$ rpki-client -vvf rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft File: 11KsJgWV3m0QKce5SPSUl-SD6s4.mft (raw, json) Hash identifier: j/CLWQ/o7QuPMefMxm7lBBgWPVEBUXSB/bhtGAzE//Y= Subject key identifier: 84:8C:9E:2B:C2:E5:70:46:4D:9C:D6:5C:C5:F9:2F:4B:74:78:EE:AE Authority key identifier: D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE Certificate issuer: /CN=A91383B0/serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE Certificate serial: 2B94 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft Manifest number: 2B94 Signing time: Thu 24 Apr 2025 15:33:06 +0000 Manifest this update: Thu 24 Apr 2025 15:33:06 +0000 Manifest next update: Thu 01 May 2025 15:33:06 +0000 Files and hashes: 1: 11KsJgWV3m0QKce5SPSUl-SD6s4.crl (hash: TrtGOswU3AyTz8bf7L2FiTG9s5CC8XNUMkLa3+TUPew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11156 (0x2b94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383B0, serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE Validity Not Before: Apr 24 15:33:06 2025 GMT Not After : May 1 15:33:06 2025 GMT Subject: CN=680a59b2-d98f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:eb:c9:87:3f:1f:83:d6:95:a0:ae:cd:a3:ab: 4f:a9:21:5f:75:34:2a:85:0e:5d:25:5e:7f:39:0d: c0:74:42:06:5e:7c:79:ab:67:24:3f:83:66:2b:96: 41:b4:6c:3a:34:cb:a2:31:d7:72:89:f2:a6:c6:03: ee:f4:a5:70:43:9d:fd:ad:94:1f:37:1a:0c:1e:6c: 84:f6:38:bd:d5:c1:2b:1d:e2:10:1c:fd:b6:9e:da: 45:79:9e:11:49:8e:27:c8:a1:47:ac:b5:05:b7:e4: 6b:36:67:1d:7a:76:d1:a9:32:5d:69:66:7e:7f:7f: 14:1c:26:2d:0f:70:96:b3:50:a5:37:50:80:8b:0c: 36:09:f6:3e:0b:6a:57:dd:ef:ae:74:7a:ff:f6:bf: dd:48:66:dd:e3:66:d1:26:00:12:3c:f6:1f:c1:db: ca:40:50:df:96:b9:de:d1:b3:be:7e:14:0f:40:94: 35:df:c6:73:f8:e2:0b:da:bf:25:83:de:1a:38:60: 9f:e9:04:4a:11:37:a8:d2:b4:17:19:c2:a6:6c:11: 1c:cc:a6:dd:58:bc:f8:e6:e2:63:1d:8e:77:17:44: b6:e5:e2:97:9f:7e:84:f2:2c:20:50:77:ac:b6:2f: ae:62:a1:4d:4b:61:4d:0e:fa:b3:f9:82:0d:3d:f4: e2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:8C:9E:2B:C2:E5:70:46:4D:9C:D6:5C:C5:F9:2F:4B:74:78:EE:AE X509v3 Authority Key Identifier: keyid:D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:84:89:59:a4:01:de:67:a7:a2:05:b3:15:74:6d:ae:e4:74: f1:9b:71:7e:ab:2a:24:00:bd:56:5e:e8:6d:8f:39:b0:d2:2f: 2e:2c:a7:ee:5c:a0:06:88:da:09:83:6a:33:88:17:6b:78:1f: ff:4b:29:7a:8a:be:2d:e1:36:03:8d:0a:c8:85:0b:e1:8f:1f: b2:6c:8c:03:02:36:72:eb:a8:f6:80:53:c2:42:71:ad:a1:95: 1c:46:26:0f:db:40:40:50:f3:6c:c7:bd:71:7c:d2:1e:04:0e: 51:27:f1:5c:a0:de:43:c4:7a:43:92:80:c4:58:c0:8d:f5:1e: 50:40:a0:db:44:f0:97:64:4a:0a:4d:17:26:93:15:5f:dd:ed: 9d:fd:73:e3:86:16:a8:07:3c:39:ff:f6:e1:8f:2a:dc:90:62: 2a:fd:a0:78:c1:d7:51:d6:b5:27:af:95:08:8d:4a:00:4b:eb: ad:e2:06:b6:a1:15:83:0c:f9:dc:5c:14:c3:2e:1f:22:0b:50: 4d:73:af:68:1e:45:51:60:65:68:d6:e6:97:57:1e:17:6a:bc: fd:42:a7:3f:57:f1:2f:1b:f0:54:90:0a:86:c0:2d:e2:a8:02: 86:93:06:69:73:73:33:8d:fc:22:e1:48:bb:c0:53:23:84:4f: b9:b0:c6:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzQjAxMTAvBgNVBAUTKEQ3NTJBQzI2MDU5NURFNkQxMDI5QzdCOTQ4RjQ5NDk3 RTQ4M0VBQ0UwHhcNMjUwNDI0MTUzMzA2WhcNMjUwNTAxMTUzMzA2WjAYMRYwFAYD VQQDEw02ODBhNTliMi1kOThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOvJhz8fg9aVoK7No6tPqSFfdTQqhQ5dJV5/OQ3AdEIGXnx5q2ckP4NmK5ZB tGw6NMuiMddyifKmxgPu9KVwQ539rZQfNxoMHmyE9ji91cErHeIQHP22ntpFeZ4R SY4nyKFHrLUFt+RrNmcdenbRqTJdaWZ+f38UHCYtD3CWs1ClN1CAiww2CfY+C2pX 3e+udHr/9r/dSGbd42bRJgASPPYfwdvKQFDflrne0bO+fhQPQJQ138Zz+OIL2r8l g94aOGCf6QRKETeo0rQXGcKmbBEczKbdWLz45uJjHY53F0S25eKXn36E8iwgUHes ti+uYqFNS2FNDvqz+YINPfTi9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISMnivC 5XBGTZzWXMX5L0t0eO6uMB8GA1UdIwQYMBaAFNdSrCYFld5tECnHuUj0lJfkg+rO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCMC8zRDNGRTlCNkRC QzIxMUUzOEY1NTE0NEY1OTExRUEzMi8xMUtzSmdXVjNtMFFLY2U1U1BTVWwtU0Q2 czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzExS3NKZ1dWM20wUUtjZTVTUFNVbC1TRDZzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNCMC8zRDNGRTlCNkRCQzIxMUUzOEY1NTE0NEY1OTExRUEzMi8xMUtzSmdXVjNt MFFLY2U1U1BTVWwtU0Q2czQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOhIlZpAHeZ6eiBbMVdG2u5HTxm3F+qyokAL1WXuhtjzmw0i8uLKfu XKAGiNoJg2oziBdreB//Syl6ir4t4TYDjQrIhQvhjx+ybIwDAjZy66j2gFPCQnGt oZUcRiYP20BAUPNsx71xfNIeBA5RJ/FcoN5DxHpDkoDEWMCN9R5QQKDbRPCXZEoK TRcmkxVf3e2d/XPjhhaoBzw5//bhjyrckGIq/aB4wddR1rUnr5UIjUoAS+ut4ga2 oRWDDPncXBTDLh8iC1BNc69oHkVRYGVo1uaXVx4Xarz9Qqc/V/EvG/BUkAqGwC3i qAKGkwZpc3Mzjfwi4Ui7wFMjhE+5sMZF -----END CERTIFICATE-----Generated at Sat Apr 26 13:08:49 2025 by rpki-client