$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft File: 8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft (raw, json) Hash identifier: gSEEoJSWX9NZRZadlMJSQRcoJfR7+2eVsZeSFYY6K6U= Subject key identifier: A7:AE:B9:23:85:24:81:8B:22:2C:68:B5:50:52:E2:33:F8:35:D2:83 Authority key identifier: F1:0C:80:52:47:C0:26:F9:E3:29:4F:81:45:1D:16:2C:46:50:FC:D3 Certificate issuer: /CN=A91409DC/serialNumber=F10C805247C026F9E3294F81451D162C4650FCD3 Certificate serial: 0C18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft Manifest number: 143A Signing time: Fri 04 Apr 2025 18:43:15 +0000 Manifest this update: Fri 04 Apr 2025 18:43:15 +0000 Manifest next update: Fri 11 Apr 2025 18:43:15 +0000 Files and hashes: 1: 8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl (hash: JwuuMlTswhe+4H9nXPw0MMRrGGe0OGstZP3fXGcYB9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:43:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3096 (0xc18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91409DC Validity Not Before: Apr 4 18:43:15 2025 GMT Not After : Apr 11 18:43:15 2025 GMT Subject: CN=67f02843-430c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:45:68:75:6e:a4:5e:04:f6:e5:39:f4:b3:5b: 4a:28:2f:e8:fa:f3:38:56:08:15:38:e0:83:cc:b2: 4a:51:c5:91:c3:27:de:f2:3a:84:03:c4:b9:21:fe: 55:ba:9a:7b:2a:74:5e:fd:ea:4f:a4:24:1e:cf:ae: 96:34:c5:bb:b2:aa:57:e2:3c:94:35:5c:31:65:3f: d6:ac:a4:e0:04:1b:b9:35:03:be:1b:34:e1:cc:e2: 09:09:2a:b6:d1:30:a6:92:c7:24:ef:9b:70:b8:78: 12:4f:88:c1:dd:ea:63:a1:da:d6:3b:4e:a0:6f:97: 80:63:be:7b:97:12:00:90:4f:4e:79:8e:0e:72:cb: f3:96:8d:51:8b:fe:d6:b0:8b:2f:78:44:b9:5f:06: 93:7c:e8:a5:77:86:ec:13:6b:49:f0:8c:19:1a:10: 40:8a:e5:18:37:50:03:4a:19:4d:1b:6a:b9:d9:fa: 22:68:ca:38:c3:ac:89:f1:61:3f:3a:b0:17:93:60: d2:8a:80:f6:7b:1d:f4:01:95:23:9c:42:2d:e9:3f: 50:b4:f7:1f:e4:82:d8:74:9b:8e:bc:81:4e:36:f2: 74:10:bd:86:46:0c:1f:56:d0:fa:5a:ab:fc:f5:2b: 0f:65:85:b2:99:2f:5d:0b:00:8f:e1:e2:9e:df:00: 01:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:AE:B9:23:85:24:81:8B:22:2C:68:B5:50:52:E2:33:F8:35:D2:83 X509v3 Authority Key Identifier: keyid:F1:0C:80:52:47:C0:26:F9:E3:29:4F:81:45:1D:16:2C:46:50:FC:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:d1:7e:e3:0a:1e:e8:86:74:99:4a:03:a0:2f:10:30:87:28: 08:69:e6:e8:a9:72:f9:c5:d4:d4:ef:ea:a3:46:99:81:30:05: b6:5d:f5:1d:46:40:f8:e5:33:1a:69:34:97:60:08:09:99:f4: 1f:e3:68:f5:19:f8:3e:f6:3b:f4:d8:fb:4a:f6:93:d9:91:69: 58:57:c3:a9:f6:a0:53:89:68:ef:d7:90:1b:09:d5:de:c6:07: bc:9b:4c:4b:da:36:12:f9:28:b9:63:8b:c8:8f:17:4b:0e:4f: 22:ec:7d:32:43:44:6f:ce:2e:fe:d1:82:ee:44:b9:62:a2:a3: 0c:d2:66:c2:0b:8c:6e:fe:73:6e:c3:12:7d:3b:7c:6a:52:b6: ad:30:78:4a:b4:b6:dd:cc:a4:36:1e:37:09:22:cd:cd:6b:40: 76:a9:d2:7a:fa:52:b3:56:99:93:99:61:a3:66:f8:10:77:bb: 1b:6b:04:0b:3f:e7:12:05:19:05:99:49:47:de:dc:ba:89:7c: 4b:c0:5b:5d:8a:d2:ed:e1:51:73:57:c3:10:29:3e:13:ce:87: 38:8b:d0:5c:b2:2d:9b:72:56:5d:ac:ba:44:26:b6:38:93:e4: 33:26:61:1b:22:10:62:5a:de:c3:fb:ce:8a:57:9c:eb:fe:be: 08:26:91:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA5REMxMTAvBgNVBAUTKEYxMEM4MDUyNDdDMDI2RjlFMzI5NEY4MTQ1MUQxNjJD NDY1MEZDRDMwHhcNMjUwNDA0MTg0MzE1WhcNMjUwNDExMTg0MzE1WjAYMRYwFAYD VQQDEw02N2YwMjg0My00MzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukVodW6kXgT25Tn0s1tKKC/o+vM4VggVOOCDzLJKUcWRwyfe8jqEA8S5If5V upp7KnRe/epPpCQez66WNMW7sqpX4jyUNVwxZT/WrKTgBBu5NQO+GzThzOIJCSq2 0TCmksck75twuHgST4jB3epjodrWO06gb5eAY757lxIAkE9OeY4Ocsvzlo1Ri/7W sIsveES5XwaTfOild4bsE2tJ8IwZGhBAiuUYN1ADShlNG2q52foiaMo4w6yJ8WE/ OrAXk2DSioD2ex30AZUjnEIt6T9QtPcf5ILYdJuOvIFONvJ0EL2GRgwfVtD6Wqv8 9SsPZYWymS9dCwCP4eKe3wABHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKeuuSOF JIGLIixotVBS4jP4NdKDMB8GA1UdIwQYMBaAFPEMgFJHwCb54ylPgUUdFixGUPzT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDlEQy9BNUJCRkFBNjA5 MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi84UXlBVWtmQUp2bmpLVS1CUlIwV0xFWlFf Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhReUFVa2ZBSnZuaktVLUJSUjBXTEVaUV9OTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDlEQy9BNUJCRkFBNjA5MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi84UXlBVWtmQUp2 bmpLVS1CUlIwV0xFWlFfTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk0X7jCh7ohnSZSgOgLxAwhygIaeboqXL5xdTU7+qjRpmBMAW2XfUd RkD45TMaaTSXYAgJmfQf42j1Gfg+9jv02PtK9pPZkWlYV8Op9qBTiWjv15AbCdXe xge8m0xL2jYS+Si5Y4vIjxdLDk8i7H0yQ0Rvzi7+0YLuRLlioqMM0mbCC4xu/nNu wxJ9O3xqUratMHhKtLbdzKQ2HjcJIs3Na0B2qdJ6+lKzVpmTmWGjZvgQd7sbawQL P+cSBRkFmUlH3ty6iXxLwFtditLt4VFzV8MQKT4Tzoc4i9Bcsi2bclZdrLpEJrY4 k+QzJmEbIhBiWt7D+86KV5zr/r4IJpEn -----END CERTIFICATE-----Generated at Fri Apr 4 22:26:59 2025 by rpki-client