$ rpki-client -vvf rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft File: dzKJlNE-mJVBnIEGa6YRgdGCtog.mft (raw, json) Hash identifier: rGdZRRG9nFvSP+qpPjBN3BOuvMN3d9oNQjuHV7mJrgY= Subject key identifier: B7:D1:53:A0:F9:A8:8B:9B:53:A9:4D:0E:F4:57:8D:2E:20:0B:58:FA Authority key identifier: 77:32:89:94:D1:3E:98:95:41:9C:81:06:6B:A6:11:81:D1:82:B6:88 Certificate issuer: /CN=A91F71E8/serialNumber=77328994D13E9895419C81066BA61181D182B688 Certificate serial: 11DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft Manifest number: 19F7 Signing time: Sat 10 May 2025 17:04:49 +0000 Manifest this update: Sat 10 May 2025 17:04:49 +0000 Manifest next update: Sat 17 May 2025 17:04:49 +0000 Files and hashes: 1: dzKJlNE-mJVBnIEGa6YRgdGCtog.crl (hash: XBN7HteuogcIe9ivdVBdHu9Uczx2kksEXkQfrDm9k+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.crl rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:04:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4574 (0x11de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F71E8, serialNumber=77328994D13E9895419C81066BA61181D182B688 Validity Not Before: May 10 17:04:49 2025 GMT Not After : May 17 17:04:49 2025 GMT Subject: CN=681f8731-51be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a3:c8:b5:96:7a:6c:9c:3e:cd:19:4d:da:19: 5e:ef:46:67:96:a6:7d:c6:d4:1f:d0:3c:d0:11:ab: 55:76:da:ad:14:40:df:2f:f2:1d:98:6a:60:0c:ae: 7f:7e:39:4d:dd:0f:a3:76:ca:19:af:1c:d3:56:a9: e8:b5:08:39:d1:1b:5a:6d:6a:2d:ff:1d:9c:34:49: b7:a1:bd:6f:22:a1:3d:9a:14:af:69:60:c8:76:4c: a2:86:b6:32:ff:30:6c:86:11:a4:5c:62:ff:dc:d4: 27:9d:6c:07:bd:4f:d6:3e:0e:1c:70:bd:81:ea:57: a4:1b:68:c8:2a:86:1d:41:97:95:07:13:59:23:f9: 0c:60:6a:20:91:40:3b:f7:df:6c:58:9f:18:c9:d5: d6:85:ca:7b:74:d7:82:79:88:c8:3b:73:24:50:fb: fb:1f:c7:55:e1:2f:b7:4b:6c:be:9d:f6:09:d0:96: dc:82:bd:c3:d3:31:fd:2a:0a:aa:bb:fe:3c:b0:a0: 28:ce:3f:36:72:4a:49:cf:d4:90:32:db:a2:45:e6: ce:08:15:5a:bc:a4:f5:1e:10:7c:ff:1e:c4:d9:76: 48:a0:23:1d:a8:3d:7a:b7:a6:e4:8e:33:d9:09:68: ab:39:d6:31:7c:6f:45:55:8a:8a:bc:04:07:27:90: 51:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D1:53:A0:F9:A8:8B:9B:53:A9:4D:0E:F4:57:8D:2E:20:0B:58:FA X509v3 Authority Key Identifier: keyid:77:32:89:94:D1:3E:98:95:41:9C:81:06:6B:A6:11:81:D1:82:B6:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:7e:79:b9:cd:45:b7:68:7f:74:6f:d0:5d:9e:fe:11:2f:b3: 40:98:7d:a5:5c:60:9a:c5:56:b3:7d:7d:74:b3:0f:98:65:ae: 04:f1:50:ea:5d:86:31:47:17:ea:0b:df:79:10:c1:f3:e7:28: 5a:33:ec:1d:3b:9c:60:a9:22:5e:27:7f:4d:45:a7:c9:af:d3: e8:e2:b5:ee:99:de:3d:9e:89:74:89:83:84:e7:e2:3d:14:de: d4:a0:65:1d:b3:74:7a:13:cf:f8:8d:59:d4:b5:4a:5e:4e:88: 56:01:cf:c8:ab:69:d3:c1:23:ee:12:09:ad:f7:dc:45:b7:5d: 4d:bc:0a:03:9f:ad:3f:a0:a2:bc:38:06:d5:a6:fc:24:b8:ff: a2:9d:32:72:e8:68:7b:a4:0e:b3:4c:ba:b9:07:05:0e:e8:43: 83:79:58:db:1e:55:25:bf:cb:50:f6:64:72:df:20:b1:eb:78: c6:6d:81:bc:94:ad:20:cb:33:a7:79:d4:8d:7c:2e:a1:66:cf: 58:c6:a7:e8:12:81:44:fa:b1:f7:59:c2:89:1f:3c:f0:5e:ed: e1:28:4e:6f:d4:d9:0b:2c:2f:1b:59:18:ef:ca:27:74:fd:c9: 7c:19:c7:73:62:de:60:3d:cb:91:6b:50:d2:14:56:ae:e3:8b: 20:3f:19:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxRTgxMTAvBgNVBAUTKDc3MzI4OTk0RDEzRTk4OTU0MTlDODEwNjZCQTYxMTgx RDE4MkI2ODgwHhcNMjUwNTEwMTcwNDQ5WhcNMjUwNTE3MTcwNDQ5WjAYMRYwFAYD VQQDEw02ODFmODczMS01MWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5aPItZZ6bJw+zRlN2hle70ZnlqZ9xtQf0DzQEatVdtqtFEDfL/IdmGpgDK5/ fjlN3Q+jdsoZrxzTVqnotQg50RtabWot/x2cNEm3ob1vIqE9mhSvaWDIdkyihrYy /zBshhGkXGL/3NQnnWwHvU/WPg4ccL2B6lekG2jIKoYdQZeVBxNZI/kMYGogkUA7 999sWJ8YydXWhcp7dNeCeYjIO3MkUPv7H8dV4S+3S2y+nfYJ0Jbcgr3D0zH9Kgqq u/48sKAozj82ckpJz9SQMtuiRebOCBVavKT1HhB8/x7E2XZIoCMdqD16t6bkjjPZ CWirOdYxfG9FVYqKvAQHJ5BRHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfRU6D5 qIubU6lNDvRXjS4gC1j6MB8GA1UdIwQYMBaAFHcyiZTRPpiVQZyBBmumEYHRgraI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzFFOC82MkI3ODdBMEVF RTQxMUU4OUU2NjVENERDNEY5QUUwMi9kektKbE5FLW1KVkJuSUVHYTZZUmdkR0N0 b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R6S0psTkUtbUpWQm5JRUdhNllSZ2RHQ3RvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzFFOC82MkI3ODdBMEVFRTQxMUU4OUU2NjVENERDNEY5QUUwMi9kektKbE5FLW1K VkJuSUVHYTZZUmdkR0N0b2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzfnm5zUW3aH90b9Bdnv4RL7NAmH2lXGCaxVazfX10sw+YZa4E8VDq XYYxRxfqC995EMHz5yhaM+wdO5xgqSJeJ39NRafJr9Po4rXumd49nol0iYOE5+I9 FN7UoGUds3R6E8/4jVnUtUpeTohWAc/Iq2nTwSPuEgmt99xFt11NvAoDn60/oKK8 OAbVpvwkuP+inTJy6Gh7pA6zTLq5BwUO6EODeVjbHlUlv8tQ9mRy3yCx63jGbYG8 lK0gyzOnedSNfC6hZs9YxqfoEoFE+rH3WcKJHzzwXu3hKE5v1NkLLC8bWRjvyid0 /cl8GcdzYt5gPcuRa1DSFFau44sgPxka -----END CERTIFICATE-----Generated at Mon May 12 12:38:25 2025 by rpki-client