$ rpki-client -vvf rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft File: 0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft (raw, json) Hash identifier: mt3/GXLjQ2aPA2tTDQhU8H4PaUp8kUE+oDzJrfa6rE8= Subject key identifier: C2:D8:76:05:9A:C3:0A:B1:C1:09:3E:54:CA:AA:41:A5:85:28:DE:47 Authority key identifier: D1:8F:FC:C5:04:D3:69:3D:7F:8A:38:D8:6D:C1:2E:88:CD:96:0E:56 Certificate issuer: /CN=A91443DC/serialNumber=D18FFCC504D3693D7F8A38D86DC12E88CD960E56 Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft Manifest number: 93 Signing time: Thu 03 Apr 2025 05:37:27 +0000 Manifest this update: Thu 03 Apr 2025 05:37:27 +0000 Manifest next update: Thu 10 Apr 2025 05:37:27 +0000 Files and hashes: 1: 0Y_8xQTTaT1_ijjYbcEuiM2WDlY.crl (hash: 8y/ShzN/Z3bPkrXrj9DIvXaQZXTs3bEjwhLKEm9ocoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.crl rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443DC Validity Not Before: Apr 3 05:37:27 2025 GMT Not After : Apr 10 05:37:27 2025 GMT Subject: CN=67ee1e97-700e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2f:b2:59:c9:13:58:9a:39:0d:eb:8a:39:94: 54:18:9d:56:77:85:f6:6f:85:44:8f:90:96:45:75: 47:ea:0c:51:92:c3:ba:99:c7:53:03:cf:b5:e8:36: 9f:f7:06:d8:fc:d1:be:be:b0:c3:0f:f4:4a:07:83: 79:9c:b5:e9:2f:8c:0d:41:12:a5:bd:28:22:56:6a: 2d:a5:2f:b2:b6:18:b7:a0:c1:cc:de:8a:ac:6b:3e: 2c:cf:da:a8:85:97:3f:3c:c2:d4:d9:f7:8f:53:5a: 61:fb:d4:59:8b:21:6c:cb:d8:ec:ea:3e:a0:43:c8: fe:dc:5b:29:3b:2c:3b:cf:35:6e:ef:98:41:a1:ae: ed:47:85:89:0c:32:fa:41:5f:e6:7c:7d:32:89:15: 2d:9b:a2:e3:39:55:29:4c:48:ca:64:f8:cc:b5:ba: 32:bd:99:2b:54:ae:72:87:ff:57:ba:1e:b2:89:8f: bc:e4:ef:56:bc:03:ab:a8:8f:33:46:bf:7d:98:44: 41:33:7b:1d:45:ad:08:b6:00:35:d2:6b:ad:40:8f: c3:5e:85:fc:c7:0d:83:dc:52:bf:52:da:21:a4:65: 6e:96:47:73:d1:6d:f4:5e:41:8a:87:34:61:65:c3: 56:13:01:12:82:09:66:66:c7:07:f2:72:d5:e9:3f: 91:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D8:76:05:9A:C3:0A:B1:C1:09:3E:54:CA:AA:41:A5:85:28:DE:47 X509v3 Authority Key Identifier: keyid:D1:8F:FC:C5:04:D3:69:3D:7F:8A:38:D8:6D:C1:2E:88:CD:96:0E:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:4e:20:52:b8:01:13:dc:62:c5:d9:35:b8:10:7d:81:6d:a6: 2d:92:fd:55:79:45:28:a3:d3:86:79:28:dd:d0:68:b4:11:b9: ee:66:9b:24:3e:7f:ff:28:01:31:32:86:ca:e9:c3:d4:50:f0: 9f:f7:94:b1:78:cb:af:3f:31:1b:6e:48:ee:47:e5:36:5a:3b: a8:e6:12:f6:ef:68:d3:8e:98:73:fd:3c:d4:97:02:ff:67:f5: 9c:34:39:9d:2d:ba:1e:d8:70:51:a4:07:ca:bd:ce:a8:95:0c: 00:3f:0e:e0:f8:a7:58:59:9a:a7:a5:3a:ec:57:00:1f:6c:ec: 1c:6e:a2:70:f7:8f:01:9e:06:66:b1:19:44:1d:9d:62:cd:a3: 32:b0:cd:56:19:14:e0:b1:c2:18:f4:1d:50:78:7b:86:3b:19: cb:b7:61:39:4b:ce:7e:4b:5b:da:cb:9d:fb:39:83:8e:6f:a8: 4e:af:98:8c:83:a3:f4:87:32:8c:1c:9d:b7:74:17:2c:70:5b: c4:aa:1c:b6:b8:c4:b1:03:55:ec:10:6d:1b:36:b7:81:d2:82: e6:ed:2e:95:14:7b:05:8c:ef:39:4f:28:91:95:51:44:7c:1f: 0b:a1:33:09:56:66:1f:51:9d:97:9f:10:fd:4a:b5:44:94:bd: e1:12:61:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQzREMxMTAvBgNVBAUTKEQxOEZGQ0M1MDREMzY5M0Q3RjhBMzhEODZEQzEyRTg4 Q0Q5NjBFNTYwHhcNMjUwNDAzMDUzNzI3WhcNMjUwNDEwMDUzNzI3WjAYMRYwFAYD VQQDEw02N2VlMWU5Ny03MDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxC+yWckTWJo5DeuKOZRUGJ1Wd4X2b4VEj5CWRXVH6gxRksO6mcdTA8+16Daf 9wbY/NG+vrDDD/RKB4N5nLXpL4wNQRKlvSgiVmotpS+ythi3oMHM3oqsaz4sz9qo hZc/PMLU2fePU1ph+9RZiyFsy9js6j6gQ8j+3FspOyw7zzVu75hBoa7tR4WJDDL6 QV/mfH0yiRUtm6LjOVUpTEjKZPjMtboyvZkrVK5yh/9Xuh6yiY+85O9WvAOrqI8z Rr99mERBM3sdRa0ItgA10mutQI/DXoX8xw2D3FK/UtohpGVulkdz0W30XkGKhzRh ZcNWEwESgglmZscH8nLV6T+R+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLYdgWa wwqxwQk+VMqqQaWFKN5HMB8GA1UdIwQYMBaAFNGP/MUE02k9f4o42G3BLojNlg5W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDNEQy9BMDY1RDFFQTMw NjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi8wWV84eFFUVGFUMV9pampZYmNFdWlNMldE bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBZXzh4UVRUYVQxX2lqalliY0V1aU0yV0RsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDNEQy9BMDY1RDFFQTMwNjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi8wWV84eFFUVGFU MV9pampZYmNFdWlNMldEbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTTiBSuAET3GLF2TW4EH2BbaYtkv1VeUUoo9OGeSjd0Gi0EbnuZpsk Pn//KAExMobK6cPUUPCf95SxeMuvPzEbbkjuR+U2Wjuo5hL272jTjphz/TzUlwL/ Z/WcNDmdLboe2HBRpAfKvc6olQwAPw7g+KdYWZqnpTrsVwAfbOwcbqJw948BngZm sRlEHZ1izaMysM1WGRTgscIY9B1QeHuGOxnLt2E5S85+S1vay537OYOOb6hOr5iM g6P0hzKMHJ23dBcscFvEqhy2uMSxA1XsEG0bNreB0oLm7S6VFHsFjO85TyiRlVFE fB8LoTMJVmYfUZ2XnxD9SrVElL3hEmFC -----END CERTIFICATE-----Generated at Sat Apr 5 07:59:30 2025 by rpki-client