$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B2B/A465A49ACF9C11EEAF34465FC4F9AE02/L-aHDoJAvxJ46pnCMRal4KjSCZA.mft File: L-aHDoJAvxJ46pnCMRal4KjSCZA.mft (raw, json) Hash identifier: nSYr4v/VClH4MgIyyQ5KB9jSYu3rq2I0YdzkckOSsvM= Subject key identifier: 8C:69:DD:0B:88:5E:1A:56:F4:B6:C1:BC:7E:92:6C:D8:F8:F7:CB:8A Authority key identifier: 2F:E6:87:0E:82:40:BF:12:78:EA:99:C2:31:16:A5:E0:A8:D2:09:90 Certificate issuer: /CN=A91D8B2B/serialNumber=2FE6870E8240BF1278EA99C23116A5E0A8D20990 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-aHDoJAvxJ46pnCMRal4KjSCZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8B2B/A465A49ACF9C11EEAF34465FC4F9AE02/L-aHDoJAvxJ46pnCMRal4KjSCZA.mft Manifest number: E3 Signing time: Fri 09 May 2025 04:28:47 +0000 Manifest this update: Fri 09 May 2025 04:28:47 +0000 Manifest next update: Fri 16 May 2025 04:28:47 +0000 Files and hashes: 1: L-aHDoJAvxJ46pnCMRal4KjSCZA.crl (hash: 4gHvemckcF/pXMOH3/DfPq9rT3BomOLLrQwqegI0TVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8B2B/A465A49ACF9C11EEAF34465FC4F9AE02/L-aHDoJAvxJ46pnCMRal4KjSCZA.crl rsync://rpki.apnic.net/member_repository/A91D8B2B/A465A49ACF9C11EEAF34465FC4F9AE02/L-aHDoJAvxJ46pnCMRal4KjSCZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-aHDoJAvxJ46pnCMRal4KjSCZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 04:28:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8B2B, serialNumber=2FE6870E8240BF1278EA99C23116A5E0A8D20990 Validity Not Before: May 9 04:28:47 2025 GMT Not After : May 16 04:28:47 2025 GMT Subject: CN=681d847f-9ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:13:29:97:83:e2:2a:5c:c0:09:39:c6:aa:bb: 7b:3c:d4:4a:a2:46:e2:04:a9:b0:fd:b7:51:bc:51: f2:5e:dc:6c:aa:de:cc:ef:dd:13:f9:5b:5d:55:6d: df:69:b8:04:47:0e:78:25:a5:e0:08:96:52:e2:9c: 21:bd:46:80:6a:00:71:82:14:01:3c:33:e8:d2:0a: e3:73:3a:fb:8c:0a:26:c0:03:df:02:08:a4:ce:2d: 13:70:72:ff:9f:2e:bb:87:cf:cb:c9:01:1c:fb:ef: 07:00:54:41:65:27:71:5c:7f:13:04:61:2a:37:c6: 6c:a7:2e:ab:72:15:2d:31:3a:f0:9f:ad:f3:b5:58: 81:0a:d2:f5:85:4b:f6:f4:de:5a:2f:4d:35:46:a2: 18:8f:72:5d:59:0f:5d:4b:d5:67:dc:b4:ac:8a:2f: 46:a9:7d:d9:16:51:39:df:ca:b5:b9:af:83:51:9a: ed:d8:65:06:a6:c7:33:ee:ec:70:4b:e5:f6:34:c0: ae:7f:82:ac:16:9e:cd:02:e9:05:9e:b3:8e:26:54: 78:0d:0a:e9:0c:bd:d5:ee:23:80:ec:98:cf:5a:5a: 88:bf:b0:ab:ef:d9:d6:2b:4b:22:e2:ee:fd:e9:01: 70:b6:cc:bf:2a:02:3b:c9:95:08:f4:7c:af:be:87: e2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:69:DD:0B:88:5E:1A:56:F4:B6:C1:BC:7E:92:6C:D8:F8:F7:CB:8A X509v3 Authority Key Identifier: keyid:2F:E6:87:0E:82:40:BF:12:78:EA:99:C2:31:16:A5:E0:A8:D2:09:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8B2B/A465A49ACF9C11EEAF34465FC4F9AE02/L-aHDoJAvxJ46pnCMRal4KjSCZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-aHDoJAvxJ46pnCMRal4KjSCZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B2B/A465A49ACF9C11EEAF34465FC4F9AE02/L-aHDoJAvxJ46pnCMRal4KjSCZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:4e:c4:6f:38:c2:1a:e6:5b:47:33:3a:b7:dc:d9:ec:56:14: 39:70:21:91:41:96:22:5b:72:56:7d:b1:cc:83:a0:8d:6c:d5: c6:38:28:60:18:92:7f:61:28:e2:02:5f:b7:df:9d:ac:af:4a: 51:8e:a0:49:cf:b7:1d:c9:2f:0d:bd:49:07:f0:65:c5:70:d6: d9:fd:87:d9:7e:d3:4e:fa:02:be:6c:6e:67:41:a9:f7:75:e1: 74:34:c4:fc:55:23:63:eb:a5:38:27:5c:de:07:d9:b9:33:ec: 95:c6:48:f4:b5:98:d5:ca:95:6e:7a:1e:08:54:99:93:08:7e: 81:0f:c0:6c:50:70:9f:34:a4:92:2f:ee:43:49:e8:dc:43:d4: 27:8f:60:31:cf:a8:d7:14:1f:59:62:41:45:82:1b:f2:71:02: f3:41:cc:28:8d:8d:88:65:db:59:1f:1b:da:04:39:8e:34:7a: 20:5b:11:2e:48:61:d9:7e:bb:c3:c9:97:1b:1e:ed:af:a7:4c: dc:18:4d:eb:0d:fa:77:c3:e4:b7:b5:e5:a0:68:8f:b9:a1:c1: fb:46:51:77:47:a1:84:7b:71:f5:1d:ec:f6:44:48:83:3b:b3: ad:f1:b6:6b:30:85:be:d3:c2:38:c6:1f:69:b2:5f:fc:34:a0: e5:19:74:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhCMkIxMTAvBgNVBAUTKDJGRTY4NzBFODI0MEJGMTI3OEVBOTlDMjMxMTZBNUUw QThEMjA5OTAwHhcNMjUwNTA5MDQyODQ3WhcNMjUwNTE2MDQyODQ3WjAYMRYwFAYD VQQDEw02ODFkODQ3Zi05ZWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxMpl4PiKlzACTnGqrt7PNRKokbiBKmw/bdRvFHyXtxsqt7M790T+VtdVW3f abgERw54JaXgCJZS4pwhvUaAagBxghQBPDPo0grjczr7jAomwAPfAgikzi0TcHL/ ny67h8/LyQEc++8HAFRBZSdxXH8TBGEqN8Zspy6rchUtMTrwn63ztViBCtL1hUv2 9N5aL001RqIYj3JdWQ9dS9Vn3LSsii9GqX3ZFlE538q1ua+DUZrt2GUGpscz7uxw S+X2NMCuf4KsFp7NAukFnrOOJlR4DQrpDL3V7iOA7JjPWlqIv7Cr79nWK0si4u79 6QFwtsy/KgI7yZUI9HyvvofiCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIxp3QuI XhpW9LbBvH6SbNj498uKMB8GA1UdIwQYMBaAFC/mhw6CQL8SeOqZwjEWpeCo0gmQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEIyQi9BNDY1QTQ5QUNG OUMxMUVFQUYzNDQ2NUZDNEY5QUUwMi9MLWFIRG9KQXZ4SjQ2cG5DTVJhbDRLalND WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wtYUhEb0pBdnhKNDZwbkNNUmFsNEtqU0NaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEIyQi9BNDY1QTQ5QUNGOUMxMUVFQUYzNDQ2NUZDNEY5QUUwMi9MLWFIRG9KQXZ4 SjQ2cG5DTVJhbDRLalNDWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvTsRvOMIa5ltHMzq33NnsVhQ5cCGRQZYiW3JWfbHMg6CNbNXGOChg GJJ/YSjiAl+3352sr0pRjqBJz7cdyS8NvUkH8GXFcNbZ/YfZftNO+gK+bG5nQan3 deF0NMT8VSNj66U4J1zeB9m5M+yVxkj0tZjVypVueh4IVJmTCH6BD8BsUHCfNKSS L+5DSejcQ9Qnj2Axz6jXFB9ZYkFFghvycQLzQcwojY2IZdtZHxvaBDmONHogWxEu SGHZfrvDyZcbHu2vp0zcGE3rDfp3w+S3teWgaI+5ocH7RlF3R6GEe3H1Hez2REiD O7Ot8bZrMIW+08I4xh9psl/8NKDlGXSQ -----END CERTIFICATE-----Generated at Fri May 9 10:11:02 2025 by rpki-client