$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft File: efXtpMcOLgPpCLgYwXdY8qZpd1c.mft (raw, json) Hash identifier: UoUsZ6go3niYcNCMNkfnVB7zKpyBh0a5PVjTZYyxRZU= Subject key identifier: CC:6E:43:0F:A8:29:27:C6:42:89:38:A1:68:7D:6D:30:00:0A:9C:AE Authority key identifier: 79:F5:ED:A4:C7:0E:2E:03:E9:08:B8:18:C1:77:58:F2:A6:69:77:57 Certificate issuer: /CN=A91FEB37/serialNumber=79F5EDA4C70E2E03E908B818C17758F2A6697757 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/efXtpMcOLgPpCLgYwXdY8qZpd1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft Manifest number: 25 Signing time: Fri 09 May 2025 06:48:37 +0000 Manifest this update: Fri 09 May 2025 06:48:37 +0000 Manifest next update: Fri 16 May 2025 06:48:37 +0000 Files and hashes: 1: efXtpMcOLgPpCLgYwXdY8qZpd1c.crl (hash: bvWmDrJRR/j0+BsObzzaqhDfl25Rnom1tqFBGpcvIzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.crl rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/efXtpMcOLgPpCLgYwXdY8qZpd1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 06:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEB37, serialNumber=79F5EDA4C70E2E03E908B818C17758F2A6697757 Validity Not Before: May 9 06:48:37 2025 GMT Not After : May 16 06:48:37 2025 GMT Subject: CN=681da545-f8e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d7:09:f8:9a:b3:cc:fb:fe:89:3c:35:bc:e1: 9c:5b:b4:3c:76:6e:d2:07:34:ce:fc:40:f9:a7:0b: 94:99:5b:5f:8d:85:83:82:47:4a:ed:4b:ae:a2:5f: 34:9f:95:c1:7d:c7:6d:e9:ea:d4:d2:34:ac:de:a9: e8:3f:6e:95:ed:b1:aa:d8:8e:b8:fd:c0:89:e7:ba: c4:8b:d8:71:6c:1f:92:14:77:de:1b:e5:09:0f:1e: dc:a6:31:ef:41:fc:3e:40:2b:3f:aa:39:f8:e3:43: 82:97:0e:d5:a4:9a:f1:ad:7c:55:27:4f:9f:7a:6c: 2e:92:4c:ed:67:2b:43:fb:1d:a4:66:d7:bb:d0:d3: d5:b2:8d:82:02:ee:d6:84:6f:4e:21:d8:73:65:68: 5a:f1:64:80:64:6e:43:cc:be:91:42:64:9d:ad:04: 5f:6a:2c:3e:74:29:f1:a1:11:76:81:df:0f:12:d2: f0:b3:02:95:ea:e5:2c:e2:8c:92:0c:1e:85:fd:28: 32:3e:39:84:ed:cf:96:57:e0:de:d6:fb:b8:ba:87: 52:c2:3c:08:bf:eb:a3:b2:82:97:46:cd:73:3b:4b: 53:ea:5a:ca:61:a7:92:58:5c:1a:31:4b:40:c7:d8: 28:75:8e:5c:3e:33:04:fd:c9:90:ed:ab:bb:e0:00: 0f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6E:43:0F:A8:29:27:C6:42:89:38:A1:68:7D:6D:30:00:0A:9C:AE X509v3 Authority Key Identifier: keyid:79:F5:ED:A4:C7:0E:2E:03:E9:08:B8:18:C1:77:58:F2:A6:69:77:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/efXtpMcOLgPpCLgYwXdY8qZpd1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:22:82:81:05:5d:2f:83:5e:36:93:62:12:6e:d3:2c:5c:5e: 49:8f:c1:8d:5d:e2:db:dd:2b:06:b2:15:bf:ae:97:b0:53:69: c5:a0:6f:c1:71:52:47:2f:7d:52:a7:54:c2:3d:48:05:a4:fc: 09:14:9e:93:de:12:20:8e:6d:65:74:c8:8f:dc:dd:a1:af:dd: 01:31:94:20:a7:68:98:f1:0c:38:7d:4a:60:94:a3:21:08:c8: 1b:dc:2d:b5:67:9c:3d:43:a8:75:b7:bd:69:4f:b8:47:a2:75: a1:99:11:3a:65:f5:07:f4:20:e9:6b:02:db:b2:e5:67:20:77: dc:21:17:7a:69:81:3e:83:73:19:5a:08:2d:4b:82:79:dd:3f: 38:0a:ff:22:78:cb:06:a3:27:59:d4:c4:a1:38:24:ba:34:4a: 3d:7d:c9:bf:aa:02:35:7d:ea:be:e9:82:b4:f7:74:3c:4c:31: aa:5d:fb:b2:bf:99:84:44:2b:76:5c:13:de:d4:9b:c0:cd:4b: ec:7a:4d:98:90:7f:64:ce:6d:15:91:95:9c:13:78:21:9b:14: 55:4e:a5:a2:53:cc:45:18:d7:0f:9d:31:68:8d:f1:5b:06:44: 93:53:f7:05:61:29:9b:ae:8b:0d:02:9d:f3:f1:cb:6d:c5:37: 4d:fa:01:7a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RUIzNzExMC8GA1UEBRMoNzlGNUVEQTRDNzBFMkUwM0U5MDhCODE4QzE3NzU4RjJB NjY5Nzc1NzAeFw0yNTA1MDkwNjQ4MzdaFw0yNTA1MTYwNjQ4MzdaMBgxFjAUBgNV BAMTDTY4MWRhNTQ1LWY4ZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC71wn4mrPM+/6JPDW84ZxbtDx2btIHNM78QPmnC5SZW1+NhYOCR0rtS66iXzSf lcF9x23p6tTSNKzeqeg/bpXtsarYjrj9wInnusSL2HFsH5IUd94b5QkPHtymMe9B /D5AKz+qOfjjQ4KXDtWkmvGtfFUnT596bC6STO1nK0P7HaRm17vQ09WyjYIC7taE b04h2HNlaFrxZIBkbkPMvpFCZJ2tBF9qLD50KfGhEXaB3w8S0vCzApXq5SzijJIM HoX9KDI+OYTtz5ZX4N7W+7i6h1LCPAi/66OygpdGzXM7S1PqWsphp5JYXBoxS0DH 2Ch1jlw+MwT9yZDtq7vgAA85AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzG5DD6gp J8ZCiTihaH1tMAAKnK4wHwYDVR0jBBgwFoAUefXtpMcOLgPpCLgYwXdY8qZpd1cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFQjM3LzQ5RUUyMzE2RjVG NzExRUZCODJFRkQ2QkM0RjlBRTAyL2VmWHRwTWNPTGdQcENMZ1l3WGRZOHFacGQx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZWZYdHBNY09MZ1BwQ0xnWXdYZFk4cVpwZDFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF QjM3LzQ5RUUyMzE2RjVGNzExRUZCODJFRkQ2QkM0RjlBRTAyL2VmWHRwTWNPTGdQ cENMZ1l3WGRZOHFacGQxYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGsigoEFXS+DXjaTYhJu0yxcXkmPwY1d4tvdKwayFb+ul7BTacWgb8Fx UkcvfVKnVMI9SAWk/AkUnpPeEiCObWV0yI/c3aGv3QExlCCnaJjxDDh9SmCUoyEI yBvcLbVnnD1DqHW3vWlPuEeidaGZETpl9Qf0IOlrAtuy5Wcgd9whF3ppgT6Dcxla CC1LgnndPzgK/yJ4ywajJ1nUxKE4JLo0Sj19yb+qAjV96r7pgrT3dDxMMapd+7K/ mYREK3ZcE97Um8DNS+x6TZiQf2TObRWRlZwTeCGbFFVOpaJTzEUY1w+dMWiN8VsG RJNT9wVhKZuuiw0CnfPxy23FN036AXo= -----END CERTIFICATE-----Generated at Sun May 11 01:43:18 2025 by rpki-client