$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft File: C3f3vSPLQoWNC7_29-OscxNVMdU.mft (raw, json) Hash identifier: leeQktmQTLxQnMqxnT/W6SgP0kKufY5rHEiMQlCMH7w= Subject key identifier: 38:97:6E:49:93:82:30:28:50:1A:A4:53:88:C0:2B:E1:25:08:3E:8C Authority key identifier: 0B:77:F7:BD:23:CB:42:85:8D:0B:BF:F6:F7:E3:AC:73:13:55:31:D5 Certificate issuer: /CN=A91EBC61/serialNumber=0B77F7BD23CB42858D0BBFF6F7E3AC73135531D5 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft Manifest number: 51 Signing time: Tue 13 May 2025 06:29:28 +0000 Manifest this update: Tue 13 May 2025 06:29:27 +0000 Manifest next update: Tue 20 May 2025 06:29:27 +0000 Files and hashes: 1: C3f3vSPLQoWNC7_29-OscxNVMdU.crl (hash: dptg9UhfC85CJQrxiC9ZoST5rr7dKYjdyKfMI1cElxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.crl rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBC61, serialNumber=0B77F7BD23CB42858D0BBFF6F7E3AC73135531D5 Validity Not Before: May 13 06:29:27 2025 GMT Not After : May 20 06:29:27 2025 GMT Subject: CN=6822e6c8-aaff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:54:cf:cb:50:0f:cb:5d:55:d6:8a:ea:1c:8b: f1:11:8d:9f:00:00:c6:d4:f8:9d:15:ca:69:c7:45: fe:61:27:8a:33:63:f6:66:ae:9b:3d:f6:70:85:9e: a7:76:c3:e1:ba:d8:00:08:6e:5e:a6:18:29:e9:8f: f2:ba:db:36:04:e5:db:68:2b:51:05:26:49:5b:e0: 0c:65:3f:3a:d4:d4:59:f4:40:82:69:1a:88:4b:af: 81:2d:60:37:f9:ce:60:a2:60:33:5a:2d:43:50:54: f4:68:ce:93:20:95:e7:76:11:d6:85:6e:1f:b2:17: 71:f7:54:d2:97:6a:4f:32:ee:78:79:47:c8:c8:07: e4:33:85:9b:db:bb:0d:4c:ab:48:56:a2:23:14:29: cb:1e:37:43:4a:72:a4:e4:de:e6:5d:3e:fc:87:89: e8:c3:c0:c0:a8:92:93:d2:78:31:71:76:85:17:0a: a5:28:2b:b3:a3:03:a2:a2:2d:32:db:fd:30:a5:69: f9:3f:f7:99:3e:04:33:de:3f:0e:e4:34:fd:36:8e: 8f:4e:7e:48:e4:35:30:0d:4e:99:52:a1:33:87:c0: f6:3e:26:f3:a2:d8:f2:13:72:30:97:70:a3:43:23: a6:ab:c2:ec:82:db:84:40:45:0f:09:92:7b:fa:33: e0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:97:6E:49:93:82:30:28:50:1A:A4:53:88:C0:2B:E1:25:08:3E:8C X509v3 Authority Key Identifier: keyid:0B:77:F7:BD:23:CB:42:85:8D:0B:BF:F6:F7:E3:AC:73:13:55:31:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:af:7d:6b:ab:1b:28:28:75:b0:39:4d:4c:4e:08:4d:6c:4d: 54:f2:4e:9a:64:06:42:8d:2d:56:cf:1a:7e:75:b3:96:0b:01: 7f:fa:9f:51:f5:63:6c:b2:90:15:de:78:56:9b:60:63:52:43: 93:e8:55:7e:46:36:b5:8b:23:8b:68:6b:ce:df:47:75:21:d9: 0f:5e:06:c1:31:88:7a:49:04:0b:31:76:ff:41:86:3b:03:61: 40:fb:23:a1:c9:9e:88:37:c3:91:bc:5d:0a:53:38:a0:2a:09: ff:fd:b9:09:26:52:36:f9:43:03:a3:50:5b:cf:b1:1a:66:8b: 38:f2:55:ca:53:1d:31:7e:07:a5:93:0c:ae:f6:9a:5a:bc:8b: e3:c6:72:36:15:5f:53:a1:ee:f6:1b:2c:e8:89:cf:d6:a2:36: fa:18:3d:86:4f:c7:07:2d:f2:2b:ef:c2:b5:76:c9:cd:3f:3e: 96:ca:cc:ca:a3:44:6d:8e:c0:04:c2:83:12:da:ae:16:2b:02: 9d:ff:cf:b4:54:5e:a6:5d:b5:7a:3c:31:f4:a9:05:e2:17:32: 3b:af:19:d4:3d:25:cb:3b:91:8a:44:64:2d:dc:d0:de:aa:07: c4:a1:4e:a3:c4:af:bc:85:70:da:7c:54:29:63:07:96:7f:4c: 88:f1:da:f4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkM2MTExMC8GA1UEBRMoMEI3N0Y3QkQyM0NCNDI4NThEMEJCRkY2RjdFM0FDNzMx MzU1MzFENTAeFw0yNTA1MTMwNjI5MjdaFw0yNTA1MjAwNjI5MjdaMBgxFjAUBgNV BAMTDTY4MjJlNmM4LWFhZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcVM/LUA/LXVXWiuoci/ERjZ8AAMbU+J0VymnHRf5hJ4ozY/Zmrps99nCFnqd2 w+G62AAIbl6mGCnpj/K62zYE5dtoK1EFJklb4AxlPzrU1Fn0QIJpGohLr4EtYDf5 zmCiYDNaLUNQVPRozpMgled2EdaFbh+yF3H3VNKXak8y7nh5R8jIB+QzhZvbuw1M q0hWoiMUKcseN0NKcqTk3uZdPvyHiejDwMCokpPSeDFxdoUXCqUoK7OjA6KiLTLb /TClafk/95k+BDPePw7kNP02jo9OfkjkNTANTplSoTOHwPY+JvOi2PITcjCXcKND I6arwuyC24RARQ8Jknv6M+AzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOJduSZOC MChQGqRTiMAr4SUIPowwHwYDVR0jBBgwFoAUC3f3vSPLQoWNC7/29+OscxNVMdUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCQzYxLzRDNkY2ODU2QjZD NDExRUZBMjRBQTYxNkM0RjlBRTAyL0MzZjN2U1BMUW9XTkM3XzI5LU9zY3hOVk1k VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQzNmM3ZTUExRb1dOQzdfMjktT3NjeE5WTWRVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC QzYxLzRDNkY2ODU2QjZDNDExRUZBMjRBQTYxNkM0RjlBRTAyL0MzZjN2U1BMUW9X TkM3XzI5LU9zY3hOVk1kVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI6vfWurGygodbA5TUxOCE1sTVTyTppkBkKNLVbPGn51s5YLAX/6n1H1 Y2yykBXeeFabYGNSQ5PoVX5GNrWLI4toa87fR3Uh2Q9eBsExiHpJBAsxdv9BhjsD YUD7I6HJnog3w5G8XQpTOKAqCf/9uQkmUjb5QwOjUFvPsRpmizjyVcpTHTF+B6WT DK72mlq8i+PGcjYVX1Oh7vYbLOiJz9aiNvoYPYZPxwct8ivvwrV2yc0/PpbKzMqj RG2OwATCgxLarhYrAp3/z7RUXqZdtXo8MfSpBeIXMjuvGdQ9Jcs7kYpEZC3c0N6q B8ShTqPEr7yFcNp8VCljB5Z/TIjx2vQ= -----END CERTIFICATE-----Generated at Tue May 13 10:43:58 2025 by rpki-client