$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft File: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft (raw, json) Hash identifier: 6gnEnSpzDVrkvn8/+n7GwGUnhaM0YItfsEdbreb486M= Subject key identifier: EE:2D:B1:B6:6A:FA:4F:B5:2D:F8:0E:58:8F:CD:75:8A:2B:A6:DF:2B Authority key identifier: 9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74 Certificate issuer: /CN=A91CB14D/serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774 Certificate serial: 0870 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft Manifest number: 0951 Signing time: Sat 10 May 2025 20:23:43 +0000 Manifest this update: Sat 10 May 2025 20:23:42 +0000 Manifest next update: Sat 17 May 2025 20:23:42 +0000 Files and hashes: 1: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl (hash: oSBCK1l9mauIBQTgCpOqDj0/XalnDp043Zq4jQGXK4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2160 (0x870) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB14D, serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774 Validity Not Before: May 10 20:23:42 2025 GMT Not After : May 17 20:23:42 2025 GMT Subject: CN=681fb5cf-1226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ac:fe:97:31:05:90:11:0e:56:80:94:2f:cf: 38:3d:93:aa:f9:ff:c6:0c:d7:35:81:2f:d7:09:b6: 49:a6:c8:34:ef:f6:3d:f4:f1:0e:03:01:94:61:9b: 44:86:5f:bb:58:6d:72:f1:81:d1:6b:0e:7f:55:c3: 22:10:79:b2:a6:01:59:0c:70:8f:3b:1b:18:e0:60: b9:2d:47:dc:a9:9b:71:e6:34:54:be:b6:6c:3a:7f: 23:16:d0:fa:57:97:2d:49:04:af:6b:4c:d2:da:2b: f2:57:73:f5:0f:d7:7e:a4:0b:c3:de:47:e4:b4:61: b2:81:e4:ff:d8:69:e4:56:e9:57:0e:70:de:bf:93: 16:49:43:c0:a0:df:21:4f:42:7d:97:56:95:50:94: d2:28:6a:d0:01:76:39:93:b4:bf:23:44:05:51:44: 91:43:50:6e:8d:50:ea:2d:85:17:5e:5b:57:98:64: 9d:75:e1:7b:b2:ec:fa:c4:9b:7e:14:e4:f9:50:6a: 80:3e:a0:d8:90:95:5f:e1:c5:a6:16:7e:58:20:f8: b1:9e:2e:84:92:31:89:c5:6e:26:6f:10:6f:f1:46: 91:83:12:7e:3c:a5:7c:0b:75:2f:13:2b:e1:90:bb: 66:14:c9:07:86:7e:2c:87:c8:b9:38:bb:0a:af:14: 9a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:2D:B1:B6:6A:FA:4F:B5:2D:F8:0E:58:8F:CD:75:8A:2B:A6:DF:2B X509v3 Authority Key Identifier: keyid:9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:c1:e4:16:d1:34:f9:1e:ba:c8:e2:da:ff:ef:88:c5:23:da: 76:b5:92:d7:fe:7c:f9:68:55:09:55:ed:5c:03:c1:b2:38:08: b3:0c:53:e8:29:5c:0a:bc:42:0e:0d:ad:7e:49:39:b4:4b:59: 93:80:d1:41:b4:29:91:ec:87:fb:b2:f3:ba:4b:c9:e2:78:d5: 0c:73:03:1d:1c:ac:1f:e4:5a:59:e5:b2:3e:98:1d:dd:6a:81: ca:54:65:85:12:9b:6f:8a:59:34:60:3b:f7:97:83:99:44:fa: 33:04:25:e4:7a:23:9f:6d:56:e3:a3:c8:a5:e7:fc:9b:6a:74: 88:60:3a:57:8e:e4:96:26:8a:6f:b2:87:53:40:d9:ba:08:92: 92:ab:af:5b:f5:76:e5:ed:93:e1:5d:10:0b:5d:98:ff:b3:4c: c5:08:c7:49:55:0d:4c:54:4a:fe:bb:a3:35:9a:1a:18:4c:2e: c6:8a:df:03:7c:58:c6:38:ee:66:5e:51:ee:dd:20:fb:8a:31: 4d:b0:92:00:5f:4e:eb:83:5b:67:bd:10:12:c3:66:e6:32:73: 88:e0:25:c4:8f:2a:b3:27:11:ae:46:89:18:4d:c9:03:6b:c8: 8a:87:ac:91:22:97:ef:1b:e6:e2:d4:3a:44:4b:a0:71:e4:a8: 3a:9a:c6:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IxNEQxMTAvBgNVBAUTKDlEMUVDNjVGRENDMDU5RDk2REY1RDM5OTkyRkIxNDc5 NzdCNzU3NzQwHhcNMjUwNTEwMjAyMzQyWhcNMjUwNTE3MjAyMzQyWjAYMRYwFAYD VQQDEw02ODFmYjVjZi0xMjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6z+lzEFkBEOVoCUL884PZOq+f/GDNc1gS/XCbZJpsg07/Y99PEOAwGUYZtE hl+7WG1y8YHRaw5/VcMiEHmypgFZDHCPOxsY4GC5LUfcqZtx5jRUvrZsOn8jFtD6 V5ctSQSva0zS2ivyV3P1D9d+pAvD3kfktGGygeT/2GnkVulXDnDev5MWSUPAoN8h T0J9l1aVUJTSKGrQAXY5k7S/I0QFUUSRQ1BujVDqLYUXXltXmGSddeF7suz6xJt+ FOT5UGqAPqDYkJVf4cWmFn5YIPixni6EkjGJxW4mbxBv8UaRgxJ+PKV8C3UvEyvh kLtmFMkHhn4sh8i5OLsKrxSa4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4tsbZq +k+1LfgOWI/NdYorpt8rMB8GA1UdIwQYMBaAFJ0exl/cwFnZbfXTmZL7FHl3t1d0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjE0RC8zMEZFMEFGRUM0 QzYxMUVBQThENUJFNjZDNEY5QUUwMi9uUjdHWDl6QVdkbHQ5ZE9aa3ZzVWVYZTNW M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25SN0dYOXpBV2RsdDlkT1prdnNVZVhlM1YzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjE0RC8zMEZFMEFGRUM0QzYxMUVBQThENUJFNjZDNEY5QUUwMi9uUjdHWDl6QVdk bHQ5ZE9aa3ZzVWVYZTNWM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgweQW0TT5HrrI4tr/74jFI9p2tZLX/nz5aFUJVe1cA8GyOAizDFPo KVwKvEIODa1+STm0S1mTgNFBtCmR7If7svO6S8nieNUMcwMdHKwf5FpZ5bI+mB3d aoHKVGWFEptvilk0YDv3l4OZRPozBCXkeiOfbVbjo8il5/ybanSIYDpXjuSWJopv sodTQNm6CJKSq69b9Xbl7ZPhXRALXZj/s0zFCMdJVQ1MVEr+u6M1mhoYTC7Git8D fFjGOO5mXlHu3SD7ijFNsJIAX07rg1tnvRASw2bmMnOI4CXEjyqzJxGuRokYTckD a8iKh6yRIpfvG+bi1DpES6Bx5Kg6msYN -----END CERTIFICATE-----Generated at Mon May 12 19:42:10 2025 by rpki-client