$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft File: e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft (raw, json) Hash identifier: P4asloip5jPGOQbPmIlg4AZ+94m0RuTULzhdF2phvMU= Subject key identifier: C8:9E:A5:3E:61:1C:97:23:77:B0:09:9B:F1:20:B6:48:8C:64:FB:82 Authority key identifier: 7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D Certificate issuer: /CN=A9187BAC/serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft Manifest number: 53 Signing time: Sun 01 Jun 2025 07:04:23 +0000 Manifest this update: Sun 01 Jun 2025 07:04:23 +0000 Manifest next update: Sun 08 Jun 2025 07:04:22 +0000 Files and hashes: 1: e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl (hash: Hw8gj92YqldeOodq52XUGO8hXuvq5pwuIJ/uUM7dQMQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:04:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187BAC, serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D Validity Not Before: Jun 1 07:04:23 2025 GMT Not After : Jun 8 07:04:22 2025 GMT Subject: CN=683bfb77-21f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a5:dd:7a:7e:53:21:62:5a:77:bd:42:f2:5c: 15:81:9d:ee:6e:b0:4d:73:43:09:3f:1a:f5:f9:49: d7:1f:aa:af:87:4a:45:ee:3e:6a:db:3a:4c:28:bc: 7a:23:05:9d:1e:6a:af:b5:51:5b:81:aa:b3:f9:34: e7:c0:b3:b1:42:4b:41:0d:67:f9:00:43:d9:54:c5: e9:f1:38:11:ce:9a:a5:d2:40:c9:74:82:04:e4:69: 61:52:0b:36:bc:81:00:0b:f5:7f:07:c0:ad:25:2a: 8d:1f:87:be:5f:60:bd:0c:8b:af:36:8b:47:b2:69: 9e:7d:4b:23:0c:73:a6:7a:f2:84:a4:6d:52:2b:53: 01:f0:aa:17:53:c6:f3:d1:ff:f1:d2:cf:10:50:f7: a1:69:f9:d7:7c:c0:6e:61:d8:98:85:14:93:fc:49: 19:d2:01:45:43:b5:36:73:da:a6:11:85:fc:b3:38: 89:14:df:4f:16:c6:e2:0d:b4:cc:da:a9:4a:ac:ef: 3a:b2:b9:3d:54:0a:a4:d8:0a:06:58:05:80:7c:a3: 94:f3:4f:e2:91:09:f0:5e:8e:3d:58:f3:ee:1e:6e: e1:52:ed:d2:f7:0b:a4:ec:9e:b0:4b:c7:f9:0a:3f: 52:e6:5f:ec:62:9c:4f:a8:a9:ec:b2:7e:f7:de:1f: 38:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:9E:A5:3E:61:1C:97:23:77:B0:09:9B:F1:20:B6:48:8C:64:FB:82 X509v3 Authority Key Identifier: keyid:7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:24:56:50:07:8c:8e:aa:4f:1a:86:3c:9b:b1:d0:85:4c:42: e8:bf:9f:6c:d7:80:1c:20:6d:a8:d1:da:e2:8e:14:55:f9:79: d3:5c:24:22:c3:ab:fa:a2:e7:49:30:90:92:a5:81:76:ec:ad: 95:7f:30:05:1d:f9:f1:ee:fd:78:81:1f:cb:0e:9d:db:88:0e: 28:d9:d6:be:82:2d:e3:c1:ed:2b:c4:08:fe:f3:6b:7e:ea:ff: 02:aa:19:da:92:3a:5e:5e:ac:43:78:d8:56:0a:5f:70:53:5e: 76:b7:9a:1d:68:f3:bf:69:a0:eb:f1:43:a0:6b:fe:77:7e:bf: 73:40:d2:41:20:58:e9:90:d8:02:ea:30:24:7c:95:b2:ea:5d: 34:19:01:b9:6d:e9:cc:ea:32:bf:8e:11:33:5e:02:c9:d1:68: 01:2a:73:b9:45:79:33:42:78:ca:28:53:0b:0d:eb:f1:ee:24: 4c:78:0d:8e:3d:dc:36:be:1f:fa:5a:67:2f:86:8f:63:1b:1b: 71:21:c0:45:89:d2:f3:cf:b4:56:9e:4e:df:5c:34:38:c1:39: af:91:c2:3a:ea:f7:be:f1:5f:b0:76:7a:c8:b0:c9:42:d0:b0: 12:77:bf:54:c8:ec:3a:b2:28:62:bb:b1:b8:1e:98:d7:4e:40: c1:ff:7c:c5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 N0JBQzExMC8GA1UEBRMoN0I2MjYyMEJGRUIzOENFQjY0RDIxMEM5ODA1REMyNDgw NDE1NzA3RDAeFw0yNTA2MDEwNzA0MjNaFw0yNTA2MDgwNzA0MjJaMBgxFjAUBgNV BAMTDTY4M2JmYjc3LTIxZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPpd16flMhYlp3vULyXBWBne5usE1zQwk/GvX5Sdcfqq+HSkXuPmrbOkwovHoj BZ0eaq+1UVuBqrP5NOfAs7FCS0ENZ/kAQ9lUxenxOBHOmqXSQMl0ggTkaWFSCza8 gQAL9X8HwK0lKo0fh75fYL0Mi682i0eyaZ59SyMMc6Z68oSkbVIrUwHwqhdTxvPR //HSzxBQ96Fp+dd8wG5h2JiFFJP8SRnSAUVDtTZz2qYRhfyzOIkU308WxuINtMza qUqs7zqyuT1UCqTYCgZYBYB8o5TzT+KRCfBejj1Y8+4ebuFS7dL3C6TsnrBLx/kK P1LmX+xinE+oqeyyfvfeHzjbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyJ6lPmEc lyN3sAmb8SC2SIxk+4IwHwYDVR0jBBgwFoAUe2JiC/6zjOtk0hDJgF3CSAQVcH0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3QkFDL0JFMzE4RkIwRDAy QzExRUZCNTU4NDkxNUM0RjlBRTAyL2UySmlDXzZ6ak90azBoREpnRjNDU0FRVmNI MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZTJKaUNfNnpqT3RrMGhESmdGM0NTQVFWY0gwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 QkFDL0JFMzE4RkIwRDAyQzExRUZCNTU4NDkxNUM0RjlBRTAyL2UySmlDXzZ6ak90 azBoREpnRjNDU0FRVmNIMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE0kVlAHjI6qTxqGPJux0IVMQui/n2zXgBwgbajR2uKOFFX5edNcJCLD q/qi50kwkJKlgXbsrZV/MAUd+fHu/XiBH8sOnduIDijZ1r6CLePB7SvECP7za37q /wKqGdqSOl5erEN42FYKX3BTXna3mh1o879poOvxQ6Br/nd+v3NA0kEgWOmQ2ALq MCR8lbLqXTQZAblt6czqMr+OETNeAsnRaAEqc7lFeTNCeMooUwsN6/HuJEx4DY49 3Da+H/paZy+Gj2MbG3EhwEWJ0vPPtFaeTt9cNDjBOa+Rwjrq977xX7B2esiwyULQ sBJ3v1TI7DqyKGK7sbgemNdOQMH/fMU= -----END CERTIFICATE-----Generated at Mon Jun 2 18:51:35 2025 by rpki-client