$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft File: i6wN0-SRhYlP2uKChO3IBHILRhQ.mft (raw, json) Hash identifier: RaRsvQ0gUOxnKp+GJ/CUNfqTlrj7YTMhaIbTqkuSTZs= Subject key identifier: 0F:2A:EA:BE:A0:4F:50:72:AF:9B:F3:DC:E3:21:6A:2F:E7:70:80:2B Authority key identifier: 8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14 Certificate issuer: /CN=A91EBFAE/serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614 Certificate serial: 347F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft Manifest number: 347F Signing time: Sat 10 May 2025 14:31:48 +0000 Manifest this update: Sat 10 May 2025 14:31:47 +0000 Manifest next update: Sat 17 May 2025 14:31:47 +0000 Files and hashes: 1: i6wN0-SRhYlP2uKChO3IBHILRhQ.crl (hash: yRhy20V3kDaKTprqKSmSzHI4vEo6kuOd+MciPR/CWiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:31:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13439 (0x347f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBFAE, serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614 Validity Not Before: May 10 14:31:47 2025 GMT Not After : May 17 14:31:47 2025 GMT Subject: CN=681f6354-0591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0e:5c:3d:b0:d9:d3:8d:7f:8b:75:f8:fd:22: fb:e9:4b:ee:27:a7:e5:e3:7b:50:22:f6:4f:33:92: f9:0c:17:79:cf:3b:0b:b0:f8:e4:62:ff:51:a8:87: 65:ea:3b:7f:19:93:67:0d:9e:a7:be:3f:f7:d2:89: 07:1c:88:ec:ef:de:31:87:2f:c5:1d:1b:00:9d:6b: e6:0c:b7:30:3b:62:55:fb:a8:7f:00:ac:3d:f9:c0: 78:c3:75:61:de:dd:66:d5:49:f0:20:9e:6b:a1:4c: 0d:48:32:ef:ba:15:13:bb:0b:c7:dd:a4:89:51:8c: 93:6d:5a:39:87:8a:af:13:d8:8b:71:3d:63:ce:25: f7:e9:67:92:fa:f6:0e:e4:1c:ca:96:9e:32:4d:73: 82:ce:fb:00:fd:00:03:40:70:e5:c7:4e:50:2a:69: 0f:9b:29:7e:32:f5:3f:fc:2c:af:ba:3c:09:24:5d: 78:a2:83:16:f3:41:8a:18:ab:9b:32:1e:55:dd:2d: ad:16:f8:79:a2:32:91:34:42:48:0c:34:fd:45:71: 83:2e:f3:eb:95:03:26:73:a3:d6:fd:a0:37:5e:11: e0:23:22:c0:27:38:3f:62:1e:bc:83:f9:77:79:96: 01:ce:d2:95:78:b9:78:78:c2:1c:d9:f1:69:c0:75: a1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:2A:EA:BE:A0:4F:50:72:AF:9B:F3:DC:E3:21:6A:2F:E7:70:80:2B X509v3 Authority Key Identifier: keyid:8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:9f:05:73:b3:02:34:7e:75:20:7f:4e:47:4f:7a:d5:e7:63: 30:6c:80:25:fe:74:b5:53:af:c3:81:35:90:2d:5d:f7:48:49: 89:7a:1e:81:0e:0c:d6:b3:f9:8e:36:18:9f:c4:48:32:d5:68: 8f:83:d0:f3:a0:e7:df:85:1e:ff:4a:92:ae:3c:79:28:2b:6e: bd:b9:bc:88:a2:6c:8a:99:5a:fd:8d:04:1b:86:b8:c7:24:ec: 7c:e5:69:fe:01:00:52:4d:2b:23:54:b4:28:bb:cf:41:8c:9b: 1d:77:65:80:bc:21:9e:05:3d:b3:a5:ae:96:2c:1d:45:d9:bb: 62:d3:d0:83:05:bc:05:c5:21:8d:42:f8:1b:5d:d7:f5:ee:d4: b0:09:98:72:bd:08:5b:a8:fc:9d:32:7a:e0:14:d8:35:b8:bc: 42:f1:c4:cc:ca:1b:10:25:53:9c:9d:8a:23:bf:cf:04:76:07: ec:13:29:0a:1f:45:21:b8:51:90:46:63:58:b6:89:99:b0:42: b1:54:01:22:33:d0:f8:8c:00:8c:71:28:6a:87:ba:0b:d4:c5: c1:e1:78:1a:d3:94:0e:d8:bf:7f:2c:67:b6:c6:c7:f8:4d:90: e5:5e:42:f2:4e:0e:3d:c9:1d:be:e2:f9:18:89:f7:af:01:d7: 76:64:b4:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGQUUxMTAvBgNVBAUTKDhCQUMwREQzRTQ5MTg1ODk0RkRBRTI4Mjg0RURDODA0 NzIwQjQ2MTQwHhcNMjUwNTEwMTQzMTQ3WhcNMjUwNTE3MTQzMTQ3WjAYMRYwFAYD VQQDEw02ODFmNjM1NC0wNTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArA5cPbDZ041/i3X4/SL76UvuJ6fl43tQIvZPM5L5DBd5zzsLsPjkYv9RqIdl 6jt/GZNnDZ6nvj/30okHHIjs794xhy/FHRsAnWvmDLcwO2JV+6h/AKw9+cB4w3Vh 3t1m1UnwIJ5roUwNSDLvuhUTuwvH3aSJUYyTbVo5h4qvE9iLcT1jziX36WeS+vYO 5BzKlp4yTXOCzvsA/QADQHDlx05QKmkPmyl+MvU//CyvujwJJF14ooMW80GKGKub Mh5V3S2tFvh5ojKRNEJIDDT9RXGDLvPrlQMmc6PW/aA3XhHgIyLAJzg/Yh68g/l3 eZYBztKVeLl4eMIc2fFpwHWhZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8q6r6g T1Byr5vz3OMhai/ncIArMB8GA1UdIwQYMBaAFIusDdPkkYWJT9rigoTtyARyC0YU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkZBRS8xNjhGRkQ2QzFE OEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZbFAydUtDaE8zSUJISUxS aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k2d04wLVNSaFlsUDJ1S0NoTzNJQkhJTFJoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkZBRS8xNjhGRkQ2QzFEOEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZ bFAydUtDaE8zSUJISUxSaFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNnwVzswI0fnUgf05HT3rV52MwbIAl/nS1U6/DgTWQLV33SEmJeh6B DgzWs/mONhifxEgy1WiPg9DzoOffhR7/SpKuPHkoK269ubyIomyKmVr9jQQbhrjH JOx85Wn+AQBSTSsjVLQou89BjJsdd2WAvCGeBT2zpa6WLB1F2bti09CDBbwFxSGN QvgbXdf17tSwCZhyvQhbqPydMnrgFNg1uLxC8cTMyhsQJVOcnYojv88EdgfsEykK H0UhuFGQRmNYtomZsEKxVAEiM9D4jACMcShqh7oL1MXB4Xga05QO2L9/LGe2xsf4 TZDlXkLyTg49yR2+4vkYifevAdd2ZLRK -----END CERTIFICATE-----Generated at Mon May 12 10:22:20 2025 by rpki-client