$ rpki-client -vvf rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft File: zQysDn6E4-geSHYXTiwhQIUJQmk.mft (raw, json) Hash identifier: doltes4qFcnpogsHfb65P1uYbQbWWbV0XHC7y4jSdl8= Subject key identifier: F5:6C:6B:5C:4B:DD:60:59:26:B0:FA:6E:C3:4C:CF:6A:AF:65:CE:0B Authority key identifier: CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69 Certificate issuer: /CN=A914D249/serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269 Certificate serial: 02F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft Manifest number: 02ED Signing time: Fri 25 Apr 2025 01:07:20 +0000 Manifest this update: Fri 25 Apr 2025 01:07:19 +0000 Manifest next update: Fri 02 May 2025 01:07:19 +0000 Files and hashes: 1: zQysDn6E4-geSHYXTiwhQIUJQmk.crl (hash: bl1NX2JIwcmR14iTXhCrtuv8AxLHLQY9GU84otRZZWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:07:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 760 (0x2f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D249, serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269 Validity Not Before: Apr 25 01:07:19 2025 GMT Not After : May 2 01:07:19 2025 GMT Subject: CN=680ae048-aa00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d0:17:75:b9:91:e8:3c:3f:85:ff:a0:ce:61: c8:19:63:54:e1:23:13:f9:b1:05:50:8a:07:e4:05: 1d:af:30:d3:57:d5:c2:5e:82:95:ca:a8:e0:c5:6c: 40:36:ae:22:08:2f:ed:c0:8d:04:36:ae:f5:36:30: a7:0c:f3:94:35:b8:8c:e4:3c:1e:65:7b:9e:59:f3: 9c:90:51:35:bb:0a:25:ca:44:fd:a9:64:05:9e:eb: ce:23:80:77:fa:cf:d0:ab:4f:2c:15:06:ef:65:20: 55:36:82:e4:50:56:3a:c7:c7:11:6e:2e:a7:b4:29: 50:03:38:f0:69:7b:ea:4d:1b:85:35:26:c4:e5:1e: 02:91:22:ac:e5:36:28:fe:72:b9:41:06:e3:c2:54: ff:bc:90:49:0a:60:e8:50:67:49:7c:3d:88:b7:2c: 2b:28:c6:47:41:13:ba:e3:c6:18:c6:f8:3f:ac:da: e6:10:ef:35:74:b0:f2:d9:46:b1:72:dc:01:05:44: d9:2d:44:de:92:fd:08:c6:12:84:76:6b:56:bb:88: 51:18:04:a2:f6:61:7a:ff:f1:7b:61:3f:8b:e6:5c: 0e:73:e4:60:c9:d1:77:5f:a1:79:a4:10:1e:fe:04: b3:6d:19:01:89:35:8d:17:f5:d7:44:3b:64:ac:7a: 09:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:6C:6B:5C:4B:DD:60:59:26:B0:FA:6E:C3:4C:CF:6A:AF:65:CE:0B X509v3 Authority Key Identifier: keyid:CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:63:46:fa:dc:c5:9c:e7:db:11:45:12:d2:58:90:05:bf:c9: 9e:d9:e0:8c:be:6b:84:fc:b0:18:89:47:eb:23:45:77:fc:13: e5:79:4b:c8:f8:40:ab:26:98:e7:60:4a:bc:dd:2b:9a:17:33: f2:01:08:f8:ce:8e:bd:47:f5:d4:c1:98:4b:33:2a:c7:41:bd: 24:e6:be:ba:fd:47:48:74:c8:85:92:cb:01:72:68:8b:99:b2: a2:f2:61:54:85:bd:0b:28:71:fd:15:1c:09:50:49:fb:22:d4: 36:b5:9a:33:9a:24:c2:c4:9b:07:65:d1:52:ff:f2:af:aa:70: 0a:fd:e9:3b:1e:10:96:c4:23:9a:63:f2:1a:ab:78:e9:54:f1: 4c:2c:07:08:20:a4:de:7b:fa:4c:13:49:cf:fa:36:22:b4:8e: ed:5e:59:74:c2:44:dd:3a:ce:6b:28:82:5d:fe:ab:08:5b:89: 97:0c:39:b2:67:98:3e:b9:0c:51:fe:43:15:e0:05:e3:48:4b: 3f:8e:5d:d0:23:8f:66:a0:6a:b3:e4:0e:15:2c:8c:b4:37:87: ea:ed:3e:be:35:5d:d6:65:df:b9:3b:87:6a:2c:b3:70:3f:8d: 2b:82:7d:e7:a5:4e:21:be:1c:ce:66:e4:0d:30:17:a7:1f:0a: 2a:62:92:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQyNDkxMTAvBgNVBAUTKENEMENBQzBFN0U4NEUzRTgxRTQ4NzYxNzRFMkMyMTQw ODUwOTQyNjkwHhcNMjUwNDI1MDEwNzE5WhcNMjUwNTAyMDEwNzE5WjAYMRYwFAYD VQQDEw02ODBhZTA0OC1hYTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9AXdbmR6Dw/hf+gzmHIGWNU4SMT+bEFUIoH5AUdrzDTV9XCXoKVyqjgxWxA Nq4iCC/twI0ENq71NjCnDPOUNbiM5DweZXueWfOckFE1uwolykT9qWQFnuvOI4B3 +s/Qq08sFQbvZSBVNoLkUFY6x8cRbi6ntClQAzjwaXvqTRuFNSbE5R4CkSKs5TYo /nK5QQbjwlT/vJBJCmDoUGdJfD2ItywrKMZHQRO648YYxvg/rNrmEO81dLDy2Uax ctwBBUTZLUTekv0IxhKEdmtWu4hRGASi9mF6//F7YT+L5lwOc+RgydF3X6F5pBAe /gSzbRkBiTWNF/XXRDtkrHoJwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPVsa1xL 3WBZJrD6bsNMz2qvZc4LMB8GA1UdIwQYMBaAFM0MrA5+hOPoHkh2F04sIUCFCUJp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDI0OS83NkNFODQ1NkUw MjUxMUVDQjJGQjBFMjdDNEY5QUUwMi96UXlzRG42RTQtZ2VTSFlYVGl3aFFJVUpR bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pReXNEbjZFNC1nZVNIWVhUaXdoUUlVSlFtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDI0OS83NkNFODQ1NkUwMjUxMUVDQjJGQjBFMjdDNEY5QUUwMi96UXlzRG42RTQt Z2VTSFlYVGl3aFFJVUpRbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYY0b63MWc59sRRRLSWJAFv8me2eCMvmuE/LAYiUfrI0V3/BPleUvI +ECrJpjnYEq83SuaFzPyAQj4zo69R/XUwZhLMyrHQb0k5r66/UdIdMiFkssBcmiL mbKi8mFUhb0LKHH9FRwJUEn7ItQ2tZozmiTCxJsHZdFS//KvqnAK/ek7HhCWxCOa Y/Iaq3jpVPFMLAcIIKTee/pME0nP+jYitI7tXll0wkTdOs5rKIJd/qsIW4mXDDmy Z5g+uQxR/kMV4AXjSEs/jl3QI49moGqz5A4VLIy0N4fq7T6+NV3WZd+5O4dqLLNw P40rgn3npU4hvhzOZuQNMBenHwoqYpJD -----END CERTIFICATE-----Generated at Sat Apr 26 17:11:30 2025 by rpki-client