$ rpki-client -vvf rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft File: Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft (raw, json) Hash identifier: SUq0jXyQjBxUB0+AMYD8AdZh2DY2kADBoTCxXkunreM= Subject key identifier: 8C:B3:BB:A3:9A:5A:EF:2C:90:7B:3B:DE:4D:E7:AB:E4:74:34:9E:CC Authority key identifier: 2B:3D:21:1F:C9:99:8D:F2:03:5E:20:D9:1A:A5:5E:DE:C6:28:F0:A3 Certificate issuer: /CN=A912B75A/serialNumber=2B3D211FC9998DF2035E20D91AA55EDEC628F0A3 Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft Manifest number: 84 Signing time: Fri 25 Apr 2025 05:34:46 +0000 Manifest this update: Fri 25 Apr 2025 05:34:45 +0000 Manifest next update: Fri 02 May 2025 05:34:45 +0000 Files and hashes: 1: Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl (hash: 2mJ/tqgdOtPbnsKO4ajdPagoAFAs6o02YsBeWRw6oVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B75A, serialNumber=2B3D211FC9998DF2035E20D91AA55EDEC628F0A3 Validity Not Before: Apr 25 05:34:45 2025 GMT Not After : May 2 05:34:45 2025 GMT Subject: CN=680b1ef5-7633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7a:01:c0:55:e0:96:ae:b0:6a:f1:32:3d:e7: 4a:eb:c7:b9:e6:28:30:16:1a:ea:5b:14:97:ea:b3: 13:88:33:ac:e8:00:e7:98:8d:af:d6:30:0a:f8:78: 10:9d:1b:0d:55:a1:2f:c6:4a:0f:19:05:82:08:a6: 83:ed:07:41:23:d0:d2:65:e2:33:ec:4c:5e:13:3c: 96:08:05:b9:85:f0:77:c8:b7:11:74:68:c3:b9:1f: fa:79:d8:7d:8b:72:91:2c:81:b3:18:5d:a2:1b:a1: 42:f7:05:80:39:fb:03:be:88:96:fc:24:f1:a3:06: cc:e5:39:73:4c:5a:31:c0:55:7c:b8:cc:cd:bd:04: 6a:a8:e6:3e:c1:71:d6:86:71:5e:40:05:de:3f:42: 7a:e2:d8:c6:f8:95:82:6b:f5:77:a9:de:9f:8b:05: b7:ab:dc:2b:e3:33:d8:65:9e:ca:73:ff:21:f3:5b: d8:79:2b:85:74:88:fe:12:46:d2:c4:74:aa:1a:cb: ff:fd:55:eb:c2:38:88:75:02:43:44:67:ce:f7:b8: 74:d2:c4:72:42:f9:a3:11:c2:fe:99:7f:58:d6:b3: 97:74:e6:f2:88:ef:3a:0a:66:e2:38:44:56:52:89: bb:1b:ff:04:db:bb:41:93:77:2d:3b:cd:8f:a8:40: 5c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B3:BB:A3:9A:5A:EF:2C:90:7B:3B:DE:4D:E7:AB:E4:74:34:9E:CC X509v3 Authority Key Identifier: keyid:2B:3D:21:1F:C9:99:8D:F2:03:5E:20:D9:1A:A5:5E:DE:C6:28:F0:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:28:d5:00:53:ac:a6:aa:73:59:37:a1:f6:50:ab:2a:e8:f6: 4e:42:eb:ca:ae:b2:92:4e:dc:34:69:03:54:da:7c:3e:e8:0c: 9a:79:7c:2c:8a:5d:2a:8c:3b:93:c9:50:a5:eb:fe:90:35:1b: c6:c6:8e:f6:71:70:02:89:64:e3:9c:24:f2:6e:66:80:14:99: f9:03:05:85:ee:53:0c:98:32:36:c4:ca:a0:60:f9:f8:d7:cc: 08:53:fb:6d:bc:8e:50:d5:83:98:42:9e:43:67:b4:cb:19:8c: fb:79:29:86:75:b0:c7:cc:6a:18:92:48:f7:ee:74:54:eb:f8: 20:5c:57:b3:37:47:0c:47:4d:93:26:fc:36:1a:6c:09:4d:93: 1d:7f:e0:22:67:80:a6:51:8f:11:12:01:db:2d:c3:2d:fe:b6: 40:5b:b6:ef:7c:71:7c:01:88:fd:2c:84:b9:33:02:1c:63:7e: b0:00:a2:85:d2:58:bd:c0:ea:d8:b8:e6:39:ae:c2:60:b8:06: d7:64:da:e0:0c:e7:17:b0:03:bd:b9:b1:f9:2b:6e:39:6d:d8: 88:d4:00:b4:1b:7b:5e:0d:3b:85:8a:41:d3:d3:91:da:6c:06: f8:a2:2d:c2:54:dd:dc:3f:87:31:c8:15:2a:fa:47:61:18:00: 6d:de:2b:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI3NUExMTAvBgNVBAUTKDJCM0QyMTFGQzk5OThERjIwMzVFMjBEOTFBQTU1RURF QzYyOEYwQTMwHhcNMjUwNDI1MDUzNDQ1WhcNMjUwNTAyMDUzNDQ1WjAYMRYwFAYD VQQDEw02ODBiMWVmNS03NjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3XoBwFXglq6wavEyPedK68e55igwFhrqWxSX6rMTiDOs6ADnmI2v1jAK+HgQ nRsNVaEvxkoPGQWCCKaD7QdBI9DSZeIz7ExeEzyWCAW5hfB3yLcRdGjDuR/6edh9 i3KRLIGzGF2iG6FC9wWAOfsDvoiW/CTxowbM5TlzTFoxwFV8uMzNvQRqqOY+wXHW hnFeQAXeP0J64tjG+JWCa/V3qd6fiwW3q9wr4zPYZZ7Kc/8h81vYeSuFdIj+EkbS xHSqGsv//VXrwjiIdQJDRGfO97h00sRyQvmjEcL+mX9Y1rOXdObyiO86CmbiOERW Uom7G/8E27tBk3ctO82PqEBcgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIyzu6Oa Wu8skHs73k3nq+R0NJ7MMB8GA1UdIwQYMBaAFCs9IR/JmY3yA14g2RqlXt7GKPCj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjc1QS8xQjIyRTFGRTVC OUExMUVGODIwMjc2NDBDNEY5QUUwMi9LejBoSDhtWmpmSURYaURaR3FWZTNzWW84 S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t6MGhIOG1aamZJRFhpRFpHcVZlM3NZbzhLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjc1QS8xQjIyRTFGRTVCOUExMUVGODIwMjc2NDBDNEY5QUUwMi9LejBoSDhtWmpm SURYaURaR3FWZTNzWW84S00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsKNUAU6ymqnNZN6H2UKsq6PZOQuvKrrKSTtw0aQNU2nw+6AyaeXws il0qjDuTyVCl6/6QNRvGxo72cXACiWTjnCTybmaAFJn5AwWF7lMMmDI2xMqgYPn4 18wIU/ttvI5Q1YOYQp5DZ7TLGYz7eSmGdbDHzGoYkkj37nRU6/ggXFezN0cMR02T Jvw2GmwJTZMdf+AiZ4CmUY8REgHbLcMt/rZAW7bvfHF8AYj9LIS5MwIcY36wAKKF 0li9wOrYuOY5rsJguAbXZNrgDOcXsAO9ubH5K245bdiI1AC0G3teDTuFikHT05Ha bAb4oi3CVN3cP4cxyBUq+kdhGABt3ivH -----END CERTIFICATE-----Generated at Sat Apr 26 04:37:01 2025 by rpki-client