$ rpki-client -vvf rpki.apnic.net/member_repository/A9110477/5750E0B2E9E911EFB502A55FC4F9AE02/tMuMrEr2jfxZVs5gy7DYDTECkYw.mft File: tMuMrEr2jfxZVs5gy7DYDTECkYw.mft (raw, json) Hash identifier: y07jd3O8hd3FIL24NUTXExzOX7vrVDc2z4NqQXhSoRA= Subject key identifier: 09:C4:17:09:1F:3A:9B:87:8B:A5:B2:31:B5:99:C8:98:99:53:37:8C Authority key identifier: B4:CB:8C:AC:4A:F6:8D:FC:59:56:CE:60:CB:B0:D8:0D:31:02:91:8C Certificate issuer: /CN=A9110477/serialNumber=B4CB8CAC4AF68DFC5956CE60CBB0D80D3102918C Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tMuMrEr2jfxZVs5gy7DYDTECkYw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110477/5750E0B2E9E911EFB502A55FC4F9AE02/tMuMrEr2jfxZVs5gy7DYDTECkYw.mft Manifest number: 37 Signing time: Sat 31 May 2025 07:08:08 +0000 Manifest this update: Sat 31 May 2025 07:08:08 +0000 Manifest next update: Sat 07 Jun 2025 07:08:08 +0000 Files and hashes: 1: tMuMrEr2jfxZVs5gy7DYDTECkYw.crl (hash: Yc3owDUnAfzqZQMk4MsoJA8LIUhhET7AolTQHUADoQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110477/5750E0B2E9E911EFB502A55FC4F9AE02/tMuMrEr2jfxZVs5gy7DYDTECkYw.crl rsync://rpki.apnic.net/member_repository/A9110477/5750E0B2E9E911EFB502A55FC4F9AE02/tMuMrEr2jfxZVs5gy7DYDTECkYw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tMuMrEr2jfxZVs5gy7DYDTECkYw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110477, serialNumber=B4CB8CAC4AF68DFC5956CE60CBB0D80D3102918C Validity Not Before: May 31 07:08:08 2025 GMT Not After : Jun 7 07:08:08 2025 GMT Subject: CN=683aaad8-03a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:69:01:40:21:bd:3e:01:0a:f9:bb:d3:5e:b3: ac:94:26:20:81:36:86:8c:8b:20:23:62:c4:cb:b4: 67:45:2d:40:ff:de:38:67:32:3a:e8:b2:3e:90:0d: a4:28:db:39:27:fe:bf:27:bb:e1:49:ff:5a:f9:30: 6f:4b:a0:3b:1a:6f:4a:18:ad:4f:4b:16:76:c0:05: 56:03:1a:cc:66:cf:7d:01:d8:30:f6:79:b9:eb:15: 45:c7:bb:5c:cb:2a:76:37:81:b2:45:2c:3c:f7:fd: b8:c2:a1:0a:cd:c3:02:03:2e:26:fb:e1:ee:0e:f4: 52:f0:d8:a4:82:78:b0:a4:f6:11:0a:dd:20:18:86: 50:f8:df:e4:6f:9a:1c:71:a5:07:44:6d:61:85:b6: e8:29:24:bb:47:e1:df:0b:e9:1c:3d:b1:21:d1:4c: 6c:34:e6:b7:60:46:03:2a:10:96:ca:76:ed:8a:43: d0:4a:f9:d7:a5:7b:1e:dc:17:d9:6f:49:63:b1:cc: 79:3f:27:a5:48:fb:92:06:6f:20:7a:b6:48:ad:16: 25:50:c0:c9:1a:f8:42:cc:6a:10:0a:64:a3:65:de: 09:74:75:73:2e:69:cd:34:9d:46:67:2a:f1:4b:4f: d9:d5:2f:6e:72:b1:cb:83:ed:92:50:4f:a4:18:6b: f4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C4:17:09:1F:3A:9B:87:8B:A5:B2:31:B5:99:C8:98:99:53:37:8C X509v3 Authority Key Identifier: keyid:B4:CB:8C:AC:4A:F6:8D:FC:59:56:CE:60:CB:B0:D8:0D:31:02:91:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110477/5750E0B2E9E911EFB502A55FC4F9AE02/tMuMrEr2jfxZVs5gy7DYDTECkYw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tMuMrEr2jfxZVs5gy7DYDTECkYw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110477/5750E0B2E9E911EFB502A55FC4F9AE02/tMuMrEr2jfxZVs5gy7DYDTECkYw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:b3:4e:a1:ac:3c:a5:be:c4:73:1a:4e:13:4f:9c:0d:77:63: da:a9:22:72:ff:2f:87:fc:ff:8e:51:96:02:87:84:bd:87:2f: 0c:77:8e:07:c6:9c:f7:95:94:5a:15:87:17:4f:e7:ad:f6:15: 32:27:ac:f7:9b:8b:ee:c3:d7:c6:e2:cc:a7:80:76:98:1b:8c: e1:f4:b6:ad:ed:f0:6a:dd:0e:82:93:45:58:0f:3b:7e:65:76: 8e:d8:04:eb:c1:80:01:0c:1a:35:a3:2a:1f:e9:46:45:cc:d4: ab:82:aa:14:1a:2a:6e:63:89:be:a3:7d:04:d6:9b:2e:74:f2: 3b:cb:0d:99:5d:22:e4:9f:03:f2:d9:04:46:91:0c:aa:5e:92: 1a:c4:4d:68:41:50:7b:5c:44:78:cb:d6:bc:45:7d:88:a6:8a: 73:e0:c0:5e:4c:24:c9:e9:44:2a:a0:e5:e6:cd:4e:58:b9:e7: 32:03:87:44:c9:02:e2:3d:69:25:32:71:10:3b:d0:35:41:fd: a6:fb:39:3f:22:fd:90:7f:78:a2:cf:18:72:7c:93:24:37:03: 16:61:43:2e:2e:0f:1b:8a:2e:b2:6e:e7:cc:84:eb:ac:ea:60: 49:85:93:1a:72:0b:31:82:ef:59:9a:4a:8c:8c:f3:d2:8a:de: bd:0a:08:10 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MDQ3NzExMC8GA1UEBRMoQjRDQjhDQUM0QUY2OERGQzU5NTZDRTYwQ0JCMEQ4MEQz MTAyOTE4QzAeFw0yNTA1MzEwNzA4MDhaFw0yNTA2MDcwNzA4MDhaMBgxFjAUBgNV BAMTDTY4M2FhYWQ4LTAzYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcaQFAIb0+AQr5u9Nes6yUJiCBNoaMiyAjYsTLtGdFLUD/3jhnMjrosj6QDaQo 2zkn/r8nu+FJ/1r5MG9LoDsab0oYrU9LFnbABVYDGsxmz30B2DD2ebnrFUXHu1zL KnY3gbJFLDz3/bjCoQrNwwIDLib74e4O9FLw2KSCeLCk9hEK3SAYhlD43+Rvmhxx pQdEbWGFtugpJLtH4d8L6Rw9sSHRTGw05rdgRgMqEJbKdu2KQ9BK+delex7cF9lv SWOxzHk/J6VI+5IGbyB6tkitFiVQwMka+ELMahAKZKNl3gl0dXMuac00nUZnKvFL T9nVL25yscuD7ZJQT6QYa/SPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCcQXCR86 m4eLpbIxtZnImJlTN4wwHwYDVR0jBBgwFoAUtMuMrEr2jfxZVs5gy7DYDTECkYww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwNDc3LzU3NTBFMEIyRTlF OTExRUZCNTAyQTU1RkM0RjlBRTAyL3RNdU1yRXIyamZ4WlZzNWd5N0RZRFRFQ2tZ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdE11TXJFcjJqZnhaVnM1Z3k3RFlEVEVDa1l3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEw NDc3LzU3NTBFMEIyRTlFOTExRUZCNTAyQTU1RkM0RjlBRTAyL3RNdU1yRXIyamZ4 WlZzNWd5N0RZRFRFQ2tZdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHSzTqGsPKW+xHMaThNPnA13Y9qpInL/L4f8/45RlgKHhL2HLwx3jgfG nPeVlFoVhxdP5632FTInrPebi+7D18bizKeAdpgbjOH0tq3t8GrdDoKTRVgPO35l do7YBOvBgAEMGjWjKh/pRkXM1KuCqhQaKm5jib6jfQTWmy508jvLDZldIuSfA/LZ BEaRDKpekhrETWhBUHtcRHjL1rxFfYiminPgwF5MJMnpRCqg5ebNTli55zIDh0TJ AuI9aSUycRA70DVB/ab7OT8i/ZB/eKLPGHJ8kyQ3AxZhQy4uDxuKLrJu58yE66zq YEmFkxpyCzGC71maSoyM89KK3r0KCBA= -----END CERTIFICATE-----Generated at Sat May 31 17:50:44 2025 by rpki-client