$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft File: cXLtDPRHBezrGWHROgV-z_MHyG8.mft (raw, json) Hash identifier: R6DQ8qg0ZUVnvlXRh8zEL2ysAeVRlnhpINnZDHZ9tNI= Subject key identifier: B3:CD:02:EC:36:52:F0:51:84:84:A7:B8:36:EB:E9:FC:C6:3E:30:3F Authority key identifier: 71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F Certificate issuer: /CN=A913B7C7/serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft Manifest number: 4E Signing time: Sat 05 Apr 2025 06:34:05 +0000 Manifest this update: Sat 05 Apr 2025 06:34:05 +0000 Manifest next update: Sat 12 Apr 2025 06:34:05 +0000 Files and hashes: 1: cXLtDPRHBezrGWHROgV-z_MHyG8.crl (hash: GWBhTk5zMk787yk2s/736nsSLRSiwLWDliY1XVS+GLM=) 2: 1A1C5AF89D9C11EFAAA9FA6AC4F9AE02.roa (hash: hV0+1IwRiq4hHk9yI+8OcLJdXek+Jfs+77Mer9xXqoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 06:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7C7 Validity Not Before: Apr 5 06:34:05 2025 GMT Not After : Apr 12 06:34:05 2025 GMT Subject: CN=67f0cedd-b5e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3c:c2:1d:32:b6:73:4b:78:a5:b1:44:f9:24: c6:65:60:0b:4b:fa:57:a2:41:e0:8b:e6:e5:29:6b: dd:19:4b:e5:9b:f8:75:75:3a:be:3f:c5:b0:45:5d: 13:67:b2:7d:4a:be:34:40:20:60:d3:0b:49:31:d3: 45:ce:8c:4d:97:5b:d0:2a:7d:1a:fe:fd:77:2e:d9: 4a:e7:dd:45:7a:13:08:8e:86:14:27:01:5f:91:cd: 45:bd:5b:58:7a:fc:53:9e:38:f6:a5:30:2e:3e:c0: 92:6a:55:d0:6f:c5:f7:e3:48:06:f2:cb:a6:fe:86: f1:87:50:f6:39:ab:51:21:df:1c:5a:63:10:7d:29: aa:13:c9:b7:85:90:48:f3:7b:28:7e:03:f7:7c:08: 94:36:ff:d4:0f:3e:2d:ad:70:99:a5:f3:c5:3a:c2: ca:b3:0c:42:13:f8:bd:58:1d:f7:6f:75:ec:1c:cb: a6:a8:80:60:c0:29:7d:26:e8:9a:22:c0:17:5f:cc: ba:9a:06:17:ac:cf:49:49:ee:3d:db:f0:d4:a4:23: 08:f1:9a:36:61:96:63:44:88:fd:c4:e0:ff:83:3e: 67:be:5c:5a:9b:7f:d1:e7:ad:00:03:64:8c:28:fc: d9:12:da:a3:c8:ee:45:bd:83:d4:40:42:0c:f1:56: cb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:CD:02:EC:36:52:F0:51:84:84:A7:B8:36:EB:E9:FC:C6:3E:30:3F X509v3 Authority Key Identifier: keyid:71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:d6:3a:73:df:bc:c1:6f:ea:f3:1e:12:dc:d6:0b:f0:39:dd: 9b:46:2b:f9:66:9d:35:41:3f:ed:7c:48:84:95:4a:a2:1a:cb: 60:9e:29:25:be:76:ee:27:e5:63:52:73:44:41:31:1d:38:d1: 51:51:e7:41:be:75:a4:39:6c:66:4e:23:b2:4b:1f:23:19:73: be:fe:ab:2e:fd:2a:db:95:27:9f:bf:98:27:b0:da:ad:67:30: 92:ac:2c:74:cd:8e:79:e9:d4:84:2e:58:3d:91:37:91:41:0d: 01:e2:82:d7:56:eb:f3:04:40:08:f7:99:17:f4:71:8b:54:d3: 9c:04:90:9f:3e:cb:30:be:d2:58:84:02:0c:10:e2:53:b7:c4: 69:70:fa:b0:52:05:e6:ca:d2:92:54:99:61:a5:1a:2d:c5:30: d4:2e:2d:d2:91:f4:71:ac:50:a1:a3:1f:71:99:f9:13:80:0a: 88:b0:54:48:c8:00:f1:46:31:99:78:75:fc:89:26:d7:c2:4f: e5:41:f7:e8:ef:c4:90:7c:5a:f3:69:7a:ab:bf:9f:5f:80:0b: 65:7c:45:ae:b7:52:fc:2c:fa:d7:f3:16:b0:59:f7:5f:97:33: d7:75:ed:64:c6:44:9f:db:1f:35:77:b7:8a:fd:7e:ea:15:33: 1e:e7:0e:14 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjdDNzExMC8GA1UEBRMoNzE3MkVEMENGNDQ3MDVFQ0VCMTk2MUQxM0EwNTdFQ0ZG MzA3Qzg2RjAeFw0yNTA0MDUwNjM0MDVaFw0yNTA0MTIwNjM0MDVaMBgxFjAUBgNV BAMTDTY3ZjBjZWRkLWI1ZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVPMIdMrZzS3ilsUT5JMZlYAtL+leiQeCL5uUpa90ZS+Wb+HV1Or4/xbBFXRNn sn1KvjRAIGDTC0kx00XOjE2XW9AqfRr+/Xcu2Urn3UV6EwiOhhQnAV+RzUW9W1h6 /FOeOPalMC4+wJJqVdBvxffjSAbyy6b+hvGHUPY5q1Eh3xxaYxB9KaoTybeFkEjz eyh+A/d8CJQ2/9QPPi2tcJml88U6wsqzDEIT+L1YHfdvdewcy6aogGDAKX0m6Joi wBdfzLqaBhesz0lJ7j3b8NSkIwjxmjZhlmNEiP3E4P+DPme+XFqbf9HnrQADZIwo /NkS2qPI7kW9g9RAQgzxVsu9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUs80C7DZS 8FGEhKe4Nuvp/MY+MD8wHwYDVR0jBBgwFoAUcXLtDPRHBezrGWHROgV+z/MHyG8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCN0M3L0FBMkE3ODRDOUQ5 QjExRUY4NjA1MDQ2OUM0RjlBRTAyL2NYTHREUFJIQmV6ckdXSFJPZ1Ytel9NSHlH OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY1hMdERQUkhCZXpyR1dIUk9nVi16X01IeUc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC N0M3L0FBMkE3ODRDOUQ5QjExRUY4NjA1MDQ2OUM0RjlBRTAyL2NYTHREUFJIQmV6 ckdXSFJPZ1Ytel9NSHlHOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFTWOnPfvMFv6vMeEtzWC/A53ZtGK/lmnTVBP+18SISVSqIay2CeKSW+ du4n5WNSc0RBMR040VFR50G+daQ5bGZOI7JLHyMZc77+qy79KtuVJ5+/mCew2q1n MJKsLHTNjnnp1IQuWD2RN5FBDQHigtdW6/MEQAj3mRf0cYtU05wEkJ8+yzC+0liE AgwQ4lO3xGlw+rBSBebK0pJUmWGlGi3FMNQuLdKR9HGsUKGjH3GZ+ROACoiwVEjI APFGMZl4dfyJJtfCT+VB9+jvxJB8WvNpequ/n1+AC2V8Ra63Uvws+tfzFrBZ91+X M9d17WTGRJ/bHzV3t4r9fuoVMx7nDhQ= -----END CERTIFICATE-----Generated at Sat Apr 5 10:25:48 2025 by rpki-client