$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft File: fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft (raw, json) Hash identifier: 6seslEfG7DElTM4VAx0G7D0Grrx+2Vv1jzbS+CJVmsg= Subject key identifier: 47:91:44:80:A2:97:7B:37:BE:83:09:1C:56:8E:A6:29:F2:5C:BC:91 Authority key identifier: 7D:83:09:C5:F2:2E:F3:8C:9F:52:C9:CB:7E:3A:FF:58:48:EF:BE:04 Certificate issuer: /CN=A911ABF4/serialNumber=7D8309C5F22EF38C9F52C9CB7E3AFF5848EFBE04 Certificate serial: 0F25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fYMJxfIu84yfUsnLfjr_WEjvvgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft Manifest number: 1792 Signing time: Thu 24 Apr 2025 17:36:59 +0000 Manifest this update: Thu 24 Apr 2025 17:36:59 +0000 Manifest next update: Thu 01 May 2025 17:36:59 +0000 Files and hashes: 1: fYMJxfIu84yfUsnLfjr_WEjvvgQ.crl (hash: oS7EMgnxDz8VDE1yupl+aj9aDKR6RX3JzXvaAoMEq50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.crl rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fYMJxfIu84yfUsnLfjr_WEjvvgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:36:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3877 (0xf25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABF4, serialNumber=7D8309C5F22EF38C9F52C9CB7E3AFF5848EFBE04 Validity Not Before: Apr 24 17:36:59 2025 GMT Not After : May 1 17:36:59 2025 GMT Subject: CN=680a76bb-f9b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a6:77:8b:f3:2b:22:9f:d1:12:38:2f:1f:06: 15:ab:78:a1:57:c3:67:de:5f:7c:d1:21:1c:ad:e0: 97:e3:b4:fb:b3:9c:7c:a2:e4:bd:6b:dc:7d:f7:c5: b8:71:cf:d0:81:6d:27:64:94:a5:01:9b:68:ca:28: f5:19:cb:d9:94:01:2f:03:07:f6:26:03:fa:7f:6e: 44:5b:29:a8:6d:9d:f0:95:4b:4f:61:9f:ba:8b:d4: 7a:06:79:d4:2b:c9:19:ef:57:d8:55:a5:66:bb:c7: 4b:f9:c0:3a:8b:a6:9f:70:9c:83:6e:65:99:40:af: 4e:f5:ac:dd:ba:43:56:ae:2e:18:4d:c2:8e:60:b0: 3d:c1:e7:84:93:8f:a9:bc:e5:81:52:8b:00:c1:fa: 60:a2:d9:29:48:0a:2b:b4:96:3d:3e:a8:98:d9:a7: ca:cf:0c:0a:92:9f:0b:55:27:6e:f4:8e:53:8d:d4: 16:af:1c:2a:fb:9c:96:11:2d:4e:f4:6b:bc:fc:ea: 8b:d0:a4:29:40:ee:5a:f7:8a:33:74:cc:25:57:03: 14:eb:dd:90:03:f1:49:63:28:e5:15:21:08:0e:c8: 91:e0:21:d7:29:a7:09:41:98:8e:df:7b:e7:68:47: af:11:e4:c5:ee:b4:21:ea:c2:76:07:87:09:e1:0f: 36:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:91:44:80:A2:97:7B:37:BE:83:09:1C:56:8E:A6:29:F2:5C:BC:91 X509v3 Authority Key Identifier: keyid:7D:83:09:C5:F2:2E:F3:8C:9F:52:C9:CB:7E:3A:FF:58:48:EF:BE:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fYMJxfIu84yfUsnLfjr_WEjvvgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:e5:18:da:21:25:ea:22:5a:83:f1:1c:3c:1e:ce:6e:9c:e4: b9:b1:a8:d2:cc:7e:e2:0b:de:b7:3b:b9:f5:8d:79:fb:5f:55: 2e:42:fd:38:5c:75:1f:06:cd:b7:14:7c:db:cf:8e:ab:1e:f6: f3:14:d7:f0:d2:ea:69:de:5e:a8:f8:d4:8b:8f:a3:f8:57:63: b2:f0:3a:5a:4c:3d:56:2f:47:c4:6d:de:5a:c3:01:fe:3f:c8: ec:e2:08:a6:48:6c:60:a4:62:00:68:39:5f:7f:52:0b:d9:2b: 57:36:d6:d1:57:4a:a2:17:98:e0:d2:50:fd:83:5c:1d:10:db: e3:e2:1f:1f:d4:7f:20:cc:fb:aa:29:2d:8b:f3:72:f9:fc:38: 70:75:9e:22:58:e4:f2:21:ae:8e:59:45:b6:31:bb:f4:5d:6d: 87:8f:4f:6e:be:60:7c:47:bd:65:b0:79:62:6d:ba:46:19:60: 35:31:3f:a6:9d:af:dd:4c:ca:b6:fc:b8:97:01:f0:2a:b1:b7: da:f5:a2:e1:70:ee:61:3c:6c:74:6d:cf:2a:f0:7e:79:81:0b: 09:d4:11:9f:dd:32:d7:45:c3:f5:db:1f:69:a9:ef:ea:0d:ba: 30:e2:60:22:26:fc:9d:98:31:b3:ef:e3:27:3b:14:72:55:9c: d8:d3:c6:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCRjQxMTAvBgNVBAUTKDdEODMwOUM1RjIyRUYzOEM5RjUyQzlDQjdFM0FGRjU4 NDhFRkJFMDQwHhcNMjUwNDI0MTczNjU5WhcNMjUwNTAxMTczNjU5WjAYMRYwFAYD VQQDEw02ODBhNzZiYi1mOWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6Z3i/MrIp/REjgvHwYVq3ihV8Nn3l980SEcreCX47T7s5x8ouS9a9x998W4 cc/QgW0nZJSlAZtoyij1GcvZlAEvAwf2JgP6f25EWymobZ3wlUtPYZ+6i9R6BnnU K8kZ71fYVaVmu8dL+cA6i6afcJyDbmWZQK9O9azdukNWri4YTcKOYLA9weeEk4+p vOWBUosAwfpgotkpSAortJY9PqiY2afKzwwKkp8LVSdu9I5TjdQWrxwq+5yWES1O 9Gu8/OqL0KQpQO5a94ozdMwlVwMU692QA/FJYyjlFSEIDsiR4CHXKacJQZiO33vn aEevEeTF7rQh6sJ2B4cJ4Q82oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEeRRICi l3s3voMJHFaOpinyXLyRMB8GA1UdIwQYMBaAFH2DCcXyLvOMn1LJy346/1hI774E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJGNC9FQTg3MTg1Qzcy MUIxMUU5QkI3NDgxNTBDNEY5QUUwMi9mWU1KeGZJdTg0eWZVc25MZmpyX1dFanZ2 Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZZTUp4Zkl1ODR5ZlVzbkxmanJfV0VqdnZnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUJGNC9FQTg3MTg1QzcyMUIxMUU5QkI3NDgxNTBDNEY5QUUwMi9mWU1KeGZJdTg0 eWZVc25MZmpyX1dFanZ2Z1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+5RjaISXqIlqD8Rw8Hs5unOS5sajSzH7iC963O7n1jXn7X1UuQv04 XHUfBs23FHzbz46rHvbzFNfw0upp3l6o+NSLj6P4V2Oy8DpaTD1WL0fEbd5awwH+ P8js4gimSGxgpGIAaDlff1IL2StXNtbRV0qiF5jg0lD9g1wdENvj4h8f1H8gzPuq KS2L83L5/DhwdZ4iWOTyIa6OWUW2Mbv0XW2Hj09uvmB8R71lsHlibbpGGWA1MT+m na/dTMq2/LiXAfAqsbfa9aLhcO5hPGx0bc8q8H55gQsJ1BGf3TLXRcP12x9pqe/q Dbow4mAiJvydmDGz7+MnOxRyVZzY08bn -----END CERTIFICATE-----Generated at Sat Apr 26 08:18:54 2025 by rpki-client