$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft File: Cr_XemhpLv60MkAP_d3XrhsjvCc.mft (raw, json) Hash identifier: evuK/ir3SJoupdwx+5GZ+ulHvkPmB1GPWElUvOyNku0= Subject key identifier: 9B:7A:A0:F6:B3:46:8D:F3:D8:44:ED:DD:94:0C:F1:61:B0:5F:68:61 Authority key identifier: 0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27 Certificate issuer: /CN=A9194A8C/serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27 Certificate serial: 04A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft Manifest number: 05D2 Signing time: Sat 29 Mar 2025 00:12:40 +0000 Manifest this update: Sat 29 Mar 2025 00:12:39 +0000 Manifest next update: Sat 05 Apr 2025 00:12:39 +0000 Files and hashes: 1: Cr_XemhpLv60MkAP_d3XrhsjvCc.crl (hash: HymiVaShMVNhrorbpj9SxkRe+X/qw811ZdFPAHu0wIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:12:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1184 (0x4a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194A8C Validity Not Before: Mar 29 00:12:39 2025 GMT Not After : Apr 5 00:12:39 2025 GMT Subject: CN=67e73af8-b59b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:60:3d:cb:ea:90:0f:ad:32:83:a2:ed:20:2b: 50:5c:e4:aa:9e:d1:01:30:97:d0:18:1a:a0:6d:02: 0a:69:c2:bd:b8:7b:e5:0a:a6:11:ce:d3:b3:30:42: 5d:3e:cb:4d:09:a8:29:76:bc:eb:fd:eb:00:ef:15: 25:46:ad:16:3f:5b:aa:36:75:e1:a5:0f:96:f8:f3: 25:e2:98:95:c5:71:a8:e6:5f:b9:fc:9f:7c:30:b8: ff:91:9d:33:00:20:e3:b3:0e:6e:4f:37:03:ba:a9: 76:a5:14:93:f4:c0:96:48:9b:12:4d:21:9f:50:07: d8:d0:bd:f4:9d:40:d9:ef:a3:e4:ed:88:56:a4:ec: 9e:07:c3:85:d6:10:44:06:1a:08:5b:5a:77:d9:51: c0:07:6e:2a:9f:e4:b1:a5:7e:a5:27:a6:8b:c9:29: 03:f4:74:f5:d7:d0:ef:da:e7:7e:74:5f:01:4d:53: 4f:26:c4:68:79:bb:b5:4f:29:80:3b:77:69:8f:30: 5e:e3:b3:bd:6c:e8:13:f6:86:e7:49:a1:87:08:48: a2:2e:4c:f8:72:3d:8f:d5:b0:54:d2:80:30:03:35: 3c:59:4c:2a:4c:ba:a6:4b:84:c3:64:eb:06:34:ad: e6:5e:4e:59:e7:aa:aa:13:5a:dc:d7:59:33:a8:37: 94:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:7A:A0:F6:B3:46:8D:F3:D8:44:ED:DD:94:0C:F1:61:B0:5F:68:61 X509v3 Authority Key Identifier: keyid:0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:f2:d1:a8:b8:8e:d1:c5:b8:6d:53:6b:e8:fa:10:ac:5b:af: 95:95:a0:31:d9:2b:fe:ce:c1:19:24:71:40:69:71:c3:ad:2e: 08:6d:05:5c:44:48:f8:7a:07:63:a2:31:ac:fa:f6:57:d3:04: 04:70:40:81:26:b5:48:f7:96:b1:eb:76:d5:f6:49:41:89:d1: d6:86:65:db:cc:93:24:5a:18:98:12:9d:41:89:39:ad:0d:2c: 71:cb:0b:60:c6:43:20:e6:19:b7:66:51:d8:cc:e6:76:7e:26: d1:b6:04:48:20:da:e6:31:1b:d9:3f:e7:f4:e3:79:65:20:05: da:34:27:f9:90:57:f2:64:b5:21:20:16:a4:2c:fb:37:12:e8: 49:c3:98:f2:00:c3:79:e1:95:fa:d0:67:b1:05:0a:0b:71:52: 1b:d5:d3:83:2b:be:3a:5c:44:4e:bb:74:b1:33:62:2c:c4:98: 66:af:83:7b:f3:6d:a0:83:4d:ec:1b:ab:60:db:c5:ce:5c:76: 96:70:46:b2:df:ed:03:08:48:2c:57:5d:ff:e6:65:d9:a7:6a: f8:5c:ee:89:f6:3c:b3:2a:60:db:f1:0b:d6:e9:7d:a3:e0:c1: 39:d6:fa:b6:7b:31:46:68:4d:ec:34:7f:9e:9e:2e:5d:ce:65: cc:c0:9c:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBOEMxMTAvBgNVBAUTKDBBQkZENzdBNjg2OTJFRkVCNDMyNDAwRkZEREREN0FF MUIyM0JDMjcwHhcNMjUwMzI5MDAxMjM5WhcNMjUwNDA1MDAxMjM5WjAYMRYwFAYD VQQDEw02N2U3M2FmOC1iNTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmA9y+qQD60yg6LtICtQXOSqntEBMJfQGBqgbQIKacK9uHvlCqYRztOzMEJd PstNCagpdrzr/esA7xUlRq0WP1uqNnXhpQ+W+PMl4piVxXGo5l+5/J98MLj/kZ0z ACDjsw5uTzcDuql2pRST9MCWSJsSTSGfUAfY0L30nUDZ76Pk7YhWpOyeB8OF1hBE BhoIW1p32VHAB24qn+SxpX6lJ6aLySkD9HT119Dv2ud+dF8BTVNPJsRoebu1TymA O3dpjzBe47O9bOgT9obnSaGHCEiiLkz4cj2P1bBU0oAwAzU8WUwqTLqmS4TDZOsG NK3mXk5Z56qqE1rc11kzqDeUJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJt6oPaz Ro3z2ETt3ZQM8WGwX2hhMB8GA1UdIwQYMBaAFAq/13poaS7+tDJAD/3d164bI7wn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE4Qy85RTY3MTFBNDJC MUMxMUVDOTU5OTc0MDlDNEY5QUUwMi9Dcl9YZW1ocEx2NjBNa0FQX2QzWHJoc2p2 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyX1hlbWhwTHY2ME1rQVBfZDNYcmhzanZDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEE4Qy85RTY3MTFBNDJCMUMxMUVDOTU5OTc0MDlDNEY5QUUwMi9Dcl9YZW1ocEx2 NjBNa0FQX2QzWHJoc2p2Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC58tGouI7RxbhtU2vo+hCsW6+VlaAx2Sv+zsEZJHFAaXHDrS4IbQVc REj4egdjojGs+vZX0wQEcECBJrVI95ax63bV9klBidHWhmXbzJMkWhiYEp1BiTmt DSxxywtgxkMg5hm3ZlHYzOZ2fibRtgRIINrmMRvZP+f043llIAXaNCf5kFfyZLUh IBakLPs3EuhJw5jyAMN54ZX60GexBQoLcVIb1dODK746XEROu3SxM2IsxJhmr4N7 822gg03sG6tg28XOXHaWcEay3+0DCEgsV13/5mXZp2r4XO6J9jyzKmDb8QvW6X2j 4ME51vq2ezFGaE3sNH+eni5dzmXMwJwY -----END CERTIFICATE-----Generated at Fri Apr 4 22:04:22 2025 by rpki-client