$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft File: tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft (raw, json) Hash identifier: 12LYOZB1Jkgk4mpbZACB5uR7Esq7Ej6a/B9ntAdJN0I= Subject key identifier: CB:68:ED:04:CB:99:BE:70:AC:B3:FD:E2:01:5F:20:37:E9:B9:F0:F9 Authority key identifier: B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94 Certificate issuer: /CN=A916988B/serialNumber=B58368616439C750D2C696643952ED4F15036594 Certificate serial: 0628 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft Manifest number: 0628 Signing time: Tue 08 Apr 2025 22:14:31 +0000 Manifest this update: Tue 08 Apr 2025 22:14:30 +0000 Manifest next update: Tue 15 Apr 2025 22:14:30 +0000 Files and hashes: 1: tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl (hash: H4jIEtW7Z0gMEYQ9yLJ2WW928J82mWf7ycKz05t6YUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 22:14:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1576 (0x628) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916988B Validity Not Before: Apr 8 22:14:30 2025 GMT Not After : Apr 15 22:14:30 2025 GMT Subject: CN=67f59fc7-457a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2c:a0:af:56:a2:b3:63:7a:12:92:92:8f:ab: 96:2c:0d:6d:d9:3d:19:40:36:d3:55:f1:32:89:fa: b5:84:f5:c5:2e:d5:4c:0e:0b:4a:17:5e:30:a6:53: 6b:d8:f1:ae:7e:d9:86:6d:10:2c:0b:7b:97:d0:41: b6:4f:38:62:fb:92:8d:be:e0:80:ea:53:19:80:8a: 97:1d:90:6d:d6:7c:a3:1c:34:ac:5d:4f:d4:87:43: cb:0a:17:0f:5e:59:be:f7:61:8f:37:f4:31:47:cc: ed:eb:ca:9a:3b:90:3b:6b:fa:68:04:3a:48:bb:5f: ed:19:cb:46:08:7b:c2:7c:ff:73:cb:aa:88:a6:e0: e2:80:ad:f2:bb:c7:b8:e4:9f:29:72:9b:21:d1:fc: 2a:a3:b3:1c:f2:71:d5:b2:39:14:78:2c:d8:91:1f: 08:29:c6:81:02:cb:13:6b:4f:9c:cb:26:8c:23:42: 19:11:c6:7d:a9:32:2e:28:73:fc:98:fe:b1:be:5d: 56:54:bf:e6:06:49:4e:6b:5e:3b:1d:9c:c3:3e:8d: 8f:55:bf:0d:f3:71:86:3b:3e:38:8f:fc:d5:5f:a6: 9c:8d:23:d0:67:95:a0:6c:9a:6a:4e:14:f1:31:d6: 6b:5e:db:9f:3b:8a:f5:b2:0f:7b:1c:0a:67:1d:a4: 10:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:68:ED:04:CB:99:BE:70:AC:B3:FD:E2:01:5F:20:37:E9:B9:F0:F9 X509v3 Authority Key Identifier: keyid:B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:27:47:71:b2:65:8b:a5:fe:0d:5a:2e:4c:c2:a4:21:f4:f5: 87:ee:6a:79:a6:22:e4:b2:11:13:18:c8:b0:27:4c:5e:de:08: 0d:9c:70:0d:65:33:bd:10:2c:b5:67:08:8e:d1:2f:9c:61:45: f8:4e:04:11:86:22:52:c9:f9:82:0b:1e:46:39:77:55:62:f3: e5:8f:1b:99:6a:cc:bc:cf:aa:ef:9b:1d:11:08:4b:09:98:69: 52:10:b2:d7:96:7d:2c:f9:70:06:c9:21:43:fe:d5:67:44:dc: e9:01:e4:ab:f6:11:21:bd:2e:2f:1a:15:73:a2:8b:10:e3:25: 8e:4c:7d:7a:97:35:96:63:59:ac:c8:c3:84:1a:87:3b:53:84: af:c7:58:f3:14:b0:9a:07:f8:66:e4:91:1a:1b:e4:d2:5c:e9: 68:31:8d:11:20:de:d8:6f:e1:ae:30:bb:fb:d2:53:9d:32:b4: 05:ee:08:60:d3:bc:a0:c2:70:a5:71:3d:5a:9a:82:cf:71:38: f4:e9:e9:60:3c:86:62:d9:cd:d6:1b:90:e4:fb:39:2d:d7:88: 03:35:1f:78:f0:72:b2:5e:b3:dc:fe:8d:68:3c:fc:9c:e7:cc: 41:3c:c3:83:e7:c9:fd:8f:fe:b5:b8:ac:91:2d:41:7c:14:7a: e4:02:7c:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4OEIxMTAvBgNVBAUTKEI1ODM2ODYxNjQzOUM3NTBEMkM2OTY2NDM5NTJFRDRG MTUwMzY1OTQwHhcNMjUwNDA4MjIxNDMwWhcNMjUwNDE1MjIxNDMwWjAYMRYwFAYD VQQDEw02N2Y1OWZjNy00NTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnyygr1ais2N6EpKSj6uWLA1t2T0ZQDbTVfEyifq1hPXFLtVMDgtKF14wplNr 2PGuftmGbRAsC3uX0EG2Tzhi+5KNvuCA6lMZgIqXHZBt1nyjHDSsXU/Uh0PLChcP Xlm+92GPN/QxR8zt68qaO5A7a/poBDpIu1/tGctGCHvCfP9zy6qIpuDigK3yu8e4 5J8pcpsh0fwqo7Mc8nHVsjkUeCzYkR8IKcaBAssTa0+cyyaMI0IZEcZ9qTIuKHP8 mP6xvl1WVL/mBklOa147HZzDPo2PVb8N83GGOz44j/zVX6acjSPQZ5WgbJpqThTx MdZrXtufO4r1sg97HApnHaQQhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMto7QTL mb5wrLP94gFfIDfpufD5MB8GA1UdIwQYMBaAFLWDaGFkOcdQ0saWZDlS7U8VA2WU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTg4Qi80NjdFRTY5RThE NkQxMUVCOTg0MEUwNUZDNEY5QUUwMi90WU5vWVdRNXgxRFN4cFprT1ZMdFR4VURa WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RZTm9ZV1E1eDFEU3hwWmtPVkx0VHhVRFpaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTg4Qi80NjdFRTY5RThENkQxMUVCOTg0MEUwNUZDNEY5QUUwMi90WU5vWVdRNXgx RFN4cFprT1ZMdFR4VURaWlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnJ0dxsmWLpf4NWi5MwqQh9PWH7mp5piLkshETGMiwJ0xe3ggNnHAN ZTO9ECy1ZwiO0S+cYUX4TgQRhiJSyfmCCx5GOXdVYvPljxuZasy8z6rvmx0RCEsJ mGlSELLXln0s+XAGySFD/tVnRNzpAeSr9hEhvS4vGhVzoosQ4yWOTH16lzWWY1ms yMOEGoc7U4Svx1jzFLCaB/hm5JEaG+TSXOloMY0RIN7Yb+GuMLv70lOdMrQF7ghg 07ygwnClcT1amoLPcTj06elgPIZi2c3WG5Dk+zkt14gDNR948HKyXrPc/o1oPPyc 58xBPMOD58n9j/61uKyRLUF8FHrkAnwQ -----END CERTIFICATE-----Generated at Thu Apr 10 23:58:24 2025 by rpki-client