$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft File: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft (raw, json) Hash identifier: +QnLCfYl9RLMuvIePYklEZQP3BJjCdZPdtf3sHtGzo0= Subject key identifier: CB:44:13:65:07:BD:E6:88:6E:28:73:2F:FE:8A:B6:1F:65:6A:E2:11 Authority key identifier: A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D Certificate issuer: /CN=A91D1E4C/serialNumber=A59D836E1C31623CC586448AA752B746853B841D Certificate serial: 080B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft Manifest number: 0AE4 Signing time: Mon 12 May 2025 20:40:21 +0000 Manifest this update: Mon 12 May 2025 20:40:21 +0000 Manifest next update: Mon 19 May 2025 20:40:21 +0000 Files and hashes: 1: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl (hash: eAIc7120640J8ouA/VK7HDgOu01HlQI+KoBglsQqkj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2059 (0x80b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C, serialNumber=A59D836E1C31623CC586448AA752B746853B841D Validity Not Before: May 12 20:40:21 2025 GMT Not After : May 19 20:40:21 2025 GMT Subject: CN=68225cb5-8ea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cd:a2:ff:68:2f:42:5e:e5:33:04:d1:31:97: 5b:05:4f:b2:be:27:15:50:a3:e6:ef:d5:13:69:e7: cd:52:9c:22:d0:dd:62:50:99:51:e4:4f:89:19:9b: 75:82:2d:d9:25:55:9c:16:d7:12:bf:51:58:4a:07: da:50:71:a9:b1:da:7b:91:c1:77:f2:96:56:cb:2e: ca:7c:e7:7e:e8:8b:bf:1d:c6:e5:37:29:72:e7:db: 51:7c:e1:bd:f5:9a:91:db:58:b6:e5:61:5e:13:d5: fe:d7:6f:e6:7a:69:4e:ae:2d:4e:13:4f:2c:5b:d6: 90:62:bf:77:fb:d5:f1:8e:76:dd:9c:04:83:1d:07: c8:79:1a:ab:57:6d:6a:1f:20:76:18:36:6f:f7:be: fa:8b:aa:f1:01:a2:63:5a:46:6e:4b:3c:51:69:4f: 46:b7:78:2f:a0:82:71:bc:a8:f1:59:50:4f:61:81: 9f:62:3b:ac:56:c4:da:87:e6:8c:7c:5e:a3:2a:21: 02:bc:e3:d7:f7:ab:f6:ae:13:5e:16:e9:da:ba:29: dc:9b:bc:b5:1c:c7:4f:a4:3a:5f:ac:ac:e7:5c:3b: 2a:ec:c8:f5:2e:41:26:0d:0e:27:e6:86:1e:40:f9: 25:6e:52:52:48:d2:a1:01:85:d8:3b:7a:36:35:0e: c9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:44:13:65:07:BD:E6:88:6E:28:73:2F:FE:8A:B6:1F:65:6A:E2:11 X509v3 Authority Key Identifier: keyid:A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:38:7e:e4:4e:9b:20:78:45:68:7a:34:36:6e:84:53:ad:5d: 53:74:d1:93:30:ac:a4:3d:a0:c6:53:de:b0:69:ff:65:f5:d7: fd:90:1c:81:41:54:4a:80:2f:50:7f:00:2c:e5:1b:9f:b7:9b: bd:10:ba:e1:20:c5:18:2d:39:06:9e:f7:63:50:2d:9e:75:74: 76:cc:28:cd:ac:3b:b4:3d:1d:dd:34:0c:a7:c1:34:93:2f:e3: a4:4b:1f:e5:9f:27:db:cd:80:71:05:81:c5:59:e0:48:50:c8: 7b:a4:1b:34:01:86:88:b0:46:8c:f4:28:b5:bb:42:a0:4b:9c: 3e:be:17:3f:f6:a3:ec:92:f6:56:6e:f6:1f:e4:e8:ed:26:09: 6b:2a:0c:da:7b:29:71:ed:0a:66:29:89:9e:fe:26:ee:06:e2: f7:9f:50:10:3b:02:45:6e:25:ac:93:70:83:db:8f:b8:ed:28: 33:dd:99:da:8d:70:11:9d:b2:fd:af:df:41:b6:9e:85:44:b6: 0f:a1:e6:b0:4e:cc:8a:a4:d9:f6:6e:f4:76:1c:a2:9c:be:78: ba:60:56:ea:f9:9d:3c:e7:be:e2:ce:33:e9:0f:3d:ea:7c:83: 89:50:ba:d0:d3:cf:93:6e:83:3b:c3:09:92:59:84:cd:e6:f2: 21:a3:cf:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEE1OUQ4MzZFMUMzMTYyM0NDNTg2NDQ4QUE3NTJCNzQ2 ODUzQjg0MUQwHhcNMjUwNTEyMjA0MDIxWhcNMjUwNTE5MjA0MDIxWjAYMRYwFAYD VQQDEw02ODIyNWNiNS04ZWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq82i/2gvQl7lMwTRMZdbBU+yvicVUKPm79UTaefNUpwi0N1iUJlR5E+JGZt1 gi3ZJVWcFtcSv1FYSgfaUHGpsdp7kcF38pZWyy7KfOd+6Iu/HcblNyly59tRfOG9 9ZqR21i25WFeE9X+12/memlOri1OE08sW9aQYr93+9XxjnbdnASDHQfIeRqrV21q HyB2GDZv9776i6rxAaJjWkZuSzxRaU9Gt3gvoIJxvKjxWVBPYYGfYjusVsTah+aM fF6jKiECvOPX96v2rhNeFunauincm7y1HMdPpDpfrKznXDsq7Mj1LkEmDQ4n5oYe QPklblJSSNKhAYXYO3o2NQ7JzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMtEE2UH veaIbihzL/6Kth9lauIRMB8GA1UdIwQYMBaAFKWdg24cMWI8xYZEiqdSt0aFO4Qd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9wWjJEYmh3eFlqekZoa1NLcDFLM1JvVTdo QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BaMkRiaHd4WWp6RmhrU0twMUszUm9VN2hCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9wWjJEYmh3eFlq ekZoa1NLcDFLM1JvVTdoQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCROH7kTpsgeEVoejQ2boRTrV1TdNGTMKykPaDGU96waf9l9df9kByB QVRKgC9QfwAs5Ruft5u9ELrhIMUYLTkGnvdjUC2edXR2zCjNrDu0PR3dNAynwTST L+OkSx/lnyfbzYBxBYHFWeBIUMh7pBs0AYaIsEaM9Ci1u0KgS5w+vhc/9qPskvZW bvYf5OjtJglrKgzaeylx7QpmKYme/ibuBuL3n1AQOwJFbiWsk3CD24+47Sgz3Zna jXARnbL9r99Btp6FRLYPoeawTsyKpNn2bvR2HKKcvni6YFbq+Z08577izjPpDz3q fIOJULrQ08+TboM7wwmSWYTN5vIho89w -----END CERTIFICATE-----Generated at Tue May 13 05:04:22 2025 by rpki-client