$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft File: e9ZuQtUwkEC0dRqcKySR1818FLg.mft (raw, json) Hash identifier: HDkkUJoUHv7vBCsdaULpvgcdzlVAdqmMuzVbi3A7ozk= Subject key identifier: D6:22:73:A7:1E:DD:DC:B9:51:9B:65:EE:E4:D5:00:DB:63:6B:49:D7 Authority key identifier: 7B:D6:6E:42:D5:30:90:40:B4:75:1A:9C:2B:24:91:D7:CD:7C:14:B8 Certificate issuer: /CN=A91CA5AD/serialNumber=7BD66E42D5309040B4751A9C2B2491D7CD7C14B8 Certificate serial: 3482 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft Manifest number: 3481 Signing time: Thu 08 May 2025 14:19:37 +0000 Manifest this update: Thu 08 May 2025 14:19:36 +0000 Manifest next update: Thu 15 May 2025 14:19:36 +0000 Files and hashes: 1: e9ZuQtUwkEC0dRqcKySR1818FLg.crl (hash: gXEF6iowR17JK+D4etkykpN4+AUpBEtSPjEX4+nSuzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.crl rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 14:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13442 (0x3482) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA5AD, serialNumber=7BD66E42D5309040B4751A9C2B2491D7CD7C14B8 Validity Not Before: May 8 14:19:36 2025 GMT Not After : May 15 14:19:36 2025 GMT Subject: CN=681cbd79-b8c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f9:47:15:02:59:42:32:ff:5d:0b:86:08:3f: 34:49:d0:a9:38:25:0e:f9:b5:b4:ee:bd:dd:b3:3b: 48:48:af:34:48:ca:08:c2:c2:70:95:fc:67:31:37: 4c:45:a9:09:1c:5e:ac:d3:a5:4f:2a:5a:aa:2a:77: 6e:21:c0:e9:48:31:97:15:db:41:f7:85:4d:55:8d: 23:30:d0:87:c5:2f:a4:51:f0:6d:4c:54:cf:9c:8a: 13:78:89:85:4e:f5:6b:1a:a3:77:41:79:68:85:f4: 80:c0:89:a8:e9:95:a8:61:c0:dd:d9:06:2c:4b:b0: b2:af:b1:18:bf:22:52:e3:0f:9d:5f:ab:e2:db:a7: 32:85:41:05:23:06:b2:33:a9:a9:e1:87:f8:1a:ee: 2e:dd:85:c7:80:ce:b0:cc:20:22:5c:1d:11:42:c6: 68:af:d8:2b:7c:f7:a6:fd:8b:98:64:35:43:f5:e2: b6:20:c7:3c:f8:0d:c1:f0:00:e3:78:05:3e:f0:c2: c8:54:e0:bf:7a:99:4f:84:99:b1:4d:29:40:53:43: 63:30:ca:f2:b3:74:6d:d9:d3:d3:1e:f8:54:b5:11: 77:98:52:ae:d6:c0:db:31:ee:c5:6f:3c:54:5e:c1: 89:a2:a3:0a:a3:e7:63:0a:cd:b2:f9:0e:a1:a7:8e: 27:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:22:73:A7:1E:DD:DC:B9:51:9B:65:EE:E4:D5:00:DB:63:6B:49:D7 X509v3 Authority Key Identifier: keyid:7B:D6:6E:42:D5:30:90:40:B4:75:1A:9C:2B:24:91:D7:CD:7C:14:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:d4:42:53:f2:32:f2:31:63:19:a8:73:72:53:76:79:9b:50: 09:ac:4d:fc:90:e4:97:f0:2e:d4:60:46:76:40:cd:ca:10:1f: 12:25:06:20:90:c4:41:3d:f4:69:8d:78:26:f0:e4:15:40:d6: cf:c2:86:70:80:e4:a9:57:cf:87:f8:72:5c:72:c5:c0:64:c7: c9:f7:79:f9:09:32:49:f6:dd:ca:2e:9a:a8:4d:44:7f:20:ee: 1d:93:f4:1c:6a:04:35:fa:e0:6d:98:13:a5:50:1d:6c:28:24: 3a:ae:6d:13:91:f8:2a:cf:d0:2a:b4:40:4b:8d:54:6d:e7:be: 41:51:04:0d:8f:d8:97:03:fc:7d:55:55:b2:28:5a:d9:19:00: 0b:2a:31:0e:c5:c7:f0:bd:01:47:b1:24:12:99:22:74:ec:c8: 52:cd:2e:24:2f:4e:69:44:3f:14:a3:c2:45:ea:c4:02:49:e9: ea:73:8a:b8:37:49:3a:9f:fd:b5:85:cd:23:90:8b:29:ea:37: 66:41:bb:3b:2b:33:c8:ef:7f:fa:9d:77:d1:d0:b5:08:4b:c1: 60:57:82:c8:7d:7a:76:de:5d:ca:d2:de:92:87:be:e0:5b:8d: b1:69:0b:e6:9e:36:47:80:bd:14:40:21:3c:cf:ab:28:3c:57: ba:49:42:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E1QUQxMTAvBgNVBAUTKDdCRDY2RTQyRDUzMDkwNDBCNDc1MUE5QzJCMjQ5MUQ3 Q0Q3QzE0QjgwHhcNMjUwNTA4MTQxOTM2WhcNMjUwNTE1MTQxOTM2WjAYMRYwFAYD VQQDEw02ODFjYmQ3OS1iOGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxflHFQJZQjL/XQuGCD80SdCpOCUO+bW07r3dsztISK80SMoIwsJwlfxnMTdM RakJHF6s06VPKlqqKnduIcDpSDGXFdtB94VNVY0jMNCHxS+kUfBtTFTPnIoTeImF TvVrGqN3QXlohfSAwImo6ZWoYcDd2QYsS7Cyr7EYvyJS4w+dX6vi26cyhUEFIway M6mp4Yf4Gu4u3YXHgM6wzCAiXB0RQsZor9grfPem/YuYZDVD9eK2IMc8+A3B8ADj eAU+8MLIVOC/eplPhJmxTSlAU0NjMMrys3Rt2dPTHvhUtRF3mFKu1sDbMe7FbzxU XsGJoqMKo+djCs2y+Q6hp44nXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNYic6ce 3dy5UZtl7uTVANtja0nXMB8GA1UdIwQYMBaAFHvWbkLVMJBAtHUanCskkdfNfBS4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTVBRC8zNjZDNDQyRTFE NzExMUUyQUI1NEUyQjUwOEIwMkNEMi9lOVp1UXRVd2tFQzBkUnFjS3lTUjE4MThG TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U5WnVRdFV3a0VDMGRScWNLeVNSMTgxOEZMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTVBRC8zNjZDNDQyRTFENzExMUUyQUI1NEUyQjUwOEIwMkNEMi9lOVp1UXRVd2tF QzBkUnFjS3lTUjE4MThGTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ1EJT8jLyMWMZqHNyU3Z5m1AJrE38kOSX8C7UYEZ2QM3KEB8SJQYg kMRBPfRpjXgm8OQVQNbPwoZwgOSpV8+H+HJccsXAZMfJ93n5CTJJ9t3KLpqoTUR/ IO4dk/QcagQ1+uBtmBOlUB1sKCQ6rm0Tkfgqz9AqtEBLjVRt575BUQQNj9iXA/x9 VVWyKFrZGQALKjEOxcfwvQFHsSQSmSJ07MhSzS4kL05pRD8Uo8JF6sQCSenqc4q4 N0k6n/21hc0jkIsp6jdmQbs7KzPI73/6nXfR0LUIS8FgV4LIfXp23l3K0t6Sh77g W42xaQvmnjZHgL0UQCE8z6soPFe6SUIV -----END CERTIFICATE-----Generated at Fri May 9 07:56:53 2025 by rpki-client