$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft File: foUuJJ2cR8tllecBfQfeJ8OUrwk.mft (raw, json) Hash identifier: /tEFTaJPUq/0Rju4i7n51szMzSRW1t9SnHcZGBqyT7Q= Subject key identifier: 60:0B:8F:B4:96:2C:2A:89:B3:82:7B:D0:5B:E0:57:23:77:38:08:AA Authority key identifier: 7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09 Certificate issuer: /CN=A91E5D61/serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09 Certificate serial: 34C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft Manifest number: 476F Signing time: Mon 12 May 2025 14:20:51 +0000 Manifest this update: Mon 12 May 2025 14:20:51 +0000 Manifest next update: Mon 19 May 2025 14:20:51 +0000 Files and hashes: 1: foUuJJ2cR8tllecBfQfeJ8OUrwk.crl (hash: ktFBfSdFKD6G/+2hbrhmarKrVQbwyLoMlIvnFeQGm0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13507 (0x34c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09 Validity Not Before: May 12 14:20:51 2025 GMT Not After : May 19 14:20:51 2025 GMT Subject: CN=682203c3-d2c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2d:86:0f:99:30:59:93:0f:6b:7c:1a:b2:f1: 8c:8e:2b:77:99:c1:6f:dc:ac:8f:49:1b:25:1e:0c: f7:42:d2:c5:f4:5d:8a:82:a8:ce:47:29:ec:d1:83: 8e:88:2e:01:42:57:5b:82:b8:73:38:57:63:ed:67: c9:b7:4b:f0:21:1d:d6:b0:b2:98:67:cd:20:a9:34: 7e:d7:d2:b2:9a:d0:01:7f:3b:aa:e3:21:05:05:38: a0:fb:02:92:e6:25:4a:b2:d0:92:42:87:dc:2c:24: bd:7f:fd:b6:78:ac:7d:ec:20:92:d8:bf:a7:90:20: 5b:2d:5f:9a:21:72:86:cb:71:b4:5e:31:e4:b4:e2: 97:3c:ba:1b:58:dc:b8:bf:14:8f:86:9a:1d:82:0c: 35:a3:1d:b4:54:a0:c3:e9:72:75:7d:20:40:12:35: e7:50:c5:0b:c4:9b:79:30:91:e8:e4:a0:60:2c:c6: 40:44:33:cf:d5:d5:78:ee:f9:53:77:d6:75:db:1d: 6a:07:ee:50:a7:f3:f6:bf:6b:3e:aa:af:73:ab:54: 49:11:27:c1:3e:67:20:d5:f3:4f:76:9c:e3:f1:c0: 02:d1:9f:b1:ed:86:08:2a:0a:bc:fb:6c:d7:2f:ac: c2:d6:b9:83:6d:42:73:0c:52:fe:9c:02:fb:74:d2: 54:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:0B:8F:B4:96:2C:2A:89:B3:82:7B:D0:5B:E0:57:23:77:38:08:AA X509v3 Authority Key Identifier: keyid:7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:4a:1a:06:6a:85:7d:c1:08:98:76:b2:c7:fe:b1:63:a9:80: c1:32:83:4c:3e:93:ea:c3:e2:a0:e0:8d:68:86:89:bf:14:8b: 7b:cb:64:e2:26:e0:4e:5b:e5:2a:a1:8a:26:7a:8b:74:e4:66: 76:6d:a3:e4:10:97:11:c4:11:7d:8d:e7:62:24:90:96:84:5a: 86:c2:25:26:cf:e9:01:98:df:20:c3:56:7a:65:af:28:8a:91: 7d:1b:19:65:84:bf:b2:8a:20:c3:f6:a7:e1:0e:50:7f:36:75: bd:83:36:17:94:f6:61:ff:b3:e2:7a:66:5e:79:42:c0:1f:0f: ba:e3:c4:d8:30:7f:a7:c3:4e:c2:ac:ef:94:d6:bb:73:aa:60: 3c:60:e6:dc:46:c4:e5:8a:08:3e:60:62:a2:29:af:ad:d9:75: d3:dc:47:94:92:26:0e:ef:6a:d0:b9:db:b3:d0:b0:d3:4b:dc: e0:ca:ba:c5:3c:56:4e:d9:96:15:ea:cb:b6:14:a2:06:05:56: b0:14:68:62:8b:89:5e:21:4b:9b:da:b6:ce:75:4a:d8:09:6d: d0:71:d4:aa:0b:20:f8:e0:6a:6f:ae:51:29:dc:7a:b8:eb:cb: 96:70:ad:61:b1:a0:e3:c5:7e:26:e7:f1:d5:f9:8f:c4:a6:09: 06:b7:25:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDdFODUyRTI0OUQ5QzQ3Q0I2NTk1RTcwMTdEMDdERTI3 QzM5NEFGMDkwHhcNMjUwNTEyMTQyMDUxWhcNMjUwNTE5MTQyMDUxWjAYMRYwFAYD VQQDEw02ODIyMDNjMy1kMmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0i2GD5kwWZMPa3wasvGMjit3mcFv3KyPSRslHgz3QtLF9F2KgqjORyns0YOO iC4BQldbgrhzOFdj7WfJt0vwIR3WsLKYZ80gqTR+19KymtABfzuq4yEFBTig+wKS 5iVKstCSQofcLCS9f/22eKx97CCS2L+nkCBbLV+aIXKGy3G0XjHktOKXPLobWNy4 vxSPhpodggw1ox20VKDD6XJ1fSBAEjXnUMULxJt5MJHo5KBgLMZARDPP1dV47vlT d9Z12x1qB+5Qp/P2v2s+qq9zq1RJESfBPmcg1fNPdpzj8cAC0Z+x7YYIKgq8+2zX L6zC1rmDbUJzDFL+nAL7dNJUjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGALj7SW LCqJs4J70FvgVyN3OAiqMB8GA1UdIwQYMBaAFH6FLiSdnEfLZZXnAX0H3ifDlK8J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8wQzZBMEM5RTFE NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9mb1V1SkoyY1I4dGxsZWNCZlFmZUo4T1Vy d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZvVXVKSjJjUjh0bGxlY0JmUWZlSjhPVXJ3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS8wQzZBMEM5RTFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9mb1V1SkoyY1I4 dGxsZWNCZlFmZUo4T1Vyd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACShoGaoV9wQiYdrLH/rFjqYDBMoNMPpPqw+Kg4I1ohom/FIt7y2Ti JuBOW+UqoYomeot05GZ2baPkEJcRxBF9jediJJCWhFqGwiUmz+kBmN8gw1Z6Za8o ipF9GxllhL+yiiDD9qfhDlB/NnW9gzYXlPZh/7PiemZeeULAHw+648TYMH+nw07C rO+U1rtzqmA8YObcRsTligg+YGKiKa+t2XXT3EeUkiYO72rQuduz0LDTS9zgyrrF PFZO2ZYV6su2FKIGBVawFGhii4leIUub2rbOdUrYCW3QcdSqCyD44GpvrlEp3Hq4 68uWcK1hsaDjxX4m5/HV+Y/EpgkGtyUV -----END CERTIFICATE-----Generated at Wed May 14 14:49:17 2025 by rpki-client