$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft File: pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft (raw, json) Hash identifier: bC9Cv0/lTfncqFaQTtyZn9gMLRaWHrs15IhtTw3h3c4= Subject key identifier: 1D:46:8C:54:18:39:0A:A5:81:C8:0C:07:6B:98:C1:1B:18:0D:CB:EA Authority key identifier: A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 Certificate issuer: /CN=A91D6552/serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Certificate serial: 3475 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft Manifest number: 3475 Signing time: Sun 04 May 2025 14:53:14 +0000 Manifest this update: Sun 04 May 2025 14:53:13 +0000 Manifest next update: Sun 11 May 2025 14:53:13 +0000 Files and hashes: 1: pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl (hash: BT1lTnd8+uuflDC7qqNl+dC2MafV64G0cJ0j+7fyPqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 14:53:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13429 (0x3475) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6552, serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Validity Not Before: May 4 14:53:13 2025 GMT Not After : May 11 14:53:13 2025 GMT Subject: CN=68177f59-46e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b8:27:56:58:73:8d:c5:f7:43:fa:9e:91:52: 59:b2:18:3c:2c:7d:28:b2:9e:a6:ec:12:0c:97:9d: 62:40:20:cf:c9:3a:af:ee:f6:21:03:f8:84:c6:ef: 84:6c:3a:31:f8:2e:39:77:e9:eb:44:d6:ea:4d:c1: 6a:70:0b:60:d2:b0:bf:df:f1:03:16:67:27:7e:a1: 88:bb:68:75:74:4a:95:bc:4f:21:73:7c:c8:3b:10: 99:12:2d:73:00:dc:cc:78:49:a6:ee:61:df:60:6e: 62:89:42:07:84:28:58:21:b6:8c:17:17:31:ec:96: 89:7d:7e:71:28:3d:90:2f:9f:34:50:07:0a:48:e1: 3d:14:c9:e7:27:7f:7b:ad:23:8c:80:eb:85:0f:0b: d6:c9:73:f1:89:37:d2:0a:be:d9:32:16:98:fa:10: d0:69:c8:ca:92:fa:2a:bc:86:79:41:7d:7d:d9:84: 06:e6:53:47:48:c0:5f:d1:ba:d5:82:ac:a2:e2:4d: 59:ce:8f:47:a2:77:09:27:cb:8c:64:44:46:ac:66: a9:50:b5:aa:50:af:4c:e4:e9:e1:19:3e:c8:b7:e8: d6:ee:5c:9f:ac:3c:cb:99:64:8a:c8:0e:ad:fc:89: 74:26:21:bb:6e:e6:66:8c:6e:56:ed:02:eb:5a:58: 5c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:46:8C:54:18:39:0A:A5:81:C8:0C:07:6B:98:C1:1B:18:0D:CB:EA X509v3 Authority Key Identifier: keyid:A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:63:00:b5:5b:e7:ea:8a:db:f9:ae:a1:40:09:55:ac:3e:7d: f6:e7:46:3e:4d:55:39:d0:67:e6:ed:15:09:d5:4a:f3:3d:52: e7:b5:ff:a5:b6:1c:ba:5c:81:c5:7f:b5:97:40:d6:ee:47:0c: d7:38:b6:1d:87:0a:59:dc:e7:06:39:f8:c5:ff:b0:88:6f:f9: 1f:d5:63:c4:88:ef:e1:5a:19:59:db:a8:04:9e:54:88:86:14: 3f:ee:2a:2a:b0:68:81:0f:98:9f:1b:ee:d0:b2:d3:7e:7f:5e: 26:ea:f4:55:45:41:c3:b4:a5:0d:b3:77:75:db:36:6a:a2:1d: 28:9d:01:59:de:86:ac:dd:08:b8:ca:04:50:2b:51:4b:28:e8: 54:85:8f:49:7d:b3:9a:63:ed:d7:e9:f3:35:a9:6c:27:20:ef: 3e:14:2e:cd:86:9b:99:d1:59:60:4e:8d:48:1e:17:b3:61:0e: c9:45:02:14:00:cc:4a:bd:68:ec:81:a9:6d:95:9d:2d:13:9e: c8:5d:d0:f6:6c:59:d2:04:56:99:96:18:1e:d5:58:ce:e2:b5: ba:19:b8:fa:88:fa:33:e1:8b:dc:21:28:d4:fa:0c:3c:17:57: d0:5d:87:42:f4:7e:d2:2e:54:36:8b:0b:6d:12:33:e7:b2:13: 43:fc:05:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1NTIxMTAvBgNVBAUTKEE1NkUwNDMzQUVCOEIwRkNDNTlFRkU5MUYwRUFGNTA2 MUI3MEQxMTgwHhcNMjUwNTA0MTQ1MzEzWhcNMjUwNTExMTQ1MzEzWjAYMRYwFAYD VQQDEw02ODE3N2Y1OS00NmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLgnVlhzjcX3Q/qekVJZshg8LH0osp6m7BIMl51iQCDPyTqv7vYhA/iExu+E bDox+C45d+nrRNbqTcFqcAtg0rC/3/EDFmcnfqGIu2h1dEqVvE8hc3zIOxCZEi1z ANzMeEmm7mHfYG5iiUIHhChYIbaMFxcx7JaJfX5xKD2QL580UAcKSOE9FMnnJ397 rSOMgOuFDwvWyXPxiTfSCr7ZMhaY+hDQacjKkvoqvIZ5QX192YQG5lNHSMBf0brV gqyi4k1Zzo9HoncJJ8uMZERGrGapULWqUK9M5OnhGT7It+jW7lyfrDzLmWSKyA6t /Il0JiG7buZmjG5W7QLrWlhcsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1GjFQY OQqlgcgMB2uYwRsYDcvqMB8GA1UdIwQYMBaAFKVuBDOuuLD8xZ7+kfDq9QYbcNEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjU1Mi84ODdENzUxMjFE OTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQekZudjZSOE9yMUJodHcw UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXNEVNNjY0c1B6Rm52NlI4T3IxQmh0dzBSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjU1Mi84ODdENzUxMjFEOTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQ ekZudjZSOE9yMUJodHcwUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3YwC1W+fqitv5rqFACVWsPn3250Y+TVU50Gfm7RUJ1UrzPVLntf+l thy6XIHFf7WXQNbuRwzXOLYdhwpZ3OcGOfjF/7CIb/kf1WPEiO/hWhlZ26gEnlSI hhQ/7ioqsGiBD5ifG+7QstN+f14m6vRVRUHDtKUNs3d12zZqoh0onQFZ3oas3Qi4 ygRQK1FLKOhUhY9JfbOaY+3X6fM1qWwnIO8+FC7NhpuZ0VlgTo1IHhezYQ7JRQIU AMxKvWjsgaltlZ0tE57IXdD2bFnSBFaZlhge1VjO4rW6Gbj6iPoz4YvcISjU+gw8 F1fQXYdC9H7SLlQ2iwttEjPnshND/AXJ -----END CERTIFICATE-----Generated at Mon May 5 02:34:39 2025 by rpki-client