$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft File: 8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft (raw, json) Hash identifier: 3dbz+7IsZonckzFhUu35aQuHBwiu9YiPHDn6CTSw7dQ= Subject key identifier: 23:68:9C:D0:3B:A0:36:24:49:D1:6F:12:77:D7:77:8B:0A:EB:61:09 Authority key identifier: F3:EB:BF:B4:A9:38:0F:E0:9A:56:1F:C6:AF:A2:A1:CC:21:48:86:11 Certificate issuer: /CN=A913A5AF/serialNumber=F3EBBFB4A9380FE09A561FC6AFA2A1CC21488611 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft Manifest number: 4E Signing time: Sat 31 May 2025 06:52:49 +0000 Manifest this update: Sat 31 May 2025 06:52:48 +0000 Manifest next update: Sat 07 Jun 2025 06:52:48 +0000 Files and hashes: 1: 8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl (hash: AKTFtmMIf71v62Au5Xm3J4At9rFHVrb303J9MM3WjIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:52:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A5AF, serialNumber=F3EBBFB4A9380FE09A561FC6AFA2A1CC21488611 Validity Not Before: May 31 06:52:48 2025 GMT Not After : Jun 7 06:52:48 2025 GMT Subject: CN=683aa740-3d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f3:cf:df:d3:db:c7:8b:d6:d7:88:66:1f:06: 8e:da:a1:02:c7:fe:93:cd:3e:75:5e:e1:29:d5:fa: 23:73:bf:97:b3:94:fe:7e:e6:e4:c7:ab:0d:64:96: 66:1e:1f:64:dd:6b:7b:ba:a0:40:dd:5a:14:19:9c: 48:f6:c8:23:10:85:b8:80:15:2f:24:eb:3c:7c:dc: 3f:e9:10:4f:09:a8:14:d1:3e:f2:c3:9d:1f:b7:e1: bb:54:d7:a9:85:52:ef:0e:6e:f3:bc:2c:2f:1d:ce: 7b:61:bf:90:91:04:85:02:ae:55:18:65:6e:d8:03: ac:2d:a6:5b:1a:e7:ce:13:f7:eb:2f:2d:3f:7b:4c: 11:87:aa:99:10:c2:98:02:59:38:6c:05:96:80:f3: 15:5a:2b:ea:e2:a1:ee:53:20:8d:f1:4b:28:c8:34: 29:5e:0f:0e:59:94:f2:09:c3:c2:98:e1:4a:bc:6f: 2e:31:80:d4:81:ae:42:77:d8:fc:f9:a6:f8:5d:bd: e2:4f:dc:8e:01:de:fb:ba:93:9c:5c:1f:0a:8b:6d: 91:ad:ba:6d:8f:fe:95:1b:66:be:a1:00:21:93:08: 55:fe:92:22:5d:fc:73:7c:6e:c5:d8:bb:72:17:8b: c0:82:80:5d:0c:33:d9:00:61:57:33:28:50:8f:bd: 79:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:68:9C:D0:3B:A0:36:24:49:D1:6F:12:77:D7:77:8B:0A:EB:61:09 X509v3 Authority Key Identifier: keyid:F3:EB:BF:B4:A9:38:0F:E0:9A:56:1F:C6:AF:A2:A1:CC:21:48:86:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:5b:9a:74:ba:3e:d9:da:28:72:84:fd:6c:6f:2a:ec:99:51: 45:b0:9b:c3:1f:9c:b4:1a:90:a4:b2:53:4e:1d:2f:02:c7:22: f6:c0:ca:90:ba:05:d5:ac:54:96:89:d0:79:23:8f:08:37:cd: be:86:74:38:d6:5a:4e:43:ba:92:66:26:81:f5:0b:7e:e9:e2: 47:e3:4d:1a:22:2f:4c:c0:35:36:ba:47:ac:b3:fd:d5:cd:0a: 63:22:6e:99:cd:ba:ff:7b:ed:e6:03:ae:4a:19:a2:fc:24:93: a2:b9:d5:3c:bb:92:17:51:72:ff:72:75:bb:8b:e6:57:0a:86: e5:65:e2:b3:b2:49:5b:0a:f6:24:f0:cc:1f:b0:04:7a:7d:ab: 9c:37:c0:b4:46:61:fc:46:56:59:27:55:88:70:9c:d5:97:c5: 01:d3:55:76:51:a9:97:ab:9c:81:d8:c6:3d:d9:e6:7e:19:df: 13:38:3d:89:a4:a4:55:0a:f1:ba:c6:d3:5f:62:a1:17:0f:ac: 04:43:24:18:a7:91:61:96:02:f0:3a:15:2b:93:ed:c9:4a:7b: 89:10:80:13:e8:9f:2d:f4:77:3a:71:80:4b:2e:70:12:80:47: 37:44:ff:36:74:db:4d:c1:d7:c5:f7:f9:fb:66:d0:e5:cb:52: 8c:2b:71:84 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QTVBRjExMC8GA1UEBRMoRjNFQkJGQjRBOTM4MEZFMDlBNTYxRkM2QUZBMkExQ0My MTQ4ODYxMTAeFw0yNTA1MzEwNjUyNDhaFw0yNTA2MDcwNjUyNDhaMBgxFjAUBgNV BAMTDTY4M2FhNzQwLTNkMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC088/f09vHi9bXiGYfBo7aoQLH/pPNPnVe4SnV+iNzv5ezlP5+5uTHqw1klmYe H2Tda3u6oEDdWhQZnEj2yCMQhbiAFS8k6zx83D/pEE8JqBTRPvLDnR+34btU16mF Uu8ObvO8LC8dznthv5CRBIUCrlUYZW7YA6wtplsa584T9+svLT97TBGHqpkQwpgC WThsBZaA8xVaK+rioe5TII3xSyjINCleDw5ZlPIJw8KY4Uq8by4xgNSBrkJ32Pz5 pvhdveJP3I4B3vu6k5xcHwqLbZGtum2P/pUbZr6hACGTCFX+kiJd/HN8bsXYu3IX i8CCgF0MM9kAYVczKFCPvXn1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUI2ic0Dug NiRJ0W8Sd9d3iwrrYQkwHwYDVR0jBBgwFoAU8+u/tKk4D+CaVh/Gr6KhzCFIhhEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNBNUFGLzg4REJBOTgyQ0JD MTExRUY5Q0QxOUQ0NEM0RjlBRTAyLzgtdV90S2s0RC1DYVZoX0dyNktoekNGSWho RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOC11X3RLazRELUNhVmhfR3I2S2h6Q0ZJaGhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNB NUFGLzg4REJBOTgyQ0JDMTExRUY5Q0QxOUQ0NEM0RjlBRTAyLzgtdV90S2s0RC1D YVZoX0dyNktoekNGSWhoRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIBbmnS6PtnaKHKE/WxvKuyZUUWwm8MfnLQakKSyU04dLwLHIvbAypC6 BdWsVJaJ0Hkjjwg3zb6GdDjWWk5DupJmJoH1C37p4kfjTRoiL0zANTa6R6yz/dXN CmMibpnNuv977eYDrkoZovwkk6K51Ty7khdRcv9ydbuL5lcKhuVl4rOySVsK9iTw zB+wBHp9q5w3wLRGYfxGVlknVYhwnNWXxQHTVXZRqZernIHYxj3Z5n4Z3xM4PYmk pFUK8brG019ioRcPrARDJBinkWGWAvA6FSuT7clKe4kQgBPony30dzpxgEsucBKA RzdE/zZ0203B18X3+ftm0OXLUowrcYQ= -----END CERTIFICATE-----Generated at Sat May 31 17:26:20 2025 by rpki-client