$ rpki-client -vvf rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft File: 1ex0z8jA_QV81Og74-tX8GHcWPg.mft (raw, json) Hash identifier: jsT+Vo7SXNkN0ChCCqoJ22Jt7bWZNWswtEovOEFBYPw= Subject key identifier: 42:D2:CD:1E:4F:0B:D5:6B:FA:59:C5:92:85:9D:81:4D:71:5D:7C:BB Authority key identifier: D5:EC:74:CF:C8:C0:FD:05:7C:D4:E8:3B:E3:EB:57:F0:61:DC:58:F8 Certificate issuer: /CN=A91D313B/serialNumber=D5EC74CFC8C0FD057CD4E83BE3EB57F061DC58F8 Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft Manifest number: 94 Signing time: Sat 03 May 2025 05:44:47 +0000 Manifest this update: Sat 03 May 2025 05:44:47 +0000 Manifest next update: Sat 10 May 2025 05:44:47 +0000 Files and hashes: 1: 1ex0z8jA_QV81Og74-tX8GHcWPg.crl (hash: ZmdlKJgnKcu5XDAc4oS93uyK6tTKtYOKLMcJA1lkVgo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.crl rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 05:44:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D313B, serialNumber=D5EC74CFC8C0FD057CD4E83BE3EB57F061DC58F8 Validity Not Before: May 3 05:44:47 2025 GMT Not After : May 10 05:44:47 2025 GMT Subject: CN=6815ad4f-3339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:46:e4:de:2a:d2:43:bd:ac:84:62:11:8a:a3: 91:7d:e9:b6:90:4f:7d:6b:ae:18:d2:42:96:3a:b1: 72:aa:fd:4f:a8:f8:b5:b2:90:ed:f4:14:34:63:ee: 1f:b2:c2:94:7d:6a:70:1d:6a:37:bf:bd:08:04:e9: 42:e3:68:20:aa:c2:2d:82:bf:8e:10:7e:10:43:22: cf:f8:1d:ae:4b:51:d9:03:c3:0d:85:03:d1:3c:f2: c3:79:f2:9e:b7:c3:82:d7:70:94:a0:a6:ba:f9:3d: 7c:1f:19:d7:70:fd:6a:64:1e:29:84:23:ba:53:c3: a8:62:39:f0:8a:d1:b4:54:04:ba:ac:5a:8c:03:9d: a8:6d:82:7c:5b:13:6e:45:6e:af:8a:6e:ec:4a:95: c2:b2:b0:79:2c:6c:b1:f5:40:bb:93:11:c2:98:f0: ea:9e:a8:e7:a2:11:9a:ca:1d:e7:5b:e5:a6:c4:9e: cd:22:bf:6a:ba:16:fd:5c:de:39:d9:29:91:4d:1b: 20:dc:0c:c7:78:97:b2:06:15:eb:de:e7:26:3c:c5: 8d:69:56:67:1a:8a:e7:74:04:6a:11:7d:03:47:fa: 26:18:cc:49:19:23:1d:99:2c:d9:6a:46:e5:f1:19: fa:f4:89:ce:0b:59:2a:20:15:96:51:e9:fe:d2:94: 2b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D2:CD:1E:4F:0B:D5:6B:FA:59:C5:92:85:9D:81:4D:71:5D:7C:BB X509v3 Authority Key Identifier: keyid:D5:EC:74:CF:C8:C0:FD:05:7C:D4:E8:3B:E3:EB:57:F0:61:DC:58:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:5a:12:99:8d:1b:7a:c9:2a:69:92:91:8b:a1:a2:9b:5e:7e: dc:19:31:c0:6c:12:27:f8:b8:42:be:69:9e:b4:05:21:d6:01: b1:e9:33:a1:a7:ea:ca:9d:4f:2b:39:54:4d:a8:a0:fd:28:66: ca:24:80:9b:5f:08:f5:08:ca:40:a4:e6:af:26:a7:4f:6b:3c: 2e:94:b7:1f:8c:36:eb:a1:6a:8a:6b:26:71:4d:9e:f4:17:e7: 5e:be:90:45:65:4b:3d:20:02:99:4a:09:c6:2d:97:0e:d1:c2: 7e:f6:b9:d5:fa:88:a9:5b:7e:42:3b:a5:93:d2:aa:19:d6:88: a2:58:87:f7:96:b1:07:1f:1a:9b:21:e8:70:7e:c5:49:98:b9: 1a:69:47:c3:85:64:77:e9:5b:ed:a1:fe:b4:de:0d:97:f9:9e: 70:a2:07:11:3b:b5:6b:71:3d:79:5d:9e:00:8c:ca:0c:56:6a: a7:05:31:0d:6a:cd:e0:30:19:6c:2a:e1:32:7f:d1:1b:0a:0a: 5c:bc:9a:ec:8c:1c:b4:07:4d:34:c1:5c:16:b1:2d:b0:0c:3d: 43:15:f7:0c:60:5f:78:04:70:c1:79:69:d6:06:19:c0:33:7d: d3:3d:47:fd:92:34:18:35:7f:18:56:ef:19:00:57:23:4b:f3: a5:ed:24:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMxM0IxMTAvBgNVBAUTKEQ1RUM3NENGQzhDMEZEMDU3Q0Q0RTgzQkUzRUI1N0Yw NjFEQzU4RjgwHhcNMjUwNTAzMDU0NDQ3WhcNMjUwNTEwMDU0NDQ3WjAYMRYwFAYD VQQDEw02ODE1YWQ0Zi0zMzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0bk3irSQ72shGIRiqORfem2kE99a64Y0kKWOrFyqv1PqPi1spDt9BQ0Y+4f ssKUfWpwHWo3v70IBOlC42ggqsItgr+OEH4QQyLP+B2uS1HZA8MNhQPRPPLDefKe t8OC13CUoKa6+T18HxnXcP1qZB4phCO6U8OoYjnwitG0VAS6rFqMA52obYJ8WxNu RW6vim7sSpXCsrB5LGyx9UC7kxHCmPDqnqjnohGayh3nW+WmxJ7NIr9quhb9XN45 2SmRTRsg3AzHeJeyBhXr3ucmPMWNaVZnGorndARqEX0DR/omGMxJGSMdmSzZakbl 8Rn69InOC1kqIBWWUen+0pQrQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELSzR5P C9Vr+lnFkoWdgU1xXXy7MB8GA1UdIwQYMBaAFNXsdM/IwP0FfNToO+PrV/Bh3Fj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzEzQi9ENUJGRUMxNDQ3 REIxMUVGQUVBNEIwMkRDNEY5QUUwMi8xZXgwejhqQV9RVjgxT2c3NC10WDhHSGNX UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFleDB6OGpBX1FWODFPZzc0LXRYOEdIY1dQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzEzQi9ENUJGRUMxNDQ3REIxMUVGQUVBNEIwMkRDNEY5QUUwMi8xZXgwejhqQV9R VjgxT2c3NC10WDhHSGNXUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClWhKZjRt6ySppkpGLoaKbXn7cGTHAbBIn+LhCvmmetAUh1gGx6TOh p+rKnU8rOVRNqKD9KGbKJICbXwj1CMpApOavJqdPazwulLcfjDbroWqKayZxTZ70 F+devpBFZUs9IAKZSgnGLZcO0cJ+9rnV+oipW35CO6WT0qoZ1oiiWIf3lrEHHxqb IehwfsVJmLkaaUfDhWR36Vvtof603g2X+Z5wogcRO7VrcT15XZ4AjMoMVmqnBTEN as3gMBlsKuEyf9EbCgpcvJrsjBy0B000wVwWsS2wDD1DFfcMYF94BHDBeWnWBhnA M33TPUf9kjQYNX8YVu8ZAFcjS/Ol7STh -----END CERTIFICATE-----Generated at Mon May 5 02:58:58 2025 by rpki-client