$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft File: kg59CR8VVp8tg0DGWCuVlewGVoA.mft (raw, json) Hash identifier: 2ja4EEEizI1SMhciZ5EHj6noEuiRRFHBUfZs/QiJo6c= Subject key identifier: 5F:4C:7F:4C:2E:04:09:FF:A5:1B:95:21:66:5A:A0:8F:32:2F:5C:8A Authority key identifier: 92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80 Certificate issuer: /CN=A9112FE1/serialNumber=920E7D091F15569F2D8340C6582B9595EC065680 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft Manifest number: 0B Signing time: Fri 11 Apr 2025 07:23:16 +0000 Manifest this update: Fri 11 Apr 2025 07:23:16 +0000 Manifest next update: Fri 18 Apr 2025 07:23:15 +0000 Files and hashes: 1: kg59CR8VVp8tg0DGWCuVlewGVoA.crl (hash: ap/6/oWFVYYOycDcocrAYyR+ZF/M1OnpFxP6uuhfS6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 07:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1 Validity Not Before: Apr 11 07:23:16 2025 GMT Not After : Apr 18 07:23:15 2025 GMT Subject: CN=67f8c364-e981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1f:3c:03:26:b1:40:d5:bb:20:3e:0d:8c:92: f9:c1:a9:aa:5b:68:14:60:2c:ab:da:e9:62:8d:a2: 8d:a7:52:94:2e:6b:05:29:b6:63:6a:ce:2e:73:44: 13:09:31:f5:d6:5b:bc:12:3e:ef:74:51:4c:64:a9: a4:60:65:4c:4e:7a:ea:d4:91:db:f2:98:8a:b9:0d: 2f:f1:b2:cd:f1:55:fa:7d:bd:79:7b:1c:c2:fd:c2: 0d:90:46:c9:12:f0:d5:5b:1a:2f:6a:50:7b:ac:af: 44:f3:44:b5:bd:72:c9:93:b3:7a:e6:ac:10:0e:e8: d1:97:93:1d:33:7c:93:cb:f4:e2:ef:98:6a:d6:e2: 23:99:d9:1d:16:dd:ae:b1:2b:06:f6:11:96:54:f8: d5:f2:a4:23:f9:ae:20:10:98:e6:d1:2e:88:74:f0: 04:06:93:2e:84:10:9c:5a:3f:d6:c6:55:6e:3b:32: a3:67:9e:27:52:88:f5:3a:e2:52:61:d6:c7:4a:19: 38:0e:20:9e:9d:77:c0:e0:72:ef:89:05:a8:1e:83: a7:1f:01:ca:18:3a:56:27:21:40:3e:b9:a9:55:91: dc:4b:63:ac:0b:41:c6:2e:42:7e:27:e3:cf:76:2a: 24:bb:0f:d4:34:81:23:48:b0:cd:eb:1a:16:2e:a8: 16:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4C:7F:4C:2E:04:09:FF:A5:1B:95:21:66:5A:A0:8F:32:2F:5C:8A X509v3 Authority Key Identifier: keyid:92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:be:db:a2:69:da:64:aa:04:8d:4a:6f:f3:a0:bd:39:74:42: 0f:4f:85:f5:d3:b8:05:fd:fd:fb:75:62:73:d8:30:16:09:4b: 7b:ed:30:fc:e5:79:d5:5f:e0:28:12:4c:55:2b:1e:1c:90:c0: 4d:f0:31:67:93:d0:c9:89:1e:4f:3b:b3:37:77:0e:04:39:3c: f0:b6:1d:b6:d2:3a:ed:f8:2b:e8:9b:db:a3:d4:94:fc:3d:0d: f4:21:cf:c1:91:2d:0d:0d:8e:70:73:47:e1:e5:81:d4:c6:8d: 45:01:22:99:32:15:1d:71:28:e2:db:14:d7:00:7a:53:e1:bc: cb:a5:26:c8:cd:e6:d2:51:b6:21:3c:3d:07:17:39:9c:cb:b4: 77:be:17:d9:ba:d9:96:61:7f:58:59:ff:cf:04:f6:6a:4b:ab: 51:d6:90:6d:12:da:73:fd:80:72:34:1a:0d:41:a3:49:46:57: ef:b3:3a:d8:89:66:ca:80:74:cf:7a:a2:14:29:c0:8e:11:eb: 37:26:35:19:4a:ee:cb:b3:d2:61:30:ce:3e:58:60:b6:1c:6a: 02:98:d7:44:91:15:83:a2:7e:f6:d8:25:2d:62:2e:b8:7a:bc: 8d:89:d2:e8:96:55:c0:a2:86:f3:e1:a9:ef:b7:65:b2:e9:73: ad:d8:c6:e4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MkZFMTExMC8GA1UEBRMoOTIwRTdEMDkxRjE1NTY5RjJEODM0MEM2NTgyQjk1OTVF QzA2NTY4MDAeFw0yNTA0MTEwNzIzMTZaFw0yNTA0MTgwNzIzMTVaMBgxFjAUBgNV BAMTDTY3ZjhjMzY0LWU5ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeHzwDJrFA1bsgPg2MkvnBqapbaBRgLKva6WKNoo2nUpQuawUptmNqzi5zRBMJ MfXWW7wSPu90UUxkqaRgZUxOeurUkdvymIq5DS/xss3xVfp9vXl7HML9wg2QRskS 8NVbGi9qUHusr0TzRLW9csmTs3rmrBAO6NGXkx0zfJPL9OLvmGrW4iOZ2R0W3a6x Kwb2EZZU+NXypCP5riAQmObRLoh08AQGky6EEJxaP9bGVW47MqNnnidSiPU64lJh 1sdKGTgOIJ6dd8Dgcu+JBageg6cfAcoYOlYnIUA+ualVkdxLY6wLQcYuQn4n4892 KiS7D9Q0gSNIsM3rGhYuqBZHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUX0x/TC4E Cf+lG5UhZlqgjzIvXIowHwYDVR0jBBgwFoAUkg59CR8VVp8tg0DGWCuVlewGVoAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyRkUxL0YxQzc0NDdFMDlG MTExRjA4QjQ0QTMyNUM0RjlBRTAyL2tnNTlDUjhWVnA4dGcwREdXQ3VWbGV3R1Zv QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIva2c1OUNSOFZWcDh0ZzBER1dDdVZsZXdHVm9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEy RkUxL0YxQzc0NDdFMDlGMTExRjA4QjQ0QTMyNUM0RjlBRTAyL2tnNTlDUjhWVnA4 dGcwREdXQ3VWbGV3R1ZvQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIS+26Jp2mSqBI1Kb/OgvTl0Qg9PhfXTuAX9/ft1YnPYMBYJS3vtMPzl edVf4CgSTFUrHhyQwE3wMWeT0MmJHk87szd3DgQ5PPC2HbbSOu34K+ib26PUlPw9 DfQhz8GRLQ0NjnBzR+HlgdTGjUUBIpkyFR1xKOLbFNcAelPhvMulJsjN5tJRtiE8 PQcXOZzLtHe+F9m62ZZhf1hZ/88E9mpLq1HWkG0S2nP9gHI0Gg1Bo0lGV++zOtiJ ZsqAdM96ohQpwI4R6zcmNRlK7suz0mEwzj5YYLYcagKY10SRFYOifvbYJS1iLrh6 vI2J0uiWVcCihvPhqe+3ZbLpc63YxuQ= -----END CERTIFICATE-----Generated at Sat Apr 12 03:25:12 2025 by rpki-client