$ rpki-client -vvf rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft File: mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft (raw, json) Hash identifier: y9hIdWSvHhhEMFPzXlWPARcPz6AIJI03JQvMcH2o+YU= Subject key identifier: 60:EF:DA:9C:0C:CD:AF:EA:4B:B2:7D:72:5F:2B:72:2C:19:B9:F0:7E Authority key identifier: 99:C1:06:E8:7F:E1:D6:41:1A:EC:71:F8:03:94:62:2C:88:1A:AA:D9 Certificate issuer: /CN=A914B1DB/serialNumber=99C106E87FE1D6411AEC71F80394622C881AAAD9 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mcEG6H_h1kEa7HH4A5RiLIgaqtk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft Manifest number: 8B Signing time: Fri 11 Apr 2025 05:40:31 +0000 Manifest this update: Fri 11 Apr 2025 05:40:31 +0000 Manifest next update: Fri 18 Apr 2025 05:40:31 +0000 Files and hashes: 1: mcEG6H_h1kEa7HH4A5RiLIgaqtk.crl (hash: tRLwMtHJFR4xKotorrKkzXbIBoU2W5ShYiVRg9nLxLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.crl rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mcEG6H_h1kEa7HH4A5RiLIgaqtk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 05:40:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B1DB, serialNumber=99C106E87FE1D6411AEC71F80394622C881AAAD9 Validity Not Before: Apr 11 05:40:31 2025 GMT Not After : Apr 18 05:40:31 2025 GMT Subject: CN=67f8ab4f-0dc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:81:07:cb:43:21:bf:1b:26:28:c0:e6:42:67: 56:89:b7:d5:99:58:b3:ba:e9:90:4d:12:2b:bd:d2: 99:b5:ab:0f:9e:45:e4:34:e8:f6:03:6f:38:c2:ff: 14:8b:73:d2:ca:ef:c3:1f:69:1c:18:81:10:c1:54: c9:ef:da:d7:fb:6e:db:7c:5f:bb:e9:49:5e:13:51: 87:1a:7a:ae:d2:aa:c0:44:34:92:b4:4b:df:fb:03: bb:74:4d:93:8d:5f:42:da:8b:a7:87:a1:3c:b6:0c: a9:a0:51:cc:78:03:33:7e:1a:15:a2:4c:08:93:19: 81:bd:f9:88:de:62:93:c1:47:51:36:24:c1:01:52: ac:8e:6b:94:68:4d:0b:ba:61:d3:55:18:af:0c:25: 83:ed:2d:fe:eb:97:1f:14:98:ec:9c:4b:4c:d7:2e: 20:30:26:0f:d6:cf:63:19:c7:52:17:46:c8:6d:1d: c1:ae:99:7e:d7:58:50:d1:e6:08:35:80:a8:05:39: 12:aa:81:05:b5:5e:ac:a5:0f:c0:60:0d:c8:51:05: 19:0c:27:79:11:54:88:1d:80:74:a5:7f:36:d6:75: 3c:32:1c:a4:ac:03:8b:dd:f7:dd:d1:5f:3c:ba:8d: df:c5:4c:79:ac:22:34:98:67:a9:45:4b:27:3f:2f: 20:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:EF:DA:9C:0C:CD:AF:EA:4B:B2:7D:72:5F:2B:72:2C:19:B9:F0:7E X509v3 Authority Key Identifier: keyid:99:C1:06:E8:7F:E1:D6:41:1A:EC:71:F8:03:94:62:2C:88:1A:AA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mcEG6H_h1kEa7HH4A5RiLIgaqtk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:6e:d6:95:2c:2c:85:d0:cf:f0:00:1f:66:6e:7a:b2:fc:79: 1a:0c:8a:ce:cb:2b:18:b8:fa:64:f7:ba:17:9d:d1:1e:ed:ba: bf:40:b9:d9:7d:b1:c9:e9:57:6a:54:c2:b9:97:c5:cd:cd:10: c6:7b:4e:0f:97:27:ed:4e:58:a4:c3:e0:82:b0:3b:6c:af:2c: 57:10:6a:48:29:8b:c5:8f:b1:8b:31:0e:6d:9c:4d:a0:6f:c4: 2f:64:3f:74:96:71:ff:ed:8f:5e:49:d9:02:87:c9:01:c0:4b: 57:10:09:c1:f3:9a:54:67:8b:2e:72:75:7f:f7:78:da:28:21: e6:9b:a1:98:7a:2f:93:a7:d9:42:7f:fc:e0:42:1d:bd:32:26: 79:ac:e3:b2:ec:24:1f:dc:96:77:e5:6c:63:70:b0:aa:96:c3: 28:e9:12:ec:c5:0f:bb:c5:38:92:38:95:90:72:fa:15:54:38: c5:7a:a5:de:92:7b:eb:61:a8:08:4c:83:7a:98:43:16:e9:c7: b4:40:a9:a7:1e:90:16:8c:01:2f:c4:f9:1b:73:d8:92:ea:f6: 50:cd:5e:ff:1e:c1:12:0e:11:25:da:65:08:7e:8a:89:61:61: 05:ff:61:dc:56:e1:a2:01:f2:b4:09:b3:8b:ce:a9:6b:52:89: bb:11:bc:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIxREIxMTAvBgNVBAUTKDk5QzEwNkU4N0ZFMUQ2NDExQUVDNzFGODAzOTQ2MjJD ODgxQUFBRDkwHhcNMjUwNDExMDU0MDMxWhcNMjUwNDE4MDU0MDMxWjAYMRYwFAYD VQQDEw02N2Y4YWI0Zi0wZGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0YEHy0MhvxsmKMDmQmdWibfVmVizuumQTRIrvdKZtasPnkXkNOj2A284wv8U i3PSyu/DH2kcGIEQwVTJ79rX+27bfF+76UleE1GHGnqu0qrARDSStEvf+wO7dE2T jV9C2ounh6E8tgypoFHMeAMzfhoVokwIkxmBvfmI3mKTwUdRNiTBAVKsjmuUaE0L umHTVRivDCWD7S3+65cfFJjsnEtM1y4gMCYP1s9jGcdSF0bIbR3Brpl+11hQ0eYI NYCoBTkSqoEFtV6spQ/AYA3IUQUZDCd5EVSIHYB0pX821nU8MhykrAOL3ffd0V88 uo3fxUx5rCI0mGepRUsnPy8gBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGDv2pwM za/qS7J9cl8rciwZufB+MB8GA1UdIwQYMBaAFJnBBuh/4dZBGuxx+AOUYiyIGqrZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjFEQi8zNjUxNDBFRTQz MTAxMUVGODY4QjJCODFDNEY5QUUwMi9tY0VHNkhfaDFrRWE3SEg0QTVSaUxJZ2Fx dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21jRUc2SF9oMWtFYTdISDRBNVJpTElnYXF0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjFEQi8zNjUxNDBFRTQzMTAxMUVGODY4QjJCODFDNEY5QUUwMi9tY0VHNkhfaDFr RWE3SEg0QTVSaUxJZ2FxdGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/btaVLCyF0M/wAB9mbnqy/HkaDIrOyysYuPpk97oXndEe7bq/QLnZ fbHJ6VdqVMK5l8XNzRDGe04PlyftTlikw+CCsDtsryxXEGpIKYvFj7GLMQ5tnE2g b8QvZD90lnH/7Y9eSdkCh8kBwEtXEAnB85pUZ4sucnV/93jaKCHmm6GYei+Tp9lC f/zgQh29MiZ5rOOy7CQf3JZ35WxjcLCqlsMo6RLsxQ+7xTiSOJWQcvoVVDjFeqXe knvrYagITIN6mEMW6ce0QKmnHpAWjAEvxPkbc9iS6vZQzV7/HsESDhEl2mUIfoqJ YWEF/2HcVuGiAfK0CbOLzqlrUom7EbzE -----END CERTIFICATE-----Generated at Sat Apr 12 17:50:25 2025 by rpki-client