$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft File: cnQCOx-0p0kyj11N-DsN0_B_6UI.mft (raw, json) Hash identifier: cT/8u3uMvsnihDDjAzpfzcm7J9M/ehFGnnQ5GrnpCK4= Subject key identifier: 0C:0B:99:0A:2F:A8:F2:01:C4:2A:58:10:CA:5C:70:32:E7:29:67:7A Authority key identifier: 72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42 Certificate issuer: /CN=A91FFDF3/serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942 Certificate serial: 064F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft Manifest number: 064F Signing time: Mon 14 Apr 2025 22:10:47 +0000 Manifest this update: Mon 14 Apr 2025 22:10:47 +0000 Manifest next update: Mon 21 Apr 2025 22:10:47 +0000 Files and hashes: 1: cnQCOx-0p0kyj11N-DsN0_B_6UI.crl (hash: yVTk8PT0exNqZ+4Vrw18w1QiQHCSuJUeoyQ7OUmteeA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 22:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1615 (0x64f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFDF3, serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942 Validity Not Before: Apr 14 22:10:47 2025 GMT Not After : Apr 21 22:10:47 2025 GMT Subject: CN=67fd87e7-aaab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:93:0d:9c:5a:6d:69:ef:8b:ee:a4:08:a9:11: 46:6c:46:75:be:54:ba:78:71:b7:3f:e5:bb:00:06: f9:ef:1c:25:49:c4:3c:8d:99:b8:41:2a:b7:f3:fa: f7:88:4b:2e:18:d9:24:b6:de:91:d0:09:1d:ed:ff: 15:b6:c3:c4:3b:6c:3f:29:93:5f:4e:4e:78:0b:59: 6a:d1:d4:b2:48:cc:cb:e0:00:d4:ef:6c:b4:ed:5e: 5a:2c:ee:da:23:09:9a:36:cc:eb:3f:6a:44:8c:a3: 3a:8c:c7:a8:06:3e:84:d1:df:8f:86:12:88:7c:ae: 2f:f4:02:dc:77:de:69:ed:6a:49:90:b9:09:98:1e: c7:23:45:73:c6:80:ab:09:e8:23:ae:c7:da:a4:b8: 07:a6:23:62:58:e2:4e:24:50:03:c4:d6:45:ff:c1: e0:9d:66:17:6d:59:a6:97:f6:f4:d6:53:3b:1a:e5: c5:68:96:c8:02:fc:4e:d3:e6:a1:27:5e:f7:eb:66: 13:9e:98:a1:89:f5:07:ce:1e:26:7d:be:ed:86:cf: 10:93:72:9a:5a:51:db:57:cc:2b:a4:7d:e2:c4:10: 19:22:5c:ee:3d:71:8b:53:fb:ac:8c:7d:c3:b3:2b: 8d:f1:6b:dd:1d:01:d1:62:b2:07:7c:52:22:17:35: ae:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0B:99:0A:2F:A8:F2:01:C4:2A:58:10:CA:5C:70:32:E7:29:67:7A X509v3 Authority Key Identifier: keyid:72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:3d:b8:94:91:76:56:1d:9c:d1:44:ac:fc:cf:72:bd:79:a2: 4f:0e:10:22:a9:77:51:99:51:f5:56:2a:ea:7a:16:84:e3:22: 87:e0:e0:51:14:82:30:46:32:50:9b:d1:c9:91:a4:87:7c:62: f0:99:2d:4a:30:11:a8:9f:98:8a:92:cf:46:d7:17:5f:c7:07: c9:db:c0:96:02:ab:e5:db:90:56:5c:8a:07:1b:bd:ea:5f:f5: 43:d7:cb:a8:14:f2:e6:bb:c7:c3:2a:26:4b:3c:89:c9:f4:d4: b5:65:5e:e7:fa:17:c7:68:1d:f8:f6:79:4a:c1:25:d7:f4:75: 39:93:4f:d1:e7:f6:55:c1:f9:c8:bc:06:3a:a9:a7:f4:a8:54: 86:51:53:e9:16:a9:e5:a2:cd:cd:66:cb:ed:3d:1c:b1:a2:3b: ea:f4:c3:14:9a:e3:37:7d:f7:e8:2e:02:44:40:63:d1:9c:49: 24:ed:69:1d:56:59:d6:f7:4d:2c:22:cd:e1:df:1f:22:99:72: 17:b4:75:a6:0c:a0:78:43:cf:e5:93:f9:89:94:6b:1b:c9:de: 9d:13:53:bb:6c:f8:39:3d:79:e2:bc:2f:ed:63:fb:6f:8a:30: 6c:66:29:0d:e6:da:f2:9b:fe:f5:a9:eb:75:cd:3d:a8:fa:a8: 2c:ca:bb:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZERjMxMTAvBgNVBAUTKDcyNzQwMjNCMUZCNEE3NDkzMjhGNUQ0REY4M0IwREQz RjA3RkU5NDIwHhcNMjUwNDE0MjIxMDQ3WhcNMjUwNDIxMjIxMDQ3WjAYMRYwFAYD VQQDEw02N2ZkODdlNy1hYWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAppMNnFptae+L7qQIqRFGbEZ1vlS6eHG3P+W7AAb57xwlScQ8jZm4QSq38/r3 iEsuGNkktt6R0Akd7f8VtsPEO2w/KZNfTk54C1lq0dSySMzL4ADU72y07V5aLO7a IwmaNszrP2pEjKM6jMeoBj6E0d+PhhKIfK4v9ALcd95p7WpJkLkJmB7HI0VzxoCr CegjrsfapLgHpiNiWOJOJFADxNZF/8HgnWYXbVmml/b01lM7GuXFaJbIAvxO0+ah J17362YTnpihifUHzh4mfb7ths8Qk3KaWlHbV8wrpH3ixBAZIlzuPXGLU/usjH3D syuN8WvdHQHRYrIHfFIiFzWulwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwLmQov qPIBxCpYEMpccDLnKWd6MB8GA1UdIwQYMBaAFHJ0AjsftKdJMo9dTfg7DdPwf+lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkRGMy83NTdEQjc4ODdE NzExMUVCODJEM0Q2NjFDNEY5QUUwMi9jblFDT3gtMHAwa3lqMTFOLURzTjBfQl82 VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NuUUNPeC0wcDBreWoxMU4tRHNOMF9CXzZVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkRGMy83NTdEQjc4ODdENzExMUVCODJEM0Q2NjFDNEY5QUUwMi9jblFDT3gtMHAw a3lqMTFOLURzTjBfQl82VUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyPbiUkXZWHZzRRKz8z3K9eaJPDhAiqXdRmVH1VirqehaE4yKH4OBR FIIwRjJQm9HJkaSHfGLwmS1KMBGon5iKks9G1xdfxwfJ28CWAqvl25BWXIoHG73q X/VD18uoFPLmu8fDKiZLPInJ9NS1ZV7n+hfHaB349nlKwSXX9HU5k0/R5/ZVwfnI vAY6qaf0qFSGUVPpFqnlos3NZsvtPRyxojvq9MMUmuM3fffoLgJEQGPRnEkk7Wkd VlnW900sIs3h3x8imXIXtHWmDKB4Q8/lk/mJlGsbyd6dE1O7bPg5PXnivC/tY/tv ijBsZikN5trym/71qet1zT2o+qgsyrtq -----END CERTIFICATE-----Generated at Wed Apr 16 23:46:19 2025 by rpki-client