$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft File: RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft (raw, json) Hash identifier: rrBlMKMBsOPRZRBXkrabEuT7PKLo7Ev69CkBH/++aZo= Subject key identifier: E0:30:30:5C:43:25:69:F9:11:6E:BA:AC:F8:4C:B1:66:E8:5A:D6:BD Authority key identifier: 44:F8:D1:53:B7:7B:09:2B:11:ED:F0:0A:93:E4:BB:64:09:1C:24:47 Certificate issuer: /CN=A91F3C11/serialNumber=44F8D153B77B092B11EDF00A93E4BB64091C2447 Certificate serial: 0984 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft Manifest number: 0984 Signing time: Fri 30 May 2025 15:04:44 +0000 Manifest this update: Fri 30 May 2025 15:04:43 +0000 Manifest next update: Fri 06 Jun 2025 15:04:43 +0000 Files and hashes: 1: RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl (hash: 3IeYaYRTgaVPPksvf4uOnf2amNsOLPFmPyqlti19cqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2436 (0x984) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3C11, serialNumber=44F8D153B77B092B11EDF00A93E4BB64091C2447 Validity Not Before: May 30 15:04:43 2025 GMT Not After : Jun 6 15:04:43 2025 GMT Subject: CN=6839c90b-3741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b7:b9:b5:e8:e6:8a:08:e6:59:cf:ec:00:1b: a8:da:d8:d0:58:1a:bf:b6:13:fe:cc:ba:09:84:d0: aa:22:53:e0:9a:01:bc:04:6d:bb:cd:13:2d:f1:7b: f6:5f:b2:4a:e6:1c:5e:45:36:b0:1a:d0:be:9a:fb: 71:20:40:62:18:3b:45:f4:f6:f6:77:ac:a9:f2:55: 9a:b4:4f:5e:37:d8:da:a6:52:be:c9:91:17:5b:a4: 60:02:67:b7:c7:44:45:51:ab:fc:ef:33:f8:70:92: 0f:9e:43:4a:e4:a0:5e:95:ea:a6:28:9a:b3:65:a4: 93:a8:31:2a:cc:d9:39:5b:2c:da:73:9b:c3:b7:42: e3:2b:38:76:2b:43:01:ee:ec:7a:f0:fd:0e:aa:83: c5:63:19:04:63:53:8a:5e:54:69:f8:b5:e1:1f:38: f2:56:a6:2c:f8:db:fd:91:18:dd:04:87:e9:f1:db: 44:ec:32:56:85:a5:13:39:b8:2c:01:48:1b:75:f7: eb:7d:ad:8b:02:e8:22:ba:5e:42:b4:43:0d:d3:85: 10:02:22:de:dd:4c:0c:b7:47:61:f8:80:47:aa:b6: b2:d8:6a:5a:e6:30:41:14:8c:b9:32:7e:19:d8:e7: f8:75:bf:8c:09:61:60:0c:30:d4:21:bd:76:bb:64: f7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:30:30:5C:43:25:69:F9:11:6E:BA:AC:F8:4C:B1:66:E8:5A:D6:BD X509v3 Authority Key Identifier: keyid:44:F8:D1:53:B7:7B:09:2B:11:ED:F0:0A:93:E4:BB:64:09:1C:24:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:4d:24:c1:dc:0e:7a:47:cc:89:47:3e:ef:c8:de:00:7a:2c: 3b:12:47:16:b1:32:20:81:a5:69:8a:3f:12:1f:e7:2e:06:76: f7:2e:a2:7b:a3:0d:b1:45:69:10:ae:14:3f:3b:72:a8:96:9c: 0f:fc:ef:27:9f:08:4b:0d:3e:de:92:b4:40:52:ad:5a:d1:e1: 76:32:1f:2b:40:4e:47:e7:aa:51:87:7d:d0:67:10:4f:ba:e0: d0:c7:ff:fb:f2:7c:37:f7:97:0d:35:c6:4c:62:9e:05:40:0c: 32:ba:48:65:4e:77:37:00:61:47:38:87:9c:c0:e7:80:0e:84: 18:70:94:51:59:2a:6f:f1:c2:bb:8b:d4:d5:e1:3b:9a:df:fd: 48:ba:7c:ee:d3:cf:36:64:62:7f:b9:3e:13:33:b7:19:7c:ba: 85:d0:59:c7:b2:d3:e9:68:34:28:ec:bb:70:05:9b:f8:50:13: d2:e4:dd:0e:9e:2e:e0:0a:d1:91:a0:13:d1:44:7e:02:f3:c1: 65:95:5c:fd:d8:0c:07:7e:11:3d:03:79:eb:11:c4:46:3c:76: 51:c7:ed:eb:99:d2:2e:b6:98:e4:b2:f1:e4:83:90:88:3d:46: a1:b9:6c:e1:4c:37:07:cd:27:9e:94:70:a6:ce:b2:40:b4:3d: 2d:6d:df:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNDMTExMTAvBgNVBAUTKDQ0RjhEMTUzQjc3QjA5MkIxMUVERjAwQTkzRTRCQjY0 MDkxQzI0NDcwHhcNMjUwNTMwMTUwNDQzWhcNMjUwNjA2MTUwNDQzWjAYMRYwFAYD VQQDEw02ODM5YzkwYi0zNzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbe5tejmigjmWc/sABuo2tjQWBq/thP+zLoJhNCqIlPgmgG8BG27zRMt8Xv2 X7JK5hxeRTawGtC+mvtxIEBiGDtF9Pb2d6yp8lWatE9eN9japlK+yZEXW6RgAme3 x0RFUav87zP4cJIPnkNK5KBeleqmKJqzZaSTqDEqzNk5Wyzac5vDt0LjKzh2K0MB 7ux68P0OqoPFYxkEY1OKXlRp+LXhHzjyVqYs+Nv9kRjdBIfp8dtE7DJWhaUTObgs AUgbdffrfa2LAugiul5CtEMN04UQAiLe3UwMt0dh+IBHqray2Gpa5jBBFIy5Mn4Z 2Of4db+MCWFgDDDUIb12u2T3lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAwMFxD JWn5EW66rPhMsWboWta9MB8GA1UdIwQYMBaAFET40VO3ewkrEe3wCpPku2QJHCRH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0MxMS81MTk4RkI5NjhG N0IxMUVBOUFDQjdFN0ZDNEY5QUUwMi9SUGpSVTdkN0NTc1I3ZkFLay1TN1pBa2NK RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JQalJVN2Q3Q1NzUjdmQUtrLVM3WkFrY0pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0MxMS81MTk4RkI5NjhGN0IxMUVBOUFDQjdFN0ZDNEY5QUUwMi9SUGpSVTdkN0NT c1I3ZkFLay1TN1pBa2NKRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwTSTB3A56R8yJRz7vyN4Aeiw7EkcWsTIggaVpij8SH+cuBnb3LqJ7 ow2xRWkQrhQ/O3KolpwP/O8nnwhLDT7ekrRAUq1a0eF2Mh8rQE5H56pRh33QZxBP uuDQx//78nw395cNNcZMYp4FQAwyukhlTnc3AGFHOIecwOeADoQYcJRRWSpv8cK7 i9TV4Tua3/1Iunzu0882ZGJ/uT4TM7cZfLqF0FnHstPpaDQo7LtwBZv4UBPS5N0O ni7gCtGRoBPRRH4C88FllVz92AwHfhE9A3nrEcRGPHZRx+3rmdIutpjksvHkg5CI PUahuWzhTDcHzSeelHCmzrJAtD0tbd86 -----END CERTIFICATE-----Generated at Sat May 31 16:35:56 2025 by rpki-client