$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft File: xM4RIyFRinKEfG1X56ijVDRVNzs.mft (raw, json) Hash identifier: vKipB8H97eb1Lat4E5f6UrTyekZpKbyTfT6RKoHZfZE= Subject key identifier: 27:19:2D:00:57:25:2D:5D:2C:90:A9:3D:20:BB:DE:E9:81:45:E7:76 Authority key identifier: C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B Certificate issuer: /CN=A9116D64/serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Certificate serial: 3470 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft Manifest number: 3470 Signing time: Thu 24 Apr 2025 15:09:16 +0000 Manifest this update: Thu 24 Apr 2025 15:09:15 +0000 Manifest next update: Thu 01 May 2025 15:09:15 +0000 Files and hashes: 1: xM4RIyFRinKEfG1X56ijVDRVNzs.crl (hash: vlFjNVWzK5gRE6LYyjACKlBGyEiY/Vh0fArcNXHkOuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13424 (0x3470) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116D64, serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Validity Not Before: Apr 24 15:09:15 2025 GMT Not After : May 1 15:09:15 2025 GMT Subject: CN=680a541c-4157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:99:aa:83:62:e1:91:8c:f3:24:72:dc:15:33: a1:17:f8:bf:f7:e8:b8:62:ed:79:3a:7e:2e:0b:0e: ff:1f:d9:7f:72:a7:50:ca:9a:c7:c4:22:0f:86:46: c2:ee:f4:17:08:f8:48:55:e6:36:cf:ef:14:fd:25: 3c:e9:f4:64:90:44:27:2e:62:7d:81:60:d7:af:1e: a2:66:fc:97:3b:ad:17:c8:e2:3c:d8:0a:05:8e:a8: 75:5e:b3:99:78:6e:95:30:4c:b6:e7:92:02:d4:2b: 99:69:ed:2f:ff:f2:e6:e5:98:b5:91:df:ff:bb:08: 74:3e:b1:06:71:0f:c1:9b:dc:29:47:dd:3f:8a:e7: 62:16:02:e3:8a:78:71:13:f7:fb:74:2f:7f:71:03: 36:45:41:6b:49:50:9c:d2:6c:d5:a7:c7:8c:8d:65: c3:6d:fc:b0:bc:e4:9b:14:06:18:ce:a9:44:3c:d2: 98:f3:dd:94:68:b8:11:92:7f:1d:7f:37:94:6f:48: 82:e9:e9:01:ef:88:42:5f:e6:5a:a4:37:c2:f7:2d: 91:00:e0:5c:d0:eb:1c:be:87:ef:d1:de:c2:61:21: e0:03:96:1d:6b:7c:36:c0:c4:f2:c6:a7:96:c3:35: fd:06:5a:67:cf:25:cc:54:dd:ab:97:75:d8:3c:15: 29:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:19:2D:00:57:25:2D:5D:2C:90:A9:3D:20:BB:DE:E9:81:45:E7:76 X509v3 Authority Key Identifier: keyid:C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:86:27:3b:74:06:27:b2:b2:7f:45:7a:4a:66:5e:19:81:e7: 46:2b:88:39:26:24:cb:34:03:28:86:23:88:d5:b0:3f:6a:e5: fe:4b:1d:5a:77:a6:07:6a:7f:eb:66:02:2b:9f:d5:ce:c3:22: 47:f3:94:a4:05:77:8b:2a:f2:cb:4f:3f:4f:37:fe:c9:77:1d: a8:ee:c1:a0:a7:63:67:0f:ad:82:2c:fd:3f:01:ed:68:73:5b: fb:d0:ad:6f:33:85:78:60:f7:29:00:50:19:40:e3:10:3c:48: fc:1b:cb:28:99:29:88:bc:91:51:d8:39:79:ea:96:18:4e:75: 7b:07:14:76:71:92:ae:b0:62:99:49:43:30:1e:6f:2e:d8:b7: bd:55:86:04:7c:c8:64:91:ee:fe:95:37:8a:ce:40:96:45:98: 1f:ec:23:fb:73:57:e0:2a:2f:29:b6:64:4f:e8:80:56:4d:18: 8d:71:5c:d3:ce:8d:7f:44:98:bb:e7:fa:bf:53:00:7e:fd:84: ba:8b:68:a2:fc:61:6c:19:c1:63:a8:48:0b:b1:d6:89:24:8e: ba:19:4c:00:2c:2e:bd:57:aa:66:51:94:77:07:95:b6:08:ab: bc:e8:83:6c:49:56:df:80:a4:e5:04:d8:93:5f:3b:80:74:3f: 7f:76:d8:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZENjQxMTAvBgNVBAUTKEM0Q0UxMTIzMjE1MThBNzI4NDdDNkQ1N0U3QThBMzU0 MzQ1NTM3M0IwHhcNMjUwNDI0MTUwOTE1WhcNMjUwNTAxMTUwOTE1WjAYMRYwFAYD VQQDEw02ODBhNTQxYy00MTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJmqg2LhkYzzJHLcFTOhF/i/9+i4Yu15On4uCw7/H9l/cqdQyprHxCIPhkbC 7vQXCPhIVeY2z+8U/SU86fRkkEQnLmJ9gWDXrx6iZvyXO60XyOI82AoFjqh1XrOZ eG6VMEy255IC1CuZae0v//Lm5Zi1kd//uwh0PrEGcQ/Bm9wpR90/iudiFgLjinhx E/f7dC9/cQM2RUFrSVCc0mzVp8eMjWXDbfywvOSbFAYYzqlEPNKY892UaLgRkn8d fzeUb0iC6ekB74hCX+ZapDfC9y2RAOBc0Oscvofv0d7CYSHgA5Yda3w2wMTyxqeW wzX9BlpnzyXMVN2rl3XYPBUprwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcZLQBX JS1dLJCpPSC73umBRed2MB8GA1UdIwQYMBaAFMTOESMhUYpyhHxtV+eoo1Q0VTc7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2NC8zQUY5Q0FEODFE QTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmluS0VmRzFYNTZpalZEUlZO enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hNNFJJeUZSaW5LRWZHMVg1NmlqVkRSVk56cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkQ2NC8zQUY5Q0FEODFEQTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmlu S0VmRzFYNTZpalZEUlZOenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjhic7dAYnsrJ/RXpKZl4ZgedGK4g5JiTLNAMohiOI1bA/auX+Sx1a d6YHan/rZgIrn9XOwyJH85SkBXeLKvLLTz9PN/7Jdx2o7sGgp2NnD62CLP0/Ae1o c1v70K1vM4V4YPcpAFAZQOMQPEj8G8somSmIvJFR2Dl56pYYTnV7BxR2cZKusGKZ SUMwHm8u2Le9VYYEfMhkke7+lTeKzkCWRZgf7CP7c1fgKi8ptmRP6IBWTRiNcVzT zo1/RJi75/q/UwB+/YS6i2ii/GFsGcFjqEgLsdaJJI66GUwALC69V6pmUZR3B5W2 CKu86INsSVbfgKTlBNiTXzuAdD9/dtjX -----END CERTIFICATE-----Generated at Sat Apr 26 13:36:44 2025 by rpki-client