$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft File: datLjbMBU71ybPn5YlC-BATYixo.mft (raw, json) Hash identifier: LlrzWe5CrpoSFkW0SsfmfRLpcPCOtTkUVf0lIZFP9e8= Subject key identifier: 77:4B:10:75:18:BD:31:67:B7:F5:25:DC:BF:CC:B9:DD:73:1F:BF:53 Authority key identifier: 75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A Certificate issuer: /CN=A91C0CD3/serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft Manifest number: 0155 Signing time: Fri 11 Apr 2025 03:21:34 +0000 Manifest this update: Fri 11 Apr 2025 03:21:33 +0000 Manifest next update: Fri 18 Apr 2025 03:21:33 +0000 Files and hashes: 1: datLjbMBU71ybPn5YlC-BATYixo.crl (hash: C7LozBhiTc/fMsu9bPZ6To+CIE/SxwT5ZvfdTIuNh/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 03:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0CD3, serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A Validity Not Before: Apr 11 03:21:33 2025 GMT Not After : Apr 18 03:21:33 2025 GMT Subject: CN=67f88abd-47b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0d:ca:e6:51:3c:54:7b:5a:ee:b7:92:34:a7: 16:58:93:a7:0f:94:a3:15:5e:32:55:98:f6:db:38: 7f:2f:2d:c5:2c:e7:13:f0:db:a9:b5:e4:0b:b1:87: 96:b8:cd:c6:88:9b:23:8a:8d:aa:63:7b:db:80:e1: c4:9f:bf:c3:38:f0:59:67:eb:ea:6f:34:7e:a2:85: 99:eb:e9:f8:73:fd:63:13:98:4c:b3:7c:20:8d:00: 95:b0:47:d3:a0:57:9d:06:c2:3b:a0:b3:48:20:06: b9:d9:3b:da:65:ea:f2:1a:72:78:be:ef:fc:7f:05: 6e:ac:cc:35:65:66:c1:4a:d6:04:db:e3:2a:23:87: 6a:1d:e3:7a:55:94:eb:78:67:b4:ba:0a:a1:e1:de: 94:52:37:3a:97:b1:6d:3a:c8:28:0f:97:a2:ba:d8: ef:5c:98:26:15:a9:c5:e8:4a:3b:0f:23:e3:2d:db: ab:a3:44:ba:b9:48:ce:aa:f4:82:02:a0:87:d0:1d: 19:a8:69:ea:86:1f:31:8d:14:22:ba:54:c8:c9:c9: 20:bd:a9:e5:7c:ba:01:24:c6:52:3e:f2:aa:1d:c1: 31:e4:e5:98:6f:bd:70:43:27:4a:22:4f:e8:a5:21: 27:9d:ae:ca:7a:be:ac:89:7b:e7:64:aa:2d:c7:49: 59:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:4B:10:75:18:BD:31:67:B7:F5:25:DC:BF:CC:B9:DD:73:1F:BF:53 X509v3 Authority Key Identifier: keyid:75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:a9:64:8b:65:e0:60:12:40:59:2b:d7:ee:43:31:2a:34:33: 37:0e:2a:ca:ce:68:ed:12:15:16:1b:c8:3d:81:22:30:7d:0a: 26:1a:d2:50:c4:b7:3a:97:e4:dc:1b:43:d0:09:d2:71:06:35: 71:36:72:bb:ec:d0:e2:54:44:85:7e:de:22:8c:3c:58:9e:ec: 87:59:bc:03:38:9b:56:09:b4:25:ba:c0:cb:e6:fb:4a:ee:61: 39:43:38:43:ae:e9:e0:0d:81:b4:05:de:46:40:d4:e5:86:a3: 57:a8:48:f9:6c:1e:76:ca:68:74:cf:31:e9:c5:7f:83:9a:42: 28:7e:cc:91:44:e2:bf:f8:66:24:e8:6b:f8:57:bf:a2:9c:1a: 7a:ab:ab:d7:4e:c5:16:3a:a8:ea:71:92:17:60:ae:f0:f5:0b: d9:99:4b:55:e0:00:d5:0a:72:53:c0:ef:e2:e7:1e:61:85:42: 44:12:95:bc:b9:97:56:fe:63:48:40:19:2f:fb:45:ed:93:c3: 95:2c:92:78:79:42:40:85:e4:57:6e:15:e5:04:55:2f:d0:39: c4:f2:ef:c2:f7:6b:70:86:90:50:ff:9d:af:b0:3a:f9:fc:09: 44:86:c3:8a:9c:18:de:2e:2c:ec:f7:82:3b:ae:41:dc:82:8d: 9c:93:4f:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDRDMxMTAvBgNVBAUTKDc1QUI0QjhEQjMwMTUzQkQ3MjZDRjlGOTYyNTBCRTA0 MDREODhCMUEwHhcNMjUwNDExMDMyMTMzWhcNMjUwNDE4MDMyMTMzWjAYMRYwFAYD VQQDEw02N2Y4OGFiZC00N2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArg3K5lE8VHta7reSNKcWWJOnD5SjFV4yVZj22zh/Ly3FLOcT8NupteQLsYeW uM3GiJsjio2qY3vbgOHEn7/DOPBZZ+vqbzR+ooWZ6+n4c/1jE5hMs3wgjQCVsEfT oFedBsI7oLNIIAa52TvaZeryGnJ4vu/8fwVurMw1ZWbBStYE2+MqI4dqHeN6VZTr eGe0ugqh4d6UUjc6l7FtOsgoD5eiutjvXJgmFanF6Eo7DyPjLduro0S6uUjOqvSC AqCH0B0ZqGnqhh8xjRQiulTIyckgvanlfLoBJMZSPvKqHcEx5OWYb71wQydKIk/o pSEnna7Ker6siXvnZKotx0lZpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHdLEHUY vTFnt/Ul3L/Mud1zH79TMB8GA1UdIwQYMBaAFHWrS42zAVO9cmz5+WJQvgQE2Isa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMENEMy83RjYwMEVDQTA4 RUYxMUVFQkM5QjVEMERDNEY5QUUwMi9kYXRMamJNQlU3MXliUG41WWxDLUJBVFlp eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RhdExqYk1CVTcxeWJQbjVZbEMtQkFUWWl4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MENEMy83RjYwMEVDQTA4RUYxMUVFQkM5QjVEMERDNEY5QUUwMi9kYXRMamJNQlU3 MXliUG41WWxDLUJBVFlpeG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzqWSLZeBgEkBZK9fuQzEqNDM3DirKzmjtEhUWG8g9gSIwfQomGtJQ xLc6l+TcG0PQCdJxBjVxNnK77NDiVESFft4ijDxYnuyHWbwDOJtWCbQlusDL5vtK 7mE5QzhDrungDYG0Bd5GQNTlhqNXqEj5bB52ymh0zzHpxX+DmkIofsyRROK/+GYk 6Gv4V7+inBp6q6vXTsUWOqjqcZIXYK7w9QvZmUtV4ADVCnJTwO/i5x5hhUJEEpW8 uZdW/mNIQBkv+0Xtk8OVLJJ4eUJAheRXbhXlBFUv0DnE8u/C92twhpBQ/52vsDr5 /AlEhsOKnBjeLizs94I7rkHcgo2ck0+Q -----END CERTIFICATE-----Generated at Sat Apr 12 14:47:07 2025 by rpki-client