$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft File: 9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft (raw, json) Hash identifier: 5kRLbD3UqB1xlaXengMYih4Cr0gJ9Eg2apfe/lM853M= Subject key identifier: C0:58:37:77:7B:93:06:7D:43:E4:AF:92:6A:0B:38:4F:07:2E:B3:20 Authority key identifier: F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5 Certificate issuer: /CN=A91ECF21/serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5 Certificate serial: 02F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft Manifest number: 02F9 Signing time: Sun 11 May 2025 00:48:53 +0000 Manifest this update: Sun 11 May 2025 00:48:53 +0000 Manifest next update: Sun 18 May 2025 00:48:53 +0000 Files and hashes: 1: 9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl (hash: eK3TFu+/iHLXWoZ/duKPzvnlH7iNZDpD98PblAZ92wI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:48:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 761 (0x2f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECF21, serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5 Validity Not Before: May 11 00:48:53 2025 GMT Not After : May 18 00:48:53 2025 GMT Subject: CN=681ff3f5-686d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:61:d1:0b:26:3e:ef:67:27:fb:18:f7:b5:0a: 68:45:72:c4:e3:c4:ed:04:39:da:21:68:2e:39:6f: 5c:c9:53:6d:a1:ba:98:b0:2d:0a:62:97:8d:f6:75: 56:15:1f:a7:b7:e2:fa:5f:45:5d:a0:6d:22:28:14: 10:e3:dc:73:e0:03:bf:79:81:66:09:1c:8b:19:b7: 5b:77:ac:0d:66:02:3d:c9:c6:46:b1:2e:b7:9a:ba: a9:45:ff:7c:9a:a9:eb:08:20:3c:e7:ef:d3:30:b3: f7:31:c6:56:64:34:94:00:d4:3c:f4:7c:59:44:5e: 29:a1:83:79:c9:d0:1a:56:bb:3d:56:5a:16:34:2b: 7e:94:a2:f5:7d:7d:3c:8f:14:29:32:af:3a:07:87: d3:22:df:6f:88:f4:6f:c7:e8:ad:fd:57:42:48:05: 00:46:1a:35:65:7f:ec:1f:b0:8e:a4:86:c0:30:06: ae:3f:ab:cb:37:6b:60:ea:5a:42:9c:67:98:c6:2f: 1a:be:7b:8b:7f:d1:32:9c:19:b9:d6:5d:66:e4:fb: af:60:0c:f6:1e:7a:51:df:40:2b:81:3d:34:73:f0: d7:79:bb:14:50:5e:7a:87:5b:d6:db:0b:f7:68:7a: 72:93:12:27:a1:10:8a:1d:ff:d9:c8:dc:20:72:bb: 36:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:58:37:77:7B:93:06:7D:43:E4:AF:92:6A:0B:38:4F:07:2E:B3:20 X509v3 Authority Key Identifier: keyid:F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:7c:98:56:d3:1c:e9:89:9d:52:4b:42:c3:b8:81:2a:78:57: c6:55:46:54:98:57:38:05:ba:63:c3:44:61:f2:89:ff:ec:d0: 9c:56:a9:d4:94:09:f4:71:44:fd:17:64:13:28:0f:58:3a:e4: 1a:dc:4f:e7:b3:5f:71:0d:3e:43:e8:f3:4a:cb:7d:d5:4c:c9: cc:84:5f:a6:89:ad:d2:a1:a9:e5:80:9b:5d:6a:84:74:30:59: af:51:64:e2:e3:31:a4:bc:40:e6:eb:c4:f2:12:23:87:f8:ed: de:03:1a:1b:58:c5:31:fe:1b:31:a4:e7:3f:cd:49:41:fc:6a: 0b:06:31:3c:2d:f2:0a:d2:97:d6:11:94:07:ef:7a:2e:06:83: 6e:1d:fa:eb:df:83:a1:1d:4d:53:8a:34:c0:e5:6f:b8:e4:fb: d6:51:51:8f:63:14:1a:cd:03:80:6a:d1:05:5c:0e:5a:8a:0b: 3b:79:f9:02:dd:41:2f:22:2f:5a:e2:ee:d2:ad:e8:db:a7:5d: 31:dd:0c:d8:f7:a1:59:be:ac:8c:b0:e9:4d:75:4f:bf:40:35: 2a:00:72:00:b4:71:cd:92:c4:82:44:11:ed:d1:64:f4:62:51: 89:eb:df:a0:ea:69:83:dc:f6:ed:03:53:8e:6c:dd:a0:d5:ba: 8f:5e:d6:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNGMjExMTAvBgNVBAUTKEY2N0RBOUYxNUU1RTkzNEQ5MEU0OEZFNTBFN0RDODU3 MUREOTM3QTUwHhcNMjUwNTExMDA0ODUzWhcNMjUwNTE4MDA0ODUzWjAYMRYwFAYD VQQDEw02ODFmZjNmNS02ODZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWHRCyY+72cn+xj3tQpoRXLE48TtBDnaIWguOW9cyVNtobqYsC0KYpeN9nVW FR+nt+L6X0VdoG0iKBQQ49xz4AO/eYFmCRyLGbdbd6wNZgI9ycZGsS63mrqpRf98 mqnrCCA85+/TMLP3McZWZDSUANQ89HxZRF4poYN5ydAaVrs9VloWNCt+lKL1fX08 jxQpMq86B4fTIt9viPRvx+it/VdCSAUARho1ZX/sH7COpIbAMAauP6vLN2tg6lpC nGeYxi8avnuLf9EynBm51l1m5PuvYAz2HnpR30ArgT00c/DXebsUUF56h1vW2wv3 aHpykxInoRCKHf/ZyNwgcrs2KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMBYN3d7 kwZ9Q+SvkmoLOE8HLrMgMB8GA1UdIwQYMBaAFPZ9qfFeXpNNkOSP5Q59yFcd2Tel MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0YyMS9GMkVCRUIzNEQ1 MTAxMUVDOTU1MkI4MkFDNEY5QUUwMi85bjJwOFY1ZWswMlE1SV9sRG4zSVZ4M1pO NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluMnA4VjVlazAyUTVJX2xEbjNJVngzWk42VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0YyMS9GMkVCRUIzNEQ1MTAxMUVDOTU1MkI4MkFDNEY5QUUwMi85bjJwOFY1ZWsw MlE1SV9sRG4zSVZ4M1pONlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTfJhW0xzpiZ1SS0LDuIEqeFfGVUZUmFc4Bbpjw0Rh8on/7NCcVqnU lAn0cUT9F2QTKA9YOuQa3E/ns19xDT5D6PNKy33VTMnMhF+mia3SoanlgJtdaoR0 MFmvUWTi4zGkvEDm68TyEiOH+O3eAxobWMUx/hsxpOc/zUlB/GoLBjE8LfIK0pfW EZQH73ouBoNuHfrr34OhHU1TijTA5W+45PvWUVGPYxQazQOAatEFXA5aigs7efkC 3UEvIi9a4u7Srejbp10x3QzY96FZvqyMsOlNdU+/QDUqAHIAtHHNksSCRBHt0WT0 YlGJ69+g6mmD3PbtA1OObN2g1bqPXtZj -----END CERTIFICATE-----Generated at Sun May 11 10:18:23 2025 by rpki-client