$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft File: G5AiZjIh2M567rA_P1eZ8NV-phY.mft (raw, json) Hash identifier: XbToRIf7cgk+1yomUI1ap5qj1rgwVsty/ObYQ5TMocs= Subject key identifier: 6C:92:47:A4:B1:FF:0D:C0:C3:11:A6:CC:DE:2E:36:64:CA:73:FE:23 Authority key identifier: 1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16 Certificate issuer: /CN=A9133E16/serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616 Certificate serial: 08E8 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft Manifest number: 08E8 Signing time: Mon 02 Jun 2025 20:33:10 +0000 Manifest this update: Mon 02 Jun 2025 20:33:10 +0000 Manifest next update: Mon 09 Jun 2025 20:33:10 +0000 Files and hashes: 1: G5AiZjIh2M567rA_P1eZ8NV-phY.crl (hash: v1s71W2EkViO8p6Q8B2+1ToAT+k81m09Te63/QthiAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:33:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2280 (0x8e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133E16, serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616 Validity Not Before: Jun 2 20:33:10 2025 GMT Not After : Jun 9 20:33:10 2025 GMT Subject: CN=683e0a86-99bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:42:a3:93:43:9e:db:66:28:01:a1:a3:b5:b4: 61:08:bc:f6:b9:10:be:a8:01:91:00:21:e6:d7:52: 62:6b:4c:41:73:f5:bb:e6:88:21:21:7f:3e:64:64: 63:65:2f:22:4d:b2:c3:5d:b4:66:87:ac:87:f1:7c: 39:30:26:9f:ab:12:65:81:e7:f7:d5:9d:43:d0:79: 5c:15:0b:f5:86:cf:4d:dc:00:91:7a:c3:89:e7:ec: 9b:6d:18:d7:69:94:f3:d6:0a:5e:7f:71:4f:f6:8b: 98:03:19:9a:e4:f1:b4:23:3f:fa:3f:9c:63:b6:d0: a3:a0:67:48:33:25:5b:87:47:b3:87:5d:dc:88:11: 40:54:e1:82:bc:69:0a:9d:c4:a1:6f:57:30:d8:5f: e4:54:2b:e3:53:d9:bc:3e:d4:e5:15:2c:84:da:64: 18:d5:e7:be:46:1d:3d:18:7a:a6:d9:06:0d:5a:ee: c2:95:52:d8:fe:7c:91:9d:43:38:34:2f:18:49:84: 24:cd:96:aa:ab:b5:7c:c0:7a:35:4f:0c:16:08:73: ba:92:88:b5:64:89:64:65:c4:94:c9:63:42:30:f0: f0:11:e3:1d:07:e9:60:a0:ef:a3:3e:ca:8a:9d:f3: 3d:69:fa:36:df:c5:6e:c7:f1:28:8d:b4:ca:68:ee: ea:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:92:47:A4:B1:FF:0D:C0:C3:11:A6:CC:DE:2E:36:64:CA:73:FE:23 X509v3 Authority Key Identifier: keyid:1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:ce:0e:ee:f6:92:cf:ba:4e:d6:7d:e5:1e:48:02:02:c9:a0: bf:8b:52:6c:e9:72:b3:27:28:8d:f4:c1:40:a6:7b:76:cb:d9: 40:6a:2e:8c:40:7e:4f:08:8e:c0:0a:64:b1:1c:3b:66:25:11: 0a:3e:11:24:e3:26:a7:f1:c5:b4:f0:39:76:79:3c:9e:82:fe: c9:a4:6f:1a:0c:de:09:41:2b:fa:03:3d:f1:92:a3:c5:9f:d9: 91:22:69:18:29:26:37:40:71:32:97:24:6b:45:0b:a4:1e:db: eb:e0:53:fc:3f:a4:24:dc:94:13:3d:37:68:d3:15:d9:95:f0: 8d:18:cd:86:e8:91:17:98:81:9b:ad:57:9f:a6:05:2e:d5:2c: 1c:14:85:f0:2f:7f:bc:80:8a:13:c1:ae:98:4e:b8:6b:19:dc: f0:82:86:2a:83:ac:ff:bd:31:a3:19:9f:ea:41:6e:6f:49:50: 59:18:75:46:50:0d:f1:b5:51:77:97:9a:23:b7:1e:8f:b7:e7: fd:ad:28:9d:a9:7c:a8:3f:48:d5:1a:d5:48:25:bb:89:23:e9: ef:f2:9c:d5:69:fc:09:e8:26:10:d9:f4:a7:d9:11:fd:fa:c2: 1a:1c:87:3f:26:cc:8f:0c:10:b3:22:34:0b:24:f6:7b:2c:ec: e2:fc:ea:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNFMTYxMTAvBgNVBAUTKDFCOTAyMjY2MzIyMUQ4Q0U3QUVFQjAzRjNGNTc5OUYw RDU3RUE2MTYwHhcNMjUwNjAyMjAzMzEwWhcNMjUwNjA5MjAzMzEwWjAYMRYwFAYD VQQDEw02ODNlMGE4Ni05OWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkKjk0Oe22YoAaGjtbRhCLz2uRC+qAGRACHm11Jia0xBc/W75oghIX8+ZGRj ZS8iTbLDXbRmh6yH8Xw5MCafqxJlgef31Z1D0HlcFQv1hs9N3ACResOJ5+ybbRjX aZTz1gpef3FP9ouYAxma5PG0Iz/6P5xjttCjoGdIMyVbh0ezh13ciBFAVOGCvGkK ncShb1cw2F/kVCvjU9m8PtTlFSyE2mQY1ee+Rh09GHqm2QYNWu7ClVLY/nyRnUM4 NC8YSYQkzZaqq7V8wHo1TwwWCHO6koi1ZIlkZcSUyWNCMPDwEeMdB+lgoO+jPsqK nfM9afo238Vux/EojbTKaO7q8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGySR6Sx /w3AwxGmzN4uNmTKc/4jMB8GA1UdIwQYMBaAFBuQImYyIdjOeu6wPz9XmfDVfqYW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0UxNi9GNDdCNkNENEFD NzQxMUVBODZFQTlGNDhDNEY5QUUwMi9HNUFpWmpJaDJNNTY3ckFfUDFlWjhOVi1w aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0c1QWlaakloMk01NjdyQV9QMWVaOE5WLXBoWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0UxNi9GNDdCNkNENEFDNzQxMUVBODZFQTlGNDhDNEY5QUUwMi9HNUFpWmpJaDJN NTY3ckFfUDFlWjhOVi1waFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQzg7u9pLPuk7WfeUeSAICyaC/i1Js6XKzJyiN9MFApnt2y9lAai6M QH5PCI7ACmSxHDtmJREKPhEk4yan8cW08Dl2eTyegv7JpG8aDN4JQSv6Az3xkqPF n9mRImkYKSY3QHEylyRrRQukHtvr4FP8P6Qk3JQTPTdo0xXZlfCNGM2G6JEXmIGb rVefpgUu1SwcFIXwL3+8gIoTwa6YTrhrGdzwgoYqg6z/vTGjGZ/qQW5vSVBZGHVG UA3xtVF3l5ojtx6Pt+f9rSidqXyoP0jVGtVIJbuJI+nv8pzVafwJ6CYQ2fSn2RH9 +sIaHIc/JsyPDBCzIjQLJPZ7LOzi/Op7 -----END CERTIFICATE-----Generated at Wed Jun 4 00:54:30 2025 by rpki-client