$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft File: 8yjXnK7LFF8i39-M3sLQVpxpdnw.mft (raw, json) Hash identifier: 6qQ/FV1t1Q/CkLZVELXXHJ92Gnn1hPeXa63Iu7HFhcY= Subject key identifier: BC:0F:40:22:8C:44:6E:A0:95:84:80:B8:12:F6:7C:9E:56:30:02:01 Authority key identifier: F3:28:D7:9C:AE:CB:14:5F:22:DF:DF:8C:DE:C2:D0:56:9C:69:76:7C Certificate issuer: /CN=A91415AA/serialNumber=F328D79CAECB145F22DFDF8CDEC2D0569C69767C Certificate serial: 0A59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft Manifest number: 1309 Signing time: Thu 24 Apr 2025 19:33:46 +0000 Manifest this update: Thu 24 Apr 2025 19:33:46 +0000 Manifest next update: Thu 01 May 2025 19:33:46 +0000 Files and hashes: 1: 8yjXnK7LFF8i39-M3sLQVpxpdnw.crl (hash: gWKmjSiJ34AChnNzAgAp6/kwXkuWgFibg2zePIb5kCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.crl rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:33:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2649 (0xa59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415AA, serialNumber=F328D79CAECB145F22DFDF8CDEC2D0569C69767C Validity Not Before: Apr 24 19:33:46 2025 GMT Not After : May 1 19:33:46 2025 GMT Subject: CN=680a921a-7ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5b:45:20:2b:6c:dd:38:5e:ce:4d:aa:0f:76: 5f:9b:36:8d:31:59:ab:d9:5b:44:0d:16:fb:02:dc: c1:02:24:c8:e5:56:dc:e6:1e:23:81:8f:68:ff:04: 37:ad:27:73:3f:95:88:20:07:b6:18:c7:58:0f:fa: 27:ed:fc:c2:67:c6:4f:1d:7f:3c:18:8c:8e:f0:83: d9:c8:7d:d5:fc:3b:44:e2:68:e7:e4:bf:07:ca:8e: b0:5a:31:1c:75:02:90:42:ce:73:59:96:38:55:53: 12:93:51:ba:48:70:ad:60:07:d5:b9:be:55:85:8b: 1d:d2:c8:0a:f4:b4:4e:14:d9:0c:07:0e:bf:9f:30: 30:8c:ee:2b:22:34:ea:11:7b:8e:87:42:3b:c9:04: 9d:81:79:ac:25:48:a7:a3:21:56:75:8a:b8:78:c7: 4f:da:5c:f4:1e:35:b8:57:4c:ad:92:1d:2b:71:59: 47:7b:0d:38:fc:85:e3:b3:bc:a2:54:f9:52:68:de: 90:4f:1b:5f:54:a9:d9:82:0a:5b:50:1b:65:c9:c1: a1:d6:6a:2e:18:ae:73:f1:b0:93:42:24:d8:8a:e6: 34:2c:7c:9f:ef:42:7a:2c:dc:fd:64:3d:2a:d5:da: 8d:23:8a:6c:12:58:b6:4a:54:a7:3d:47:ed:00:59: 1d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:0F:40:22:8C:44:6E:A0:95:84:80:B8:12:F6:7C:9E:56:30:02:01 X509v3 Authority Key Identifier: keyid:F3:28:D7:9C:AE:CB:14:5F:22:DF:DF:8C:DE:C2:D0:56:9C:69:76:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:f3:8c:29:41:84:8b:5e:12:5a:5d:45:6c:5c:4b:e9:12:5a: f0:c4:3e:59:cd:88:ed:51:72:61:f3:3b:64:35:48:7b:22:04: fb:9c:7c:27:7b:d5:b4:6a:62:bf:b7:aa:36:ee:d9:7e:ee:50: 53:ef:d1:a3:25:2a:20:47:79:e0:43:52:39:52:e1:ae:93:3f: 48:0d:49:df:17:d8:37:26:42:6a:2e:b9:b3:68:93:90:aa:a7: 8c:e5:8b:63:a7:6b:44:66:f1:5c:47:97:c2:d4:f4:e6:ea:53: c2:7c:34:bc:07:85:1d:00:22:36:af:5a:3b:dd:0f:c0:e3:55: 73:e1:e1:72:1f:0a:09:8d:75:33:6e:ca:b4:65:79:ec:d8:25: 9f:09:d9:77:8e:95:a1:93:64:58:a6:85:52:2d:d9:f0:49:a3: a2:28:62:42:e2:81:bf:72:3c:bf:e9:a2:9a:4c:51:99:25:33: ab:fd:78:7c:b0:79:e7:5f:93:7c:a9:c4:cc:2e:29:9c:0f:a1: 47:51:ba:07:34:2b:b5:ed:ad:a8:0c:ad:1d:b8:2c:5d:1d:65: 9c:6e:27:35:2d:e0:ab:3c:9c:aa:d5:33:bb:dc:d2:19:a7:e3: 00:72:56:10:20:e5:87:b0:72:a6:c8:79:5f:d8:e3:80:9d:fc: d7:5f:c4:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1QUExMTAvBgNVBAUTKEYzMjhENzlDQUVDQjE0NUYyMkRGREY4Q0RFQzJEMDU2 OUM2OTc2N0MwHhcNMjUwNDI0MTkzMzQ2WhcNMjUwNTAxMTkzMzQ2WjAYMRYwFAYD VQQDEw02ODBhOTIxYS03ZmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVtFICts3Thezk2qD3ZfmzaNMVmr2VtEDRb7AtzBAiTI5Vbc5h4jgY9o/wQ3 rSdzP5WIIAe2GMdYD/on7fzCZ8ZPHX88GIyO8IPZyH3V/DtE4mjn5L8Hyo6wWjEc dQKQQs5zWZY4VVMSk1G6SHCtYAfVub5VhYsd0sgK9LROFNkMBw6/nzAwjO4rIjTq EXuOh0I7yQSdgXmsJUinoyFWdYq4eMdP2lz0HjW4V0ytkh0rcVlHew04/IXjs7yi VPlSaN6QTxtfVKnZggpbUBtlycGh1mouGK5z8bCTQiTYiuY0LHyf70J6LNz9ZD0q 1dqNI4psEli2SlSnPUftAFkdvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwPQCKM RG6glYSAuBL2fJ5WMAIBMB8GA1UdIwQYMBaAFPMo15yuyxRfIt/fjN7C0FacaXZ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVBQS8zRUZBMjQxNDYy RTAxMUVBQTZENTlBMkNDNEY5QUUwMi84eWpYbks3TEZGOGkzOS1NM3NMUVZweHBk bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh5alhuSzdMRkY4aTM5LU0zc0xRVnB4cGRudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTVBQS8zRUZBMjQxNDYyRTAxMUVBQTZENTlBMkNDNEY5QUUwMi84eWpYbks3TEZG OGkzOS1NM3NMUVZweHBkbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu84wpQYSLXhJaXUVsXEvpElrwxD5ZzYjtUXJh8ztkNUh7IgT7nHwn e9W0amK/t6o27tl+7lBT79GjJSogR3ngQ1I5UuGukz9IDUnfF9g3JkJqLrmzaJOQ qqeM5Ytjp2tEZvFcR5fC1PTm6lPCfDS8B4UdACI2r1o73Q/A41Vz4eFyHwoJjXUz bsq0ZXns2CWfCdl3jpWhk2RYpoVSLdnwSaOiKGJC4oG/cjy/6aKaTFGZJTOr/Xh8 sHnnX5N8qcTMLimcD6FHUboHNCu17a2oDK0duCxdHWWcbic1LeCrPJyq1TO73NIZ p+MAclYQIOWHsHKmyHlf2OOAnfzXX8RJ -----END CERTIFICATE-----Generated at Sat Apr 26 05:48:06 2025 by rpki-client