$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft File: Ii81OE7WK2pwdPiC574Cnw4E40M.mft (raw, json) Hash identifier: xz6wjf2kJxOAjFypG3+tffPdpHsQsnniC5BxpJ/GRkU= Subject key identifier: 5F:F2:EF:07:95:D8:0C:35:24:7B:9F:62:7D:F7:4B:C0:C5:CB:21:C0 Authority key identifier: 22:2F:35:38:4E:D6:2B:6A:70:74:F8:82:E7:BE:02:9F:0E:04:E3:43 Certificate issuer: /CN=A91E5D61/serialNumber=222F35384ED62B6A7074F882E7BE029F0E04E343 Certificate serial: 3497 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft Manifest number: 471A Signing time: Sat 10 May 2025 14:20:54 +0000 Manifest this update: Sat 10 May 2025 14:20:54 +0000 Manifest next update: Sat 17 May 2025 14:20:54 +0000 Files and hashes: 1: Ii81OE7WK2pwdPiC574Cnw4E40M.crl (hash: mqaDFYey/QtYczI7uI9AApGOO2VZ9dwA/iJRsyCcO64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.crl rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13463 (0x3497) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=222F35384ED62B6A7074F882E7BE029F0E04E343 Validity Not Before: May 10 14:20:54 2025 GMT Not After : May 17 14:20:54 2025 GMT Subject: CN=681f60c6-ed8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:89:66:43:48:e4:c0:e0:95:f5:2b:28:12:af: 3e:5c:57:b1:d9:ec:e0:6b:81:b0:df:ae:44:24:9e: 03:b9:77:cb:d5:25:24:35:a1:3f:68:37:eb:d8:ab: d4:da:ff:b6:85:5f:35:97:52:a6:71:c5:f5:3d:cf: 11:89:92:37:59:8f:d0:24:8b:09:27:d2:7f:45:ec: ef:38:71:ea:69:6c:ba:bc:3b:06:22:df:37:0c:8f: 14:83:14:70:46:07:f1:2b:fb:a2:82:4b:37:21:7b: e4:78:ab:60:52:73:f8:dc:66:a7:7c:5e:4f:08:a9: f9:39:91:e6:4a:80:b8:b0:64:6f:4c:e0:c7:3e:c0: ea:2e:37:2f:20:4f:a8:16:b9:6c:3e:da:27:79:e0: e3:8a:d8:48:2e:78:7a:dd:07:98:a7:d2:9b:f6:df: c4:01:22:94:1d:c9:92:a5:62:65:24:71:45:fa:2b: c5:54:fc:28:88:30:17:55:3f:76:33:8c:06:2d:34: 8a:a2:20:3e:46:70:11:c8:61:69:5e:03:b9:f7:1e: e0:2b:79:f9:c9:07:d4:86:1c:91:ad:cd:17:ad:4f: 49:d7:c1:a5:bc:90:17:0f:91:b0:73:65:c2:4a:6e: ce:0b:c7:14:33:00:c1:14:7c:5f:b6:4b:aa:23:7a: b3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F2:EF:07:95:D8:0C:35:24:7B:9F:62:7D:F7:4B:C0:C5:CB:21:C0 X509v3 Authority Key Identifier: keyid:22:2F:35:38:4E:D6:2B:6A:70:74:F8:82:E7:BE:02:9F:0E:04:E3:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:90:f6:02:63:9a:2d:b0:32:42:0b:0a:49:9e:0f:61:89:a3: 33:5d:93:54:ce:5c:ed:47:fa:00:54:fa:a9:76:2a:0a:b0:cc: 22:f7:ad:d4:58:76:f0:d3:73:d5:ba:29:66:48:76:4a:61:69: da:2a:1d:9a:e9:8c:6f:48:69:65:c0:e2:a5:e8:57:3c:d5:ba: 30:86:23:5b:f2:8e:60:08:e4:e3:5a:57:4b:85:ac:8f:69:b0: 9f:43:a6:85:7b:d1:9e:61:15:62:c1:42:fd:a2:45:6e:85:e6: 2a:08:32:f8:67:ff:44:82:78:59:7a:cb:01:17:68:b4:ee:f3: 49:c3:cb:b0:e5:37:6f:b2:67:b5:35:c4:94:61:38:19:2e:c0: c5:4d:e6:93:f0:83:17:7f:c2:97:e7:86:d1:f4:8f:ff:1f:e5: a8:a1:4b:2d:9a:b1:23:3f:0d:75:87:cd:61:15:9c:e3:e1:91: d4:38:9c:a5:3b:80:df:c3:30:f6:4f:c4:36:d9:7b:01:17:3a: a1:f8:83:76:d2:18:5b:8b:c4:b3:46:22:59:14:31:1a:f5:a7: e7:ac:1b:6a:cb:63:8c:7e:4a:f6:ef:23:6e:2e:32:3a:75:c4: 08:53:49:0a:d9:35:4a:51:14:7f:93:97:0e:8f:ee:12:a7:6a: 6c:81:21:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDIyMkYzNTM4NEVENjJCNkE3MDc0Rjg4MkU3QkUwMjlG MEUwNEUzNDMwHhcNMjUwNTEwMTQyMDU0WhcNMjUwNTE3MTQyMDU0WjAYMRYwFAYD VQQDEw02ODFmNjBjNi1lZDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYlmQ0jkwOCV9SsoEq8+XFex2ezga4Gw365EJJ4DuXfL1SUkNaE/aDfr2KvU 2v+2hV81l1KmccX1Pc8RiZI3WY/QJIsJJ9J/RezvOHHqaWy6vDsGIt83DI8UgxRw RgfxK/uigks3IXvkeKtgUnP43GanfF5PCKn5OZHmSoC4sGRvTODHPsDqLjcvIE+o FrlsPtoneeDjithILnh63QeYp9Kb9t/EASKUHcmSpWJlJHFF+ivFVPwoiDAXVT92 M4wGLTSKoiA+RnARyGFpXgO59x7gK3n5yQfUhhyRrc0XrU9J18GlvJAXD5Gwc2XC Sm7OC8cUMwDBFHxftkuqI3qzqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/y7weV 2Aw1JHufYn33S8DFyyHAMB8GA1UdIwQYMBaAFCIvNThO1itqcHT4gue+Ap8OBOND MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS9FRTY3RDhDMDFE NzgxMUUyODc5RTM4QzUwOEIwMkNEMi9JaTgxT0U3V0sycHdkUGlDNTc0Q253NEU0 ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lpODFPRTdXSzJwd2RQaUM1NzRDbnc0RTQwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS9FRTY3RDhDMDFENzgxMUUyODc5RTM4QzUwOEIwMkNEMi9JaTgxT0U3V0sy cHdkUGlDNTc0Q253NEU0ME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzkPYCY5otsDJCCwpJng9hiaMzXZNUzlztR/oAVPqpdioKsMwi963U WHbw03PVuilmSHZKYWnaKh2a6YxvSGllwOKl6Fc81bowhiNb8o5gCOTjWldLhayP abCfQ6aFe9GeYRViwUL9okVuheYqCDL4Z/9EgnhZessBF2i07vNJw8uw5Tdvsme1 NcSUYTgZLsDFTeaT8IMXf8KX54bR9I//H+WooUstmrEjPw11h81hFZzj4ZHUOJyl O4DfwzD2T8Q22XsBFzqh+IN20hhbi8SzRiJZFDEa9afnrBtqy2OMfkr27yNuLjI6 dcQIU0kK2TVKURR/k5cOj+4Sp2psgSHD -----END CERTIFICATE-----Generated at Sun May 11 07:35:25 2025 by rpki-client