$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft File: 5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft (raw, json) Hash identifier: RCpf5U/WMKrq4YGh6SxVsNddIaEf0hUhMLXYrmmcY8M= Subject key identifier: 22:3A:C0:BB:C6:89:25:47:55:E0:E6:96:4F:AB:53:8C:81:3A:19:EA Authority key identifier: E7:3F:B8:86:8D:D3:B4:61:EA:1A:67:3C:7A:36:94:52:35:E9:CA:AE Certificate issuer: /CN=A91FCEB1/serialNumber=E73FB8868DD3B461EA1A673C7A36945235E9CAAE Certificate serial: 06E1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft Manifest number: 2133 Signing time: Fri 28 Mar 2025 16:04:43 +0000 Manifest this update: Fri 28 Mar 2025 16:04:42 +0000 Manifest next update: Fri 04 Apr 2025 16:04:42 +0000 Files and hashes: 1: 5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl (hash: dj5dxRwtiDNm3Gzu0lSdhj2xNc7AX7qTqVY8M04EwAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 16:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1761 (0x6e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1 Validity Not Before: Mar 28 16:04:42 2025 GMT Not After : Apr 4 16:04:42 2025 GMT Subject: CN=67e6c89b-dcfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:70:71:07:7d:58:28:66:f7:e9:43:90:2b:a6: 3b:24:8b:1c:04:a9:72:e8:e2:79:b5:67:93:c8:b0: 8c:bc:ea:75:08:11:79:46:ba:d2:cc:91:40:18:05: df:6f:a2:10:44:8b:76:d2:e8:8e:81:81:4a:91:2b: 70:84:76:8e:15:22:09:6f:2d:a8:c7:c8:e2:76:92: 1a:69:65:7c:27:d8:e0:d5:b5:b7:9b:fa:41:c9:32: 5b:bd:17:7e:cc:1d:df:a4:e4:c6:4c:50:1f:26:0f: 3a:cd:e3:f3:b2:5b:35:55:8e:5c:d6:9f:e6:d7:a3: b7:d0:4b:f6:e1:d0:38:bd:13:c6:30:9b:a6:04:d9: 9a:a4:4e:be:7c:bd:b6:50:b8:58:37:90:1a:78:9b: 52:48:18:09:db:b8:2e:98:22:d9:d2:da:64:9f:40: f2:cf:84:4b:a4:f8:06:65:87:9e:30:52:b7:05:5e: 5e:b1:17:25:2e:6c:ee:19:38:f8:90:ee:5f:30:3d: 8d:18:1c:9b:97:48:06:03:cf:d4:c0:6d:db:9e:e3: 36:26:f0:5c:b5:ce:40:f4:2d:04:23:a2:15:71:fb: b8:94:98:94:23:dc:22:ae:1c:a4:60:30:aa:9d:6f: 2f:03:8d:1a:13:7a:7d:e5:98:6a:b7:a6:b8:3c:53: 8f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3A:C0:BB:C6:89:25:47:55:E0:E6:96:4F:AB:53:8C:81:3A:19:EA X509v3 Authority Key Identifier: keyid:E7:3F:B8:86:8D:D3:B4:61:EA:1A:67:3C:7A:36:94:52:35:E9:CA:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:c6:8c:08:9d:26:e7:4d:0f:7f:d8:91:0a:11:62:3e:5b:6c: 08:a7:80:94:65:b2:1e:63:3b:27:42:c5:52:31:6a:57:b5:d0: 56:52:f8:f3:a9:36:92:17:62:96:ac:8d:45:d0:de:c7:a8:35: b2:85:b9:26:d9:54:6b:1f:8a:b7:44:2e:09:41:7f:17:b8:ea: 08:87:68:a6:da:4e:b4:f2:44:c8:8b:ea:39:56:d2:83:f6:f0: 29:69:b2:15:14:1c:1e:4b:35:f2:69:06:f5:83:15:5c:6d:7d: 69:7f:4e:f0:fb:af:d7:e2:ea:c5:3c:d4:86:1a:36:e9:e7:95: cb:65:11:d4:54:4c:e0:66:9a:68:f1:67:06:ee:2d:a9:cf:f9: 23:36:cc:e5:1c:36:52:04:57:ea:80:93:76:d5:14:8c:ee:03: b6:3e:16:0d:9c:77:8f:42:fb:39:c1:26:5a:9a:4c:b8:83:90: f0:d8:d6:eb:fb:e1:30:fc:91:7c:bf:43:9e:a2:bf:33:be:5f: 66:4e:57:53:b7:04:80:e7:e7:9c:92:b4:4a:2c:cc:4a:6e:cb: a2:af:a8:65:e8:56:f1:f0:a4:06:35:ce:8a:b2:d3:d5:82:30: 51:19:0e:b2:9d:69:84:8c:89:20:66:e7:8c:7a:b4:a8:5f:74: 29:58:16:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKEU3M0ZCODg2OEREM0I0NjFFQTFBNjczQzdBMzY5NDUy MzVFOUNBQUUwHhcNMjUwMzI4MTYwNDQyWhcNMjUwNDA0MTYwNDQyWjAYMRYwFAYD VQQDEw02N2U2Yzg5Yi1kY2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynBxB31YKGb36UOQK6Y7JIscBKly6OJ5tWeTyLCMvOp1CBF5RrrSzJFAGAXf b6IQRIt20uiOgYFKkStwhHaOFSIJby2ox8jidpIaaWV8J9jg1bW3m/pByTJbvRd+ zB3fpOTGTFAfJg86zePzsls1VY5c1p/m16O30Ev24dA4vRPGMJumBNmapE6+fL22 ULhYN5AaeJtSSBgJ27gumCLZ0tpkn0Dyz4RLpPgGZYeeMFK3BV5esRclLmzuGTj4 kO5fMD2NGBybl0gGA8/UwG3bnuM2JvBctc5A9C0EI6IVcfu4lJiUI9wirhykYDCq nW8vA40aE3p95Zhqt6a4PFOPFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCI6wLvG iSVHVeDmlk+rU4yBOhnqMB8GA1UdIwQYMBaAFOc/uIaN07Rh6hpnPHo2lFI16cqu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS85QzE0QjQwNjNB MjExMUU3OUFBMEQ1MUNDNEY5QUUwMi81ei00aG8zVHRHSHFHbWM4ZWphVVVqWHB5 cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzV6LTRobzNUdEdIcUdtYzhlamFVVWpYcHlxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS85QzE0QjQwNjNBMjExMUU3OUFBMEQ1MUNDNEY5QUUwMi81ei00aG8zVHRH SHFHbWM4ZWphVVVqWHB5cTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqxowInSbnTQ9/2JEKEWI+W2wIp4CUZbIeYzsnQsVSMWpXtdBWUvjz qTaSF2KWrI1F0N7HqDWyhbkm2VRrH4q3RC4JQX8XuOoIh2im2k608kTIi+o5VtKD 9vApabIVFBweSzXyaQb1gxVcbX1pf07w+6/X4urFPNSGGjbp55XLZRHUVEzgZppo 8WcG7i2pz/kjNszlHDZSBFfqgJN21RSM7gO2PhYNnHePQvs5wSZamky4g5Dw2Nbr ++Ew/JF8v0Oeor8zvl9mTldTtwSA5+eckrRKLMxKbsuir6hl6Fbx8KQGNc6KstPV gjBRGQ6ynWmEjIkgZueMerSoX3QpWBan -----END CERTIFICATE-----Generated at Fri Apr 4 11:50:33 2025 by rpki-client