$ rpki-client -vvf rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft File: 3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft (raw, json) Hash identifier: hcqw2tIHJKtfJMV4SYPOSdEOmF4XSrP0hyTLuM8y0xQ= Subject key identifier: 85:42:DF:7B:39:FC:FF:68:06:88:D1:53:3B:52:95:6A:0F:9A:76:3F Authority key identifier: DD:F8:84:91:1A:D3:F2:8C:C9:D9:6A:8C:24:A9:39:A6:5F:8B:25:76 Certificate issuer: /CN=A912BAAD/serialNumber=DDF884911AD3F28CC9D96A8C24A939A65F8B2576 Certificate serial: 0BE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft Manifest number: 0BD1 Signing time: Tue 08 Apr 2025 18:46:00 +0000 Manifest this update: Tue 08 Apr 2025 18:45:59 +0000 Manifest next update: Tue 15 Apr 2025 18:45:59 +0000 Files and hashes: 1: 3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl (hash: w1rTEir1eHbtZuEHbX0wBuimFzOdLd2LEaagzMhyO9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 18:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3040 (0xbe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BAAD Validity Not Before: Apr 8 18:45:59 2025 GMT Not After : Apr 15 18:45:59 2025 GMT Subject: CN=67f56ee7-c11f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7e:d6:37:c9:7f:eb:51:9e:fa:49:39:42:e4: 6f:84:40:87:14:6f:e5:a4:8d:72:33:0c:5e:11:33: a1:ae:df:86:9f:4d:fd:7d:0e:1f:18:23:d5:a2:d6: a7:8b:f4:61:10:ac:ca:35:94:48:11:85:54:3c:47: dc:73:b6:c2:97:59:7c:8b:99:71:46:70:3c:da:b0: f1:43:9e:77:7d:9c:d0:f1:06:cf:de:e2:d1:c5:c1: 3c:9c:c4:a7:87:95:1c:2e:85:5c:2e:8b:af:03:51: 89:ed:12:f1:09:2b:74:82:f9:a8:1e:d4:81:4d:57: 51:ad:68:6b:0f:e0:f2:b1:50:c1:ec:55:ac:2f:0d: c3:79:2e:92:54:c5:1a:cf:bf:3b:f5:58:48:35:41: ae:d1:8e:48:01:f2:9e:1a:65:4d:3d:d5:79:b4:24: ce:fc:05:35:bb:9d:5e:72:c1:08:86:41:b4:71:56: 1f:e2:58:e6:e7:6b:65:6a:08:94:e7:02:a1:7a:ae: bd:6a:d7:9b:cf:6f:bf:f3:d8:8c:34:84:dc:c6:8e: d3:d3:21:0d:50:89:6c:6e:b4:bf:b0:56:e4:1a:ba: 19:c8:ad:25:8e:5c:a9:1a:e6:80:02:c9:7d:55:da: 10:7e:81:07:91:25:09:76:75:67:26:fc:84:c4:5a: 07:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:42:DF:7B:39:FC:FF:68:06:88:D1:53:3B:52:95:6A:0F:9A:76:3F X509v3 Authority Key Identifier: keyid:DD:F8:84:91:1A:D3:F2:8C:C9:D9:6A:8C:24:A9:39:A6:5F:8B:25:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:db:42:53:7a:f6:99:b8:ad:c8:83:43:1e:ce:87:3d:45:2e: ad:23:25:f9:5f:e0:13:c4:a6:0c:29:80:e5:7f:05:e4:93:f2: be:b6:4a:05:ca:6b:5f:99:89:f8:5c:00:89:28:c7:36:b0:50: 6b:e5:07:97:53:e4:6e:15:dd:6d:47:3d:be:3f:1a:d8:35:58: 39:5b:b0:06:4c:2e:3e:c1:d3:21:57:7c:52:06:2b:57:7e:d0: 46:0e:df:e7:bf:77:6d:4b:cf:38:44:ae:b2:46:00:ad:c8:56: 0b:59:1f:5b:08:f6:7c:0b:20:40:09:da:44:e0:ff:c2:48:d9: d7:4a:3d:39:7a:2e:3a:ef:54:be:59:02:e1:97:30:92:89:b4: fc:c4:c1:50:cc:0b:2c:77:ce:87:cd:e5:9e:b3:83:a5:dc:ac: b9:3d:d8:59:3e:0d:3d:44:89:77:c0:2e:4d:3e:76:8c:32:58: d6:7a:12:4a:d4:33:43:ef:11:97:5c:0a:dd:22:a3:ab:6d:52: a7:0e:c8:09:47:52:76:db:ba:3c:8a:d6:5c:df:28:bd:f6:33: 5d:29:80:76:46:0f:14:78:ec:9d:98:55:75:45:3e:52:6b:d1: be:0a:ae:02:64:6f:09:47:66:01:1e:86:ca:02:74:13:8c:b5: cf:f5:b3:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJBQUQxMTAvBgNVBAUTKERERjg4NDkxMUFEM0YyOENDOUQ5NkE4QzI0QTkzOUE2 NUY4QjI1NzYwHhcNMjUwNDA4MTg0NTU5WhcNMjUwNDE1MTg0NTU5WjAYMRYwFAYD VQQDEw02N2Y1NmVlNy1jMTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyn7WN8l/61Ge+kk5QuRvhECHFG/lpI1yMwxeETOhrt+Gn039fQ4fGCPVotan i/RhEKzKNZRIEYVUPEfcc7bCl1l8i5lxRnA82rDxQ553fZzQ8QbP3uLRxcE8nMSn h5UcLoVcLouvA1GJ7RLxCSt0gvmoHtSBTVdRrWhrD+DysVDB7FWsLw3DeS6SVMUa z7879VhINUGu0Y5IAfKeGmVNPdV5tCTO/AU1u51ecsEIhkG0cVYf4ljm52tlagiU 5wKheq69atebz2+/89iMNITcxo7T0yENUIlsbrS/sFbkGroZyK0ljlypGuaAAsl9 VdoQfoEHkSUJdnVnJvyExFoH/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVC33s5 /P9oBojRUztSlWoPmnY/MB8GA1UdIwQYMBaAFN34hJEa0/KMydlqjCSpOaZfiyV2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkFBRC81MjFBRERDODE4 NDgxMUVBOTA3ODU2MkJDNEY5QUUwMi8zZmlFa1JyVDhvekoyV3FNSktrNXBsLUxK WFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNmaUVrUnJUOG96SjJXcU1KS2s1cGwtTEpYWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkFBRC81MjFBRERDODE4NDgxMUVBOTA3ODU2MkJDNEY5QUUwMi8zZmlFa1JyVDhv ekoyV3FNSktrNXBsLUxKWFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT20JTevaZuK3Ig0Mezoc9RS6tIyX5X+ATxKYMKYDlfwXkk/K+tkoF ymtfmYn4XACJKMc2sFBr5QeXU+RuFd1tRz2+PxrYNVg5W7AGTC4+wdMhV3xSBitX ftBGDt/nv3dtS884RK6yRgCtyFYLWR9bCPZ8CyBACdpE4P/CSNnXSj05ei4671S+ WQLhlzCSibT8xMFQzAssd86HzeWes4Ol3Ky5PdhZPg09RIl3wC5NPnaMMljWehJK 1DND7xGXXArdIqOrbVKnDsgJR1J227o8itZc3yi99jNdKYB2Rg8UeOydmFV1RT5S a9G+Cq4CZG8JR2YBHobKAnQTjLXP9bPi -----END CERTIFICATE-----Generated at Thu Apr 10 22:09:50 2025 by rpki-client