$ rpki-client -vvf rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft File: f3UA8ZRiBwd03Is7S5avThubtUU.mft (raw, json) Hash identifier: jFSKeGut9b9wbN0Pqxc781FK8JXFGM/TI2CEBQMviRI= Subject key identifier: 6C:52:E3:8D:87:45:7F:78:67:35:71:87:59:2B:81:5A:54:05:9F:88 Authority key identifier: 7F:75:00:F1:94:62:07:07:74:DC:8B:3B:4B:96:AF:4E:1B:9B:B5:45 Certificate issuer: /CN=A91A840E/serialNumber=7F7500F19462070774DC8B3B4B96AF4E1B9BB545 Certificate serial: 2DF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f3UA8ZRiBwd03Is7S5avThubtUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft Manifest number: 2DF0 Signing time: Fri 04 Apr 2025 15:33:19 +0000 Manifest this update: Fri 04 Apr 2025 15:33:18 +0000 Manifest next update: Fri 11 Apr 2025 15:33:18 +0000 Files and hashes: 1: f3UA8ZRiBwd03Is7S5avThubtUU.crl (hash: noDxTeZBXcTFJc0mYvVp/gVS29n1v/D22pMZM5HCc98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.crl rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f3UA8ZRiBwd03Is7S5avThubtUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11760 (0x2df0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A840E Validity Not Before: Apr 4 15:33:18 2025 GMT Not After : Apr 11 15:33:18 2025 GMT Subject: CN=67effbbe-0104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5f:d0:1d:6a:60:bb:15:ea:f4:39:39:2a:c8: 8e:74:10:44:d3:d6:3b:cc:e7:09:00:24:6a:dc:26: f4:6b:4f:e4:ea:19:b6:a1:dc:e3:1c:c1:9b:e3:09: c2:16:4e:e0:ef:ff:3d:d1:26:b5:ad:be:d7:40:a4: fd:58:c0:30:41:11:87:75:45:91:d9:dd:6c:5f:3f: a4:4b:8a:ba:ae:5f:30:d6:e9:10:82:8e:7d:fa:49: 3b:fb:91:01:1f:43:d5:e3:d1:7d:c0:d6:b9:a1:02: de:48:26:33:47:2f:97:ee:5e:a9:36:10:d8:2f:8c: f5:d3:15:56:73:52:03:b8:a6:8b:88:35:52:c3:f0: 0d:e3:c7:3a:28:9c:7d:b5:41:f8:42:eb:58:34:33: 8e:0a:ea:57:01:8c:7a:32:10:86:51:7e:79:29:ee: 83:f1:91:21:6c:78:a6:11:41:63:71:9c:91:6a:0a: 6e:82:a1:22:96:13:a4:16:85:fb:a9:32:da:9b:7d: f3:70:53:fa:0c:4e:b4:c3:98:0c:67:4f:3b:34:a3: ea:07:28:5c:0c:2f:4a:18:9b:ea:ce:82:a3:92:aa: f1:c9:47:a6:27:77:22:00:14:36:28:18:13:8c:9c: 34:7b:db:9b:20:f7:93:d1:2f:cb:39:5d:3f:0e:01: 06:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:52:E3:8D:87:45:7F:78:67:35:71:87:59:2B:81:5A:54:05:9F:88 X509v3 Authority Key Identifier: keyid:7F:75:00:F1:94:62:07:07:74:DC:8B:3B:4B:96:AF:4E:1B:9B:B5:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f3UA8ZRiBwd03Is7S5avThubtUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:f7:5a:ea:a8:96:0d:ff:06:a3:35:bd:d6:b8:bf:63:c5:23: 5a:76:33:89:1a:2c:34:8c:25:f4:a0:de:fe:d5:32:3e:ac:b6: b0:04:d5:84:36:9b:7e:d0:08:c6:4a:c3:da:56:d2:38:7e:2c: 08:a2:f2:35:c2:9b:45:71:29:99:1f:8c:2e:f5:00:78:b5:85: cf:c3:b4:9d:e2:bf:cd:4b:8a:99:4f:f4:ef:40:3f:68:a9:9d: 6a:b2:12:d6:be:1f:09:45:74:41:0a:d1:31:38:d0:4f:c7:14: f9:b0:83:d3:72:61:e5:14:d7:d1:7c:33:3d:5f:46:00:99:20: c3:11:ee:6a:9f:6b:13:e6:4c:77:4c:f0:70:c7:84:e6:33:4d: 5f:31:81:a7:b5:f9:2d:ad:33:0d:37:4e:f6:ab:9f:56:76:03: 86:63:07:23:f0:a5:70:ab:df:11:f2:76:8c:5d:f4:1d:b6:28: a1:52:55:7e:41:ab:c0:b7:24:e5:28:53:fb:e1:c0:e8:c3:8b: f7:ab:78:12:14:93:0e:41:2c:b8:2c:a4:09:e5:d6:6c:5a:85: ed:89:3a:39:8c:fa:c8:39:7d:19:28:b2:da:95:ec:16:56:60: 96:82:f9:56:46:e6:81:d0:c0:92:39:43:92:ee:d7:7e:32:66: fd:95:bf:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg0MEUxMTAvBgNVBAUTKDdGNzUwMEYxOTQ2MjA3MDc3NERDOEIzQjRCOTZBRjRF MUI5QkI1NDUwHhcNMjUwNDA0MTUzMzE4WhcNMjUwNDExMTUzMzE4WjAYMRYwFAYD VQQDEw02N2VmZmJiZS0wMTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1/QHWpguxXq9Dk5KsiOdBBE09Y7zOcJACRq3Cb0a0/k6hm2odzjHMGb4wnC Fk7g7/890Sa1rb7XQKT9WMAwQRGHdUWR2d1sXz+kS4q6rl8w1ukQgo59+kk7+5EB H0PV49F9wNa5oQLeSCYzRy+X7l6pNhDYL4z10xVWc1IDuKaLiDVSw/AN48c6KJx9 tUH4QutYNDOOCupXAYx6MhCGUX55Ke6D8ZEhbHimEUFjcZyRagpugqEilhOkFoX7 qTLam33zcFP6DE60w5gMZ087NKPqByhcDC9KGJvqzoKjkqrxyUemJ3ciABQ2KBgT jJw0e9ubIPeT0S/LOV0/DgEGqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxS442H RX94ZzVxh1krgVpUBZ+IMB8GA1UdIwQYMBaAFH91APGUYgcHdNyLO0uWr04bm7VF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODQwRS9EQTEwRkY2NjYy RUUxMUUzQUFEOTlGODM1OTExRUEzMi9mM1VBOFpSaUJ3ZDAzSXM3UzVhdlRodWJ0 VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YzVUE4WlJpQndkMDNJczdTNWF2VGh1YnRVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODQwRS9EQTEwRkY2NjYyRUUxMUUzQUFEOTlGODM1OTExRUEzMi9mM1VBOFpSaUJ3 ZDAzSXM3UzVhdlRodWJ0VVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj91rqqJYN/wajNb3WuL9jxSNadjOJGiw0jCX0oN7+1TI+rLawBNWE Npt+0AjGSsPaVtI4fiwIovI1wptFcSmZH4wu9QB4tYXPw7Sd4r/NS4qZT/TvQD9o qZ1qshLWvh8JRXRBCtExONBPxxT5sIPTcmHlFNfRfDM9X0YAmSDDEe5qn2sT5kx3 TPBwx4TmM01fMYGntfktrTMNN072q59WdgOGYwcj8KVwq98R8naMXfQdtiihUlV+ QavAtyTlKFP74cDow4v3q3gSFJMOQSy4LKQJ5dZsWoXtiTo5jPrIOX0ZKLLalewW VmCWgvlWRuaB0MCSOUOS7td+Mmb9lb/9 -----END CERTIFICATE-----Generated at Sat Apr 5 04:11:30 2025 by rpki-client