$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft File: G5AiZjIh2M567rA_P1eZ8NV-phY.mft (raw, json) Hash identifier: UEH75wPfnCVRr8cTtOwsoEBPOBmF2OWE27ujZnA2GZE= Subject key identifier: D6:7E:A2:25:A9:D3:DA:C9:E6:E9:83:9B:24:7B:D0:E5:30:96:D0:AA Authority key identifier: 1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16 Certificate issuer: /CN=A9133E16/serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616 Certificate serial: 08CA Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft Manifest number: 08CA Signing time: Sun 06 Apr 2025 20:11:52 +0000 Manifest this update: Sun 06 Apr 2025 20:11:51 +0000 Manifest next update: Sun 13 Apr 2025 20:11:51 +0000 Files and hashes: 1: G5AiZjIh2M567rA_P1eZ8NV-phY.crl (hash: 4x6gZDRxxF0DfcHfd+tZG/ZFbnXUKTxYKaJyJ+KpU6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 18:53:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2250 (0x8ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133E16 Validity Not Before: Apr 6 20:11:51 2025 GMT Not After : Apr 13 20:11:51 2025 GMT Subject: CN=67f2e007-9e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ae:2c:c1:e4:70:84:f8:e4:fd:53:27:78:9f: 29:45:dd:65:24:a5:dd:1d:2e:d5:7a:4c:16:ab:52: 67:06:b7:96:e9:a5:99:0c:ef:20:78:97:f1:49:e5: 6f:d5:5a:e4:90:ec:e1:b5:7e:c3:fd:23:1d:07:c8: 0c:4f:21:1f:da:36:0d:00:75:e6:ba:f2:62:80:c1: 70:00:0e:33:d0:32:e3:e5:c8:fc:b4:b1:50:4a:ab: 08:f1:a6:61:5e:d1:3a:c1:ae:29:6c:d1:a0:77:1d: a5:5c:fd:a9:a5:57:f5:53:e7:7f:2a:e5:a9:45:3e: 68:4e:57:c5:02:bc:8f:aa:0a:e8:e5:c1:4a:a6:77: 27:0d:08:b5:ed:1e:6f:01:5e:e5:03:ed:89:93:17: ae:62:46:79:b3:19:c5:10:a1:29:0d:0a:1f:60:f1: a9:80:55:23:24:19:6b:93:dd:52:91:b4:3b:48:6c: 66:7f:85:b2:43:83:c9:79:45:ca:95:4c:9f:d7:93: 7d:e3:b3:e2:7f:b6:a4:fd:65:ff:8b:3b:c3:c4:89: c2:95:68:98:c0:2e:f3:91:de:b7:29:5b:f9:7a:24: a0:9b:ec:5d:ee:ba:64:4f:ab:54:b7:22:e1:47:90: ea:3f:2c:5c:74:f0:e2:16:cb:a2:dd:92:e0:b2:46: 36:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:7E:A2:25:A9:D3:DA:C9:E6:E9:83:9B:24:7B:D0:E5:30:96:D0:AA X509v3 Authority Key Identifier: keyid:1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:02:14:90:c1:0b:bb:a8:0a:e5:3b:c5:62:3d:3c:1b:9f:2d: 3f:52:12:fe:66:e4:c7:08:f6:92:73:a8:6f:12:1e:ec:50:e0: 71:52:2c:67:63:a8:ae:df:5d:53:23:1c:84:08:45:c8:27:e0: f0:ad:1b:01:cf:17:8c:bd:78:e9:91:73:6a:56:a1:84:83:91: 1f:df:a9:94:16:3d:cc:15:71:a4:b6:be:0e:28:5b:34:50:e9: 86:d5:80:c5:0a:f4:3e:86:20:ed:63:17:74:16:55:8a:be:b8: c8:ac:95:d5:db:d9:2f:aa:28:71:a0:7e:48:33:ca:37:44:08: 04:75:a3:27:dc:a8:18:d6:6c:8f:50:58:f9:fe:c6:69:21:d5: 13:17:72:93:7c:d3:76:81:18:ff:55:1b:57:20:3f:9c:7a:76: 11:b3:c0:6a:4f:39:38:e6:d2:e3:cb:0e:28:d3:2c:90:9c:49: b7:84:be:d9:05:3e:59:f8:8c:30:a0:9c:c6:ef:11:67:a6:e3: 2d:1d:51:30:2d:42:6f:58:3b:ab:99:93:9d:63:6b:75:d8:dc: e1:04:4c:de:be:d6:c6:a3:f5:60:fe:68:43:40:6e:09:35:fc: ad:8c:9e:92:39:f7:c0:9c:c2:99:4e:f1:f7:13:84:16:2d:30: 29:2e:e3:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNFMTYxMTAvBgNVBAUTKDFCOTAyMjY2MzIyMUQ4Q0U3QUVFQjAzRjNGNTc5OUYw RDU3RUE2MTYwHhcNMjUwNDA2MjAxMTUxWhcNMjUwNDEzMjAxMTUxWjAYMRYwFAYD VQQDEw02N2YyZTAwNy05ZTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA864sweRwhPjk/VMneJ8pRd1lJKXdHS7VekwWq1JnBreW6aWZDO8geJfxSeVv 1VrkkOzhtX7D/SMdB8gMTyEf2jYNAHXmuvJigMFwAA4z0DLj5cj8tLFQSqsI8aZh XtE6wa4pbNGgdx2lXP2ppVf1U+d/KuWpRT5oTlfFAryPqgro5cFKpncnDQi17R5v AV7lA+2JkxeuYkZ5sxnFEKEpDQofYPGpgFUjJBlrk91SkbQ7SGxmf4WyQ4PJeUXK lUyf15N947Pif7ak/WX/izvDxInClWiYwC7zkd63KVv5eiSgm+xd7rpkT6tUtyLh R5DqPyxcdPDiFsui3ZLgskY2CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZ+oiWp 09rJ5umDmyR70OUwltCqMB8GA1UdIwQYMBaAFBuQImYyIdjOeu6wPz9XmfDVfqYW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0UxNi9GNDdCNkNENEFD NzQxMUVBODZFQTlGNDhDNEY5QUUwMi9HNUFpWmpJaDJNNTY3ckFfUDFlWjhOVi1w aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0c1QWlaakloMk01NjdyQV9QMWVaOE5WLXBoWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0UxNi9GNDdCNkNENEFDNzQxMUVBODZFQTlGNDhDNEY5QUUwMi9HNUFpWmpJaDJN NTY3ckFfUDFlWjhOVi1waFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANAhSQwQu7qArlO8ViPTwbny0/UhL+ZuTHCPaSc6hvEh7sUOBxUixn Y6iu311TIxyECEXIJ+DwrRsBzxeMvXjpkXNqVqGEg5Ef36mUFj3MFXGktr4OKFs0 UOmG1YDFCvQ+hiDtYxd0FlWKvrjIrJXV29kvqihxoH5IM8o3RAgEdaMn3KgY1myP UFj5/sZpIdUTF3KTfNN2gRj/VRtXID+cenYRs8BqTzk45tLjyw4o0yyQnEm3hL7Z BT5Z+IwwoJzG7xFnpuMtHVEwLUJvWDurmZOdY2t12NzhBEzevtbGo/Vg/mhDQG4J NfytjJ6SOffAnMKZTvH3E4QWLTApLuMQ -----END CERTIFICATE-----Generated at Mon Apr 7 00:47:42 2025 by rpki-client