$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft File: dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft (raw, json) Hash identifier: bKJRoTs+SddjmIg/8yQSCPa+AbCLw/RagZ4x/YP8BiI= Subject key identifier: 90:C2:B4:9B:39:AB:4A:FC:C3:4B:BF:C1:51:F7:41:CC:CB:72:06:4D Authority key identifier: 75:F7:72:E4:06:C5:F4:6D:3E:8B:F2:7A:C1:F2:5F:CF:64:E9:79:97 Certificate issuer: /CN=A91FC705/serialNumber=75F772E406C5F46D3E8BF27AC1F25FCF64E97997 Certificate serial: 052E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft Manifest number: 052E Signing time: Wed 14 May 2025 23:31:45 +0000 Manifest this update: Wed 14 May 2025 23:31:45 +0000 Manifest next update: Wed 21 May 2025 23:31:45 +0000 Files and hashes: 1: dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl (hash: slNS6aHElnEXLQH1U0RY6aVQ35ljZEXlsYIzqOqd4Ws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 23:31:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1326 (0x52e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC705, serialNumber=75F772E406C5F46D3E8BF27AC1F25FCF64E97997 Validity Not Before: May 14 23:31:45 2025 GMT Not After : May 21 23:31:45 2025 GMT Subject: CN=682527e1-987a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9e:8e:e4:93:c5:93:41:38:04:be:cc:99:e5: 48:1a:c2:50:6a:6c:c4:7c:8a:2c:a5:1e:7c:cc:d9: 53:dc:c6:69:05:f4:e8:7b:d0:6d:eb:dc:18:1c:76: 6e:38:cc:71:a5:3c:f5:be:8a:cf:a2:4f:e0:95:71: 29:72:1f:29:c0:2b:57:3c:55:2b:0c:65:3c:bf:7a: 93:43:9c:5b:8a:6b:c3:e5:7a:8d:a3:42:8a:48:a8: de:72:cc:b9:92:10:cc:61:25:e1:09:86:bd:7f:1b: 45:30:82:2d:e5:1e:86:b0:ea:4c:2f:71:a9:f8:dc: c9:29:10:1f:43:d1:ea:36:87:9b:0d:ec:77:db:ac: 32:64:a5:40:a6:4d:9f:b5:48:a5:78:ac:0d:b6:7a: 65:76:a3:45:a8:57:28:a7:ee:e4:1a:fc:21:a3:fa: 6e:5f:e4:be:4e:28:f6:96:62:d3:0a:09:20:ac:80: 43:c7:c3:39:4c:55:60:2e:a3:43:6b:61:bd:cf:ed: 8a:f7:b3:2f:89:6a:e1:6a:1a:ac:61:4c:26:f2:9a: 53:ac:86:fd:96:20:d7:c7:d5:67:e1:8c:20:3c:08: aa:49:52:db:3f:9c:63:91:31:3f:97:3d:23:ac:6c: 64:d1:d7:be:f7:07:2a:0a:53:0e:dc:09:44:d9:79: 24:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C2:B4:9B:39:AB:4A:FC:C3:4B:BF:C1:51:F7:41:CC:CB:72:06:4D X509v3 Authority Key Identifier: keyid:75:F7:72:E4:06:C5:F4:6D:3E:8B:F2:7A:C1:F2:5F:CF:64:E9:79:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:31:bf:e2:5c:51:d9:91:20:7b:a2:51:e1:a5:42:69:cd:0c: d6:64:6e:a1:09:34:83:64:4c:f3:27:df:6f:af:6c:bd:a6:b4: 47:44:47:c3:f2:cf:b5:bd:8a:2e:2d:10:d6:c5:d9:14:65:6a: 19:7d:65:6b:e1:59:38:ff:e4:a9:1c:51:5f:e8:72:df:59:9f: 0f:a8:b2:99:f2:c5:20:cb:4d:09:80:ed:db:87:e0:28:f1:18: 50:1c:9e:02:24:8a:24:90:20:0f:38:cd:27:17:96:3a:6b:b5: f6:cf:9a:93:d1:40:9d:cf:61:7c:69:8b:c3:fc:c9:c1:f7:12: 1f:d1:a1:6b:6d:02:b5:7a:fb:1c:68:f2:96:38:90:b6:99:18: 2e:83:28:44:85:d5:f6:cd:80:92:f3:a8:bb:be:00:58:6b:9d: ac:6b:84:b3:a4:a5:7a:8e:5b:62:8c:6f:61:9c:49:e5:a2:ed: 72:43:2d:7c:ad:a5:64:65:a6:de:60:f5:df:46:37:ee:d9:eb: a6:7c:15:e5:d8:8b:71:5d:49:1b:22:d7:cd:2b:68:55:1b:2a: b1:7a:a5:a6:11:17:5a:70:9a:42:a5:8c:88:2e:8b:2c:b7:72: 69:4e:7f:a3:f0:27:8b:a2:23:55:72:08:f4:a2:0b:5d:7e:ba: 99:d4:7f:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM3MDUxMTAvBgNVBAUTKDc1Rjc3MkU0MDZDNUY0NkQzRThCRjI3QUMxRjI1RkNG NjRFOTc5OTcwHhcNMjUwNTE0MjMzMTQ1WhcNMjUwNTIxMjMzMTQ1WjAYMRYwFAYD VQQDEw02ODI1MjdlMS05ODdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA456O5JPFk0E4BL7MmeVIGsJQamzEfIospR58zNlT3MZpBfToe9Bt69wYHHZu OMxxpTz1vorPok/glXEpch8pwCtXPFUrDGU8v3qTQ5xbimvD5XqNo0KKSKjecsy5 khDMYSXhCYa9fxtFMIIt5R6GsOpML3Gp+NzJKRAfQ9HqNoebDex326wyZKVApk2f tUileKwNtnpldqNFqFcop+7kGvwho/puX+S+Tij2lmLTCgkgrIBDx8M5TFVgLqND a2G9z+2K97MviWrhahqsYUwm8ppTrIb9liDXx9Vn4YwgPAiqSVLbP5xjkTE/lz0j rGxk0de+9wcqClMO3AlE2XkkIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJDCtJs5 q0r8w0u/wVH3QczLcgZNMB8GA1UdIwQYMBaAFHX3cuQGxfRtPovyesHyX89k6XmX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzcwNS82RTI3N0JCMkY1 QkQxMUVCQjlGOERCMTFDNEY5QUUwMi9kZmR5NUFiRjlHMC1pX0o2d2ZKZnoyVHBl WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RmZHk1QWJGOUcwLWlfSjZ3ZkpmejJUcGVaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzcwNS82RTI3N0JCMkY1QkQxMUVCQjlGOERCMTFDNEY5QUUwMi9kZmR5NUFiRjlH MC1pX0o2d2ZKZnoyVHBlWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzMb/iXFHZkSB7olHhpUJpzQzWZG6hCTSDZEzzJ99vr2y9prRHREfD 8s+1vYouLRDWxdkUZWoZfWVr4Vk4/+SpHFFf6HLfWZ8PqLKZ8sUgy00JgO3bh+Ao 8RhQHJ4CJIokkCAPOM0nF5Y6a7X2z5qT0UCdz2F8aYvD/MnB9xIf0aFrbQK1evsc aPKWOJC2mRgugyhEhdX2zYCS86i7vgBYa52sa4SzpKV6jltijG9hnEnlou1yQy18 raVkZabeYPXfRjfu2eumfBXl2ItxXUkbItfNK2hVGyqxeqWmERdacJpCpYyILoss t3JpTn+j8CeLoiNVcgj0ogtdfrqZ1H8D -----END CERTIFICATE-----Generated at Fri May 16 23:38:11 2025 by rpki-client