ad: 73:13:97:7a:39:f3:45:fd:9f:ef:ca:e7:af:2d:8c:65:4e:4c: 8e:31:6d:fe:74:76:cb:49:ed:77:1d:ce:e2:03:28:51:23:18: e9:a3:37:73:b0:c4:fb:14:15:e9:7d:38:89:bd:20:ee:06:97: e8:d6:c1:db:c3:b4:39:6b:0d:f0:26:cf:86:ac:cc:f8:bf:a5: 24:43:c6:15:c8:33:d7:4a:5b:0d:4e:4f:86:89:72:17:4b:1c: 01:55:ce:ca:a4:de:84:a7:5d:89:b1:68:02:bd:ba:f2:50:49: fe:5b:57:6e:b3:49:a1:fa:6a:b2:12:99:c7:be:bc:64:e1:72: 65:6f:bf:eb:77:06:ef:6c:a2:21:29:1a:4a:eb:46:62:dd:d5: f7:77:9c:7d:2e:ff:3b:aa:aa:ca:24:37:fa:a1:bc:63:25:ea: 9b:be:51:ff:81:16:92:c4:ea:35:e8:5a:6d:c9:d1:c3:49:c4: 88:58:7b:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCNjgxMTAvBgNVBAUTKEMyODRCQThBODhBMDIxMTZCRUU0MzQxMEUwMzlFOTA5 RTMwMjlEMEQwHhcNMjUwNTEwMjAxMDUzWhcNMjUwNTE3MjAxMDUzWjAYMRYwFAYD VQQDEw02ODFmYjJjZS0zODEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtW3bYvz8QVO2+VcB77/Q7eCBCTvkOg/i+5rjUnpW29ziDxDrb4Wvdhdl3O/ z31kBEj1bEMNuXNcjZxSUTm7gK1jFbt6Ajp4JK8RVpb5tTDzjkuHiPMGpDi1KtdO HF35fHA+n4SD2N+b9ONWl1nBwGEjnLILEkycr5uU/VgDG33+lAV+K8r3PWbv7L8U jFtfKrFzaGy1XEYYKbOAm0Y23Che9guxWfUGgv1bZ2EzRboLeD49hYTWJNp04o73 VbpU2OLsdB40Zr16DhaSG18o/5AO3UtACYJP3YBeopZ0BKb4zCLUOcSCLHTdM/2n +VKvwZCntoNJd8H3GUxBlyj2ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCbFnrR 3sI/0pbWfCQtl+SSBi9tMB8GA1UdIwQYMBaAFMKEuoqIoCEWvuQ0EOA56QnjAp0N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0I2OC81M0E3QjkyQ0Iw QTUxMUVBOEY5MkVEMTdDNEY5QUUwMi93b1M2aW9pZ0lSYS01RFFRNERucENlTUNu UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dvUzZpb2lnSVJhLTVEUVE0RG5wQ2VNQ25RMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0I2OC81M0E3QjkyQ0IwQTUxMUVBOEY5MkVEMTdDNEY5QUUwMi93b1M2aW9pZ0lS YS01RFFRNERucENlTUNuUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKtY9B0u51O/T7jcuhFoMACfqB4TUdKejhuD48gXkPQyd/R8SMH1xq bJ55IgQnyGafmwVCcnwvfcipvn6ri3RaKktgBGYPwq1zE5d6OfNF/Z/vyuevLYxl TkyOMW3+dHbLSe13Hc7iAyhRIxjpozdzsMT7FBXpfTiJvSDuBpfo1sHbw7Q5aw3w Js+GrMz4v6UkQ8YVyDPXSlsNTk+GiXIXSxwBVc7KpN6Ep12JsWgCvbryUEn+W1du s0mh+mqyEpnHvrxk4XJlb7/rdwbvbKIhKRpK60Zi3dX3d5x9Lv87qqrKJDf6obxj JeqbvlH/gRaSxOo16FptydHDScSIWHuw -----END CERTIFICATE-----Generated at Sun May 11 16:53:51 2025 by rpki-client