$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft File: rsioMoH-iyda7gQb4zzN2Ek7rAA.mft (raw, json) Hash identifier: BRwjyV/L1VPa7WjU5rbQ5G4WhvwTu27GTkGyuvy5ZyA= Subject key identifier: 20:2E:FD:C1:1B:72:7C:A5:91:21:6C:0B:62:9F:38:57:02:37:54:43 Authority key identifier: AE:C8:A8:32:81:FE:8B:27:5A:EE:04:1B:E3:3C:CD:D8:49:3B:AC:00 Certificate issuer: /CN=A91E6D5D/serialNumber=AEC8A83281FE8B275AEE041BE33CCDD8493BAC00 Certificate serial: 2AFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft Manifest number: 9F0D Signing time: Sun 04 May 2025 14:29:35 +0000 Manifest this update: Sun 04 May 2025 14:29:34 +0000 Manifest next update: Sun 11 May 2025 14:29:34 +0000 Files and hashes: 1: rsioMoH-iyda7gQb4zzN2Ek7rAA.crl (hash: xIprCk7pKD0Pm7FJpWrodxl0r94GlZq7m/I4jLhBEPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 14:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11002 (0x2afa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=AEC8A83281FE8B275AEE041BE33CCDD8493BAC00 Validity Not Before: May 4 14:29:34 2025 GMT Not After : May 11 14:29:34 2025 GMT Subject: CN=681779cf-5934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fc:32:69:83:1b:3f:30:20:2b:56:29:0a:27: 37:5a:b7:6e:76:19:70:5e:13:05:27:76:c5:b6:c8: 16:6b:0a:a4:d8:7d:ff:ae:86:bc:b9:09:c0:b0:02: 69:52:73:53:fd:67:06:a3:bb:90:6f:6a:74:ae:ef: ba:75:8c:d1:73:2b:ab:d6:aa:86:a5:9c:62:af:9b: 2d:00:74:34:95:53:93:b1:07:f8:a5:79:4a:4a:6e: e5:fe:b9:16:10:e9:3e:30:b2:dd:ba:51:bb:fc:0e: 8e:c4:e0:6e:9b:5f:d6:88:ec:2e:eb:b4:7f:09:55: 82:b2:a3:ce:1f:48:0f:dc:1b:e6:08:db:c8:74:da: 5b:4c:85:e4:7b:5d:64:21:d4:4b:d5:02:90:e2:35: b3:25:14:14:ac:bf:c9:47:db:d4:2f:8b:d0:c3:c3: 61:a6:04:bd:e6:25:38:ae:56:4d:f9:a1:91:f6:af: f2:64:67:dd:1f:0f:18:9e:91:6c:e5:2a:37:d4:09: 1f:ec:dc:97:46:e8:dd:f3:16:a1:4c:18:6c:0d:fe: f0:54:d4:42:52:13:c5:9e:42:68:14:85:40:47:9f: 08:d2:30:05:91:10:6b:b2:de:e7:ad:5d:12:02:e6: 68:e7:3e:be:f9:e0:9c:68:a0:c0:e6:be:be:02:ec: e0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:2E:FD:C1:1B:72:7C:A5:91:21:6C:0B:62:9F:38:57:02:37:54:43 X509v3 Authority Key Identifier: keyid:AE:C8:A8:32:81:FE:8B:27:5A:EE:04:1B:E3:3C:CD:D8:49:3B:AC:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:de:99:44:ce:76:42:4a:83:ef:79:2d:30:29:77:13:ec:67: fc:34:42:73:7c:01:3f:0c:40:df:03:6d:e5:86:cb:77:71:c2: c9:11:d6:f4:a5:35:66:fc:cd:e0:cf:66:09:de:37:c5:94:21: c3:48:d2:d1:0e:f8:76:a7:d8:c5:fa:11:87:e7:69:04:3b:7b: d7:78:6a:11:54:e4:8f:2d:cf:d2:5e:48:a1:c3:b2:94:5b:8e: e3:6a:a4:af:ef:6c:9d:eb:25:c3:a9:97:6e:5a:50:fe:f6:66: 5d:e8:4c:ad:29:67:30:b2:e5:bc:39:01:ae:1f:82:f5:31:22: 79:46:31:3b:02:20:b7:93:f1:22:5c:32:8a:d9:59:9b:55:b3: 84:8e:a2:e1:89:da:b0:57:d2:a0:35:c8:83:e8:11:a0:11:b3: ac:af:fb:0f:44:0d:48:cf:7d:9b:2e:dd:16:ab:c7:b0:f7:d3: b2:62:99:a4:0c:9c:3a:bb:cd:44:4f:b6:d1:5b:87:d3:03:78: 6d:ec:ff:ac:ae:ca:52:5d:01:d6:2f:23:09:46:11:28:b8:3e: aa:a4:b1:4b:07:d1:5b:33:a8:14:2a:80:3d:92:ad:a4:ee:15: e8:38:80:8e:60:51:b0:3d:d7:c9:2e:54:f6:3a:e7:26:bd:75: 66:f1:70:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKEFFQzhBODMyODFGRThCMjc1QUVFMDQxQkUzM0NDREQ4 NDkzQkFDMDAwHhcNMjUwNTA0MTQyOTM0WhcNMjUwNTExMTQyOTM0WjAYMRYwFAYD VQQDEw02ODE3NzljZi01OTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvwyaYMbPzAgK1YpCic3WrdudhlwXhMFJ3bFtsgWawqk2H3/roa8uQnAsAJp UnNT/WcGo7uQb2p0ru+6dYzRcyur1qqGpZxir5stAHQ0lVOTsQf4pXlKSm7l/rkW EOk+MLLdulG7/A6OxOBum1/WiOwu67R/CVWCsqPOH0gP3BvmCNvIdNpbTIXke11k IdRL1QKQ4jWzJRQUrL/JR9vUL4vQw8NhpgS95iU4rlZN+aGR9q/yZGfdHw8YnpFs 5So31Akf7NyXRujd8xahTBhsDf7wVNRCUhPFnkJoFIVAR58I0jAFkRBrst7nrV0S AuZo5z6++eCcaKDA5r6+AuzgZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAu/cEb cnylkSFsC2KfOFcCN1RDMB8GA1UdIwQYMBaAFK7IqDKB/osnWu4EG+M8zdhJO6wA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9yc2lvTW9ILWl5ZGE3Z1FiNHp6TjJFazdy QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JzaW9Nb0gtaXlkYTdnUWI0enpOMkVrN3JBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9yc2lvTW9ILWl5 ZGE3Z1FiNHp6TjJFazdyQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq3plEznZCSoPveS0wKXcT7Gf8NEJzfAE/DEDfA23lhst3ccLJEdb0 pTVm/M3gz2YJ3jfFlCHDSNLRDvh2p9jF+hGH52kEO3vXeGoRVOSPLc/SXkihw7KU W47jaqSv72yd6yXDqZduWlD+9mZd6EytKWcwsuW8OQGuH4L1MSJ5RjE7AiC3k/Ei XDKK2VmbVbOEjqLhidqwV9KgNciD6BGgEbOsr/sPRA1Iz32bLt0Wq8ew99OyYpmk DJw6u81ET7bRW4fTA3ht7P+srspSXQHWLyMJRhEouD6qpLFLB9FbM6gUKoA9kq2k 7hXoOICOYFGwPdfJLlT2OucmvXVm8XA0 -----END CERTIFICATE-----Generated at Mon May 5 03:32:21 2025 by rpki-client