$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft File: G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft (raw, json) Hash identifier: kk5zVPpbesprrqaSNL4xDQNXtpHhGq42orvtvdfvTyc= Subject key identifier: 66:0B:8D:50:2F:95:3C:C8:77:D5:F2:C6:F2:F8:3C:01:6D:43:FE:B3 Authority key identifier: 1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE Certificate issuer: /CN=A9139322/serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft Manifest number: 018F Signing time: Wed 04 Jun 2025 23:19:23 +0000 Manifest this update: Wed 04 Jun 2025 23:19:23 +0000 Manifest next update: Wed 11 Jun 2025 23:19:23 +0000 Files and hashes: 1: G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl (hash: rZwzhWd006ivPc+e+LTUoZBLcwnNwYkB97lIlCZUIw8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 23:19:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322, serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE Validity Not Before: Jun 4 23:19:23 2025 GMT Not After : Jun 11 23:19:23 2025 GMT Subject: CN=6840d47b-0189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3a:44:08:d4:be:e0:2b:05:c5:c9:8d:51:72: 74:88:62:18:43:e1:98:2e:2c:df:e7:e5:98:a2:67: 84:0a:5b:05:b3:a3:cb:7e:31:30:88:67:1a:17:01: 07:e9:f2:d7:4b:29:90:f3:eb:a8:4a:29:7d:c8:7f: f8:27:39:e5:6b:67:d7:8a:dd:e7:53:df:83:f5:3b: 30:d8:d9:29:1c:1b:10:4b:46:2d:97:40:4d:85:64: db:f9:41:97:17:2f:6b:40:36:10:d5:72:f0:d6:7d: d9:e8:64:66:00:68:25:a9:7f:83:2f:8f:4b:17:73: 89:41:24:2d:20:2d:aa:e3:86:33:06:62:92:b2:c7: 80:6f:e0:de:86:10:60:6f:3f:10:65:48:85:7c:c7: 37:e6:21:a8:0a:d2:ab:f2:34:f3:a9:7e:15:51:ea: ca:93:d0:5e:0c:b8:cf:a7:c1:78:dd:05:49:67:52: 22:4b:41:c5:a2:be:d3:51:79:bf:4b:1b:98:49:49: 48:11:4d:60:c9:8a:51:aa:99:bf:6c:8a:f4:dd:a5: 45:6a:7f:94:bc:c5:08:96:62:65:f9:b7:83:09:8c: 87:0c:d8:3e:97:9d:85:ea:58:1d:b8:cb:8e:8b:64: b7:12:ed:2c:f3:a7:cb:79:21:c6:8a:f6:7d:90:2d: fd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:0B:8D:50:2F:95:3C:C8:77:D5:F2:C6:F2:F8:3C:01:6D:43:FE:B3 X509v3 Authority Key Identifier: keyid:1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:c3:86:f9:48:ad:aa:30:29:e5:27:a6:4e:f4:37:d6:b7:17: 55:21:e5:26:d5:02:c0:b0:1f:75:0e:56:d6:92:b3:9d:e2:38: b8:09:9d:e3:1a:41:8d:c8:1d:d3:e7:ae:35:22:b9:6c:9a:d8: 32:8f:c0:d5:a5:76:0a:7c:7f:8c:23:3c:aa:6b:44:e8:ee:e8: f7:fd:71:26:86:02:bc:02:41:70:8d:36:71:f5:5c:3f:1e:a5: e7:26:1d:2f:75:31:b0:df:62:c3:f6:ea:35:7b:9b:e6:a7:6c: 84:b2:a6:06:c1:39:9d:d6:91:35:63:4e:29:4d:6e:93:ca:d4: 2f:0c:d8:0a:64:fc:24:25:18:3e:4f:7c:a0:96:4a:27:ac:8b: 3b:b0:df:02:71:ce:11:e0:2c:9a:6e:23:be:d9:f0:13:c1:75: c7:f3:96:ef:ae:fe:20:1b:cf:0d:7f:4f:2c:af:64:17:77:5d: 8b:45:5f:e2:27:7c:7e:fe:8c:4d:74:d5:1f:35:85:dd:4f:de: 67:52:68:d2:e1:54:52:5c:67:2e:9d:dd:3c:c6:06:92:e9:59: 97:22:d7:a9:34:0d:92:a9:e4:77:85:a8:78:3c:79:67:8b:d2: e3:0e:73:90:45:9e:f2:b2:1b:1a:44:52:f8:21:58:7d:e8:e9: f9:80:7a:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKDFCRkNENTk1QUQ1RkZEQjlDMDQzNzM3QkNBRkVDNzJF MDQ2QzZCRUUwHhcNMjUwNjA0MjMxOTIzWhcNMjUwNjExMjMxOTIzWjAYMRYwFAYD VQQDEw02ODQwZDQ3Yi0wMTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTpECNS+4CsFxcmNUXJ0iGIYQ+GYLizf5+WYomeEClsFs6PLfjEwiGcaFwEH 6fLXSymQ8+uoSil9yH/4Jznla2fXit3nU9+D9Tsw2NkpHBsQS0Ytl0BNhWTb+UGX Fy9rQDYQ1XLw1n3Z6GRmAGglqX+DL49LF3OJQSQtIC2q44YzBmKSsseAb+DehhBg bz8QZUiFfMc35iGoCtKr8jTzqX4VUerKk9BeDLjPp8F43QVJZ1IiS0HFor7TUXm/ SxuYSUlIEU1gyYpRqpm/bIr03aVFan+UvMUIlmJl+beDCYyHDNg+l52F6lgduMuO i2S3Eu0s86fLeSHGivZ9kC39RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYLjVAv lTzId9XyxvL4PAFtQ/6zMB8GA1UdIwQYMBaAFBv81ZWtX/25wENze8r+xy4EbGvu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi85MUZFMDU2QURG RkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9ibkFRM043eXY3SExnUnNh LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dfelZsYTFmX2JuQVEzTjd5djdITGdSc2EtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTMyMi85MUZFMDU2QURGRkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9i bkFRM043eXY3SExnUnNhLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcw4b5SK2qMCnlJ6ZO9DfWtxdVIeUm1QLAsB91DlbWkrOd4ji4CZ3j GkGNyB3T5641Irlsmtgyj8DVpXYKfH+MIzyqa0To7uj3/XEmhgK8AkFwjTZx9Vw/ HqXnJh0vdTGw32LD9uo1e5vmp2yEsqYGwTmd1pE1Y04pTW6TytQvDNgKZPwkJRg+ T3yglkonrIs7sN8Ccc4R4CyabiO+2fATwXXH85bvrv4gG88Nf08sr2QXd12LRV/i J3x+/oxNdNUfNYXdT95nUmjS4VRSXGcund08xgaS6VmXItepNA2SqeR3hah4PHln i9LjDnOQRZ7yshsaRFL4IVh96On5gHqi -----END CERTIFICATE-----Generated at Thu Jun 5 19:55:25 2025 by rpki-client