$ rpki-client -vvf rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft File: h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft (raw, json) Hash identifier: NPEkTRb7STincdoX8S6OWqsYp+j0lc5+CtapH33xens= Subject key identifier: F7:CD:FA:1F:25:96:29:3E:EA:40:83:8B:D5:54:47:60:C7:E8:B2:D8 Authority key identifier: 87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03 Certificate issuer: /CN=A911A4F7/serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003 Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft Manifest number: 67 Signing time: Fri 25 Apr 2025 05:56:18 +0000 Manifest this update: Fri 25 Apr 2025 05:56:18 +0000 Manifest next update: Fri 02 May 2025 05:56:18 +0000 Files and hashes: 1: h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl (hash: +KTQE2fMjcxKk9S6FWkpp1v8kyMxBjRIDPHAMbBpCyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A4F7, serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003 Validity Not Before: Apr 25 05:56:18 2025 GMT Not After : May 2 05:56:18 2025 GMT Subject: CN=680b2402-2eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:12:f2:a2:b7:fa:e9:a1:dc:04:1a:a4:e6:b0: d2:78:64:ff:95:bb:96:a0:10:b9:c6:ca:2b:a1:d0: f5:f2:c7:8d:e4:7c:05:15:4b:95:43:6b:92:ae:6d: 01:48:a1:ee:93:0f:40:8d:55:18:af:d8:02:36:02: e4:fd:1d:e9:79:0f:48:2f:81:12:3a:b2:9b:30:ed: 53:d9:8f:e6:18:26:a5:79:c8:e9:13:65:af:68:fd: 48:1d:a6:6d:46:8f:98:92:21:6d:99:57:7a:85:ec: 47:9a:25:14:d8:7f:2c:bf:80:86:07:c5:2c:d2:17: c7:f4:f5:aa:65:39:0f:60:95:9c:34:28:e0:b2:3c: a8:82:1d:1a:9c:15:78:cd:7b:4f:5e:32:d9:9e:27: 7c:08:ab:ea:e7:c3:ac:81:88:d5:68:f0:46:43:08: 0f:e9:10:f3:d2:cf:c2:60:ab:57:71:24:ce:1f:36: ec:a4:d2:f9:99:2c:7c:d3:97:d2:5e:d5:d1:85:89: 25:3d:66:b9:4a:ef:5b:be:e2:58:ce:b1:9a:bf:26: 18:c2:2a:d6:71:d8:f8:c6:b3:da:e0:bf:67:e1:55: d3:72:7e:3b:4c:fd:de:64:34:2a:a6:8a:fa:f3:2c: 54:c3:e0:2d:8d:fa:6a:db:73:f7:65:0e:b3:fb:be: 17:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CD:FA:1F:25:96:29:3E:EA:40:83:8B:D5:54:47:60:C7:E8:B2:D8 X509v3 Authority Key Identifier: keyid:87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:f3:61:9f:fb:69:7d:98:09:1a:da:2d:f5:cf:cc:23:50:17: 3c:c9:b0:fc:69:a8:84:76:42:72:78:be:8d:ab:ab:4e:0b:a2: b2:16:60:2c:95:a5:15:3c:00:72:2c:09:91:15:94:73:7a:b2: 31:b4:2f:b7:ab:b3:8b:e1:a7:c5:13:eb:85:95:99:fc:96:9a: f6:9a:ad:58:ab:b8:e1:21:11:f6:2e:9e:c1:21:b0:27:35:67: 60:c1:f8:1d:04:38:dd:84:ce:0b:85:51:fc:e4:09:de:d0:77: 3f:b2:5e:22:ff:d7:2b:3f:de:41:47:61:16:7e:c4:09:d5:c8: f9:c1:be:e1:cd:61:91:a7:2a:bb:18:ee:a6:74:e1:7b:20:a1: 4a:b5:db:50:1e:e5:65:35:54:d3:89:79:f9:75:ad:3e:89:98: b9:9c:3c:1f:67:3a:0e:22:3a:49:52:36:9d:c7:33:32:57:78: 01:30:22:50:aa:8c:d7:b3:ec:8e:ab:13:51:c9:c1:af:30:02: f2:70:03:06:9d:95:24:cf:7a:b7:9b:a2:78:06:e3:93:91:21: b7:99:6d:5c:75:7d:4e:02:69:6b:5e:27:ac:d5:5b:79:1a:a9: 73:5e:ed:f2:88:08:d0:ec:44:e4:b4:d0:b6:c2:99:26:82:98: c2:be:c9:4f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTRGNzExMC8GA1UEBRMoODc5MkRFMzk5Q0Y2MzE5M0REQzI5RDMwRkJGMEE1ODFF MDI0RjAwMzAeFw0yNTA0MjUwNTU2MThaFw0yNTA1MDIwNTU2MThaMBgxFjAUBgNV BAMTDTY4MGIyNDAyLTJlZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbEvKit/rpodwEGqTmsNJ4ZP+Vu5agELnGyiuh0PXyx43kfAUVS5VDa5KubQFI oe6TD0CNVRiv2AI2AuT9Hel5D0gvgRI6spsw7VPZj+YYJqV5yOkTZa9o/Ugdpm1G j5iSIW2ZV3qF7EeaJRTYfyy/gIYHxSzSF8f09aplOQ9glZw0KOCyPKiCHRqcFXjN e09eMtmeJ3wIq+rnw6yBiNVo8EZDCA/pEPPSz8Jgq1dxJM4fNuyk0vmZLHzTl9Je 1dGFiSU9ZrlK71u+4ljOsZq/JhjCKtZx2PjGs9rgv2fhVdNyfjtM/d5kNCqmivrz LFTD4C2N+mrbc/dlDrP7vhc7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9836HyWW KT7qQIOL1VRHYMfostgwHwYDVR0jBBgwFoAUh5LeOZz2MZPdwp0w+/ClgeAk8AMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBNEY3L0EzREQ2QjlBODVG QzExRUZCQzIxMEY1RUM0RjlBRTAyL2g1TGVPWnoyTVpQZHdwMHctX0NsZ2VBazhB TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaDVMZU9aejJNWlBkd3Awdy1fQ2xnZUFrOEFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB NEY3L0EzREQ2QjlBODVGQzExRUZCQzIxMEY1RUM0RjlBRTAyL2g1TGVPWnoyTVpQ ZHdwMHctX0NsZ2VBazhBTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACfzYZ/7aX2YCRraLfXPzCNQFzzJsPxpqIR2QnJ4vo2rq04LorIWYCyV pRU8AHIsCZEVlHN6sjG0L7ers4vhp8UT64WVmfyWmvaarViruOEhEfYunsEhsCc1 Z2DB+B0EON2EzguFUfzkCd7Qdz+yXiL/1ys/3kFHYRZ+xAnVyPnBvuHNYZGnKrsY 7qZ04XsgoUq121Ae5WU1VNOJefl1rT6JmLmcPB9nOg4iOklSNp3HMzJXeAEwIlCq jNez7I6rE1HJwa8wAvJwAwadlSTPerebongG45ORIbeZbVx1fU4CaWteJ6zVW3ka qXNe7fKICNDsROS00LbCmSaCmMK+yU8= -----END CERTIFICATE-----Generated at Sat Apr 26 15:19:46 2025 by rpki-client