$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft File: E1-CL_RWQDka60bEN1QQAmBpOlc.mft (raw, json) Hash identifier: z21W1L52wj8KWalTEJjhw6OLATnIFXQJcQCE6W47vSw= Subject key identifier: F6:A9:30:81:63:F7:E2:26:46:E6:B8:99:9C:F1:AF:B7:46:8D:09:D0 Authority key identifier: 13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57 Certificate issuer: /CN=A91C9484/serialNumber=135F822FF45640391AEB46C43754100260693A57 Certificate serial: 24F0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft Manifest number: 24F0 Signing time: Fri 18 Apr 2025 14:49:17 +0000 Manifest this update: Fri 18 Apr 2025 14:49:16 +0000 Manifest next update: Fri 25 Apr 2025 14:49:16 +0000 Files and hashes: 1: E1-CL_RWQDka60bEN1QQAmBpOlc.crl (hash: wIXZDUbTaG1xZd5gwrcNTL90C1JzrIjbdjkq88wgEP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 14:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9456 (0x24f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9484, serialNumber=135F822FF45640391AEB46C43754100260693A57 Validity Not Before: Apr 18 14:49:16 2025 GMT Not After : Apr 25 14:49:16 2025 GMT Subject: CN=6802666d-0c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1d:2a:f3:1a:b2:7c:9e:44:a8:b5:69:84:16: 2c:0c:15:96:f4:73:cc:0b:0b:d2:26:9b:4e:e6:1d: 19:3e:3b:6e:9f:32:d2:90:56:a1:c5:33:55:14:cd: 5b:ee:dd:13:b6:81:5c:ec:ea:25:ea:89:d3:e4:ed: db:4c:2b:60:3a:5d:64:c0:03:e5:ab:18:c8:a1:90: 13:aa:b4:75:1a:d6:57:84:f1:90:cc:11:91:55:4a: 91:cf:5a:e1:27:7f:aa:10:69:4f:8d:4a:37:8b:81: d8:13:8f:bd:bb:d8:bf:08:1f:ef:28:c7:9d:5c:19: 15:f6:97:96:41:a5:1c:11:58:1f:76:78:6d:0c:36: 2a:9f:ae:1a:63:92:94:5d:b7:d0:72:e7:c3:3f:c1: be:82:b8:e2:38:cc:a5:3b:d5:b9:b0:a4:e7:74:b7: 6c:c4:9a:7d:70:9e:9a:0c:46:ec:46:3e:9a:ae:c3: 99:68:fc:d5:a4:a5:0d:fa:b1:c0:a3:b5:a3:9f:a5: 25:3e:fc:ec:cb:4f:8a:d1:57:de:6f:4e:d3:c3:cd: d2:80:8e:63:db:34:f6:57:21:8c:dd:91:93:ef:a2: d0:ca:92:13:a2:27:e5:26:c2:48:1d:e1:cf:2e:e6: 40:3e:16:5a:0d:ef:57:09:b5:e9:d5:4a:a7:8e:90: a7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A9:30:81:63:F7:E2:26:46:E6:B8:99:9C:F1:AF:B7:46:8D:09:D0 X509v3 Authority Key Identifier: keyid:13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:ae:cb:87:07:4d:b4:9a:3c:37:85:63:9f:d0:34:5a:e1:1a: a9:1c:4e:61:55:ac:2e:7c:95:9a:17:3a:b6:98:0a:6c:1a:a1: 66:5c:53:75:a0:5c:86:5a:b8:b0:87:91:1e:91:48:3f:71:78: 6b:2a:ba:3c:fc:53:08:ae:c3:7c:a8:d1:ed:24:8e:e0:58:5b: ca:d6:dd:43:9f:1c:1b:d7:3e:ce:6c:a8:23:ca:20:e9:76:42: 6e:7b:05:ad:15:b4:11:b1:06:cd:90:92:19:85:9e:a5:b7:b0: bd:a7:66:5c:ba:16:26:7b:4d:01:ba:e7:d6:65:9b:65:fd:4c: 66:d7:58:1b:29:dc:d1:13:1b:96:18:bd:77:29:16:45:13:c3: c8:af:af:21:42:68:df:73:6c:61:48:c2:8d:74:18:62:98:37: 1a:23:63:d6:0d:ff:27:5f:6c:89:b6:4e:59:1b:00:19:55:ce: 7e:a2:e7:b9:b8:89:5e:75:7f:67:5f:21:d3:7f:0f:06:65:80: da:4a:76:cd:48:87:ad:8c:5b:4e:df:a2:d2:5a:c6:cb:ac:fa: ab:e1:a6:3f:75:73:04:19:fc:36:e1:3e:aa:74:70:60:f3:40: 78:5b:c6:ae:57:12:1b:78:5c:81:81:9f:59:91:d4:69:46:30: 44:13:88:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0ODQxMTAvBgNVBAUTKDEzNUY4MjJGRjQ1NjQwMzkxQUVCNDZDNDM3NTQxMDAy NjA2OTNBNTcwHhcNMjUwNDE4MTQ0OTE2WhcNMjUwNDI1MTQ0OTE2WjAYMRYwFAYD VQQDEw02ODAyNjY2ZC0wYzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnx0q8xqyfJ5EqLVphBYsDBWW9HPMCwvSJptO5h0ZPjtunzLSkFahxTNVFM1b 7t0TtoFc7Ool6onT5O3bTCtgOl1kwAPlqxjIoZATqrR1GtZXhPGQzBGRVUqRz1rh J3+qEGlPjUo3i4HYE4+9u9i/CB/vKMedXBkV9peWQaUcEVgfdnhtDDYqn64aY5KU XbfQcufDP8G+grjiOMylO9W5sKTndLdsxJp9cJ6aDEbsRj6arsOZaPzVpKUN+rHA o7Wjn6UlPvzsy0+K0Vfeb07Tw83SgI5j2zT2VyGM3ZGT76LQypIToiflJsJIHeHP LuZAPhZaDe9XCbXp1UqnjpCn/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPapMIFj 9+ImRua4mZzxr7dGjQnQMB8GA1UdIwQYMBaAFBNfgi/0VkA5GutGxDdUEAJgaTpX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQ4NC8wQTBGODVGQzI5 MEUxMUU1OTNCRkM2MjZDNEY5QUUwMi9FMS1DTF9SV1FEa2E2MGJFTjFRUUFtQnBP bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0UxLUNMX1JXUURrYTYwYkVOMVFRQW1CcE9sYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTQ4NC8wQTBGODVGQzI5MEUxMUU1OTNCRkM2MjZDNEY5QUUwMi9FMS1DTF9SV1FE a2E2MGJFTjFRUUFtQnBPbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFrsuHB020mjw3hWOf0DRa4RqpHE5hVawufJWaFzq2mApsGqFmXFN1 oFyGWriwh5EekUg/cXhrKro8/FMIrsN8qNHtJI7gWFvK1t1Dnxwb1z7ObKgjyiDp dkJuewWtFbQRsQbNkJIZhZ6lt7C9p2ZcuhYme00BuufWZZtl/Uxm11gbKdzRExuW GL13KRZFE8PIr68hQmjfc2xhSMKNdBhimDcaI2PWDf8nX2yJtk5ZGwAZVc5+oue5 uIledX9nXyHTfw8GZYDaSnbNSIetjFtO36LSWsbLrPqr4aY/dXMEGfw24T6qdHBg 80B4W8auVxIbeFyBgZ9ZkdRpRjBEE4hy -----END CERTIFICATE-----Generated at Sat Apr 19 02:09:02 2025 by rpki-client