$ rpki-client -vvf rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft File: MnO_dM_TfcKwgKpPGtntXtY-YyA.mft (raw, json) Hash identifier: demhruYoOWkywiREkyxGqe5dvCGnOvEqhFV3M+TeEmM= Subject key identifier: AB:EC:D0:FF:68:B8:4D:4A:73:22:83:37:4E:4C:8D:BE:84:5A:AD:32 Authority key identifier: 32:73:BF:74:CF:D3:7D:C2:B0:80:AA:4F:1A:D9:ED:5E:D6:3E:63:20 Certificate issuer: /CN=A912E3C7/serialNumber=3273BF74CFD37DC2B080AA4F1AD9ED5ED63E6320 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnO_dM_TfcKwgKpPGtntXtY-YyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft Manifest number: 3F Signing time: Thu 03 Apr 2025 06:44:20 +0000 Manifest this update: Thu 03 Apr 2025 06:44:19 +0000 Manifest next update: Thu 10 Apr 2025 06:44:19 +0000 Files and hashes: 1: MnO_dM_TfcKwgKpPGtntXtY-YyA.crl (hash: kbRLjW/MR0lu8Q5w1Op0zMo9eehGDcdaVoMgStHEAH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.crl rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnO_dM_TfcKwgKpPGtntXtY-YyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:44:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E3C7 Validity Not Before: Apr 3 06:44:19 2025 GMT Not After : Apr 10 06:44:19 2025 GMT Subject: CN=67ee2e43-359a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e8:bf:3f:75:74:fe:61:06:6a:00:6a:6e:e3: 66:9d:9e:21:68:2a:bd:5a:73:75:79:7c:23:d5:32: 20:3c:41:3e:86:7c:58:f2:ed:bc:f0:5b:60:4c:ad: 1f:a1:4b:95:38:81:f8:d2:00:56:7e:d8:5a:c5:a7: e1:2a:70:5e:71:20:1b:53:14:1b:26:7d:d2:4a:9f: dd:08:d8:6c:04:69:e7:9f:23:fb:47:95:17:8b:7f: 30:0a:96:48:e5:76:62:81:54:4e:5c:bd:b2:fc:73: 26:84:61:2d:5a:fd:e5:e8:dd:5e:a4:6f:80:25:92: bd:68:ae:56:25:6c:67:a6:3b:02:88:83:90:db:c1: 20:0b:29:7b:3e:3a:ef:c6:fa:ac:7a:fd:b9:da:7b: c1:3b:2c:a4:01:a8:b7:d0:2d:19:af:0b:ff:2a:a0: 37:fe:44:12:57:17:df:3a:03:97:ee:0c:df:6e:a2: 0e:a0:31:6a:85:68:06:aa:21:af:05:d3:64:94:9d: f3:c6:69:cb:8c:23:84:9c:1a:d5:ab:4d:06:21:0a: 93:ef:eb:08:23:0b:06:04:df:d0:21:24:03:28:f9: d2:8b:6e:fb:76:30:1b:82:de:6a:8f:49:13:e5:f1: ff:aa:4d:ad:31:68:04:62:ef:cd:db:1e:58:93:d9: 8f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:EC:D0:FF:68:B8:4D:4A:73:22:83:37:4E:4C:8D:BE:84:5A:AD:32 X509v3 Authority Key Identifier: keyid:32:73:BF:74:CF:D3:7D:C2:B0:80:AA:4F:1A:D9:ED:5E:D6:3E:63:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnO_dM_TfcKwgKpPGtntXtY-YyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:5a:35:3d:f5:c6:6e:7d:a4:2a:9f:26:80:b3:c5:3c:c4:28: 2f:7b:5e:aa:c5:dd:36:05:e0:7f:f4:92:06:fc:c1:7b:3c:c7: 13:a6:48:52:96:c6:db:51:a7:97:d6:a6:2a:10:3a:3b:ed:af: d8:f4:52:18:f3:f1:88:fc:5e:4f:a5:43:24:bb:7e:34:d0:61: 95:ca:48:78:d5:66:13:cd:a3:44:5f:9a:2b:45:52:96:53:3f: 90:4e:eb:d1:fb:98:59:f1:6a:1e:05:93:da:48:0b:eb:f3:38: 73:98:c0:aa:01:04:3b:8b:49:e8:e3:01:af:54:44:60:d1:fb: a7:91:38:f7:5a:d4:ca:e2:1c:da:3d:41:bb:5a:5a:6e:fe:71: 14:df:c7:ea:a8:91:be:e5:78:63:be:70:aa:be:95:b7:51:5d: cf:9a:d5:47:e3:53:8e:96:c4:82:34:18:72:2d:f4:e8:1a:8d: f1:63:07:5c:1e:d8:50:33:05:42:1b:5c:38:5f:eb:f9:a6:32: 6d:60:ae:50:1a:c2:7c:7e:eb:12:ca:ff:01:86:ff:f7:a4:79: 12:fa:96:2a:f3:67:68:c3:41:d6:84:d8:47:d0:08:ef:00:ef: 3e:27:ca:ae:21:d1:d4:45:9c:c1:b8:b6:68:66:71:40:8d:15: f4:a9:c1:ad -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RTNDNzExMC8GA1UEBRMoMzI3M0JGNzRDRkQzN0RDMkIwODBBQTRGMUFEOUVENUVE NjNFNjMyMDAeFw0yNTA0MDMwNjQ0MTlaFw0yNTA0MTAwNjQ0MTlaMBgxFjAUBgNV BAMTDTY3ZWUyZTQzLTM1OWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDE6L8/dXT+YQZqAGpu42adniFoKr1ac3V5fCPVMiA8QT6GfFjy7bzwW2BMrR+h S5U4gfjSAFZ+2FrFp+EqcF5xIBtTFBsmfdJKn90I2GwEaeefI/tHlReLfzAKlkjl dmKBVE5cvbL8cyaEYS1a/eXo3V6kb4Alkr1orlYlbGemOwKIg5DbwSALKXs+Ou/G +qx6/bnae8E7LKQBqLfQLRmvC/8qoDf+RBJXF986A5fuDN9uog6gMWqFaAaqIa8F 02SUnfPGacuMI4ScGtWrTQYhCpPv6wgjCwYE39AhJAMo+dKLbvt2MBuC3mqPSRPl 8f+qTa0xaARi783bHliT2Y+FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUq+zQ/2i4 TUpzIoM3TkyNvoRarTIwHwYDVR0jBBgwFoAUMnO/dM/TfcKwgKpPGtntXtY+YyAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFM0M3LzhFNjA4QThBQjI2 NzExRUZBNTY1QTg0OUM0RjlBRTAyL01uT19kTV9UZmNLd2dLcFBHdG50WHRZLVl5 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTW5PX2RNX1RmY0t3Z0twUEd0bnRYdFktWXlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF M0M3LzhFNjA4QThBQjI2NzExRUZBNTY1QTg0OUM0RjlBRTAyL01uT19kTV9UZmNL d2dLcFBHdG50WHRZLVl5QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADtaNT31xm59pCqfJoCzxTzEKC97XqrF3TYF4H/0kgb8wXs8xxOmSFKW xttRp5fWpioQOjvtr9j0Uhjz8Yj8Xk+lQyS7fjTQYZXKSHjVZhPNo0RfmitFUpZT P5BO69H7mFnxah4Fk9pIC+vzOHOYwKoBBDuLSejjAa9URGDR+6eROPda1MriHNo9 QbtaWm7+cRTfx+qokb7leGO+cKq+lbdRXc+a1UfjU46WxII0GHIt9OgajfFjB1we 2FAzBUIbXDhf6/mmMm1grlAawnx+6xLK/wGG//ekeRL6lirzZ2jDQdaE2EfQCO8A 7z4nyq4h0dRFnMG4tmhmcUCNFfSpwa0= -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:07 2025 by rpki-client