$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft File: K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft (raw, json) Hash identifier: Cope67Cy8RvzeCFmK7NdSE54hG+4dW1Yms48iHlArUg= Subject key identifier: F8:7D:A3:86:D1:45:3A:D4:8B:24:0F:B3:B9:23:43:94:A8:CC:19:57 Authority key identifier: 2B:94:EB:A4:78:E9:D1:12:B1:E5:0A:0D:E3:30:D2:AD:85:8E:1C:D0 Certificate issuer: /CN=A9140E40/serialNumber=2B94EBA478E9D112B1E50A0DE330D2AD858E1CD0 Certificate serial: 2186 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft Manifest number: 2186 Signing time: Thu 24 Apr 2025 15:55:02 +0000 Manifest this update: Thu 24 Apr 2025 15:55:02 +0000 Manifest next update: Thu 01 May 2025 15:55:02 +0000 Files and hashes: 1: K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl (hash: BdgupLiKqp0pJI8UOju2MNUsThoFlKMHrQNEHBhlJDI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:55:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8582 (0x2186) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140E40, serialNumber=2B94EBA478E9D112B1E50A0DE330D2AD858E1CD0 Validity Not Before: Apr 24 15:55:02 2025 GMT Not After : May 1 15:55:02 2025 GMT Subject: CN=680a5ed6-43be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f7:6e:b0:35:6c:6e:db:4e:2c:1a:00:60:b9: b6:ce:f0:47:55:7c:5f:d9:0d:05:cd:51:7d:55:71: 76:4b:b7:4e:4c:96:9b:6e:c5:23:92:b8:45:61:eb: 50:18:a8:52:ad:8a:a1:6c:2f:fc:88:32:6e:b6:fb: 54:29:a2:be:5b:cf:cf:4b:04:0b:a3:3d:b0:8e:db: fb:78:3d:28:fb:24:db:fd:cf:cb:3f:14:c7:37:af: 7c:2a:47:24:d0:fb:60:31:9d:5b:fe:eb:21:22:34: cf:4d:5f:d0:ff:89:88:09:bc:5b:36:73:b0:85:67: 57:30:14:54:e9:06:61:d5:a7:30:4f:0b:32:08:ff: aa:a7:1b:4e:b1:93:58:7a:ee:9c:3b:3b:ac:91:95: fd:fc:cb:f0:07:6c:d8:5e:1e:e5:d3:98:42:2d:6f: ab:1e:52:f2:bc:8c:5d:78:3c:5f:ee:f0:27:17:b6: e0:e6:a9:e5:e1:67:e5:ed:4a:a0:91:3f:b4:bd:ce: a0:c3:d7:4e:6e:6e:97:20:8e:89:a9:58:be:e3:40: 65:3a:bd:e8:f3:ce:33:27:fc:81:f3:83:8b:f7:29: 8b:1c:38:e8:dc:8a:e8:c3:93:95:e9:75:54:65:45: 84:19:1d:10:64:a7:00:23:de:44:c5:83:74:f5:a1: 82:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:7D:A3:86:D1:45:3A:D4:8B:24:0F:B3:B9:23:43:94:A8:CC:19:57 X509v3 Authority Key Identifier: keyid:2B:94:EB:A4:78:E9:D1:12:B1:E5:0A:0D:E3:30:D2:AD:85:8E:1C:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:43:aa:ff:3a:19:48:f3:a5:ef:10:ac:dd:18:93:5a:d8:ab: 6e:a7:8d:4c:06:a5:18:b2:98:c1:bf:e9:a7:e8:17:f9:ca:c6: 2a:71:21:6c:bc:e6:00:38:d8:cd:39:37:56:2f:51:09:e5:6e: ba:b4:4c:e5:1a:40:b2:4d:5a:53:38:69:aa:da:cb:55:ce:fa: ba:01:26:61:eb:4e:16:92:5f:25:c4:f3:20:4f:59:fb:81:bf: 31:77:29:9e:86:39:6f:1f:4b:b1:99:1d:d8:97:94:38:ff:61: ab:f1:3b:69:ca:48:e5:40:b6:8a:e0:2f:63:b5:90:42:32:2b: 7c:09:46:bb:2f:73:23:f9:18:eb:9a:36:12:2b:9c:db:fd:4b: e3:1b:ec:5f:c4:af:52:2c:e6:d3:2f:ca:0e:21:0a:df:86:54: 51:da:f9:d5:95:c0:df:09:1f:4c:51:6e:9e:c1:40:29:eb:c5: 61:08:22:ae:63:3f:fb:63:8a:f2:97:f6:5e:f1:df:54:ad:98: d0:91:d7:ad:78:fe:14:10:3f:3f:8b:64:a4:e9:1c:b9:d5:4c: 8b:fd:bf:03:45:4e:14:b6:d8:8b:e2:58:92:32:77:fc:96:e8: 6c:98:2c:f9:cf:43:a5:80:6c:f7:b9:f3:81:6f:af:71:a6:1e: ac:bb:73:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBFNDAxMTAvBgNVBAUTKDJCOTRFQkE0NzhFOUQxMTJCMUU1MEEwREUzMzBEMkFE ODU4RTFDRDAwHhcNMjUwNDI0MTU1NTAyWhcNMjUwNTAxMTU1NTAyWjAYMRYwFAYD VQQDEw02ODBhNWVkNi00M2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPdusDVsbttOLBoAYLm2zvBHVXxf2Q0FzVF9VXF2S7dOTJabbsUjkrhFYetQ GKhSrYqhbC/8iDJutvtUKaK+W8/PSwQLoz2wjtv7eD0o+yTb/c/LPxTHN698Kkck 0PtgMZ1b/ushIjTPTV/Q/4mICbxbNnOwhWdXMBRU6QZh1acwTwsyCP+qpxtOsZNY eu6cOzuskZX9/MvwB2zYXh7l05hCLW+rHlLyvIxdeDxf7vAnF7bg5qnl4Wfl7Uqg kT+0vc6gw9dObm6XII6JqVi+40BlOr3o884zJ/yB84OL9ymLHDjo3Irow5OV6XVU ZUWEGR0QZKcAI95ExYN09aGCUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPh9o4bR RTrUiyQPs7kjQ5SozBlXMB8GA1UdIwQYMBaAFCuU66R46dESseUKDeMw0q2FjhzQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEU0MC9FMzYxMUJENkQz OEIxMUU1ODM5MkY1NERDNEY5QUUwMi9LNVRycEhqcDBSS3g1UW9ONHpEU3JZV09I TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s1VHJwSGpwMFJLeDVRb040ekRTcllXT0hOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEU0MC9FMzYxMUJENkQzOEIxMUU1ODM5MkY1NERDNEY5QUUwMi9LNVRycEhqcDBS S3g1UW9ONHpEU3JZV09ITkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLQ6r/OhlI86XvEKzdGJNa2Ktup41MBqUYspjBv+mn6Bf5ysYqcSFs vOYAONjNOTdWL1EJ5W66tEzlGkCyTVpTOGmq2stVzvq6ASZh604Wkl8lxPMgT1n7 gb8xdymehjlvH0uxmR3Yl5Q4/2Gr8TtpykjlQLaK4C9jtZBCMit8CUa7L3Mj+Rjr mjYSK5zb/UvjG+xfxK9SLObTL8oOIQrfhlRR2vnVlcDfCR9MUW6ewUAp68VhCCKu Yz/7Y4ryl/Ze8d9UrZjQkdeteP4UED8/i2Sk6Ry51UyL/b8DRU4UttiL4liSMnf8 luhsmCz5z0OlgGz3ufOBb69xph6su3MC -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:45 2025 by rpki-client