$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft File: g1sFZ9k-rArjJOofFrPDnLGzOI4.mft (raw, json) Hash identifier: aHMG0/sF9b9AiwBzybK+LNOICsiPues7iH8R2gPS3JA= Subject key identifier: E4:F8:85:97:47:3F:89:FA:66:05:F3:68:5E:8F:44:88:C5:BD:4B:44 Authority key identifier: 83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E Certificate issuer: /CN=A911F5B7/serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E Certificate serial: 0AAD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft Manifest number: 0C07 Signing time: Thu 10 Apr 2025 19:27:40 +0000 Manifest this update: Thu 10 Apr 2025 19:27:39 +0000 Manifest next update: Thu 17 Apr 2025 19:27:39 +0000 Files and hashes: 1: g1sFZ9k-rArjJOofFrPDnLGzOI4.crl (hash: Sz1m+qhERtWAqLhv0EzZuyoIjrbkY/ohJJ/64uZEtlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 19:27:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2733 (0xaad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5B7 Validity Not Before: Apr 10 19:27:39 2025 GMT Not After : Apr 17 19:27:39 2025 GMT Subject: CN=67f81bab-53bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a4:71:d4:23:43:de:5e:2a:60:0c:83:65:ae: 24:ff:ad:f9:31:36:a9:7c:9a:f8:1a:6b:8f:44:51: 41:60:a0:11:8f:ca:43:c4:66:0d:3d:ae:1d:ae:d1: 7d:cb:c0:9b:a5:15:6d:40:25:c6:76:51:b4:35:86: 3e:16:42:3e:a1:e2:32:39:a7:40:3e:0a:52:13:64: b7:2b:56:17:42:aa:68:6c:f6:39:ae:b8:12:72:a9: 0e:ea:d9:89:87:9a:df:81:07:37:95:64:d2:31:83: 5c:99:1a:62:aa:90:41:1a:be:41:1c:31:27:48:be: ae:82:7e:3f:8a:00:84:da:a6:87:58:b2:29:00:95: 89:b7:44:f0:a9:01:9b:2e:38:8e:f2:1a:46:d2:c5: c2:27:10:28:22:75:6b:63:33:bf:ee:4e:02:c1:7e: d0:01:5d:6d:ec:df:11:48:10:a5:d6:64:c6:10:41: 2e:3f:dd:4c:19:18:66:00:be:a9:56:3f:14:31:ff: 4d:11:57:d9:96:14:b2:9e:11:80:5b:4a:c4:65:ea: c3:da:a4:4f:d0:32:78:3f:2b:c8:a0:77:c7:5b:f7: b9:4f:bf:76:85:57:ff:e2:8f:ad:6f:01:28:90:c0: 78:98:9e:b7:c3:5f:3c:b6:89:b7:ed:5a:1c:b5:78: 60:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F8:85:97:47:3F:89:FA:66:05:F3:68:5E:8F:44:88:C5:BD:4B:44 X509v3 Authority Key Identifier: keyid:83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:64:af:dc:1d:21:c5:4f:d7:37:1d:09:a6:f0:f4:af:f8:7e: 98:e0:e9:94:24:bf:7d:7e:5d:6a:cb:84:54:39:46:35:f2:92: e1:11:23:60:d5:29:27:9c:33:5f:93:8c:5a:61:8c:ae:a5:c5: 29:54:9c:d9:6a:c5:5c:e1:56:01:88:96:d6:1c:a6:99:31:68: 7f:66:ef:a5:92:1b:8f:87:04:2d:6f:f7:52:be:6d:6c:cc:a2: fd:1f:fa:8b:ea:b8:47:af:81:ce:2e:8e:b0:a8:b7:dd:5e:29: 61:d8:66:4a:55:9b:4b:c1:2b:5a:91:2e:7a:e5:31:45:7b:c5: 5e:ee:4a:9e:6f:79:8d:45:66:b5:68:18:67:20:44:a8:e7:70: 56:60:86:8f:e3:55:18:5e:e4:cd:81:a3:57:81:2b:4a:3b:ca: f1:06:73:c5:a5:9f:8c:37:72:5a:ea:bb:1f:73:d3:2c:12:24: 3e:18:0f:7d:5b:ef:c9:b4:d5:80:ac:db:e6:c6:33:b7:99:7b: 1e:b0:0e:0d:e3:5d:bd:b3:44:68:6c:8d:18:7b:43:7f:50:4b: d1:55:2e:df:c7:06:07:13:e5:60:42:79:63:62:53:41:0d:b3: e9:00:10:47:87:1a:a2:2f:0c:01:3f:49:6f:f3:94:f7:03:fe: e3:54:94:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1QjcxMTAvBgNVBAUTKDgzNUIwNTY3RDkzRUFDMEFFMzI0RUExRjE2QjNDMzlD QjFCMzM4OEUwHhcNMjUwNDEwMTkyNzM5WhcNMjUwNDE3MTkyNzM5WjAYMRYwFAYD VQQDEw02N2Y4MWJhYi01M2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoaRx1CND3l4qYAyDZa4k/635MTapfJr4GmuPRFFBYKARj8pDxGYNPa4drtF9 y8CbpRVtQCXGdlG0NYY+FkI+oeIyOadAPgpSE2S3K1YXQqpobPY5rrgScqkO6tmJ h5rfgQc3lWTSMYNcmRpiqpBBGr5BHDEnSL6ugn4/igCE2qaHWLIpAJWJt0TwqQGb LjiO8hpG0sXCJxAoInVrYzO/7k4CwX7QAV1t7N8RSBCl1mTGEEEuP91MGRhmAL6p Vj8UMf9NEVfZlhSynhGAW0rEZerD2qRP0DJ4PyvIoHfHW/e5T792hVf/4o+tbwEo kMB4mJ63w188tom37VoctXhg5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOT4hZdH P4n6ZgXzaF6PRIjFvUtEMB8GA1UdIwQYMBaAFINbBWfZPqwK4yTqHxazw5yxsziO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVCNy83MUU3QTIyMjUx OTUxMUVBODQ2NEJBNzhDNEY5QUUwMi9nMXNGWjlrLXJBcmpKT29mRnJQRG5MR3pP STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cxc0ZaOWstckFyakpPb2ZGclBEbkxHek9JNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVCNy83MUU3QTIyMjUxOTUxMUVBODQ2NEJBNzhDNEY5QUUwMi9nMXNGWjlrLXJB cmpKT29mRnJQRG5MR3pPSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMZK/cHSHFT9c3HQmm8PSv+H6Y4OmUJL99fl1qy4RUOUY18pLhESNg 1SknnDNfk4xaYYyupcUpVJzZasVc4VYBiJbWHKaZMWh/Zu+lkhuPhwQtb/dSvm1s zKL9H/qL6rhHr4HOLo6wqLfdXilh2GZKVZtLwStakS565TFFe8Ve7kqeb3mNRWa1 aBhnIESo53BWYIaP41UYXuTNgaNXgStKO8rxBnPFpZ+MN3Ja6rsfc9MsEiQ+GA99 W+/JtNWArNvmxjO3mXsesA4N4129s0RobI0Ye0N/UEvRVS7fxwYHE+VgQnljYlNB DbPpABBHhxqiLwwBP0lv85T3A/7jVJRX -----END CERTIFICATE-----Generated at Sat Apr 12 09:06:18 2025 by rpki-client