$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft File: 8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft (raw, json) Hash identifier: VnOWazG0jA6IV6P1rxpyQxYd9i0nvWIAHJXrYYk5IsU= Subject key identifier: A4:1A:4D:9D:CC:24:A0:C7:F6:C5:35:E8:5A:07:1C:DD:BA:87:F6:4B Authority key identifier: F1:0C:80:52:47:C0:26:F9:E3:29:4F:81:45:1D:16:2C:46:50:FC:D3 Certificate issuer: /CN=A91409DC/serialNumber=F10C805247C026F9E3294F81451D162C4650FCD3 Certificate serial: 0C23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft Manifest number: 1450 Signing time: Thu 24 Apr 2025 18:31:03 +0000 Manifest this update: Thu 24 Apr 2025 18:31:02 +0000 Manifest next update: Thu 01 May 2025 18:31:02 +0000 Files and hashes: 1: 8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl (hash: AbpEJIXys2utuVZ1kSXFuhstSmA/CW3o2JDZ3/B3UEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3107 (0xc23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91409DC, serialNumber=F10C805247C026F9E3294F81451D162C4650FCD3 Validity Not Before: Apr 24 18:31:02 2025 GMT Not After : May 1 18:31:02 2025 GMT Subject: CN=680a8367-8a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:e2:74:00:b4:88:8e:59:86:cd:c3:36:55:24: 39:77:ae:57:57:ef:ab:aa:5a:30:a7:cd:36:34:02: 3e:7d:39:4b:36:f1:0a:a0:72:74:b1:c2:e1:68:83: 3d:07:96:b6:1d:d2:08:b8:98:e1:ad:e5:c0:d6:2f: 9a:39:27:1f:09:c8:c6:e2:97:19:5d:24:7b:37:b0: 2b:71:04:63:0b:c5:f4:93:90:00:8e:7c:b0:4b:aa: 1f:56:14:32:57:20:95:b5:6d:46:80:e8:08:c1:b8: 9d:02:2f:5e:81:99:0e:3f:08:4d:b7:2c:7e:af:ec: 7c:b4:31:6e:85:24:c3:4d:13:aa:48:52:1d:bf:07: cb:25:65:bb:f4:ea:72:93:52:aa:5b:60:ed:21:49: d1:0c:e6:a0:1c:d9:6b:1c:00:1c:fc:99:30:09:89: 23:db:d6:a0:7c:9f:70:75:fe:8f:ca:59:d9:06:a6: a7:1c:c8:15:0e:76:96:cd:cc:22:dc:12:87:bc:f7: 48:84:cf:32:1d:07:b3:d5:97:b3:04:65:c3:f2:4d: 8b:02:38:0c:b9:52:a7:b4:02:39:12:73:ff:e8:f9: f2:cc:3f:da:7b:ec:81:15:01:1c:3d:56:d9:c5:aa: b0:18:2b:d6:7e:51:9e:c8:9f:99:74:69:fb:f0:fa: 23:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:1A:4D:9D:CC:24:A0:C7:F6:C5:35:E8:5A:07:1C:DD:BA:87:F6:4B X509v3 Authority Key Identifier: keyid:F1:0C:80:52:47:C0:26:F9:E3:29:4F:81:45:1D:16:2C:46:50:FC:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:7c:85:13:4f:bc:85:77:93:82:a1:f3:7a:0d:bb:2c:64:06: b7:b4:d3:dc:c8:45:28:b7:73:e7:2c:86:45:16:09:54:96:4f: c4:88:96:a0:15:fd:ff:e0:f8:71:33:6f:e0:70:67:28:b2:26: 95:27:09:7e:ca:38:eb:62:b8:aa:ca:97:4b:f3:45:24:85:55: 7f:e7:e0:c9:2a:d0:58:cd:2b:b4:1b:53:ff:fe:8c:fa:9d:d2: 4b:7c:e0:95:75:21:8e:c7:12:c5:4e:73:3c:d1:92:62:a0:8c: 6e:37:63:bf:7e:cb:3a:d1:30:a2:b3:c8:5e:44:4c:51:5d:61: a7:6c:7d:fd:a1:ad:e4:1c:d8:65:93:8d:4f:9a:41:d8:02:cf: f0:50:17:39:94:71:dc:92:0e:e4:54:75:ab:ed:33:c0:e3:0d: 0a:bc:73:c8:e8:41:c0:9d:b1:0c:26:7e:df:bd:a2:77:2a:a6: ea:7a:02:68:24:f7:74:b1:93:fd:49:a2:b1:b1:17:08:1f:66: 52:ad:06:8b:ae:db:58:91:3b:86:75:10:b2:5f:6b:e8:3d:42: f2:67:65:97:5b:ba:fa:bb:33:4d:09:4d:8f:e8:6f:85:52:d4: d7:8f:e1:5e:5c:c0:90:10:0c:29:51:ae:bc:61:b4:35:ae:79: 8f:b7:2a:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA5REMxMTAvBgNVBAUTKEYxMEM4MDUyNDdDMDI2RjlFMzI5NEY4MTQ1MUQxNjJD NDY1MEZDRDMwHhcNMjUwNDI0MTgzMTAyWhcNMjUwNTAxMTgzMTAyWjAYMRYwFAYD VQQDEw02ODBhODM2Ny04YTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8+J0ALSIjlmGzcM2VSQ5d65XV++rqlowp802NAI+fTlLNvEKoHJ0scLhaIM9 B5a2HdIIuJjhreXA1i+aOScfCcjG4pcZXSR7N7ArcQRjC8X0k5AAjnywS6ofVhQy VyCVtW1GgOgIwbidAi9egZkOPwhNtyx+r+x8tDFuhSTDTROqSFIdvwfLJWW79Opy k1KqW2DtIUnRDOagHNlrHAAc/JkwCYkj29agfJ9wdf6PylnZBqanHMgVDnaWzcwi 3BKHvPdIhM8yHQez1ZezBGXD8k2LAjgMuVKntAI5EnP/6PnyzD/ae+yBFQEcPVbZ xaqwGCvWflGeyJ+ZdGn78PojwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQaTZ3M JKDH9sU16FoHHN26h/ZLMB8GA1UdIwQYMBaAFPEMgFJHwCb54ylPgUUdFixGUPzT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDlEQy9BNUJCRkFBNjA5 MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi84UXlBVWtmQUp2bmpLVS1CUlIwV0xFWlFf Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhReUFVa2ZBSnZuaktVLUJSUjBXTEVaUV9OTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDlEQy9BNUJCRkFBNjA5MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi84UXlBVWtmQUp2 bmpLVS1CUlIwV0xFWlFfTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmfIUTT7yFd5OCofN6DbssZAa3tNPcyEUot3PnLIZFFglUlk/EiJag Ff3/4PhxM2/gcGcosiaVJwl+yjjrYriqypdL80UkhVV/5+DJKtBYzSu0G1P//oz6 ndJLfOCVdSGOxxLFTnM80ZJioIxuN2O/fss60TCis8heRExRXWGnbH39oa3kHNhl k41PmkHYAs/wUBc5lHHckg7kVHWr7TPA4w0KvHPI6EHAnbEMJn7fvaJ3KqbqegJo JPd0sZP9SaKxsRcIH2ZSrQaLrttYkTuGdRCyX2voPULyZ2WXW7r6uzNNCU2P6G+F UtTXj+FeXMCQEAwpUa68YbQ1rnmPtyoO -----END CERTIFICATE-----Generated at Sat Apr 26 04:02:33 2025 by rpki-client