$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft File: u-IzVg79QJs4zbgKAFdaN7qJZDU.mft (raw, json) Hash identifier: HvZU4X1SJ/au3fRKpfr64ehoxUtLEzgWPrAt0/A7r+w= Subject key identifier: 4C:1E:06:3A:49:04:0F:05:1F:22:15:4C:50:97:A1:6A:A1:E6:C4:C2 Authority key identifier: BB:E2:33:56:0E:FD:40:9B:38:CD:B8:0A:00:57:5A:37:BA:89:64:35 Certificate issuer: /CN=A911ABF4/serialNumber=BBE233560EFD409B38CDB80A00575A37BA896435 Certificate serial: 0809 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft Manifest number: 1793 Signing time: Thu 24 Apr 2025 17:37:01 +0000 Manifest this update: Thu 24 Apr 2025 17:37:01 +0000 Manifest next update: Thu 01 May 2025 17:37:01 +0000 Files and hashes: 1: u-IzVg79QJs4zbgKAFdaN7qJZDU.crl (hash: HsVR2zR7aR4FRBYP/Pq67InLcfLUY6xChIs4zVAfGPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.crl rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:37:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2057 (0x809) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABF4, serialNumber=BBE233560EFD409B38CDB80A00575A37BA896435 Validity Not Before: Apr 24 17:37:01 2025 GMT Not After : May 1 17:37:01 2025 GMT Subject: CN=680a76bd-cbb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:74:5e:29:8c:57:a5:c5:cf:27:ce:98:4f:44: 6d:1d:ba:3d:e9:e6:f4:0e:3f:ac:2d:b6:87:d5:3b: ac:58:59:65:ec:40:9d:a7:4f:a2:2f:b8:d7:83:34: 6a:c9:c0:16:8b:25:d6:d3:0b:32:27:f6:0a:ed:eb: 85:eb:e8:56:dd:ef:7b:49:cc:cf:61:f3:c0:99:39: 80:9d:36:b8:b1:01:1a:6d:5c:78:f6:29:24:d7:b5: f4:0c:a3:ac:48:f6:88:14:66:0b:c1:b6:3c:e5:06: a8:e6:16:45:2a:ee:dc:d5:88:bb:32:9b:e6:9f:64: 4a:ff:69:56:52:16:12:a0:7e:e9:e9:80:0c:17:fa: 19:6b:e2:0d:1a:b0:4e:33:a6:02:e8:c1:69:47:04: 7f:ca:f6:c8:91:d4:d4:a1:c9:0a:6a:86:fb:30:14: 61:9f:27:a7:7d:92:99:05:ca:42:67:8e:ce:a4:1b: e6:11:65:d1:2f:6e:11:7c:39:47:e1:9d:dd:66:41: a2:02:3d:85:92:e9:ca:01:1b:c2:78:91:32:ea:2f: dc:5d:8c:c7:fe:44:6f:7e:47:71:61:4e:74:7e:08: cd:f2:76:fe:0a:9e:93:68:17:4f:b4:17:76:3c:84: f9:29:4b:0d:1e:6c:a0:26:0e:dc:06:44:6e:08:fd: f2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:1E:06:3A:49:04:0F:05:1F:22:15:4C:50:97:A1:6A:A1:E6:C4:C2 X509v3 Authority Key Identifier: keyid:BB:E2:33:56:0E:FD:40:9B:38:CD:B8:0A:00:57:5A:37:BA:89:64:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:21:ed:42:40:a9:58:4a:96:52:29:a3:18:dc:fe:1f:d1:75: 7b:42:14:5c:b6:3c:c8:a9:92:a0:72:90:d5:f4:2b:bf:99:83: 94:30:e6:67:5f:7f:43:f0:5a:ea:39:00:99:c1:b5:8f:7f:fc: bd:97:5e:74:40:2b:55:c2:7c:cf:51:15:88:01:ea:37:f5:9f: 4a:83:f5:0d:f2:ca:8d:3b:87:e7:d0:c5:ae:f6:97:f8:c9:8b: 5f:c2:0c:b2:21:b1:71:c3:e2:5d:ff:5e:d1:86:2b:62:2f:51: c0:30:44:b2:6e:c1:59:9e:58:a0:69:eb:7d:c6:94:bd:77:e7: 09:e9:99:6d:99:0d:85:44:9e:a6:06:b1:5c:0c:5a:ee:3a:39: 70:98:79:f4:cd:61:31:5a:9b:44:44:f3:e5:37:48:9e:0c:f7: 80:ad:b2:d9:b9:5d:81:31:9c:bd:80:b4:4e:1e:3d:ed:0d:0b: af:33:de:e7:27:a6:6e:b4:9d:a8:75:f4:33:fb:77:ca:7f:12: 21:6c:d3:48:c9:fa:f5:14:17:57:df:0c:cf:aa:53:ae:99:87: ac:45:3b:1f:fa:89:63:b5:1c:5f:c8:7a:26:6e:8e:18:43:b3: 4a:4e:a3:aa:06:23:80:9e:2e:6f:8c:9f:95:0a:06:0a:a1:93: ac:8f:5d:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCRjQxMTAvBgNVBAUTKEJCRTIzMzU2MEVGRDQwOUIzOENEQjgwQTAwNTc1QTM3 QkE4OTY0MzUwHhcNMjUwNDI0MTczNzAxWhcNMjUwNTAxMTczNzAxWjAYMRYwFAYD VQQDEw02ODBhNzZiZC1jYmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA23ReKYxXpcXPJ86YT0RtHbo96eb0Dj+sLbaH1TusWFll7ECdp0+iL7jXgzRq ycAWiyXW0wsyJ/YK7euF6+hW3e97SczPYfPAmTmAnTa4sQEabVx49ikk17X0DKOs SPaIFGYLwbY85Qao5hZFKu7c1Yi7Mpvmn2RK/2lWUhYSoH7p6YAMF/oZa+INGrBO M6YC6MFpRwR/yvbIkdTUockKaob7MBRhnyenfZKZBcpCZ47OpBvmEWXRL24RfDlH 4Z3dZkGiAj2FkunKARvCeJEy6i/cXYzH/kRvfkdxYU50fgjN8nb+Cp6TaBdPtBd2 PIT5KUsNHmygJg7cBkRuCP3yNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEweBjpJ BA8FHyIVTFCXoWqh5sTCMB8GA1UdIwQYMBaAFLviM1YO/UCbOM24CgBXWje6iWQ1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJGNC9FQTg3MTg1Qzcy MUIxMUU5QkI3NDgxNTBDNEY5QUUwMi91LUl6Vmc3OVFKczR6YmdLQUZkYU43cUpa RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtSXpWZzc5UUpzNHpiZ0tBRmRhTjdxSlpEVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUJGNC9FQTg3MTg1QzcyMUIxMUU5QkI3NDgxNTBDNEY5QUUwMi91LUl6Vmc3OVFK czR6YmdLQUZkYU43cUpaRFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8Ie1CQKlYSpZSKaMY3P4f0XV7QhRctjzIqZKgcpDV9Cu/mYOUMOZn X39D8FrqOQCZwbWPf/y9l150QCtVwnzPURWIAeo39Z9Kg/UN8sqNO4fn0MWu9pf4 yYtfwgyyIbFxw+Jd/17RhitiL1HAMESybsFZnligaet9xpS9d+cJ6ZltmQ2FRJ6m BrFcDFruOjlwmHn0zWExWptERPPlN0ieDPeArbLZuV2BMZy9gLROHj3tDQuvM97n J6ZutJ2odfQz+3fKfxIhbNNIyfr1FBdX3wzPqlOumYesRTsf+oljtRxfyHombo4Y Q7NKTqOqBiOAni5vjJ+VCgYKoZOsj120 -----END CERTIFICATE-----Generated at Sat Apr 26 08:14:30 2025 by rpki-client