$ rpki-client -vvf rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.mft File: md4sN9GmK6i5e1oc_SzSlAsNTQ0.mft (raw, json) Hash identifier: Tn+96QMwQZ/orLB5BGeUYvK8hiihYWhMr1XZkfXyLD0= Subject key identifier: 3F:EC:BA:B5:6A:55:47:A6:14:4C:7E:7E:58:73:F6:4F:B4:F1:5C:BC Authority key identifier: 99:DE:2C:37:D1:A6:2B:A8:B9:7B:5A:1C:FD:2C:D2:94:0B:0D:4D:0D Certificate issuer: /CN=A91B08F7/serialNumber=99DE2C37D1A62BA8B97B5A1CFD2CD2940B0D4D0D Certificate serial: 1750 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md4sN9GmK6i5e1oc_SzSlAsNTQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.mft Manifest number: 1B36 Signing time: Sun 06 Apr 2025 16:32:20 +0000 Manifest this update: Sun 06 Apr 2025 16:32:20 +0000 Manifest next update: Sun 13 Apr 2025 16:32:20 +0000 Files and hashes: 1: md4sN9GmK6i5e1oc_SzSlAsNTQ0.crl (hash: KmdBPTpXaXAcEF34zj5YsE2DjcaOiiGd3LD9ERTwFHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.crl rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md4sN9GmK6i5e1oc_SzSlAsNTQ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5968 (0x1750) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B08F7 Validity Not Before: Apr 6 16:32:20 2025 GMT Not After : Apr 13 16:32:20 2025 GMT Subject: CN=67f2ac94-0893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:31:7e:2d:30:72:93:cb:26:70:98:d1:1d:e2: 98:79:04:e6:4b:af:98:f0:77:6f:18:c7:f9:28:6d: 89:eb:e2:38:9b:09:bc:f1:2b:aa:4a:94:d9:c7:0c: c2:fc:80:10:ff:c6:22:46:2d:1b:ab:99:4c:24:ed: b6:53:71:3c:1a:ab:fa:56:14:0c:e1:6c:c3:bb:c6: 06:9d:f0:21:f1:5c:9e:21:bc:7a:cc:c5:7c:e1:47: 9c:9d:03:54:0a:8c:66:bb:a3:cc:16:e6:8f:d0:c8: ee:ce:57:21:5d:68:a8:99:a3:03:13:2b:7a:5b:93: c4:48:25:7a:b4:ba:9c:d4:e4:c8:c1:4a:e8:32:84: 40:7c:18:20:e4:da:52:0a:83:f9:c2:f9:48:79:26: cb:f1:fe:d1:85:0d:dd:9a:09:27:8c:d0:e5:75:c8: 1c:06:86:c0:5d:c9:1e:5f:81:fb:59:1e:20:60:cc: 27:e5:1b:47:e6:dc:5f:61:10:74:9a:68:19:22:57: 68:ec:2c:c4:36:00:1f:b1:01:04:30:10:09:3a:c0: 1d:b5:c7:07:c2:f8:6e:ec:c8:45:00:90:ff:c0:60: a2:2b:da:2a:d4:46:c2:bc:64:6b:1c:22:d5:a7:88: 3a:57:32:55:73:10:67:3b:7a:b9:ea:ad:5a:ec:6f: f4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:EC:BA:B5:6A:55:47:A6:14:4C:7E:7E:58:73:F6:4F:B4:F1:5C:BC X509v3 Authority Key Identifier: keyid:99:DE:2C:37:D1:A6:2B:A8:B9:7B:5A:1C:FD:2C:D2:94:0B:0D:4D:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md4sN9GmK6i5e1oc_SzSlAsNTQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:27:6e:b2:20:95:78:dd:8c:35:5a:d6:0a:bc:bb:6a:98:64: 71:47:37:92:42:1b:dd:11:cb:f1:df:f1:06:71:8c:5f:81:34: 99:a3:0c:26:92:b5:7f:e7:5b:23:d9:33:5b:0b:db:4d:c2:fd: dd:85:2b:ec:1c:a7:04:c4:cc:0b:5d:f9:37:b4:20:d2:62:76: a9:af:92:15:51:20:ee:f2:b2:70:d0:10:b8:20:a7:00:ed:06: 14:c7:a9:90:d6:75:0e:3f:b2:f0:80:5b:5b:23:ef:12:32:9a: 1c:03:d2:d5:10:af:57:b9:8e:52:00:dd:a4:89:11:a9:dc:db: a8:04:d1:85:c2:70:7e:d9:17:44:f0:13:be:f3:35:18:ab:6e: af:fa:26:ae:e5:35:7a:00:4b:2f:fe:71:c9:82:4e:e8:4c:d7: dc:c4:cb:59:2b:ec:36:a6:d9:c6:e3:77:c2:11:c3:ce:01:84: 3c:8f:83:f9:46:93:4a:a7:f4:d7:1e:92:b6:3e:10:4e:19:e7: ab:d5:0e:04:41:d2:0c:98:ee:19:09:db:8a:57:cc:dd:fe:c2: ed:e8:d7:4f:8c:fa:d0:11:24:70:2d:06:ce:44:44:65:8e:c0: 57:79:d9:ba:ae:6e:fc:6b:bf:e2:4d:4a:04:a1:1b:38:ba:8d: 7b:24:56:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA4RjcxMTAvBgNVBAUTKDk5REUyQzM3RDFBNjJCQThCOTdCNUExQ0ZEMkNEMjk0 MEIwRDREMEQwHhcNMjUwNDA2MTYzMjIwWhcNMjUwNDEzMTYzMjIwWjAYMRYwFAYD VQQDEw02N2YyYWM5NC0wODkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjF+LTByk8smcJjRHeKYeQTmS6+Y8HdvGMf5KG2J6+I4mwm88SuqSpTZxwzC /IAQ/8YiRi0bq5lMJO22U3E8Gqv6VhQM4WzDu8YGnfAh8VyeIbx6zMV84UecnQNU Coxmu6PMFuaP0MjuzlchXWiomaMDEyt6W5PESCV6tLqc1OTIwUroMoRAfBgg5NpS CoP5wvlIeSbL8f7RhQ3dmgknjNDldcgcBobAXckeX4H7WR4gYMwn5RtH5txfYRB0 mmgZIldo7CzENgAfsQEEMBAJOsAdtccHwvhu7MhFAJD/wGCiK9oq1EbCvGRrHCLV p4g6VzJVcxBnO3q56q1a7G/0sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/surVq VUemFEx+flhz9k+08Vy8MB8GA1UdIwQYMBaAFJneLDfRpiuouXtaHP0s0pQLDU0N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDhGNy80NzE0MzgwQUQ1 OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi9tZDRzTjlHbUs2aTVlMW9jX1N6U2xBc05U UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kNHNOOUdtSzZpNWUxb2NfU3pTbEFzTlRRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDhGNy80NzE0MzgwQUQ1OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi9tZDRzTjlHbUs2 aTVlMW9jX1N6U2xBc05UUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6J26yIJV43Yw1WtYKvLtqmGRxRzeSQhvdEcvx3/EGcYxfgTSZowwm krV/51sj2TNbC9tNwv3dhSvsHKcExMwLXfk3tCDSYnapr5IVUSDu8rJw0BC4IKcA 7QYUx6mQ1nUOP7LwgFtbI+8SMpocA9LVEK9XuY5SAN2kiRGp3NuoBNGFwnB+2RdE 8BO+8zUYq26v+iau5TV6AEsv/nHJgk7oTNfcxMtZK+w2ptnG43fCEcPOAYQ8j4P5 RpNKp/TXHpK2PhBOGeer1Q4EQdIMmO4ZCduKV8zd/sLt6NdPjPrQESRwLQbORERl jsBXedm6rm78a7/iTUoEoRs4uo17JFYL -----END CERTIFICATE-----Generated at Sun Apr 6 22:01:39 2025 by rpki-client