$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft File: iS3iAjP9DGSOLnuflZUPOpaBfL8.mft (raw, json) Hash identifier: 0BqYhJg4Pxo3r0kKFufACFlR7WymUxt32/1S0cwVMGE= Subject key identifier: A3:EC:C7:D0:FF:F5:29:53:7D:33:ED:7B:93:F3:51:9A:04:76:2F:7D Authority key identifier: 89:2D:E2:02:33:FD:0C:64:8E:2E:7B:9F:95:95:0F:3A:96:81:7C:BF Certificate issuer: /CN=A91C7175/serialNumber=892DE20233FD0C648E2E7B9F95950F3A96817CBF Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft Manifest number: 73 Signing time: Fri 11 Apr 2025 06:00:01 +0000 Manifest this update: Fri 11 Apr 2025 06:00:01 +0000 Manifest next update: Fri 18 Apr 2025 06:00:01 +0000 Files and hashes: 1: iS3iAjP9DGSOLnuflZUPOpaBfL8.crl (hash: WeYLth3WmrcT3LolDtf19Yrkz+CwXrjRYWSMsC9F7y8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.crl rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7175, serialNumber=892DE20233FD0C648E2E7B9F95950F3A96817CBF Validity Not Before: Apr 11 06:00:01 2025 GMT Not After : Apr 18 06:00:01 2025 GMT Subject: CN=67f8afe1-39e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:50:51:ef:02:94:96:a3:31:3c:ec:0f:69:ac: 1b:0f:91:3b:e6:9c:36:10:f5:3b:40:5e:b2:a6:d0: cf:19:1b:c5:7a:27:84:da:3d:75:cf:16:c0:d9:ae: ac:97:d5:ed:ae:5d:0c:54:bb:51:fe:e4:0e:71:71: 3e:ed:90:81:78:09:1e:3c:d8:c8:e9:52:73:29:e7: 59:41:9b:18:93:80:d6:a5:99:6e:75:2e:a1:81:80: 50:f7:52:b4:29:48:fd:f9:12:4b:bc:ee:41:d1:76: f3:5b:71:82:4d:d2:f7:86:86:bd:4e:7f:94:08:e7: 16:7c:3a:4b:97:26:a9:12:0f:d4:a7:35:00:0f:ed: 76:87:c7:2d:80:86:27:e1:5e:a9:16:bc:34:ef:46: c3:0f:b6:ad:f5:13:13:42:2e:a6:d4:63:b0:20:18: 66:14:8f:07:bc:52:1d:66:02:a8:f7:b4:a5:8a:44: dd:67:4e:7b:64:1d:4f:ad:5b:fd:ae:98:b0:0a:dd: 60:71:ec:09:b4:c9:31:6f:a7:05:09:5a:c3:f1:aa: ac:ff:48:00:39:bd:53:f9:7c:18:8e:10:8f:6b:9e: 5e:0e:20:95:40:95:1e:5a:89:90:07:72:38:c5:33: 40:8b:dd:4b:da:bd:92:46:90:9f:75:89:41:9c:36: da:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:EC:C7:D0:FF:F5:29:53:7D:33:ED:7B:93:F3:51:9A:04:76:2F:7D X509v3 Authority Key Identifier: keyid:89:2D:E2:02:33:FD:0C:64:8E:2E:7B:9F:95:95:0F:3A:96:81:7C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:52:de:ad:58:6a:22:2b:be:92:df:0d:30:34:52:3f:ff:d6: ba:ef:ce:82:a8:b0:55:14:cb:79:3e:c3:4b:db:dc:0c:bb:e3: 16:10:62:22:6d:48:76:7d:0e:25:a2:7d:0d:18:c9:5e:4d:a1: 7b:55:7f:1e:a9:a6:20:a1:04:bc:95:ed:21:74:06:05:48:c5: 41:66:42:fb:de:d0:f0:02:7b:46:fe:db:d2:8c:1b:83:69:1d: 85:68:62:4b:e6:23:ac:bd:79:66:47:66:0b:ed:be:4b:9a:02: 92:88:c3:ac:49:e3:18:70:97:2e:0c:51:36:8d:2d:d3:1d:44: 0e:17:5a:1f:b5:01:e4:49:1f:00:c1:53:10:26:dc:17:34:fc: b6:74:9f:aa:05:75:5f:cd:ea:48:91:47:a2:3d:08:7f:e2:b2: 8b:95:d4:25:57:a2:b3:20:9a:f0:80:a5:6c:a4:40:0c:bb:f9: 87:c1:4f:96:47:73:22:89:62:85:18:f8:a6:4e:cf:19:19:f4: c4:ec:ec:56:72:f3:df:d8:0c:4f:50:35:cc:4d:7a:24:bd:3e: ce:0c:b0:75:b7:94:b4:3a:69:ab:2a:44:c1:a2:df:b9:3c:d0: 43:87:e8:1f:57:0c:68:0e:51:ee:3b:91:1e:90:8b:77:5b:96: 14:f1:73:76 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzE3NTExMC8GA1UEBRMoODkyREUyMDIzM0ZEMEM2NDhFMkU3QjlGOTU5NTBGM0E5 NjgxN0NCRjAeFw0yNTA0MTEwNjAwMDFaFw0yNTA0MTgwNjAwMDFaMBgxFjAUBgNV BAMTDTY3ZjhhZmUxLTM5ZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDUFHvApSWozE87A9prBsPkTvmnDYQ9TtAXrKm0M8ZG8V6J4TaPXXPFsDZrqyX 1e2uXQxUu1H+5A5xcT7tkIF4CR482MjpUnMp51lBmxiTgNalmW51LqGBgFD3UrQp SP35Eku87kHRdvNbcYJN0veGhr1Of5QI5xZ8OkuXJqkSD9SnNQAP7XaHxy2Ahifh XqkWvDTvRsMPtq31ExNCLqbUY7AgGGYUjwe8Uh1mAqj3tKWKRN1nTntkHU+tW/2u mLAK3WBx7Am0yTFvpwUJWsPxqqz/SAA5vVP5fBiOEI9rnl4OIJVAlR5aiZAHcjjF M0CL3UvavZJGkJ91iUGcNtqvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUo+zH0P/1 KVN9M+17k/NRmgR2L30wHwYDVR0jBBgwFoAUiS3iAjP9DGSOLnuflZUPOpaBfL8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3MTc1L0YyMkI5Q0NBNjhG RDExRUZBOTUwMDE4N0M0RjlBRTAyL2lTM2lBalA5REdTT0xudWZsWlVQT3BhQmZM OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVMzaUFqUDlER1NPTG51ZmxaVVBPcGFCZkw4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 MTc1L0YyMkI5Q0NBNjhGRDExRUZBOTUwMDE4N0M0RjlBRTAyL2lTM2lBalA5REdT T0xudWZsWlVQT3BhQmZMOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHZS3q1YaiIrvpLfDTA0Uj//1rrvzoKosFUUy3k+w0vb3Ay74xYQYiJt SHZ9DiWifQ0YyV5NoXtVfx6ppiChBLyV7SF0BgVIxUFmQvve0PACe0b+29KMG4Np HYVoYkvmI6y9eWZHZgvtvkuaApKIw6xJ4xhwly4MUTaNLdMdRA4XWh+1AeRJHwDB UxAm3Bc0/LZ0n6oFdV/N6kiRR6I9CH/isouV1CVXorMgmvCApWykQAy7+YfBT5ZH cyKJYoUY+KZOzxkZ9MTs7FZy89/YDE9QNcxNeiS9Ps4MsHW3lLQ6aasqRMGi37k8 0EOH6B9XDGgOUe47kR6Qi3dblhTxc3Y= -----END CERTIFICATE-----Generated at Sat Apr 12 23:48:00 2025 by rpki-client