$ rpki-client -vvf rpki.apnic.net/member_repository/A9114CE7/5B2B131C60CD11ED84F75F4CC4F9AE02/8o1tEcPFVG5CQYGKc7Rw7sptcoM.mft File: 8o1tEcPFVG5CQYGKc7Rw7sptcoM.mft (raw, json) Hash identifier: YfYGVv1MQVJfLOG3uc8fN/uYDGTeyH9Kf5+YcrZB1V0= Subject key identifier: E6:F8:7F:2D:6B:87:5C:94:2E:C8:0D:2A:64:5A:59:37:F6:B4:03:4B Authority key identifier: F2:8D:6D:11:C3:C5:54:6E:42:41:81:8A:73:B4:70:EE:CA:6D:72:83 Certificate issuer: /CN=A9114CE7/serialNumber=F28D6D11C3C5546E4241818A73B470EECA6D7283 Certificate serial: 01D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8o1tEcPFVG5CQYGKc7Rw7sptcoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114CE7/5B2B131C60CD11ED84F75F4CC4F9AE02/8o1tEcPFVG5CQYGKc7Rw7sptcoM.mft Manifest number: 01CD Signing time: Fri 25 Apr 2025 02:02:50 +0000 Manifest this update: Fri 25 Apr 2025 02:02:49 +0000 Manifest next update: Fri 02 May 2025 02:02:49 +0000 Files and hashes: 1: 8o1tEcPFVG5CQYGKc7Rw7sptcoM.crl (hash: C7D11hmwyPCYw44TksFSVXRvDJV9lBkwS+m9lGoRpxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114CE7/5B2B131C60CD11ED84F75F4CC4F9AE02/8o1tEcPFVG5CQYGKc7Rw7sptcoM.crl rsync://rpki.apnic.net/member_repository/A9114CE7/5B2B131C60CD11ED84F75F4CC4F9AE02/8o1tEcPFVG5CQYGKc7Rw7sptcoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8o1tEcPFVG5CQYGKc7Rw7sptcoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 465 (0x1d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114CE7, serialNumber=F28D6D11C3C5546E4241818A73B470EECA6D7283 Validity Not Before: Apr 25 02:02:49 2025 GMT Not After : May 2 02:02:49 2025 GMT Subject: CN=680aed49-2fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:62:60:a4:85:ac:d3:bc:24:f9:0d:ab:cb:0f: 69:be:66:fb:f0:1b:c4:ee:78:a9:c1:8b:dc:9d:e9: 48:2b:91:e3:6f:49:15:f9:ae:ea:06:a7:4b:96:7e: 94:f2:d3:6e:0c:e4:81:97:99:e8:3c:95:58:ea:8e: 70:cd:91:69:93:cd:08:8f:e1:96:f4:b2:de:2b:27: 31:21:2d:02:e4:5d:43:e6:f4:70:0c:51:55:cc:15: 9a:45:91:31:25:84:0a:d4:42:86:ab:2e:d7:b3:59: 56:78:03:4e:fb:d6:94:33:6a:1f:85:1a:ba:c7:06: 60:f0:bd:8c:68:7a:ff:a5:a2:ad:28:62:63:a2:f8: 44:20:4a:61:9f:71:5d:5c:bc:e7:ef:ae:42:99:f5: 99:39:14:63:f8:38:7b:9e:3a:e7:a7:13:8a:63:f8: 9a:32:bd:bb:02:e5:86:0a:4a:3f:17:ce:27:e1:9f: f5:84:5f:94:e0:39:54:d5:82:ae:29:1b:d2:7b:f7: 21:8e:a5:b2:e0:8a:d1:5d:da:fa:88:a3:28:46:fc: e6:54:2d:14:06:d0:7e:70:7d:ca:74:72:5d:fd:c5: eb:24:3e:93:71:40:46:fc:03:97:a7:ea:07:3c:ce: f2:05:97:c2:07:35:01:d4:bb:d3:f6:62:01:86:53: 08:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F8:7F:2D:6B:87:5C:94:2E:C8:0D:2A:64:5A:59:37:F6:B4:03:4B X509v3 Authority Key Identifier: keyid:F2:8D:6D:11:C3:C5:54:6E:42:41:81:8A:73:B4:70:EE:CA:6D:72:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114CE7/5B2B131C60CD11ED84F75F4CC4F9AE02/8o1tEcPFVG5CQYGKc7Rw7sptcoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8o1tEcPFVG5CQYGKc7Rw7sptcoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114CE7/5B2B131C60CD11ED84F75F4CC4F9AE02/8o1tEcPFVG5CQYGKc7Rw7sptcoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:59:6b:11:4d:90:21:99:cd:4d:e1:36:21:6b:0f:cb:cd:3d: 3d:1e:c9:a9:02:57:b3:bf:ea:58:a8:9d:82:fe:4e:ab:28:57: 0c:05:17:41:80:57:f3:0b:da:64:b1:60:5f:f7:62:ae:09:bd: 76:89:43:69:8f:50:66:2e:b9:36:e1:17:27:bc:5d:20:67:33: 40:ad:46:d8:ab:84:21:c8:84:2c:70:42:48:12:4d:ea:57:a5: 9a:4d:15:ab:75:c0:91:cc:f5:52:a1:db:f1:e5:2d:96:02:99: 23:ae:56:3a:e1:01:72:56:d2:69:93:02:18:f1:5d:d3:69:b2: 00:5f:63:d6:86:30:8c:28:36:a0:59:e8:a8:bb:24:81:9a:f6: 01:a3:81:80:3a:91:d7:fa:cb:c3:b6:d4:f3:e9:ec:7b:b1:d3: ad:34:c7:a1:6b:5d:f9:2d:a8:61:d8:97:97:06:d0:4e:14:bc: 97:e7:14:cb:c0:47:7a:f0:f3:22:5e:5c:25:2c:53:3d:04:54: 27:21:0c:30:d5:21:bd:65:f0:0d:25:73:d9:f2:7b:52:97:83: d7:cb:69:57:a4:d6:82:24:b1:10:2e:f9:e4:ff:1d:d9:f2:59: 35:4d:e8:4e:4f:3a:b9:12:61:9b:22:cf:33:5f:12:3f:bb:88: 58:63:13:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRDRTcxMTAvBgNVBAUTKEYyOEQ2RDExQzNDNTU0NkU0MjQxODE4QTczQjQ3MEVF Q0E2RDcyODMwHhcNMjUwNDI1MDIwMjQ5WhcNMjUwNTAyMDIwMjQ5WjAYMRYwFAYD VQQDEw02ODBhZWQ0OS0yZmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2GJgpIWs07wk+Q2ryw9pvmb78BvE7nipwYvcnelIK5Hjb0kV+a7qBqdLln6U 8tNuDOSBl5noPJVY6o5wzZFpk80Ij+GW9LLeKycxIS0C5F1D5vRwDFFVzBWaRZEx JYQK1EKGqy7Xs1lWeANO+9aUM2ofhRq6xwZg8L2MaHr/paKtKGJjovhEIEphn3Fd XLzn765CmfWZORRj+Dh7njrnpxOKY/iaMr27AuWGCko/F84n4Z/1hF+U4DlU1YKu KRvSe/chjqWy4IrRXdr6iKMoRvzmVC0UBtB+cH3KdHJd/cXrJD6TcUBG/AOXp+oH PM7yBZfCBzUB1LvT9mIBhlMIOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOb4fy1r h1yULsgNKmRaWTf2tANLMB8GA1UdIwQYMBaAFPKNbRHDxVRuQkGBinO0cO7KbXKD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNENFNy81QjJCMTMxQzYw Q0QxMUVEODRGNzVGNENDNEY5QUUwMi84bzF0RWNQRlZHNUNRWUdLYzdSdzdzcHRj b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhvMXRFY1BGVkc1Q1FZR0tjN1J3N3NwdGNvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NENFNy81QjJCMTMxQzYwQ0QxMUVEODRGNzVGNENDNEY5QUUwMi84bzF0RWNQRlZH NUNRWUdLYzdSdzdzcHRjb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApWWsRTZAhmc1N4TYhaw/LzT09HsmpAlezv+pYqJ2C/k6rKFcMBRdB gFfzC9pksWBf92KuCb12iUNpj1BmLrk24RcnvF0gZzNArUbYq4QhyIQscEJIEk3q V6WaTRWrdcCRzPVSodvx5S2WApkjrlY64QFyVtJpkwIY8V3TabIAX2PWhjCMKDag WeiouySBmvYBo4GAOpHX+svDttTz6ex7sdOtNMeha135Lahh2JeXBtBOFLyX5xTL wEd68PMiXlwlLFM9BFQnIQww1SG9ZfANJXPZ8ntSl4PXy2lXpNaCJLEQLvnk/x3Z 8lk1TehOTzq5EmGbIs8zXxI/u4hYYxOQ -----END CERTIFICATE-----Generated at Sat Apr 26 12:33:48 2025 by rpki-client