$ rpki-client -vvf rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft File: 5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft (raw, json) Hash identifier: +9R3hCGzQnmtkNwvUcPD0Iob9Ff0VW6o0AHnQiCa130= Subject key identifier: 5D:76:AC:5D:74:1B:7F:4D:63:A0:99:C4:A6:50:D7:88:D6:84:85:83 Authority key identifier: E6:4E:02:17:74:35:AE:F1:CB:FD:62:4E:26:67:E6:96:9A:AF:AA:FF Certificate issuer: /CN=A91D60CF/serialNumber=E64E02177435AEF1CBFD624E2667E6969AAFAAFF Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft Manifest number: A9 Signing time: Sun 11 May 2025 04:51:41 +0000 Manifest this update: Sun 11 May 2025 04:51:41 +0000 Manifest next update: Sun 18 May 2025 04:51:41 +0000 Files and hashes: 1: 5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl (hash: PRFMN7DPhxR9UNSNpu8ju1Z1E3dn3+yd/Uu5AOBA0GI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D60CF, serialNumber=E64E02177435AEF1CBFD624E2667E6969AAFAAFF Validity Not Before: May 11 04:51:41 2025 GMT Not After : May 18 04:51:41 2025 GMT Subject: CN=68202cdd-9c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:22:19:b0:d4:7b:9d:6a:c7:0b:2f:b7:07:91: 42:d3:c5:46:20:87:01:5d:20:96:8d:3f:04:56:45: 78:e8:7a:62:d5:6b:20:e6:ef:2f:ae:f8:87:f8:cd: 39:67:c7:6b:5e:b6:30:ec:8c:be:c8:0c:c1:40:cc: 6d:23:d4:38:cb:36:3e:a6:ff:24:ff:bc:6d:2a:15: 28:14:07:17:0a:81:a6:84:da:77:72:aa:0a:81:97: ba:11:70:dc:0f:73:6b:7a:f5:15:68:11:5a:19:bd: 3d:a5:eb:9e:b2:00:3c:cf:cd:51:eb:c3:d1:5c:53: 6a:0b:e8:fd:e7:2b:23:56:cf:84:d5:ee:43:c7:54: a4:cb:0c:0e:6a:80:6f:27:7b:22:f9:be:d0:68:d2: cd:e4:02:d1:2a:45:72:52:ba:77:7e:00:9e:45:eb: 56:f4:7d:52:80:34:62:b8:89:9d:92:df:a9:e1:b1: fb:e4:0e:3c:1e:6d:90:08:ea:db:ce:ac:50:e1:56: 05:db:a7:97:15:04:62:f3:6a:7c:02:4b:4f:29:31: 6c:e6:54:72:f4:8e:24:8e:1b:7e:a5:ca:44:19:a3: 07:75:b6:3a:da:7a:05:0e:4b:b1:80:81:f4:66:87: b1:9f:19:d0:b7:af:84:fe:c4:10:cf:2f:ce:6a:76: f1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:76:AC:5D:74:1B:7F:4D:63:A0:99:C4:A6:50:D7:88:D6:84:85:83 X509v3 Authority Key Identifier: keyid:E6:4E:02:17:74:35:AE:F1:CB:FD:62:4E:26:67:E6:96:9A:AF:AA:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:76:98:b7:5f:99:f5:bd:a6:9a:5f:08:da:f3:0f:cb:0e:eb: 6e:57:bc:47:a4:f4:1b:36:d0:9a:6f:e5:dc:8c:70:cb:7f:60: 23:00:2c:a0:99:9b:40:9d:fa:2c:09:a5:fe:70:ca:8e:ca:96: 59:1c:00:73:3f:26:86:8e:25:50:84:2f:68:6f:92:5d:48:6b: e0:3e:81:9d:2d:95:2f:a1:d3:84:1f:1e:6e:3d:0c:6e:c6:46: 90:1f:9d:78:77:30:54:d1:42:0d:f8:5e:25:f9:47:55:b3:ee: d0:07:2f:3f:3e:68:89:1e:c3:c7:32:fe:09:6d:f4:7c:f1:4a: e2:32:28:41:ca:5d:0a:8c:e4:e8:d7:f8:f0:52:af:19:2c:3c: 31:f1:98:62:87:20:f6:47:28:e3:d4:b3:2c:9f:63:ca:39:eb: cb:cf:2e:e6:c7:4f:7f:9c:f5:89:27:a1:92:a2:e3:6d:27:a9: 18:5c:e4:c8:62:74:81:42:9b:db:1c:4b:11:76:c6:e4:b2:9b: 71:44:6b:d9:29:9c:57:81:f6:34:4a:3f:38:d0:c6:de:ab:d0: bb:2f:83:1e:65:91:9c:1c:8e:6f:9e:b4:c8:f6:71:0d:c3:fb: 0c:48:6f:e6:fb:ce:0a:ca:85:f1:ee:69:2f:2d:ea:69:19:25: b1:5d:98:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwQ0YxMTAvBgNVBAUTKEU2NEUwMjE3NzQzNUFFRjFDQkZENjI0RTI2NjdFNjk2 OUFBRkFBRkYwHhcNMjUwNTExMDQ1MTQxWhcNMjUwNTE4MDQ1MTQxWjAYMRYwFAYD VQQDEw02ODIwMmNkZC05YzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7SIZsNR7nWrHCy+3B5FC08VGIIcBXSCWjT8EVkV46Hpi1Wsg5u8vrviH+M05 Z8drXrYw7Iy+yAzBQMxtI9Q4yzY+pv8k/7xtKhUoFAcXCoGmhNp3cqoKgZe6EXDc D3NrevUVaBFaGb09peuesgA8z81R68PRXFNqC+j95ysjVs+E1e5Dx1SkywwOaoBv J3si+b7QaNLN5ALRKkVyUrp3fgCeRetW9H1SgDRiuImdkt+p4bH75A48Hm2QCOrb zqxQ4VYF26eXFQRi82p8AktPKTFs5lRy9I4kjht+pcpEGaMHdbY62noFDkuxgIH0 ZoexnxnQt6+E/sQQzy/OanbxhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF12rF10 G39NY6CZxKZQ14jWhIWDMB8GA1UdIwQYMBaAFOZOAhd0Na7xy/1iTiZn5paar6r/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjBDRi9FRjgxMzdFNDJB RkMxMUVGQTAyNDNDNEFDNEY5QUUwMi81azRDRjNRMXJ2SExfV0pPSm1mbWxwcXZx djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVrNENGM1ExcnZITF9XSk9KbWZtbHBxdnF2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjBDRi9FRjgxMzdFNDJBRkMxMUVGQTAyNDNDNEFDNEY5QUUwMi81azRDRjNRMXJ2 SExfV0pPSm1mbWxwcXZxdjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+dpi3X5n1vaaaXwja8w/LDutuV7xHpPQbNtCab+XcjHDLf2AjACyg mZtAnfosCaX+cMqOypZZHABzPyaGjiVQhC9ob5JdSGvgPoGdLZUvodOEHx5uPQxu xkaQH514dzBU0UIN+F4l+UdVs+7QBy8/PmiJHsPHMv4JbfR88UriMihByl0KjOTo 1/jwUq8ZLDwx8ZhihyD2Ryjj1LMsn2PKOevLzy7mx09/nPWJJ6GSouNtJ6kYXOTI YnSBQpvbHEsRdsbksptxRGvZKZxXgfY0Sj840Mbeq9C7L4MeZZGcHI5vnrTI9nEN w/sMSG/m+84KyoXx7mkvLeppGSWxXZj0 -----END CERTIFICATE-----Generated at Mon May 12 18:17:36 2025 by rpki-client