$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft File: N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft (raw, json) Hash identifier: 3SKEzdURHR5wtCQT+KfehMv9jlEIFV34ouOqnKxBh7I= Subject key identifier: 41:4B:DD:6B:0F:7B:6F:3D:3C:16:79:32:30:63:F8:68:BF:9F:DF:F0 Authority key identifier: 37:78:35:CD:A2:BD:63:67:EF:0F:EB:5E:A5:81:98:F8:18:3A:87:C1 Certificate issuer: /CN=A91EA409/serialNumber=377835CDA2BD6367EF0FEB5EA58198F8183A87C1 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft Manifest number: 63 Signing time: Sat 17 May 2025 06:30:13 +0000 Manifest this update: Sat 17 May 2025 06:30:12 +0000 Manifest next update: Sat 24 May 2025 06:30:12 +0000 Files and hashes: 1: N3g1zaK9Y2fvD-tepYGY-Bg6h8E.crl (hash: V/NsB9OVU/lyea6+j9aBmxqWD8xly5B9zBxCmC1MF4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.crl rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA409, serialNumber=377835CDA2BD6367EF0FEB5EA58198F8183A87C1 Validity Not Before: May 17 06:30:12 2025 GMT Not After : May 24 06:30:12 2025 GMT Subject: CN=68282cf4-782c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:39:b9:c8:ac:de:14:31:f2:82:92:04:72:21: 2d:2e:60:a6:d8:ef:6f:04:c6:9c:2e:44:32:9f:52: 10:e9:94:51:41:c0:b4:a8:7a:46:47:86:e5:9d:6c: 3d:18:a4:73:99:ef:3b:51:6c:36:1f:c4:71:e3:a1: d4:0e:33:11:95:d4:09:8b:fe:68:e2:b5:14:32:7f: 60:78:5c:41:db:8e:6c:7a:a9:0e:74:8c:e9:43:2d: 0a:bb:3b:43:ba:b0:d0:d7:72:e7:f2:80:c3:0f:8c: 31:7e:85:99:db:83:dc:81:fc:83:38:e8:ff:83:b2: e6:91:f5:7c:10:34:49:33:66:80:68:2e:d6:f3:ab: 32:56:e5:06:87:85:9e:b9:cb:2c:14:17:2a:1b:0b: a2:a3:66:61:e9:78:76:4c:d5:25:e5:0c:b7:5a:81: 39:43:3f:b7:b9:13:11:53:7e:4c:c9:20:c7:b3:91: 45:de:21:8a:50:70:6f:9c:dd:c0:10:b7:0c:68:1d: 0a:f2:d3:3d:5d:a4:22:6c:bd:f5:bd:69:c9:31:53: 99:57:20:46:cd:04:73:c5:61:b0:51:b6:27:31:58: 28:43:bb:d2:2c:ba:70:91:b8:47:6b:7f:32:3b:e2: d7:00:96:b1:c7:e5:0a:e3:6a:92:52:5b:bb:0c:f8: 5b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4B:DD:6B:0F:7B:6F:3D:3C:16:79:32:30:63:F8:68:BF:9F:DF:F0 X509v3 Authority Key Identifier: keyid:37:78:35:CD:A2:BD:63:67:EF:0F:EB:5E:A5:81:98:F8:18:3A:87:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:64:b6:5e:a5:83:54:0c:a5:55:1c:d4:fc:df:b6:f7:f7:21: e2:f2:1d:e9:71:8d:4b:cf:0e:fc:4d:ef:60:f5:4c:50:66:16: 3c:8d:50:5b:60:9c:d4:54:85:55:9e:66:83:24:30:0e:d2:12: 2e:54:a2:6a:55:4a:c8:83:cf:b3:07:aa:0d:48:3d:f7:19:78: f8:8b:08:5d:aa:8b:1a:0e:05:89:71:7f:b9:65:a2:81:f1:62: d1:11:9b:2c:c0:e5:46:39:0b:fd:f7:3d:68:34:42:7d:5d:d2: 43:b3:81:c6:0a:13:ac:7b:94:75:b4:9a:59:19:89:22:8e:40: ba:70:5a:b4:85:6c:b5:46:bb:98:72:1b:cf:3a:8b:39:f8:60: cd:6a:94:ec:06:8f:50:c4:b2:50:af:db:e6:81:f4:97:7d:16: 02:67:d2:1b:de:8f:ea:cf:12:c9:65:f5:78:bc:3d:b2:4f:9a: 52:b2:f6:98:52:dc:9a:d4:16:ab:f1:b1:dd:49:23:7c:c1:77: fe:98:6c:eb:0d:b0:ca:68:52:c9:dc:df:45:3a:91:d2:9b:eb: d0:64:00:8c:b9:16:3f:fc:bc:82:5d:40:91:21:2f:61:bb:fa: 25:8c:97:a0:ab:e5:64:66:20:fb:eb:40:03:d9:01:f4:57:80: cc:2d:cf:4a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTQwOTExMC8GA1UEBRMoMzc3ODM1Q0RBMkJENjM2N0VGMEZFQjVFQTU4MTk4Rjgx ODNBODdDMTAeFw0yNTA1MTcwNjMwMTJaFw0yNTA1MjQwNjMwMTJaMBgxFjAUBgNV BAMTDTY4MjgyY2Y0LTc4MmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBObnIrN4UMfKCkgRyIS0uYKbY728ExpwuRDKfUhDplFFBwLSoekZHhuWdbD0Y pHOZ7ztRbDYfxHHjodQOMxGV1AmL/mjitRQyf2B4XEHbjmx6qQ50jOlDLQq7O0O6 sNDXcufygMMPjDF+hZnbg9yB/IM46P+DsuaR9XwQNEkzZoBoLtbzqzJW5QaHhZ65 yywUFyobC6KjZmHpeHZM1SXlDLdagTlDP7e5ExFTfkzJIMezkUXeIYpQcG+c3cAQ twxoHQry0z1dpCJsvfW9ackxU5lXIEbNBHPFYbBRticxWChDu9IsunCRuEdrfzI7 4tcAlrHH5QrjapJSW7sM+FvNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQUvdaw97 bz08FnkyMGP4aL+f3/AwHwYDVR0jBBgwFoAUN3g1zaK9Y2fvD+tepYGY+Bg6h8Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBNDA5LzAyODlGNkZDOUNB QzExRUZBQjU5NTUxNkM0RjlBRTAyL04zZzF6YUs5WTJmdkQtdGVwWUdZLUJnNmg4 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjNnMXphSzlZMmZ2RC10ZXBZR1ktQmc2aDhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB NDA5LzAyODlGNkZDOUNBQzExRUZBQjU5NTUxNkM0RjlBRTAyL04zZzF6YUs5WTJm dkQtdGVwWUdZLUJnNmg4RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEVktl6lg1QMpVUc1Pzftvf3IeLyHelxjUvPDvxN72D1TFBmFjyNUFtg nNRUhVWeZoMkMA7SEi5UompVSsiDz7MHqg1IPfcZePiLCF2qixoOBYlxf7llooHx YtERmyzA5UY5C/33PWg0Qn1d0kOzgcYKE6x7lHW0mlkZiSKOQLpwWrSFbLVGu5hy G886izn4YM1qlOwGj1DEslCv2+aB9Jd9FgJn0hvej+rPEsll9Xi8PbJPmlKy9phS 3JrUFqvxsd1JI3zBd/6YbOsNsMpoUsnc30U6kdKb69BkAIy5Fj/8vIJdQJEhL2G7 +iWMl6Cr5WRmIPvrQAPZAfRXgMwtz0o= -----END CERTIFICATE-----Generated at Sat May 17 09:39:22 2025 by rpki-client