$ rpki-client -vvf rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft File: K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft (raw, json) Hash identifier: cVgRlWOQZi3upUNvtwyn/xM5tuiKqz1RgT0itz+pzlY= Subject key identifier: 21:9F:2C:92:F3:FF:4A:11:2E:5F:AD:10:00:8A:42:1A:94:4B:A8:B7 Authority key identifier: 2B:F0:AE:67:90:D2:F0:1D:D1:DB:67:38:31:32:DC:40:3B:67:45:22 Certificate issuer: /CN=A912F6E3/serialNumber=2BF0AE6790D2F01DD1DB67383132DC403B674522 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft Manifest number: 4A Signing time: Fri 25 Apr 2025 06:22:17 +0000 Manifest this update: Fri 25 Apr 2025 06:22:17 +0000 Manifest next update: Fri 02 May 2025 06:22:17 +0000 Files and hashes: 1: K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl (hash: 9xtAxNpV6Ojcay86jTHuMQZbHTmNqojzSQSJ8XLJMDs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:22:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F6E3, serialNumber=2BF0AE6790D2F01DD1DB67383132DC403B674522 Validity Not Before: Apr 25 06:22:17 2025 GMT Not After : May 2 06:22:17 2025 GMT Subject: CN=680b2a19-4551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:30:d0:6f:69:1d:00:5a:d3:3e:55:6a:fa:8b: 04:fd:09:6c:36:61:c8:0c:2f:dc:24:90:04:31:c9: ef:25:9f:d4:77:34:c2:31:42:a4:10:c4:17:d1:24: 62:90:d5:ac:6c:60:47:21:98:17:66:27:df:22:ae: 1d:ae:2d:08:d1:2f:cc:61:ec:54:31:6d:e4:36:72: 04:af:4a:6b:b7:ad:93:bf:e8:1f:85:65:05:21:47: ea:8d:d4:a8:1c:ba:9f:b9:fe:93:d9:4c:a2:36:03: 5b:18:c8:b2:7a:62:ec:32:41:08:26:0e:93:ff:72: d5:39:e2:ea:c4:f8:68:a4:2e:f6:c3:1f:90:bb:07: 0c:de:83:ae:7b:b2:43:a6:65:3c:f1:39:0c:99:1f: 9e:28:37:d0:0b:99:6f:48:b0:95:fd:de:a9:49:03: ae:a6:40:1a:11:3c:4c:30:8a:01:a3:e9:42:87:d9: 3d:36:d4:c8:ce:52:07:21:07:20:68:e4:9b:42:ad: 8e:08:03:da:cb:d0:0f:60:45:45:17:f0:3f:80:eb: 1d:28:fa:46:94:06:7d:aa:6c:6d:4a:57:1b:ac:c6: 95:72:8e:ec:58:42:ca:41:4c:d0:15:5a:63:c9:fe: 65:a6:49:b0:e8:da:28:9e:66:06:79:6e:56:b0:fe: 66:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9F:2C:92:F3:FF:4A:11:2E:5F:AD:10:00:8A:42:1A:94:4B:A8:B7 X509v3 Authority Key Identifier: keyid:2B:F0:AE:67:90:D2:F0:1D:D1:DB:67:38:31:32:DC:40:3B:67:45:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:63:70:45:fa:8f:ad:15:8b:31:72:b5:18:9a:73:31:2f:b2: f3:35:83:97:d1:8e:4d:86:d4:6e:db:25:4a:d8:32:9b:7e:8b: 87:6f:79:01:67:96:b4:2e:24:29:b4:5a:a4:59:22:28:a2:d6: 02:02:e2:6f:44:42:45:80:0c:b7:63:92:f1:b5:ca:6a:78:c8: 3c:8c:f4:85:c1:6f:28:c4:5e:fe:c0:21:4a:71:9f:10:87:67: a1:26:ba:d6:6a:01:f0:84:9d:19:ca:fb:82:60:ad:35:36:a4: 0b:39:d8:94:8f:f6:cb:a8:0e:0d:e9:b3:12:f3:70:51:0c:73: d1:94:7e:bf:38:da:6c:79:4c:9e:bd:97:92:3b:51:83:44:b3: 31:3d:47:03:57:ac:55:eb:c2:f7:bc:38:3b:bb:be:27:1b:3e: 38:3f:e3:24:d9:fe:13:dc:88:81:13:c7:e4:bc:58:b8:cf:55: 75:bd:57:1f:a9:76:3e:12:70:36:08:d0:69:56:9e:47:bc:eb: a5:e5:e7:7f:05:51:1b:f1:2f:9f:08:ec:23:da:fb:bf:54:9f: 1a:40:3a:6b:81:2f:d1:03:c9:71:71:e0:1f:30:e0:f5:e9:7c: c3:ba:9a:67:50:3b:33:5d:4e:32:b3:0b:3e:64:d6:86:de:c8: e5:61:5e:f9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjZFMzExMC8GA1UEBRMoMkJGMEFFNjc5MEQyRjAxREQxREI2NzM4MzEzMkRDNDAz QjY3NDUyMjAeFw0yNTA0MjUwNjIyMTdaFw0yNTA1MDIwNjIyMTdaMBgxFjAUBgNV BAMTDTY4MGIyYTE5LTQ1NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgMNBvaR0AWtM+VWr6iwT9CWw2YcgML9wkkAQxye8ln9R3NMIxQqQQxBfRJGKQ 1axsYEchmBdmJ98irh2uLQjRL8xh7FQxbeQ2cgSvSmu3rZO/6B+FZQUhR+qN1Kgc up+5/pPZTKI2A1sYyLJ6YuwyQQgmDpP/ctU54urE+GikLvbDH5C7Bwzeg657skOm ZTzxOQyZH54oN9ALmW9IsJX93qlJA66mQBoRPEwwigGj6UKH2T021MjOUgchByBo 5JtCrY4IA9rL0A9gRUUX8D+A6x0o+kaUBn2qbG1KVxusxpVyjuxYQspBTNAVWmPJ /mWmSbDo2iieZgZ5blaw/mZRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIZ8skvP/ ShEuX60QAIpCGpRLqLcwHwYDVR0jBBgwFoAUK/CuZ5DS8B3R22c4MTLcQDtnRSIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGNkUzL0YyRkI4MjUwQjVE RDExRUY5N0Q5RkEzNEM0RjlBRTAyL0tfQ3VaNURTOEIzUjIyYzRNVExjUUR0blJT SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS19DdVo1RFM4QjNSMjJjNE1UTGNRRHRuUlNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG NkUzL0YyRkI4MjUwQjVERDExRUY5N0Q5RkEzNEM0RjlBRTAyL0tfQ3VaNURTOEIz UjIyYzRNVExjUUR0blJTSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALxjcEX6j60VizFytRiaczEvsvM1g5fRjk2G1G7bJUrYMpt+i4dveQFn lrQuJCm0WqRZIiii1gIC4m9EQkWADLdjkvG1ymp4yDyM9IXBbyjEXv7AIUpxnxCH Z6EmutZqAfCEnRnK+4JgrTU2pAs52JSP9suoDg3psxLzcFEMc9GUfr842mx5TJ69 l5I7UYNEszE9RwNXrFXrwve8ODu7vicbPjg/4yTZ/hPciIETx+S8WLjPVXW9Vx+p dj4ScDYI0GlWnke866Xl538FURvxL58I7CPa+79UnxpAOmuBL9EDyXFx4B8w4PXp fMO6mmdQOzNdTjKzCz5k1obeyOVhXvk= -----END CERTIFICATE-----Generated at Sat Apr 26 03:56:40 2025 by rpki-client