$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft File: N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft (raw, json) Hash identifier: mhZ+Wc3m55I3ucs7R69l0I7Sc31+rYPN/NJSpuH3Igo= Subject key identifier: EB:56:70:3B:D4:D7:78:56:DE:17:45:67:29:CD:B3:BF:2F:C5:F7:63 Authority key identifier: 37:78:35:CD:A2:BD:63:67:EF:0F:EB:5E:A5:81:98:F8:18:3A:87:C1 Certificate issuer: /CN=A91EA409/serialNumber=377835CDA2BD6367EF0FEB5EA58198F8183A87C1 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft Manifest number: 4A Signing time: Sat 29 Mar 2025 06:38:36 +0000 Manifest this update: Sat 29 Mar 2025 06:38:35 +0000 Manifest next update: Sat 05 Apr 2025 06:38:35 +0000 Files and hashes: 1: N3g1zaK9Y2fvD-tepYGY-Bg6h8E.crl (hash: YBJaW6ahu1R0/zHRCFnvVOXnjfIK/oUr7sdDKeCPHQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.crl rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA409 Validity Not Before: Mar 29 06:38:35 2025 GMT Not After : Apr 5 06:38:35 2025 GMT Subject: CN=67e7956c-9e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8e:0b:c8:9f:14:1e:4a:15:b4:72:96:c4:02: 8f:23:21:94:58:7c:d2:10:fb:87:cd:2f:b7:e5:dc: 20:89:ec:9c:b5:ef:6e:32:9f:52:0e:47:d9:57:87: d3:7f:ea:ed:d9:6b:dd:5d:f5:85:25:55:01:e0:b7: 27:1d:db:fb:b9:f1:6f:68:fd:ae:e6:4a:b3:6f:f9: 93:b1:a7:de:03:12:e0:ed:e3:1d:b8:7b:d2:31:30: ee:0e:c3:a8:70:24:4d:86:ba:34:c5:c5:95:16:f4: 82:c5:94:95:aa:ed:88:2c:33:18:96:b5:b4:64:a2: 6f:d7:fd:47:af:cf:ce:ec:95:1f:7a:52:4b:57:69: 28:c0:c4:78:43:ab:ff:92:44:3b:64:b3:02:23:28: df:e1:9b:1b:fb:78:5e:30:c2:cb:28:41:54:4f:f5: 42:53:9f:c6:f0:42:36:db:aa:31:1b:8b:1b:b8:00: f3:12:13:42:1d:64:82:d3:dd:d9:df:a2:01:f7:01: 87:44:66:82:0e:ce:9f:4c:23:a4:b2:ac:9a:87:08: 98:e0:3d:d2:5c:65:51:16:f0:a3:3a:42:3a:13:dc: 57:1b:8d:19:4f:e9:e4:6c:a8:7c:09:e4:6a:b0:94: b3:05:e6:2d:65:28:0f:f6:fd:04:28:28:dc:4d:bd: d5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:56:70:3B:D4:D7:78:56:DE:17:45:67:29:CD:B3:BF:2F:C5:F7:63 X509v3 Authority Key Identifier: keyid:37:78:35:CD:A2:BD:63:67:EF:0F:EB:5E:A5:81:98:F8:18:3A:87:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:6f:ca:11:d5:e9:43:97:a0:ab:6b:54:75:f1:40:8c:16:11: 42:1f:5d:3a:19:66:ef:c9:af:9a:70:63:36:bb:6a:19:b8:2d: b3:88:0e:b4:63:23:9a:b6:e7:a7:52:bf:aa:bf:c4:cf:00:74: a3:1e:0c:57:7c:f6:77:18:ab:1f:d6:2f:b2:45:43:e6:36:3b: 28:74:0e:29:ec:91:98:53:9d:3a:36:1a:5c:d0:fc:00:de:f7: 69:41:c3:5e:87:35:82:e8:fa:5c:e1:62:95:47:fc:ef:2e:bf: 32:9a:8f:95:05:f8:5f:66:46:79:41:f1:c3:2b:f7:1d:b5:5c: 9a:05:5b:b1:a0:1d:3e:63:f5:8f:c5:6e:9c:d3:93:ca:65:76: 96:99:f0:d9:9e:86:ce:3a:f3:3f:8f:ff:5d:81:85:a7:b7:a0: 28:90:1b:dc:a8:cd:95:38:64:26:d9:02:bc:56:bd:0b:5a:52: 5f:c9:43:29:9c:4b:8a:e8:21:6a:be:37:31:de:92:2d:87:ea: 14:70:e6:79:59:db:ff:d1:5c:f7:c9:43:c3:4a:7a:48:d2:fd: 3b:9a:9c:b9:b4:8e:d2:95:60:f3:f2:06:ee:b8:e3:d7:4f:ed: 19:6f:d5:c2:17:e5:e3:31:51:1a:e8:4a:3a:e5:95:2a:e8:81: e4:dc:a2:c9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTQwOTExMC8GA1UEBRMoMzc3ODM1Q0RBMkJENjM2N0VGMEZFQjVFQTU4MTk4Rjgx ODNBODdDMTAeFw0yNTAzMjkwNjM4MzVaFw0yNTA0MDUwNjM4MzVaMBgxFjAUBgNV BAMTDTY3ZTc5NTZjLTllNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1jgvInxQeShW0cpbEAo8jIZRYfNIQ+4fNL7fl3CCJ7Jy1724yn1IOR9lXh9N/ 6u3Za91d9YUlVQHgtycd2/u58W9o/a7mSrNv+ZOxp94DEuDt4x24e9IxMO4Ow6hw JE2GujTFxZUW9ILFlJWq7YgsMxiWtbRkom/X/Uevz87slR96UktXaSjAxHhDq/+S RDtkswIjKN/hmxv7eF4wwssoQVRP9UJTn8bwQjbbqjEbixu4APMSE0IdZILT3dnf ogH3AYdEZoIOzp9MI6SyrJqHCJjgPdJcZVEW8KM6QjoT3FcbjRlP6eRsqHwJ5Gqw lLMF5i1lKA/2/QQoKNxNvdUPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU61ZwO9TX eFbeF0VnKc2zvy/F92MwHwYDVR0jBBgwFoAUN3g1zaK9Y2fvD+tepYGY+Bg6h8Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBNDA5LzAyODlGNkZDOUNB QzExRUZBQjU5NTUxNkM0RjlBRTAyL04zZzF6YUs5WTJmdkQtdGVwWUdZLUJnNmg4 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjNnMXphSzlZMmZ2RC10ZXBZR1ktQmc2aDhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB NDA5LzAyODlGNkZDOUNBQzExRUZBQjU5NTUxNkM0RjlBRTAyL04zZzF6YUs5WTJm dkQtdGVwWUdZLUJnNmg4RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ9vyhHV6UOXoKtrVHXxQIwWEUIfXToZZu/Jr5pwYza7ahm4LbOIDrRj I5q256dSv6q/xM8AdKMeDFd89ncYqx/WL7JFQ+Y2Oyh0DinskZhTnTo2GlzQ/ADe 92lBw16HNYLo+lzhYpVH/O8uvzKaj5UF+F9mRnlB8cMr9x21XJoFW7GgHT5j9Y/F bpzTk8pldpaZ8Nmehs468z+P/12Bhae3oCiQG9yozZU4ZCbZArxWvQtaUl/JQymc S4roIWq+NzHeki2H6hRw5nlZ2//RXPfJQ8NKekjS/TuanLm0jtKVYPPyBu6449dP 7Rlv1cIX5eMxURroSjrllSrogeTcosk= -----END CERTIFICATE-----Generated at Fri Apr 4 22:40:16 2025 by rpki-client