$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft File: aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft (raw, json) Hash identifier: lvEmr3eoIKQOohw/y6WrOfvZKcFV6y8lN4nmRTiaJRU= Subject key identifier: DB:B7:1B:3D:1A:28:C7:25:98:A0:59:74:82:54:4E:26:39:B4:33:D9 Authority key identifier: 68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03 Certificate issuer: /CN=A915AF7A/serialNumber=6880D323AA3F2D5146050640F321A6129000DF03 Certificate serial: 05FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft Manifest number: 070F Signing time: Thu 24 Apr 2025 22:52:09 +0000 Manifest this update: Thu 24 Apr 2025 22:52:09 +0000 Manifest next update: Thu 01 May 2025 22:52:09 +0000 Files and hashes: 1: aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl (hash: tZTtWFdH/T4U6a+/ZVoAjO81UqNyyIuTkwDxDB+RQOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:52:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1533 (0x5fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AF7A, serialNumber=6880D323AA3F2D5146050640F321A6129000DF03 Validity Not Before: Apr 24 22:52:09 2025 GMT Not After : May 1 22:52:09 2025 GMT Subject: CN=680ac099-78fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6d:bf:7f:a3:f0:17:ec:bc:04:2b:34:39:58: 84:84:05:b8:88:fe:d8:a6:7b:68:05:ea:7f:c5:d7: 3c:01:76:f5:a6:6e:97:bd:4d:77:79:c4:11:42:07: 48:26:58:35:6c:d6:ad:27:59:d5:a6:62:48:0b:83: d6:3f:e2:85:aa:9b:90:22:d9:e2:ec:f0:d7:54:d9: a7:be:f4:b7:65:69:c6:3d:c0:72:69:a0:b6:41:57: a0:02:2b:e6:14:39:98:db:62:f1:1b:0e:75:a8:5f: 44:af:a6:6f:da:94:fd:73:62:1b:8f:f3:d3:7a:b0: 13:06:f8:19:db:ef:31:b3:0a:93:74:7b:89:e6:84: 1b:00:97:d7:89:37:b3:76:e3:3d:81:12:7c:f3:11: 68:31:38:96:08:61:47:e6:c8:03:b4:61:76:1d:88: 11:54:37:62:d0:f0:3f:1e:6c:8e:0a:b3:32:b0:eb: cf:38:97:e1:23:bb:75:4e:d6:a8:99:24:47:65:d6: ca:89:94:72:56:b9:fc:26:cc:cf:74:18:09:60:f9: de:cf:2c:b6:36:13:39:e0:c3:bd:18:ec:fa:92:da: 86:1c:e9:bc:b0:fc:e4:eb:8d:c2:0e:57:43:69:fb: a8:cb:e9:cf:b1:1a:e0:3d:65:88:cc:77:f4:21:75: 30:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B7:1B:3D:1A:28:C7:25:98:A0:59:74:82:54:4E:26:39:B4:33:D9 X509v3 Authority Key Identifier: keyid:68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:7b:9d:a2:7f:38:a9:a5:c1:bc:a2:48:22:4d:be:af:c1:a9: 24:72:22:64:f2:d5:08:5f:06:fb:1c:7a:95:6c:fb:4c:61:d4: bc:04:c6:d5:7d:c1:c1:f6:ec:66:0d:63:cf:31:ff:59:fb:b6: 02:0d:c5:df:21:da:01:8a:b0:72:a6:e9:52:2d:01:21:c5:4b: 5b:15:e7:19:06:7e:81:29:99:e8:46:61:fa:a5:d2:39:2a:5f: 9b:f6:21:0f:4f:14:80:12:1e:bb:04:75:f9:2c:4b:64:28:a2: f2:6a:e9:39:1c:99:96:f8:bc:82:6f:70:ee:62:d8:48:25:af: 0a:28:b4:7c:f0:ee:d6:d2:bd:1c:18:f8:6e:52:72:c3:8e:c9: 67:16:d6:3f:36:e4:0f:6d:37:73:0d:0d:1e:eb:76:d6:d1:c1: af:59:49:73:74:a3:e1:d4:f6:d3:25:2d:a5:a4:51:b1:89:d5: 02:31:ca:31:a1:ca:7d:e7:13:fe:1b:fd:7e:c4:e2:99:6b:5e: 8f:d4:91:f3:23:99:59:df:2a:8c:25:2d:0f:d1:ff:7d:15:88: 75:0c:88:c6:0c:dd:6c:ae:91:f4:2a:76:4c:3b:0e:db:43:10: a8:b3:3b:d4:37:76:f0:9c:63:68:83:c4:ed:40:6a:46:68:fa: 64:3d:c9:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFGN0ExMTAvBgNVBAUTKDY4ODBEMzIzQUEzRjJENTE0NjA1MDY0MEYzMjFBNjEy OTAwMERGMDMwHhcNMjUwNDI0MjI1MjA5WhcNMjUwNTAxMjI1MjA5WjAYMRYwFAYD VQQDEw02ODBhYzA5OS03OGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAym2/f6PwF+y8BCs0OViEhAW4iP7YpntoBep/xdc8AXb1pm6XvU13ecQRQgdI Jlg1bNatJ1nVpmJIC4PWP+KFqpuQItni7PDXVNmnvvS3ZWnGPcByaaC2QVegAivm FDmY22LxGw51qF9Er6Zv2pT9c2Ibj/PTerATBvgZ2+8xswqTdHuJ5oQbAJfXiTez duM9gRJ88xFoMTiWCGFH5sgDtGF2HYgRVDdi0PA/HmyOCrMysOvPOJfhI7t1Ttao mSRHZdbKiZRyVrn8JszPdBgJYPnezyy2NhM54MO9GOz6ktqGHOm8sPzk643CDldD afuoy+nPsRrgPWWIzHf0IXUw7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNu3Gz0a KMclmKBZdIJUTiY5tDPZMB8GA1UdIwQYMBaAFGiA0yOqPy1RRgUGQPMhphKQAN8D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUY3QS9FMDUzMzMzNkJB QzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi9hSURUSTZvX0xWRkdCUVpBOHlHbUVwQUEz d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FJRFRJNm9fTFZGR0JRWkE4eUdtRXBBQTN3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUY3QS9FMDUzMzMzNkJBQzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi9hSURUSTZvX0xW RkdCUVpBOHlHbUVwQUEzd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5e52ifzippcG8okgiTb6vwakkciJk8tUIXwb7HHqVbPtMYdS8BMbV fcHB9uxmDWPPMf9Z+7YCDcXfIdoBirBypulSLQEhxUtbFecZBn6BKZnoRmH6pdI5 Kl+b9iEPTxSAEh67BHX5LEtkKKLyauk5HJmW+LyCb3DuYthIJa8KKLR88O7W0r0c GPhuUnLDjslnFtY/NuQPbTdzDQ0e63bW0cGvWUlzdKPh1PbTJS2lpFGxidUCMcox ocp95xP+G/1+xOKZa16P1JHzI5lZ3yqMJS0P0f99FYh1DIjGDN1srpH0KnZMOw7b QxCoszvUN3bwnGNog8TtQGpGaPpkPcmT -----END CERTIFICATE-----Generated at Sat Apr 26 12:38:42 2025 by rpki-client