$ rpki-client -vvf rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft File: dKGUOXIqgzAE05VKV4ToXm6ZvME.mft (raw, json) Hash identifier: 31TsXr6r/p5QVQRgNGftlwxzS4H1y2dJ+t3QnVvK5Wk= Subject key identifier: EC:D8:18:5C:39:15:91:A5:71:37:3F:EF:72:54:C4:B6:FD:D5:90:48 Authority key identifier: 74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1 Certificate issuer: /CN=A914454E/serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1 Certificate serial: 0850 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft Manifest number: 0850 Signing time: Thu 24 Apr 2025 20:34:33 +0000 Manifest this update: Thu 24 Apr 2025 20:34:33 +0000 Manifest next update: Thu 01 May 2025 20:34:33 +0000 Files and hashes: 1: dKGUOXIqgzAE05VKV4ToXm6ZvME.crl (hash: o8jlQHW0799Lneaiz0dFwc0v/3tdgfcCNnuxxGGSuXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:34:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2128 (0x850) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914454E, serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1 Validity Not Before: Apr 24 20:34:33 2025 GMT Not After : May 1 20:34:33 2025 GMT Subject: CN=680aa059-bf6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f5:2e:e3:be:27:34:b2:ec:a6:ad:3b:8b:78: fd:51:8b:9a:dc:30:ff:8f:83:8f:2b:2c:f0:f2:f3: 69:af:d2:8d:c8:df:8a:0d:d0:5d:e4:b2:9c:d3:ea: fb:48:47:05:d8:7d:78:57:bd:d9:2a:b2:e5:19:76: f7:a1:17:fd:cb:e9:c5:f1:e9:74:88:5b:bb:a1:1e: 7a:d9:c7:3d:75:b6:7d:91:be:df:09:32:fd:54:36: 1d:ea:a4:cd:6c:5c:cf:57:25:20:89:aa:bb:42:0d: 5a:bc:53:62:89:bc:a1:fd:87:5e:75:dc:8f:e6:4e: f0:38:81:68:a7:60:d6:96:3f:7f:d9:c8:a9:17:1e: 18:10:56:8b:03:8c:cd:1b:c4:5d:82:7a:13:ad:a0: b0:6e:56:f0:71:a8:30:bb:95:81:f4:0f:32:79:4f: a8:aa:38:88:c8:74:77:0e:52:38:8f:02:f3:c9:ce: c6:4d:54:15:ce:ea:5f:7f:db:7b:b0:95:9e:fb:16: 55:1c:6a:76:26:6b:61:9f:f2:2b:f1:14:9e:fa:ca: 16:4e:09:5d:8c:5d:bb:b0:fe:34:82:c0:05:21:08: fb:63:23:e8:82:f6:e2:8b:03:74:11:b0:1a:42:dc: 5c:b1:16:09:b8:c1:97:f1:a9:05:66:80:f4:20:8e: 4e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D8:18:5C:39:15:91:A5:71:37:3F:EF:72:54:C4:B6:FD:D5:90:48 X509v3 Authority Key Identifier: keyid:74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:b2:d7:f5:a6:a3:21:ad:d7:92:95:c3:d9:09:4b:47:9f:57: a3:3e:09:e1:45:fe:ae:a7:d2:5e:78:c6:59:15:33:61:b9:00: 17:51:f7:e6:8e:8d:c3:0c:94:97:20:02:b4:a2:a3:16:83:7c: 50:d4:e0:65:be:09:99:d0:77:1e:e8:ad:0f:bc:ad:03:6a:03: 32:90:03:e4:7a:ac:11:c0:2e:88:88:f8:ae:b0:80:3f:e3:d3: 80:8f:36:6f:b2:ca:17:1b:dd:eb:cf:aa:60:9c:81:bd:e8:70: 18:a6:32:b1:f7:4d:af:35:a5:89:d3:e6:af:cf:0c:2f:61:21: f5:5d:ee:92:de:35:b6:31:79:36:7e:eb:12:16:0d:84:dc:81: 9b:cc:02:87:4b:69:e7:a2:22:cf:43:12:ba:70:6c:c9:ef:1b: 4e:5e:e0:5a:4f:da:2d:4f:37:fb:a9:fb:1f:e9:9d:95:1f:08: 47:ea:a3:78:ff:8c:59:c4:13:ae:1c:3c:45:1e:9f:65:cc:b8: 67:43:7a:89:80:9b:de:81:a9:aa:df:1a:4e:28:4f:84:b5:00: 0e:7a:ce:fa:9e:a7:14:44:d2:5d:c1:21:1a:b3:75:53:b2:53: e1:f7:75:e3:72:ca:7a:40:0d:90:60:46:83:60:3b:6f:8b:95: 4b:96:cc:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ1NEUxMTAvBgNVBAUTKDc0QTE5NDM5NzIyQTgzMzAwNEQzOTU0QTU3ODRFODVF NkU5OUJDQzEwHhcNMjUwNDI0MjAzNDMzWhcNMjUwNTAxMjAzNDMzWjAYMRYwFAYD VQQDEw02ODBhYTA1OS1iZjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fUu474nNLLspq07i3j9UYua3DD/j4OPKyzw8vNpr9KNyN+KDdBd5LKc0+r7 SEcF2H14V73ZKrLlGXb3oRf9y+nF8el0iFu7oR562cc9dbZ9kb7fCTL9VDYd6qTN bFzPVyUgiaq7Qg1avFNiibyh/YdeddyP5k7wOIFop2DWlj9/2cipFx4YEFaLA4zN G8RdgnoTraCwblbwcagwu5WB9A8yeU+oqjiIyHR3DlI4jwLzyc7GTVQVzupff9t7 sJWe+xZVHGp2Jmthn/Ir8RSe+soWTgldjF27sP40gsAFIQj7YyPogvbiiwN0EbAa QtxcsRYJuMGX8akFZoD0II5O6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzYGFw5 FZGlcTc/73JUxLb91ZBIMB8GA1UdIwQYMBaAFHShlDlyKoMwBNOVSleE6F5umbzB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDU0RS8yQUY5REJCMEM0 RDUxMUVBODAyMUE3MThDNEY5QUUwMi9kS0dVT1hJcWd6QUUwNVZLVjRUb1htNlp2 TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RLR1VPWElxZ3pBRTA1VktWNFRvWG02WnZNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDU0RS8yQUY5REJCMEM0RDUxMUVBODAyMUE3MThDNEY5QUUwMi9kS0dVT1hJcWd6 QUUwNVZLVjRUb1htNlp2TUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKstf1pqMhrdeSlcPZCUtHn1ejPgnhRf6up9JeeMZZFTNhuQAXUffm jo3DDJSXIAK0oqMWg3xQ1OBlvgmZ0Hce6K0PvK0DagMykAPkeqwRwC6IiPiusIA/ 49OAjzZvssoXG93rz6pgnIG96HAYpjKx902vNaWJ0+avzwwvYSH1Xe6S3jW2MXk2 fusSFg2E3IGbzAKHS2nnoiLPQxK6cGzJ7xtOXuBaT9otTzf7qfsf6Z2VHwhH6qN4 /4xZxBOuHDxFHp9lzLhnQ3qJgJvegamq3xpOKE+EtQAOes76nqcURNJdwSEas3VT slPh93Xjcsp6QA2QYEaDYDtvi5VLlsyE -----END CERTIFICATE-----Generated at Sat Apr 26 16:44:06 2025 by rpki-client