$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft File: x8206hgWXlmC0KkZ_0f3JnbgUHM.mft (raw, json) Hash identifier: gmrEWU31hnRzGDNu9EYJ/V22pMhpyIYXIzEydDNJ+vA= Subject key identifier: EC:60:F5:E7:6A:61:52:99:2C:EC:A0:F7:60:0B:B5:F4:AF:77:D7:EE Authority key identifier: C7:CD:B4:EA:18:16:5E:59:82:D0:A9:19:FF:47:F7:26:76:E0:50:73 Certificate issuer: /CN=A91FBEFA/serialNumber=C7CDB4EA18165E5982D0A919FF47F72676E05073 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft Manifest number: 19 Signing time: Sun 11 May 2025 06:42:11 +0000 Manifest this update: Sun 11 May 2025 06:42:10 +0000 Manifest next update: Sun 18 May 2025 06:42:10 +0000 Files and hashes: 1: x8206hgWXlmC0KkZ_0f3JnbgUHM.crl (hash: K/EC6lBl23zxNu4J7YVhHVIHj/7wfl5RJ1/sDW0ydWE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.crl rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBEFA, serialNumber=C7CDB4EA18165E5982D0A919FF47F72676E05073 Validity Not Before: May 11 06:42:10 2025 GMT Not After : May 18 06:42:10 2025 GMT Subject: CN=682046c2-16bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4a:cf:49:27:06:99:52:99:58:4f:e5:7e:cb: 7e:c3:09:52:e6:b9:64:1e:ff:48:e2:af:35:18:f4: 32:e2:b9:31:ea:64:cb:6d:01:b2:dd:d6:61:72:eb: b0:19:75:3d:ed:05:c8:86:e5:3b:1f:c6:4c:4b:83: 77:0e:41:5f:31:37:92:fd:ee:ea:6f:80:70:af:b6: 65:9c:aa:aa:23:f1:67:b7:54:b1:14:e3:5b:04:a0: 9e:2e:9c:00:93:4c:cb:ec:78:eb:78:ae:0b:6c:39: a4:70:70:56:ac:74:60:92:f1:4f:ab:6b:06:a8:02: 18:fe:40:41:18:f6:a5:5e:8f:43:a9:f7:8e:03:ee: db:4f:a2:4f:71:9c:bf:8d:29:54:e7:64:94:38:ae: bf:64:96:ff:a8:8a:26:3f:5a:36:db:13:80:89:88: b3:76:11:eb:09:13:e4:df:0f:78:14:1f:42:77:6f: d5:98:6b:ef:f5:2b:57:20:84:96:ec:65:22:c3:01: 56:b9:41:47:4a:fa:8d:71:3c:11:14:f5:58:86:8b: ca:6e:79:8b:71:ef:6a:f8:50:05:fa:8b:4d:12:0d: f6:a3:dd:78:58:4d:9f:35:e1:b0:2a:45:c6:29:ba: 03:47:3c:33:02:63:61:79:53:b3:88:f1:5f:ca:a0: 27:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:60:F5:E7:6A:61:52:99:2C:EC:A0:F7:60:0B:B5:F4:AF:77:D7:EE X509v3 Authority Key Identifier: keyid:C7:CD:B4:EA:18:16:5E:59:82:D0:A9:19:FF:47:F7:26:76:E0:50:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:40:b5:30:c7:61:89:23:8f:87:93:e7:51:99:7d:e6:52:f2: fa:b2:0c:d0:53:78:61:49:8f:12:c1:87:a6:c2:c7:72:ca:08: 71:32:6b:9a:03:e9:cc:6e:84:2e:27:16:e3:85:6d:a4:f7:a5: 07:f4:3b:2a:34:16:85:6d:24:a7:c0:cb:7a:5c:44:ea:f2:cf: f4:5d:4c:ab:51:d8:dd:a9:54:f4:1e:b8:10:4c:72:d9:2d:f3: 3d:08:0a:e7:38:96:13:9a:b9:e1:a5:e9:ea:26:9a:03:d0:90: 9c:51:0b:ee:3a:e1:dc:91:70:fc:5d:69:6e:8b:e3:fe:dd:9d: 66:51:0b:bc:4e:27:02:9a:e4:84:06:76:fb:8d:61:93:dc:c3: 4d:70:c5:95:a1:39:00:c0:7c:d6:b1:29:14:ad:ca:bb:40:87: 52:a3:1e:c0:56:90:1a:3d:39:e9:65:54:fe:6c:29:66:22:9a: 5c:45:80:98:9d:80:a9:94:f8:73:66:ee:b8:e5:83:ec:aa:79: 1d:de:b2:bb:17:8b:80:6e:54:47:26:9f:7e:d6:8a:25:47:e8: 66:9d:70:c9:a5:11:f8:9f:c3:7f:c0:59:47:8a:ea:36:3b:2e: e6:57:0c:45:e8:e5:5a:ed:14:2a:9a:d0:6c:40:dd:7b:8d:ba: d5:ad:81:90 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QkVGQTExMC8GA1UEBRMoQzdDREI0RUExODE2NUU1OTgyRDBBOTE5RkY0N0Y3MjY3 NkUwNTA3MzAeFw0yNTA1MTEwNjQyMTBaFw0yNTA1MTgwNjQyMTBaMBgxFjAUBgNV BAMTDTY4MjA0NmMyLTE2YmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTSs9JJwaZUplYT+V+y37DCVLmuWQe/0jirzUY9DLiuTHqZMttAbLd1mFy67AZ dT3tBciG5TsfxkxLg3cOQV8xN5L97upvgHCvtmWcqqoj8We3VLEU41sEoJ4unACT TMvseOt4rgtsOaRwcFasdGCS8U+rawaoAhj+QEEY9qVej0Op944D7ttPok9xnL+N KVTnZJQ4rr9klv+oiiY/WjbbE4CJiLN2EesJE+TfD3gUH0J3b9WYa+/1K1cghJbs ZSLDAVa5QUdK+o1xPBEU9ViGi8pueYtx72r4UAX6i00SDfaj3XhYTZ814bAqRcYp ugNHPDMCY2F5U7OI8V/KoCfTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7GD152ph Upks7KD3YAu19K931+4wHwYDVR0jBBgwFoAUx8206hgWXlmC0KkZ/0f3JnbgUHMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCRUZBLzE3MjU0NkJDMEIz NzExRjA4QzIzOTg2M0M0RjlBRTAyL3g4MjA2aGdXWGxtQzBLa1pfMGYzSm5iZ1VI TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveDgyMDZoZ1dYbG1DMEtrWl8wZjNKbmJnVUhNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC RUZBLzE3MjU0NkJDMEIzNzExRjA4QzIzOTg2M0M0RjlBRTAyL3g4MjA2aGdXWGxt QzBLa1pfMGYzSm5iZ1VITS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIJAtTDHYYkjj4eT51GZfeZS8vqyDNBTeGFJjxLBh6bCx3LKCHEya5oD 6cxuhC4nFuOFbaT3pQf0Oyo0FoVtJKfAy3pcROryz/RdTKtR2N2pVPQeuBBMctkt 8z0ICuc4lhOaueGl6eommgPQkJxRC+464dyRcPxdaW6L4/7dnWZRC7xOJwKa5IQG dvuNYZPcw01wxZWhOQDAfNaxKRStyrtAh1KjHsBWkBo9OellVP5sKWYimlxFgJid gKmU+HNm7rjlg+yqeR3esrsXi4BuVEcmn37WiiVH6GadcMmlEfifw3/AWUeK6jY7 LuZXDEXo5VrtFCqa0GxA3XuNutWtgZA= -----END CERTIFICATE-----Generated at Mon May 12 23:11:09 2025 by rpki-client