$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft File: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft (raw, json) Hash identifier: 3GScC8OjWk46cRsBD9keqFbAkIxNMPdkOYbGKwlIi/A= Subject key identifier: 1F:ED:25:59:45:34:DD:77:CF:ED:C1:42:0B:3E:C3:AA:33:E7:F2:35 Authority key identifier: A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D Certificate issuer: /CN=A91D1E4C/serialNumber=A59D836E1C31623CC586448AA752B746853B841D Certificate serial: 0814 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft Manifest number: 0AF6 Signing time: Sat 31 May 2025 20:54:44 +0000 Manifest this update: Sat 31 May 2025 20:54:43 +0000 Manifest next update: Sat 07 Jun 2025 20:54:43 +0000 Files and hashes: 1: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl (hash: D+OLLQ7ffxn3ht9jUU/7yC7dfDkS+dXRTHzIK/k+p2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:54:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2068 (0x814) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C, serialNumber=A59D836E1C31623CC586448AA752B746853B841D Validity Not Before: May 31 20:54:43 2025 GMT Not After : Jun 7 20:54:43 2025 GMT Subject: CN=683b6c93-25b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:eb:45:b8:5f:a8:c8:c7:57:b9:cd:a2:9f:b9: ec:e8:8f:da:c1:eb:95:20:53:7f:ae:a6:19:78:cc: f2:a9:ae:cc:e1:d7:bb:3d:43:4b:28:a2:6c:35:fb: d2:a2:9f:bc:a2:55:c4:8c:6e:0c:aa:40:2b:ec:06: 43:55:56:96:d4:60:05:da:2b:ff:cf:ea:94:41:39: a4:87:b7:b4:f1:df:a6:3d:b5:8e:a8:7e:7d:55:d7: 1a:a9:9f:f8:98:5a:4c:aa:f3:38:ce:9b:53:6d:4f: 97:79:c6:01:f6:17:60:a3:64:0d:6a:c5:13:74:43: 22:b6:4a:2f:11:79:5a:7b:7f:a6:18:45:7f:d7:32: fd:d9:2c:fa:10:6b:98:f1:ad:1f:50:86:ff:a4:f0: ff:d9:23:b7:97:28:f5:a1:01:b1:2a:48:3a:79:95: 8b:95:27:28:93:7c:87:43:24:69:8f:77:25:fc:a1: 16:23:9a:56:6f:e2:e3:94:59:32:6b:9e:b4:f5:4d: bf:a9:11:59:ec:85:eb:f7:19:02:36:45:6a:4c:a1: 83:77:bb:0d:f8:53:63:d1:f3:fb:ae:ce:aa:d5:80: dd:b7:c1:c1:7d:3b:6c:ae:b5:27:76:de:f7:ff:1e: fe:ec:51:03:03:e1:9b:e9:6e:7c:fc:4f:2d:bd:57: a0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:ED:25:59:45:34:DD:77:CF:ED:C1:42:0B:3E:C3:AA:33:E7:F2:35 X509v3 Authority Key Identifier: keyid:A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:32:11:41:b9:82:d5:e8:26:66:64:c9:b2:1f:d9:30:68:8a: bd:87:54:04:d1:f4:51:c5:c2:55:2e:b1:cc:dc:d2:89:31:19: 30:b1:32:df:bd:a1:c7:7a:ec:16:04:1f:e3:ac:b7:3c:75:29: ba:90:fd:50:66:5b:0e:7d:c4:09:aa:b2:e1:99:a0:df:d4:ea: 57:e2:9f:45:61:28:5c:4d:af:3d:2d:63:86:f9:1b:98:7d:be: 08:64:8c:3f:e1:0e:0f:d0:08:2b:30:ee:2d:4b:8c:b5:cd:20: db:da:b7:a1:bc:85:3b:42:c1:3d:c0:24:3f:17:61:5c:53:3f: f0:88:94:1c:c9:3e:4d:8b:5c:49:51:ea:56:8e:b6:5e:7d:29: c7:32:9a:23:1a:32:78:f1:35:19:78:93:82:5e:4e:18:99:d1: ac:f9:5b:da:bd:7a:41:f4:c3:9d:97:60:ff:d2:3e:c7:f4:8d: 55:34:cf:55:39:97:88:07:21:b0:d9:c0:32:b1:b6:e2:da:51: 7e:fd:2f:a3:a0:6a:d0:9c:9e:d3:3e:5b:69:ab:44:24:34:46: 01:7b:64:80:1e:0c:d1:51:50:be:9a:b8:8d:69:fe:4b:97:95: 80:da:0c:0a:76:f9:d7:17:9e:b3:2d:1a:10:e7:5e:b0:e4:a7: 73:6a:e6:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEE1OUQ4MzZFMUMzMTYyM0NDNTg2NDQ4QUE3NTJCNzQ2 ODUzQjg0MUQwHhcNMjUwNTMxMjA1NDQzWhcNMjUwNjA3MjA1NDQzWjAYMRYwFAYD VQQDEw02ODNiNmM5My0yNWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuutFuF+oyMdXuc2in7ns6I/aweuVIFN/rqYZeMzyqa7M4de7PUNLKKJsNfvS op+8olXEjG4MqkAr7AZDVVaW1GAF2iv/z+qUQTmkh7e08d+mPbWOqH59VdcaqZ/4 mFpMqvM4zptTbU+XecYB9hdgo2QNasUTdEMitkovEXlae3+mGEV/1zL92Sz6EGuY 8a0fUIb/pPD/2SO3lyj1oQGxKkg6eZWLlScok3yHQyRpj3cl/KEWI5pWb+LjlFky a5609U2/qRFZ7IXr9xkCNkVqTKGDd7sN+FNj0fP7rs6q1YDdt8HBfTtsrrUndt73 /x7+7FEDA+Gb6W58/E8tvVegIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/tJVlF NN13z+3BQgs+w6oz5/I1MB8GA1UdIwQYMBaAFKWdg24cMWI8xYZEiqdSt0aFO4Qd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9wWjJEYmh3eFlqekZoa1NLcDFLM1JvVTdo QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BaMkRiaHd4WWp6RmhrU0twMUszUm9VN2hCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9wWjJEYmh3eFlq ekZoa1NLcDFLM1JvVTdoQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaMhFBuYLV6CZmZMmyH9kwaIq9h1QE0fRRxcJVLrHM3NKJMRkwsTLf vaHHeuwWBB/jrLc8dSm6kP1QZlsOfcQJqrLhmaDf1OpX4p9FYShcTa89LWOG+RuY fb4IZIw/4Q4P0AgrMO4tS4y1zSDb2rehvIU7QsE9wCQ/F2FcUz/wiJQcyT5Ni1xJ UepWjrZefSnHMpojGjJ48TUZeJOCXk4YmdGs+VvavXpB9MOdl2D/0j7H9I1VNM9V OZeIByGw2cAysbbi2lF+/S+joGrQnJ7TPltpq0QkNEYBe2SAHgzRUVC+mriNaf5L l5WA2gwKdvnXF56zLRoQ516w5KdzauZL -----END CERTIFICATE-----Generated at Mon Jun 2 05:30:17 2025 by rpki-client