$ rpki-client -vvf rpki.apnic.net/member_repository/A91329C1/44236F0405BD11EDA00A5F3DC4F9AE02/8lm4rJz0O9fFlFTlyD7PSPn7hxc.mft File: 8lm4rJz0O9fFlFTlyD7PSPn7hxc.mft (raw, json) Hash identifier: UaGkTguZNGDDNn5qqz8bmPXwxMSWXoE2NmNrT0KuaA4= Subject key identifier: 0C:8F:A8:30:84:E0:33:02:3D:09:D0:24:59:9D:16:98:51:C7:60:5C Authority key identifier: F2:59:B8:AC:9C:F4:3B:D7:C5:94:54:E5:C8:3E:CF:48:F9:FB:87:17 Certificate issuer: /CN=A91329C1/serialNumber=F259B8AC9CF43BD7C59454E5C83ECF48F9FB8717 Certificate serial: 0283 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8lm4rJz0O9fFlFTlyD7PSPn7hxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91329C1/44236F0405BD11EDA00A5F3DC4F9AE02/8lm4rJz0O9fFlFTlyD7PSPn7hxc.mft Manifest number: 027F Signing time: Fri 25 Apr 2025 01:25:16 +0000 Manifest this update: Fri 25 Apr 2025 01:25:15 +0000 Manifest next update: Fri 02 May 2025 01:25:15 +0000 Files and hashes: 1: 8lm4rJz0O9fFlFTlyD7PSPn7hxc.crl (hash: cRmD8wwVOZvTmWQOcBC28z3+tkrkeyHXTSFLZw33x4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91329C1/44236F0405BD11EDA00A5F3DC4F9AE02/8lm4rJz0O9fFlFTlyD7PSPn7hxc.crl rsync://rpki.apnic.net/member_repository/A91329C1/44236F0405BD11EDA00A5F3DC4F9AE02/8lm4rJz0O9fFlFTlyD7PSPn7hxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8lm4rJz0O9fFlFTlyD7PSPn7hxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:25:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 643 (0x283) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91329C1, serialNumber=F259B8AC9CF43BD7C59454E5C83ECF48F9FB8717 Validity Not Before: Apr 25 01:25:15 2025 GMT Not After : May 2 01:25:15 2025 GMT Subject: CN=680ae47b-fa68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:79:1e:59:c8:17:54:50:d5:aa:73:b8:56:8e: 4e:fd:b8:7d:89:06:ca:44:56:22:fc:36:ac:2d:eb: 51:7b:be:38:65:49:f4:78:94:72:2b:9e:a3:e5:a4: 30:62:5e:a9:3e:ab:26:30:03:ac:25:f9:e2:a7:2f: df:a6:cb:85:01:a2:36:a6:bc:e0:74:9a:aa:fa:1d: 01:30:37:a0:81:66:49:45:59:06:9f:9d:2c:36:b2: 54:2e:d7:11:b3:26:2a:97:72:b0:d5:f8:2f:bb:14: 44:5d:76:0d:f4:8d:f9:a5:0a:15:a8:e7:95:30:af: 51:5c:40:27:23:60:1b:1f:63:50:39:70:1f:2e:81: 33:f2:18:f3:c1:ee:7c:0e:f2:ab:50:e3:9e:31:3d: a8:f3:c2:c8:e5:2a:92:48:55:e7:e4:ef:d2:cb:10: f8:48:71:fb:02:df:f0:79:ff:b3:9d:1b:6d:6e:5d: 6a:1e:d6:13:7a:30:69:18:49:5b:19:db:ac:ee:7f: a5:54:0c:f4:03:d8:15:d5:f5:75:fb:d5:77:f2:11: 37:22:91:44:6c:00:89:03:d7:9e:38:e8:1d:1c:25: 02:48:63:ed:26:46:1d:cb:18:dd:22:15:60:24:b0: 6a:67:ec:e0:e8:de:7f:31:d7:44:ff:7f:1c:e9:50: c0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:8F:A8:30:84:E0:33:02:3D:09:D0:24:59:9D:16:98:51:C7:60:5C X509v3 Authority Key Identifier: keyid:F2:59:B8:AC:9C:F4:3B:D7:C5:94:54:E5:C8:3E:CF:48:F9:FB:87:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91329C1/44236F0405BD11EDA00A5F3DC4F9AE02/8lm4rJz0O9fFlFTlyD7PSPn7hxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8lm4rJz0O9fFlFTlyD7PSPn7hxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91329C1/44236F0405BD11EDA00A5F3DC4F9AE02/8lm4rJz0O9fFlFTlyD7PSPn7hxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:5c:4b:e1:34:a9:d9:aa:e7:d1:f5:dc:1e:e9:f5:ba:b4:b1: 22:4a:dd:77:8b:53:49:ff:aa:56:d3:cc:c3:7b:0a:8c:d4:7a: f5:97:49:13:34:70:5c:bd:39:db:45:dc:d3:89:6a:82:90:18: 1a:22:5e:d9:71:cd:65:9c:f2:b9:aa:9f:7f:66:58:aa:d5:f6: 63:d6:d8:1d:9e:ad:fb:70:41:59:4e:f4:c8:28:83:f0:1b:ea: e8:bf:8a:6b:81:9d:67:7c:68:12:93:0f:b3:e2:57:ff:46:92: d7:4b:03:2c:d6:d6:d5:da:1a:5f:c6:58:a4:ad:3b:38:9d:49: fb:df:d5:d4:e8:06:c1:72:8e:7a:9e:bf:7b:a9:c8:f7:16:93: 21:9c:c4:2d:08:f8:b0:44:2d:22:cd:b0:85:0c:81:a9:fc:f1: 84:1d:34:c6:24:4d:18:b3:3d:6e:d0:1c:7c:08:32:53:29:0a: e3:c1:cd:d5:6a:f3:1d:73:45:c1:b1:39:33:28:f0:97:5c:b9: d7:6b:f1:ed:e0:59:3c:a3:5e:14:e2:55:ec:de:58:60:86:86: 40:78:29:b4:62:20:10:9d:db:9c:1a:42:1b:e3:6c:c4:e9:d2: a2:65:c0:9d:23:39:dd:85:f7:6e:9d:35:1e:ee:7d:42:a4:32: 32:5f:78:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI5QzExMTAvBgNVBAUTKEYyNTlCOEFDOUNGNDNCRDdDNTk0NTRFNUM4M0VDRjQ4 RjlGQjg3MTcwHhcNMjUwNDI1MDEyNTE1WhcNMjUwNTAyMDEyNTE1WjAYMRYwFAYD VQQDEw02ODBhZTQ3Yi1mYTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHkeWcgXVFDVqnO4Vo5O/bh9iQbKRFYi/DasLetRe744ZUn0eJRyK56j5aQw Yl6pPqsmMAOsJfnipy/fpsuFAaI2przgdJqq+h0BMDeggWZJRVkGn50sNrJULtcR syYql3Kw1fgvuxREXXYN9I35pQoVqOeVMK9RXEAnI2AbH2NQOXAfLoEz8hjzwe58 DvKrUOOeMT2o88LI5SqSSFXn5O/SyxD4SHH7At/wef+znRttbl1qHtYTejBpGElb Gdus7n+lVAz0A9gV1fV1+9V38hE3IpFEbACJA9eeOOgdHCUCSGPtJkYdyxjdIhVg JLBqZ+zg6N5/MddE/38c6VDALwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAyPqDCE 4DMCPQnQJFmdFphRx2BcMB8GA1UdIwQYMBaAFPJZuKyc9DvXxZRU5cg+z0j5+4cX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjlDMS80NDIzNkYwNDA1 QkQxMUVEQTAwQTVGM0RDNEY5QUUwMi84bG00ckp6ME85ZkZsRlRseUQ3UFNQbjdo eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhsbTRySnowTzlmRmxGVGx5RDdQU1BuN2h4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjlDMS80NDIzNkYwNDA1QkQxMUVEQTAwQTVGM0RDNEY5QUUwMi84bG00ckp6ME85 ZkZsRlRseUQ3UFNQbjdoeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9XEvhNKnZqufR9dwe6fW6tLEiSt13i1NJ/6pW08zDewqM1Hr1l0kT NHBcvTnbRdzTiWqCkBgaIl7Zcc1lnPK5qp9/Zliq1fZj1tgdnq37cEFZTvTIKIPw G+rov4prgZ1nfGgSkw+z4lf/RpLXSwMs1tbV2hpfxlikrTs4nUn739XU6AbBco56 nr97qcj3FpMhnMQtCPiwRC0izbCFDIGp/PGEHTTGJE0Ysz1u0Bx8CDJTKQrjwc3V avMdc0XBsTkzKPCXXLnXa/Ht4Fk8o14U4lXs3lhghoZAeCm0YiAQnducGkIb42zE 6dKiZcCdIzndhfdunTUe7n1CpDIyX3i6 -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:22 2025 by rpki-client