$ rpki-client -vvf rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft File: 1l59EGxXG0LrbOL4iHLeery6-7g.mft (raw, json) Hash identifier: Z1sieZ6Jpijqk49uQt9anMeD2yPZtvBVLvYFgzc3hgg= Subject key identifier: D8:35:5E:D8:CD:62:F6:E1:EA:9C:16:98:EC:5D:1E:45:51:57:B1:7A Authority key identifier: D6:5E:7D:10:6C:57:1B:42:EB:6C:E2:F8:88:72:DE:7A:BC:BA:FB:B8 Certificate issuer: /CN=A913C34F/serialNumber=D65E7D106C571B42EB6CE2F88872DE7ABCBAFBB8 Certificate serial: 3247 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1l59EGxXG0LrbOL4iHLeery6-7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft Manifest number: 3247 Signing time: Thu 24 Apr 2025 15:25:48 +0000 Manifest this update: Thu 24 Apr 2025 15:25:47 +0000 Manifest next update: Thu 01 May 2025 15:25:47 +0000 Files and hashes: 1: 1l59EGxXG0LrbOL4iHLeery6-7g.crl (hash: 6fDGrRonsiLovtri8u9MtWsA2YOXpIxJnhFzpwYPWs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.crl rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1l59EGxXG0LrbOL4iHLeery6-7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:25:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12871 (0x3247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C34F, serialNumber=D65E7D106C571B42EB6CE2F88872DE7ABCBAFBB8 Validity Not Before: Apr 24 15:25:47 2025 GMT Not After : May 1 15:25:47 2025 GMT Subject: CN=680a57fb-254f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:61:6d:2d:f6:1f:a2:7b:4e:f7:e0:23:35:2c: 0a:ba:b4:f3:0b:03:df:6c:af:da:f4:97:2a:54:4c: b9:97:97:42:29:f2:dd:31:21:fa:6d:eb:c9:0b:90: c7:f0:0b:3b:6c:bf:98:9d:34:37:60:02:b4:63:44: 34:15:98:d8:03:b4:d1:a4:f8:f1:c5:5a:a8:2a:b4: 2f:93:a9:e6:a0:0e:9c:b1:ad:59:8e:63:d3:20:43: ab:e7:66:fc:63:6f:cf:b7:94:ac:97:e4:92:08:11: a5:45:25:d2:64:6a:70:b7:d4:9e:1c:21:0e:45:af: 67:1c:6b:66:34:1c:50:c4:f4:4e:b2:d9:4c:74:e8: 01:9d:88:a8:4a:22:e0:55:6d:02:a9:17:2b:26:71: 5a:6b:35:bf:50:8d:14:b8:a2:c4:16:3b:02:87:fa: 21:ed:03:af:60:f7:90:1e:c3:0b:f5:50:21:62:57: 36:3d:a4:9a:ce:01:65:f7:87:f2:69:9c:b2:84:e2: 7d:46:cd:04:c0:f1:98:cb:64:39:0c:21:61:b5:17: c9:a8:84:96:e2:cf:eb:72:43:c9:c7:a0:af:f5:fa: 72:26:b1:22:9d:d6:94:44:83:e1:0d:09:8c:ba:94: 0a:e6:1c:b0:7b:a2:59:90:99:c0:e0:a8:f8:8c:e3: fd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:35:5E:D8:CD:62:F6:E1:EA:9C:16:98:EC:5D:1E:45:51:57:B1:7A X509v3 Authority Key Identifier: keyid:D6:5E:7D:10:6C:57:1B:42:EB:6C:E2:F8:88:72:DE:7A:BC:BA:FB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1l59EGxXG0LrbOL4iHLeery6-7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:f5:91:a3:5e:18:01:69:87:a7:ab:18:d7:fb:72:72:10:3a: 42:95:73:d7:bb:86:98:ec:8a:ad:fc:82:67:d1:c4:86:38:10: 80:6a:72:ea:22:07:e8:bf:18:52:f5:27:da:65:f2:3a:4b:9e: a1:77:6d:9a:92:8d:74:94:d5:06:39:83:29:6a:10:f5:d1:58: 74:54:82:09:6e:55:64:3e:d6:47:cb:c4:cc:45:fa:0f:0d:b4: 5f:a6:eb:79:c2:a5:42:de:ac:82:5f:76:d5:ae:82:56:93:0a: 4a:fb:bc:06:f7:59:54:44:21:3b:70:7f:c3:21:3a:90:8d:f0: 7b:dc:ee:e2:5f:f2:4e:f7:54:7d:64:a4:f5:c9:da:01:ff:5c: 36:3e:16:b0:d5:59:96:76:9e:fe:9e:bb:34:3d:fc:4a:00:63: 57:37:34:c6:dd:a5:0e:26:f7:1a:03:c4:d3:9f:c2:a7:60:48: c8:37:df:ea:e2:69:57:c1:dc:a1:5d:3d:34:15:da:66:e6:78: ab:ff:af:f2:43:89:9e:04:8a:5e:77:d4:3e:b1:fe:32:53:58: 01:61:03:81:02:c3:83:fe:4f:ac:30:43:49:8a:2a:79:e0:c3: 4a:ff:7c:8e:84:81:43:43:f0:4e:fc:88:d5:45:f9:d9:8b:9f: 61:c6:d4:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MzNEYxMTAvBgNVBAUTKEQ2NUU3RDEwNkM1NzFCNDJFQjZDRTJGODg4NzJERTdB QkNCQUZCQjgwHhcNMjUwNDI0MTUyNTQ3WhcNMjUwNTAxMTUyNTQ3WjAYMRYwFAYD VQQDEw02ODBhNTdmYi0yNTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2FtLfYfontO9+AjNSwKurTzCwPfbK/a9JcqVEy5l5dCKfLdMSH6bevJC5DH 8As7bL+YnTQ3YAK0Y0Q0FZjYA7TRpPjxxVqoKrQvk6nmoA6csa1ZjmPTIEOr52b8 Y2/Pt5Ssl+SSCBGlRSXSZGpwt9SeHCEORa9nHGtmNBxQxPROstlMdOgBnYioSiLg VW0CqRcrJnFaazW/UI0UuKLEFjsCh/oh7QOvYPeQHsML9VAhYlc2PaSazgFl94fy aZyyhOJ9Rs0EwPGYy2Q5DCFhtRfJqISW4s/rckPJx6Cv9fpyJrEindaURIPhDQmM upQK5hywe6JZkJnA4Kj4jOP9wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNg1XtjN Yvbh6pwWmOxdHkVRV7F6MB8GA1UdIwQYMBaAFNZefRBsVxtC62zi+Ihy3nq8uvu4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzM0Ri8zNUZCRjVENDhB MDQxMUUyQjg4MjFEMDkzMjkyQjVFOC8xbDU5RUd4WEcwTHJiT0w0aUhMZWVyeTYt N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFsNTlFR3hYRzBMcmJPTDRpSExlZXJ5Ni03Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzM0Ri8zNUZCRjVENDhBMDQxMUUyQjg4MjFEMDkzMjkyQjVFOC8xbDU5RUd4WEcw THJiT0w0aUhMZWVyeTYtN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ9ZGjXhgBaYenqxjX+3JyEDpClXPXu4aY7Iqt/IJn0cSGOBCAanLq IgfovxhS9SfaZfI6S56hd22ako10lNUGOYMpahD10Vh0VIIJblVkPtZHy8TMRfoP DbRfput5wqVC3qyCX3bVroJWkwpK+7wG91lURCE7cH/DITqQjfB73O7iX/JO91R9 ZKT1ydoB/1w2Phaw1VmWdp7+nrs0PfxKAGNXNzTG3aUOJvcaA8TTn8KnYEjIN9/q 4mlXwdyhXT00Fdpm5nir/6/yQ4meBIped9Q+sf4yU1gBYQOBAsOD/k+sMENJiip5 4MNK/3yOhIFDQ/BO/IjVRfnZi59hxtS7 -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:52 2025 by rpki-client