$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft File: 89pR_oC82pcIdSXiBGIeqfVXQZk.mft (raw, json) Hash identifier: b46swfFQPMx6XZOFGox0dh0rHzF/JqqVD9q7IZzsPVE= Subject key identifier: FB:FD:2B:B7:CC:10:F4:4A:81:5D:40:98:2B:D2:08:47:F2:90:97:98 Authority key identifier: F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99 Certificate issuer: /CN=A9147CDA/serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199 Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft Manifest number: 018E Signing time: Fri 25 Apr 2025 03:06:01 +0000 Manifest this update: Fri 25 Apr 2025 03:06:00 +0000 Manifest next update: Fri 02 May 2025 03:06:00 +0000 Files and hashes: 1: 89pR_oC82pcIdSXiBGIeqfVXQZk.crl (hash: Q9zhU9o0fIJBM6pPQJ0nseVX2JGt80lt65QdqgRaOoo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.crl rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147CDA, serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199 Validity Not Before: Apr 25 03:06:00 2025 GMT Not After : May 2 03:06:00 2025 GMT Subject: CN=680afc19-4bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:90:57:92:7f:76:1f:ed:b2:8d:23:36:65:5b: 74:9b:f8:70:c8:d6:6e:5e:d8:a7:69:d3:77:b2:a4: cb:6e:a6:85:94:95:32:2d:43:63:e0:3d:b2:4d:36: 60:45:b7:61:7b:b9:8d:c9:5d:36:1c:7f:2a:05:9b: c4:91:ad:c3:65:79:ad:9c:d5:15:7b:da:3e:0f:34: a9:62:21:ff:77:87:53:4a:57:5b:c5:b9:9c:25:c9: 9e:0c:e7:a6:5e:1a:c6:23:77:2e:45:a8:f1:35:da: c7:e8:3e:4f:4e:90:06:4b:70:8a:d7:53:68:aa:8a: 85:98:1f:dc:1a:ba:29:12:28:f4:7a:57:ee:43:19: 7d:76:3f:63:31:c5:cf:63:6e:b1:c8:78:db:45:4f: 96:c2:93:5a:ee:1c:09:cc:fc:c2:65:3c:83:d5:53: 70:4c:0f:4d:a2:8e:8e:a3:56:9f:6d:3a:72:f4:44: 39:ea:dc:c4:7f:14:42:ad:59:8f:8f:d5:e8:33:2e: f6:5c:04:c9:fa:8e:d8:25:14:02:c7:21:96:a1:29: a8:ef:1c:cd:4d:02:d5:25:de:49:7f:82:e6:78:01: ea:3b:94:5b:69:72:60:d8:ab:56:11:12:7c:11:cf: dd:50:c7:78:66:96:01:82:79:cc:7e:97:8b:ba:d7: 6c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:FD:2B:B7:CC:10:F4:4A:81:5D:40:98:2B:D2:08:47:F2:90:97:98 X509v3 Authority Key Identifier: keyid:F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:53:76:84:5b:6e:27:32:6d:a4:12:d9:6e:25:82:f8:09:b5: a7:3a:1f:4f:98:45:60:28:bb:27:dc:2c:be:d4:a6:19:bd:d3: 2a:94:07:fb:01:99:97:f6:c8:bf:f2:61:a1:fa:59:d5:b0:45: 98:21:b6:d7:f6:d1:a8:20:42:3f:2a:37:04:5a:83:09:8a:46: 5f:2b:0f:9a:13:2c:69:81:6f:8f:94:b7:f9:5a:bd:ee:63:5f: a9:3a:c6:d9:e8:68:2f:1a:aa:ad:10:70:12:f2:59:14:aa:f2: 5a:5d:75:99:3c:71:52:31:b2:a5:71:22:69:19:7f:19:bc:cd: 84:01:09:fe:93:a6:10:3a:12:4d:6f:fc:65:75:e1:4e:94:fc: 3a:71:be:09:a3:8e:9e:ca:28:37:94:72:72:e8:6a:d9:f7:b3: 63:78:9e:20:a5:64:77:cd:76:dd:f3:18:92:b6:6d:71:22:f2: f6:c0:95:db:85:2f:c5:90:fa:29:91:94:fa:53:4f:4a:ee:9c: 64:b0:dc:7c:ed:12:bc:53:8d:52:3f:5a:ea:c3:6b:61:2d:17: e1:89:91:7c:75:44:fa:3e:04:06:42:32:d1:d9:63:c5:c1:fa: a7:74:2c:d5:86:14:64:4f:43:28:ab:53:fe:ca:a1:3d:16:fe: 84:80:e6:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdDREExMTAvBgNVBAUTKEYzREE1MUZFODBCQ0RBOTcwODc1MjVFMjA0NjIxRUE5 RjU1NzQxOTkwHhcNMjUwNDI1MDMwNjAwWhcNMjUwNTAyMDMwNjAwWjAYMRYwFAYD VQQDEw02ODBhZmMxOS00YmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4JBXkn92H+2yjSM2ZVt0m/hwyNZuXtinadN3sqTLbqaFlJUyLUNj4D2yTTZg Rbdhe7mNyV02HH8qBZvEka3DZXmtnNUVe9o+DzSpYiH/d4dTSldbxbmcJcmeDOem XhrGI3cuRajxNdrH6D5PTpAGS3CK11NoqoqFmB/cGropEij0elfuQxl9dj9jMcXP Y26xyHjbRU+WwpNa7hwJzPzCZTyD1VNwTA9Noo6Oo1afbTpy9EQ56tzEfxRCrVmP j9XoMy72XATJ+o7YJRQCxyGWoSmo7xzNTQLVJd5Jf4LmeAHqO5RbaXJg2KtWERJ8 Ec/dUMd4ZpYBgnnMfpeLutdsSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPv9K7fM EPRKgV1AmCvSCEfykJeYMB8GA1UdIwQYMBaAFPPaUf6AvNqXCHUl4gRiHqn1V0GZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0NEQS80OUIyN0Q4QTA1 NEQxMUVFOURGQzE2MjRDNEY5QUUwMi84OXBSX29DODJwY0lkU1hpQkdJZXFmVlhR WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5cFJfb0M4MnBjSWRTWGlCR0llcWZWWFFaay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0NEQS80OUIyN0Q4QTA1NEQxMUVFOURGQzE2MjRDNEY5QUUwMi84OXBSX29DODJw Y0lkU1hpQkdJZXFmVlhRWmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/U3aEW24nMm2kEtluJYL4CbWnOh9PmEVgKLsn3Cy+1KYZvdMqlAf7 AZmX9si/8mGh+lnVsEWYIbbX9tGoIEI/KjcEWoMJikZfKw+aEyxpgW+PlLf5Wr3u Y1+pOsbZ6GgvGqqtEHAS8lkUqvJaXXWZPHFSMbKlcSJpGX8ZvM2EAQn+k6YQOhJN b/xldeFOlPw6cb4Jo46eyig3lHJy6GrZ97NjeJ4gpWR3zXbd8xiStm1xIvL2wJXb hS/FkPopkZT6U09K7pxksNx87RK8U41SP1rqw2thLRfhiZF8dUT6PgQGQjLR2WPF wfqndCzVhhRkT0Moq1P+yqE9Fv6EgOap -----END CERTIFICATE-----Generated at Sat Apr 26 05:04:17 2025 by rpki-client