$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft File: -J0aOgEq7dJ69ICrnjbpKOaPiUI.mft (raw, json) Hash identifier: m6ZqzSQpA6GD/k1NgfeW3lOFeiLSPyMKpNhVdKNXRAw= Subject key identifier: 95:1E:88:C1:7C:DB:1F:30:2F:05:E8:A1:8F:8E:A2:D8:37:09:E7:AC Authority key identifier: F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42 Certificate issuer: /CN=A91DBC93/serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942 Certificate serial: 1F05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft Manifest number: 1F05 Signing time: Mon 12 May 2025 15:58:49 +0000 Manifest this update: Mon 12 May 2025 15:58:49 +0000 Manifest next update: Mon 19 May 2025 15:58:49 +0000 Files and hashes: 1: -J0aOgEq7dJ69ICrnjbpKOaPiUI.crl (hash: +WiFDbrGh7m9Ynsj07b8QyqFGzKvhv92BU7hCc4RzLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7941 (0x1f05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBC93, serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942 Validity Not Before: May 12 15:58:49 2025 GMT Not After : May 19 15:58:49 2025 GMT Subject: CN=68221ab9-6db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:60:c5:7b:05:96:82:76:1f:24:28:bb:25:c7: b2:40:06:9b:67:b4:a6:ed:af:0e:a5:8d:20:73:64: eb:ad:87:8f:20:16:7c:4e:83:3c:9f:b8:0d:ea:4a: 9c:ec:23:78:3d:39:cd:4f:84:15:5f:ce:36:0c:8e: be:3a:20:ed:ca:be:0b:95:c1:97:44:73:43:58:82: 4c:a1:b1:59:d1:18:da:42:0b:e2:de:45:09:bc:9b: 54:fe:2a:9b:24:9c:0e:2e:dc:26:a4:3c:76:a1:d1: 90:83:18:66:e0:73:b8:51:24:bb:17:3c:84:73:16: f1:cf:75:ea:a1:b1:e4:07:1d:25:5a:85:55:0c:5c: 66:e0:60:e7:fb:fa:2a:ba:b9:bd:e1:59:09:b1:4f: e9:49:99:23:3c:1c:3d:d2:6d:04:88:e4:3f:96:90: b0:34:6a:64:6b:ed:5f:25:b4:d6:d0:1a:47:6e:6d: 98:8e:1f:90:b8:35:64:c8:7a:03:43:a2:ed:b4:de: e5:0e:00:d8:16:84:d9:b0:8a:52:b2:90:b9:49:e8: f1:c1:e4:8b:47:b3:a3:cf:1e:dc:b9:06:c0:3c:86: b3:3e:4d:e9:3a:4b:97:3d:4a:d5:51:de:f5:81:21: a6:7c:e2:c0:c3:60:8e:66:d5:25:92:c3:3d:f6:1f: 05:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:1E:88:C1:7C:DB:1F:30:2F:05:E8:A1:8F:8E:A2:D8:37:09:E7:AC X509v3 Authority Key Identifier: keyid:F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:c2:07:a1:68:a0:f9:86:b4:fd:b3:d4:2e:90:52:97:11:64: 73:d2:67:c4:02:64:db:19:f2:09:5e:e1:72:44:38:2c:6b:87: 77:85:58:12:7b:69:19:ab:ea:eb:42:cf:21:e0:d2:66:b6:4b: a2:85:55:1a:e8:7b:1e:ee:91:8d:81:4c:91:92:65:38:73:a4: ec:d1:e7:0f:16:c6:bd:18:f0:b2:d5:25:77:e6:23:d5:d5:3c: e8:6b:cb:83:e6:f0:19:8f:38:ac:2a:c7:55:1b:c2:27:b1:d1: 66:48:da:f7:5a:c0:3f:b2:df:2b:b2:6f:45:8d:51:6b:73:06: 76:61:f3:db:21:d1:d5:e2:60:7d:d1:9f:65:34:ae:fa:be:90: 52:63:61:38:98:36:ef:e7:94:54:ab:6b:39:c7:29:24:4a:44: b3:84:bc:b6:9c:1a:ae:35:9f:c9:0a:e3:4e:3f:7f:f0:ae:5d: 64:eb:eb:5f:4b:fb:1d:5e:e5:d3:b1:d7:61:bd:60:98:35:4a: 53:e1:47:60:23:7c:94:a4:a5:f7:86:36:2c:17:ef:5b:b2:af: f0:93:63:da:17:d6:1f:1e:b2:f9:b0:91:2b:da:92:51:73:43: f3:91:a7:79:d8:58:44:6e:bb:97:dc:77:38:4f:7f:e8:ea:f1: 1e:8e:79:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJDOTMxMTAvBgNVBAUTKEY4OUQxQTNBMDEyQUVERDI3QUY0ODBBQjlFMzZFOTI4 RTY4Rjg5NDIwHhcNMjUwNTEyMTU1ODQ5WhcNMjUwNTE5MTU1ODQ5WjAYMRYwFAYD VQQDEw02ODIyMWFiOS02ZGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmDFewWWgnYfJCi7JceyQAabZ7Sm7a8OpY0gc2TrrYePIBZ8ToM8n7gN6kqc 7CN4PTnNT4QVX842DI6+OiDtyr4LlcGXRHNDWIJMobFZ0RjaQgvi3kUJvJtU/iqb JJwOLtwmpDx2odGQgxhm4HO4USS7FzyEcxbxz3XqobHkBx0lWoVVDFxm4GDn+/oq urm94VkJsU/pSZkjPBw90m0EiOQ/lpCwNGpka+1fJbTW0BpHbm2Yjh+QuDVkyHoD Q6LttN7lDgDYFoTZsIpSspC5SejxweSLR7Ojzx7cuQbAPIazPk3pOkuXPUrVUd71 gSGmfOLAw2COZtUlksM99h8FQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJUeiMF8 2x8wLwXooY+Ootg3CeesMB8GA1UdIwQYMBaAFPidGjoBKu3SevSAq5426Sjmj4lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkM5My84RkI0OEJCNjUz NzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdkSjY5SUNybmpicEtPYVBp VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KMGFPZ0VxN2RKNjlJQ3JuamJwS09hUGlVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkM5My84RkI0OEJCNjUzNzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdk SjY5SUNybmpicEtPYVBpVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkwgehaKD5hrT9s9QukFKXEWRz0mfEAmTbGfIJXuFyRDgsa4d3hVgS e2kZq+rrQs8h4NJmtkuihVUa6Hse7pGNgUyRkmU4c6Ts0ecPFsa9GPCy1SV35iPV 1Tzoa8uD5vAZjzisKsdVG8InsdFmSNr3WsA/st8rsm9FjVFrcwZ2YfPbIdHV4mB9 0Z9lNK76vpBSY2E4mDbv55RUq2s5xykkSkSzhLy2nBquNZ/JCuNOP3/wrl1k6+tf S/sdXuXTsddhvWCYNUpT4UdgI3yUpKX3hjYsF+9bsq/wk2PaF9YfHrL5sJEr2pJR c0Pzkad52FhEbruX3Hc4T3/o6vEejnk6 -----END CERTIFICATE-----Generated at Wed May 14 04:37:13 2025 by rpki-client