$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft File: I8MbHNaMzE0c6105mlAbYFD9HUY.mft (raw, json) Hash identifier: MBOy4ckPHhLrbZf4AMwAzgaIFH28WMhW+VmalXByJFE= Subject key identifier: C3:B6:31:E0:5D:EF:1C:0F:D3:9D:C5:1B:0F:AB:BB:51:DD:15:B9:10 Authority key identifier: 23:C3:1B:1C:D6:8C:CC:4D:1C:EB:5D:39:9A:50:1B:60:50:FD:1D:46 Certificate issuer: /CN=A91A0FC0/serialNumber=23C31B1CD68CCC4D1CEB5D399A501B6050FD1D46 Certificate serial: 03B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft Manifest number: 0470 Signing time: Sat 31 May 2025 00:54:57 +0000 Manifest this update: Sat 31 May 2025 00:54:56 +0000 Manifest next update: Sat 07 Jun 2025 00:54:56 +0000 Files and hashes: 1: I8MbHNaMzE0c6105mlAbYFD9HUY.crl (hash: OnriW8KMUv/tr0zogJxGza6BpKa4FODeyEyTIWYtzFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.crl rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:54:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 944 (0x3b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0FC0, serialNumber=23C31B1CD68CCC4D1CEB5D399A501B6050FD1D46 Validity Not Before: May 31 00:54:56 2025 GMT Not After : Jun 7 00:54:56 2025 GMT Subject: CN=683a5361-99aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:86:ff:d0:c2:a4:71:3b:4e:78:5d:31:5c:71: fd:7f:84:a1:a0:b8:f9:37:83:f6:1a:4f:98:1f:0d: f4:83:28:8d:99:6e:e0:07:e1:ba:87:9f:2d:a6:99: 78:79:70:b2:c6:2d:6e:ed:6d:b7:2c:8b:82:d9:e8: 44:c6:3f:36:b9:8b:17:11:68:96:ba:61:d0:19:30: 4a:7a:cd:aa:93:4e:b6:70:50:08:d6:04:56:82:9b: 4c:90:8b:0e:ec:db:64:76:32:53:5f:80:2f:b9:9c: a8:5b:2e:c3:8c:88:3a:d6:5d:cc:71:cc:19:23:fe: 1b:29:26:74:ba:8e:73:a4:aa:04:ba:93:17:a0:9f: 26:f0:fe:c2:75:e7:ee:b1:3f:0e:44:90:c9:45:82: 24:c3:5b:1a:27:2c:f2:fb:06:b9:c0:a7:60:76:79: 37:bb:25:9e:d5:a7:f0:0b:f8:79:72:2f:92:f8:91: 86:e6:ee:2a:cc:67:60:66:47:0b:41:19:e7:d3:23: 60:92:97:af:44:6e:55:0d:d6:83:d2:2e:28:82:df: 1c:59:5d:bc:ab:49:4d:94:88:6e:09:22:1f:27:40: 3d:a8:23:8e:36:3d:6b:cb:bf:c6:c2:dc:a6:6c:87: c2:04:97:af:e7:2d:d7:d9:f8:ed:5a:c2:a0:af:bb: ac:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B6:31:E0:5D:EF:1C:0F:D3:9D:C5:1B:0F:AB:BB:51:DD:15:B9:10 X509v3 Authority Key Identifier: keyid:23:C3:1B:1C:D6:8C:CC:4D:1C:EB:5D:39:9A:50:1B:60:50:FD:1D:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:5f:25:89:5b:a8:ba:c6:77:b3:2f:a6:4e:d3:27:fd:81:2d: dc:3b:10:4d:10:88:e0:d1:ab:40:b0:f3:ce:fc:67:68:95:2f: 4e:33:e7:63:32:29:44:09:35:75:4a:a3:91:d2:6f:e3:ff:96: 31:f8:55:06:6a:85:eb:5c:02:12:9f:e9:79:b9:9d:cc:2d:3b: 38:35:c8:5c:cc:d9:b7:d6:ca:ed:f8:36:59:8e:10:91:02:f5: 21:11:b1:c2:0b:05:8b:aa:4f:b7:b9:af:1e:cc:93:74:6f:88: aa:7b:de:3a:52:65:44:90:db:19:87:9d:2e:15:cc:84:19:59: 2c:08:d5:b0:93:16:2e:d8:56:fb:25:e5:9d:a8:79:6a:30:db: 26:9c:95:52:d2:a5:11:e6:81:df:0e:3a:cc:fd:92:1d:30:f5: 67:84:95:5c:1f:ca:cb:ec:c1:10:ef:9a:8b:d8:c1:65:0a:a3: 35:b3:74:72:c9:4c:48:3f:07:b2:1b:8d:f6:13:6b:45:9f:8e: 28:5f:b6:25:17:52:f3:18:8c:a5:28:98:31:1c:9f:31:a5:48: 8f:07:de:9f:db:4f:8b:b2:fa:79:96:05:1e:4a:b2:bc:9d:f3: cc:58:db:13:f9:8f:43:93:d2:04:1f:d4:e6:f5:36:ec:4d:7b: f3:d5:d9:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBGQzAxMTAvBgNVBAUTKDIzQzMxQjFDRDY4Q0NDNEQxQ0VCNUQzOTlBNTAxQjYw NTBGRDFENDYwHhcNMjUwNTMxMDA1NDU2WhcNMjUwNjA3MDA1NDU2WjAYMRYwFAYD VQQDEw02ODNhNTM2MS05OWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4b/0MKkcTtOeF0xXHH9f4ShoLj5N4P2Gk+YHw30gyiNmW7gB+G6h58tppl4 eXCyxi1u7W23LIuC2ehExj82uYsXEWiWumHQGTBKes2qk062cFAI1gRWgptMkIsO 7NtkdjJTX4AvuZyoWy7DjIg61l3MccwZI/4bKSZ0uo5zpKoEupMXoJ8m8P7Cdefu sT8ORJDJRYIkw1saJyzy+wa5wKdgdnk3uyWe1afwC/h5ci+S+JGG5u4qzGdgZkcL QRnn0yNgkpevRG5VDdaD0i4ogt8cWV28q0lNlIhuCSIfJ0A9qCOONj1ry7/Gwtym bIfCBJev5y3X2fjtWsKgr7ustwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMO2MeBd 7xwP053FGw+ru1HdFbkQMB8GA1UdIwQYMBaAFCPDGxzWjMxNHOtdOZpQG2BQ/R1G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEZDMC9DREUwOTg3Njk1 NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9JOE1iSE5hTXpFMGM2MTA1bWxBYllGRDlI VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k4TWJITmFNekUwYzYxMDVtbEFiWUZEOUhVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEZDMC9DREUwOTg3Njk1NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9JOE1iSE5hTXpF MGM2MTA1bWxBYllGRDlIVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrXyWJW6i6xnezL6ZO0yf9gS3cOxBNEIjg0atAsPPO/GdolS9OM+dj MilECTV1SqOR0m/j/5Yx+FUGaoXrXAISn+l5uZ3MLTs4NchczNm31srt+DZZjhCR AvUhEbHCCwWLqk+3ua8ezJN0b4iqe946UmVEkNsZh50uFcyEGVksCNWwkxYu2Fb7 JeWdqHlqMNsmnJVS0qUR5oHfDjrM/ZIdMPVnhJVcH8rL7MEQ75qL2MFlCqM1s3Ry yUxIPweyG432E2tFn44oX7YlF1LzGIylKJgxHJ8xpUiPB96f20+Lsvp5lgUeSrK8 nfPMWNsT+Y9Dk9IEH9Tm9TbsTXvz1dln -----END CERTIFICATE-----Generated at Sat May 31 16:49:08 2025 by rpki-client