$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft File: e9ZuQtUwkEC0dRqcKySR1818FLg.mft (raw, json) Hash identifier: WxKjVphDhB+XOmeOdT8ktftn/0e9DtSi3/C5akwbyoM= Subject key identifier: CC:E2:E3:68:2E:6F:20:4E:99:76:00:23:11:38:84:E7:0D:88:9F:00 Authority key identifier: 7B:D6:6E:42:D5:30:90:40:B4:75:1A:9C:2B:24:91:D7:CD:7C:14:B8 Certificate issuer: /CN=A91CA5AD/serialNumber=7BD66E42D5309040B4751A9C2B2491D7CD7C14B8 Certificate serial: 3478 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft Manifest number: 3477 Signing time: Fri 18 Apr 2025 14:19:35 +0000 Manifest this update: Fri 18 Apr 2025 14:19:35 +0000 Manifest next update: Fri 25 Apr 2025 14:19:35 +0000 Files and hashes: 1: e9ZuQtUwkEC0dRqcKySR1818FLg.crl (hash: buOgkBD5Dqe1akkEBqHPCPfGVlyxnu76e5IM+6aJNP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.crl rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 14:19:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13432 (0x3478) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA5AD, serialNumber=7BD66E42D5309040B4751A9C2B2491D7CD7C14B8 Validity Not Before: Apr 18 14:19:35 2025 GMT Not After : Apr 25 14:19:35 2025 GMT Subject: CN=68025f77-571a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:af:aa:92:dc:6f:7e:95:06:39:53:9f:d9:f6: 32:56:fd:92:09:7c:be:37:f4:3e:d0:ef:92:ee:93: ba:7a:8c:34:c3:f1:bf:05:19:66:9f:4e:2b:8d:07: aa:19:9c:e4:20:4b:1a:7d:9c:5a:96:7e:b3:60:37: 3d:1f:93:8b:db:44:11:69:74:0c:e7:14:7f:bc:fe: f2:6d:db:7c:2c:cb:35:38:6c:3a:7b:b8:9f:c7:63: 51:de:9b:bf:e2:dc:19:3e:e8:e1:52:b5:57:02:32: 8a:5e:69:e4:53:8f:a0:de:c1:c7:15:d5:ff:e5:8b: 83:6b:2e:ff:55:78:a2:2d:2c:41:7b:ad:31:f2:bd: 81:77:95:44:16:3f:04:1e:40:bf:f9:1b:ab:91:07: 44:4d:64:a6:63:57:8b:d2:97:2a:97:67:7d:d6:d7: 99:26:35:1f:b7:84:02:2f:94:bd:43:7e:af:92:33: 7f:2f:30:b2:76:97:d8:c1:98:c4:ad:90:86:cd:9a: 22:1c:1a:60:4b:61:7d:d2:a7:fb:c0:c5:37:64:03: f0:75:6f:4a:13:a8:e6:2c:b5:83:94:9d:fe:44:21: 50:43:0e:3a:17:37:97:ed:7d:8d:ab:97:ad:2c:ef: 1b:22:a0:e4:7b:50:d6:e4:a7:16:49:dc:fd:93:c5: 9a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E2:E3:68:2E:6F:20:4E:99:76:00:23:11:38:84:E7:0D:88:9F:00 X509v3 Authority Key Identifier: keyid:7B:D6:6E:42:D5:30:90:40:B4:75:1A:9C:2B:24:91:D7:CD:7C:14:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:05:55:f9:c9:a4:01:d6:49:06:6c:bd:3f:6d:a1:1d:5e:d8: 7a:bf:17:f0:5d:af:e4:5b:2a:da:35:ae:5b:cb:ad:50:ec:fd: c2:2d:b6:66:f9:38:b8:5a:5e:1a:ca:27:31:cf:60:ca:36:fc: 12:e8:06:e0:5b:01:a5:34:06:4f:25:66:c7:5b:52:65:40:37: 05:50:32:61:cd:77:44:75:1a:31:75:4c:4e:23:4b:3c:ce:89: 5e:5c:7e:eb:e8:7b:db:4c:10:d8:bf:48:43:7b:56:05:3c:d2: f7:8c:27:00:32:4a:41:5f:36:5e:8b:51:74:a6:60:f8:d9:39: a0:12:6f:a7:48:d5:58:30:7f:0f:3e:a9:dd:63:ef:9b:61:a8: 78:52:f1:e8:88:09:89:91:f7:b5:59:78:2b:bd:2c:05:76:5e: 2f:a2:18:7e:4f:3c:5a:03:e5:b5:88:d1:86:9c:5d:8d:9e:8f: c0:e8:0a:8f:0b:48:b3:d4:bc:86:e1:4c:dc:40:dc:49:07:45: 15:20:5e:71:84:c3:f6:b3:11:b2:3c:af:20:43:59:55:72:8c: e8:2d:22:44:3f:52:98:24:b9:8f:5a:39:eb:5c:53:1d:c6:91: a7:94:05:75:c2:5f:a3:be:d1:32:88:2f:f7:cd:03:c7:94:b4: ce:f3:8a:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E1QUQxMTAvBgNVBAUTKDdCRDY2RTQyRDUzMDkwNDBCNDc1MUE5QzJCMjQ5MUQ3 Q0Q3QzE0QjgwHhcNMjUwNDE4MTQxOTM1WhcNMjUwNDI1MTQxOTM1WjAYMRYwFAYD VQQDEw02ODAyNWY3Ny01NzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA06+qktxvfpUGOVOf2fYyVv2SCXy+N/Q+0O+S7pO6eow0w/G/BRlmn04rjQeq GZzkIEsafZxaln6zYDc9H5OL20QRaXQM5xR/vP7ybdt8LMs1OGw6e7ifx2NR3pu/ 4twZPujhUrVXAjKKXmnkU4+g3sHHFdX/5YuDay7/VXiiLSxBe60x8r2Bd5VEFj8E HkC/+RurkQdETWSmY1eL0pcql2d91teZJjUft4QCL5S9Q36vkjN/LzCydpfYwZjE rZCGzZoiHBpgS2F90qf7wMU3ZAPwdW9KE6jmLLWDlJ3+RCFQQw46FzeX7X2Nq5et LO8bIqDke1DW5KcWSdz9k8WaMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzi42gu byBOmXYAIxE4hOcNiJ8AMB8GA1UdIwQYMBaAFHvWbkLVMJBAtHUanCskkdfNfBS4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTVBRC8zNjZDNDQyRTFE NzExMUUyQUI1NEUyQjUwOEIwMkNEMi9lOVp1UXRVd2tFQzBkUnFjS3lTUjE4MThG TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U5WnVRdFV3a0VDMGRScWNLeVNSMTgxOEZMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTVBRC8zNjZDNDQyRTFENzExMUUyQUI1NEUyQjUwOEIwMkNEMi9lOVp1UXRVd2tF QzBkUnFjS3lTUjE4MThGTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBBVX5yaQB1kkGbL0/baEdXth6vxfwXa/kWyraNa5by61Q7P3CLbZm +Ti4Wl4ayicxz2DKNvwS6AbgWwGlNAZPJWbHW1JlQDcFUDJhzXdEdRoxdUxOI0s8 zoleXH7r6HvbTBDYv0hDe1YFPNL3jCcAMkpBXzZei1F0pmD42TmgEm+nSNVYMH8P PqndY++bYah4UvHoiAmJkfe1WXgrvSwFdl4vohh+TzxaA+W1iNGGnF2Nno/A6AqP C0iz1LyG4UzcQNxJB0UVIF5xhMP2sxGyPK8gQ1lVcozoLSJEP1KYJLmPWjnrXFMd xpGnlAV1wl+jvtEyiC/3zQPHlLTO84rl -----END CERTIFICATE-----Generated at Sat Apr 19 00:50:44 2025 by rpki-client