$ rpki-client -vvf rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft File: 1N8l4OzS44CPaHDuVvcPJVgYkz4.mft (raw, json) Hash identifier: OB0UDHEEjQWfV45xd0DA2NXZurOLLBpZOoViuVlwCSQ= Subject key identifier: 9D:9F:38:08:90:31:C3:7E:9E:B1:94:E6:04:CF:1B:01:01:22:02:AA Authority key identifier: D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E Certificate issuer: /CN=A91D260A/serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft Manifest number: 9B Signing time: Tue 13 May 2025 05:28:25 +0000 Manifest this update: Tue 13 May 2025 05:28:24 +0000 Manifest next update: Tue 20 May 2025 05:28:24 +0000 Files and hashes: 1: 1N8l4OzS44CPaHDuVvcPJVgYkz4.crl (hash: iYYpni/KBlOxCrOYmw1mMH6/oCGo9Y6IXVymFdiHXLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:28:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D260A, serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E Validity Not Before: May 13 05:28:24 2025 GMT Not After : May 20 05:28:24 2025 GMT Subject: CN=6822d879-04f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:73:47:3b:d5:05:d0:d0:99:48:37:96:10:74: fc:e5:d6:88:22:67:55:a5:38:4d:b2:15:2c:b1:2c: 0c:5b:16:0e:c3:93:de:19:05:32:3f:4b:19:51:e3: 2a:f7:1e:bc:9f:10:7b:c5:08:f3:f7:a0:53:c7:10: 2e:cc:22:b5:9c:88:12:20:9f:53:e7:a6:72:23:22: 07:ed:e7:71:8b:dc:0b:f5:65:d2:f4:34:4e:27:d8: d2:87:f7:13:85:ac:e7:f2:b7:a5:eb:82:c4:ba:39: 1b:0e:5f:10:60:08:04:9a:5c:eb:3d:ce:d8:19:e8: 87:2a:84:f8:ef:3a:9f:af:bf:43:6b:de:ab:3e:ca: e9:be:25:a1:15:d2:e1:09:cc:8a:19:cc:1c:8f:ef: cd:45:dd:ec:18:f3:a5:21:24:8d:bc:72:58:2b:21: f3:87:04:73:4b:bc:37:59:6a:87:94:f6:6b:00:7d: f0:72:68:ff:a9:e1:0a:f6:a4:35:fe:8b:85:44:30: a2:12:1d:24:e8:2b:0c:4f:41:f8:d0:bc:75:57:12: bf:f9:78:52:4e:4b:6e:ff:82:d8:1d:16:d8:3c:1f: 5e:0e:20:5d:5f:a7:68:07:e0:cc:d0:68:5e:08:3b: a2:87:3a:10:d7:9a:e6:49:2e:58:8e:de:49:b2:6a: 89:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:9F:38:08:90:31:C3:7E:9E:B1:94:E6:04:CF:1B:01:01:22:02:AA X509v3 Authority Key Identifier: keyid:D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:cf:97:aa:6f:77:22:69:88:8b:26:50:aa:1b:a0:9b:d3:85: 13:e1:d0:21:1c:cd:27:91:33:08:d7:0c:83:25:bd:d0:73:3e: 00:05:25:31:9c:ab:86:8e:a7:40:c3:2c:7d:ea:52:53:36:c8: ec:8e:76:65:7e:c7:3a:b8:af:74:82:bf:84:5c:8e:9f:b8:78: 06:1f:60:c7:2f:4c:e6:1b:a5:bb:39:aa:73:78:bc:0e:fd:2b: 7c:42:a4:b8:b5:7e:c4:e5:e1:75:95:b9:b0:1c:bb:d7:a0:36: 3b:21:a4:71:46:56:98:b3:7e:64:cf:e7:e6:c2:5b:37:91:8e: 5f:62:d4:7b:c8:b3:1f:dc:34:a2:77:10:87:f3:2d:03:4a:f2: 06:e7:c0:2a:5d:a7:10:7d:6d:6d:81:5e:ef:de:bf:0c:35:d7: 36:d2:9f:63:11:f8:00:67:f2:70:a2:80:1b:03:03:e5:84:2c: 04:48:3f:86:4a:f6:a4:34:45:4d:6a:55:7c:7f:55:49:c5:77: 4a:ef:ca:40:59:dd:f0:0d:a5:15:d6:89:82:3e:da:d4:c7:20: 45:78:55:f0:3b:41:c3:19:56:98:7b:4a:3d:fa:c3:95:91:53: 76:b0:e3:3a:cc:8e:2a:65:cf:82:e7:6e:e0:42:d4:1d:13:6a: cc:44:68:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2MEExMTAvBgNVBAUTKEQ0REYyNUUwRUNEMkUzODA4RjY4NzBFRTU2RjcwRjI1 NTgxODkzM0UwHhcNMjUwNTEzMDUyODI0WhcNMjUwNTIwMDUyODI0WjAYMRYwFAYD VQQDEw02ODIyZDg3OS0wNGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXNHO9UF0NCZSDeWEHT85daIImdVpThNshUssSwMWxYOw5PeGQUyP0sZUeMq 9x68nxB7xQjz96BTxxAuzCK1nIgSIJ9T56ZyIyIH7edxi9wL9WXS9DROJ9jSh/cT hazn8rel64LEujkbDl8QYAgEmlzrPc7YGeiHKoT47zqfr79Da96rPsrpviWhFdLh CcyKGcwcj+/NRd3sGPOlISSNvHJYKyHzhwRzS7w3WWqHlPZrAH3wcmj/qeEK9qQ1 /ouFRDCiEh0k6CsMT0H40Lx1VxK/+XhSTktu/4LYHRbYPB9eDiBdX6doB+DM0Ghe CDuihzoQ15rmSS5Yjt5JsmqJeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ2fOAiQ McN+nrGU5gTPGwEBIgKqMB8GA1UdIwQYMBaAFNTfJeDs0uOAj2hw7lb3DyVYGJM+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjYwQS9CNkRDRjFEQzQ0 OTUxMUVGQTQ1OTBDM0RDNEY5QUUwMi8xTjhsNE96UzQ0Q1BhSER1VnZjUEpWZ1lr ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFOOGw0T3pTNDRDUGFIRHVWdmNQSlZnWWt6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjYwQS9CNkRDRjFEQzQ0OTUxMUVGQTQ1OTBDM0RDNEY5QUUwMi8xTjhsNE96UzQ0 Q1BhSER1VnZjUEpWZ1lrejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRz5eqb3ciaYiLJlCqG6Cb04UT4dAhHM0nkTMI1wyDJb3Qcz4ABSUx nKuGjqdAwyx96lJTNsjsjnZlfsc6uK90gr+EXI6fuHgGH2DHL0zmG6W7OapzeLwO /St8QqS4tX7E5eF1lbmwHLvXoDY7IaRxRlaYs35kz+fmwls3kY5fYtR7yLMf3DSi dxCH8y0DSvIG58AqXacQfW1tgV7v3r8MNdc20p9jEfgAZ/JwooAbAwPlhCwESD+G SvakNEVNalV8f1VJxXdK78pAWd3wDaUV1omCPtrUxyBFeFXwO0HDGVaYe0o9+sOV kVN2sOM6zI4qZc+C527gQtQdE2rMRGjR -----END CERTIFICATE-----Generated at Wed May 14 19:48:53 2025 by rpki-client