$ rpki-client -vvf rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.mft File: 5MpluNDHsWXZwip6vfgapm-q1NE.mft (raw, json) Hash identifier: ceGrq5wNsFzMiNuGrrDmmNVU88USOn1S9yKvjFpkhHg= Subject key identifier: E0:B4:90:E3:85:28:82:0F:03:DB:FD:FD:B0:BA:23:08:42:0E:F0:A8 Authority key identifier: E4:CA:65:B8:D0:C7:B1:65:D9:C2:2A:7A:BD:F8:1A:A6:6F:AA:D4:D1 Certificate issuer: /CN=A915EAAF/serialNumber=E4CA65B8D0C7B165D9C22A7ABDF81AA66FAAD4D1 Certificate serial: 3472 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5MpluNDHsWXZwip6vfgapm-q1NE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.mft Manifest number: 3472 Signing time: Sat 26 Apr 2025 14:39:51 +0000 Manifest this update: Sat 26 Apr 2025 14:39:51 +0000 Manifest next update: Sat 03 May 2025 14:39:51 +0000 Files and hashes: 1: 5MpluNDHsWXZwip6vfgapm-q1NE.crl (hash: yk8X+jIW7fpkBkcJXyz6OhfI+JbjU2lPDjALrS+K0I8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.crl rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5MpluNDHsWXZwip6vfgapm-q1NE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:39:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13426 (0x3472) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EAAF, serialNumber=E4CA65B8D0C7B165D9C22A7ABDF81AA66FAAD4D1 Validity Not Before: Apr 26 14:39:51 2025 GMT Not After : May 3 14:39:51 2025 GMT Subject: CN=680cf037-9bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:48:3d:fa:00:ac:2a:11:5e:15:53:19:c1:21: 58:88:83:e9:2b:f4:36:ff:cb:71:a2:fa:a1:10:5b: 84:9f:f6:f5:0a:ce:ee:8a:2b:53:90:b9:7c:fc:77: f5:55:ef:05:77:f3:3a:a6:cf:ea:5e:62:f8:82:56: 99:78:42:a9:1d:71:75:ac:be:25:0b:56:57:34:5f: 0a:6d:ec:5a:c3:b0:a7:eb:e3:0e:ce:02:79:9e:49: e0:6c:51:e9:e8:ee:2f:e9:b2:f5:d8:06:de:36:22: 2b:1b:e2:d9:9b:77:b4:cf:b4:9b:c1:e3:51:bb:eb: 0e:28:b5:db:69:c5:ef:eb:c7:78:c4:29:91:e6:be: b4:34:9b:f0:4e:a8:45:c9:d0:df:b8:25:e1:5a:3b: 32:f5:bb:ec:24:bf:21:da:78:0b:8c:63:c0:84:42: b3:a6:57:1a:90:31:59:ce:9b:e6:c9:21:7d:62:cf: cc:d2:74:6c:98:8e:51:11:0a:d6:ea:e7:34:d8:37: cf:9b:f4:17:b6:b8:a0:79:b5:4c:a4:6e:26:db:f4: 93:0c:3b:9e:bb:64:aa:e5:a1:c8:0e:b8:6b:c1:e0: d9:5d:fe:89:b1:07:bd:ec:4b:79:9e:72:59:c3:97: 8b:1d:fc:73:7c:1a:ee:ce:18:6f:bf:fb:22:a2:13: 75:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B4:90:E3:85:28:82:0F:03:DB:FD:FD:B0:BA:23:08:42:0E:F0:A8 X509v3 Authority Key Identifier: keyid:E4:CA:65:B8:D0:C7:B1:65:D9:C2:2A:7A:BD:F8:1A:A6:6F:AA:D4:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5MpluNDHsWXZwip6vfgapm-q1NE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:73:79:a4:9e:2f:3b:a7:9e:ad:9b:c9:f3:62:68:d8:1f:ac: 93:c9:e8:5f:bb:f0:5d:02:c0:fa:cd:fb:92:40:ea:34:fe:58: 18:8f:8b:f2:fb:71:ca:11:9a:56:3b:e1:63:ed:16:a6:4e:09: 05:7d:ab:5c:1e:3d:27:8c:8b:9b:6b:a7:7f:50:c8:f0:92:84: ae:bf:a9:ac:09:55:54:b2:07:f9:87:49:ed:28:c1:27:e1:9c: fa:1a:b8:00:8c:ce:be:93:37:69:48:40:f9:4d:f8:8a:01:8f: 48:ef:8b:26:86:de:36:a5:28:f1:1c:b5:28:16:68:a7:90:07: cc:0f:92:02:48:0b:e2:ff:49:52:60:fc:fe:1c:ce:c7:b8:29: 1a:aa:4f:9f:e9:64:60:b7:34:96:82:60:7c:09:e6:0a:8f:f0: ca:0c:69:41:6b:c9:a2:1d:7e:c9:bc:74:7d:39:2f:1b:19:db: ec:07:68:61:42:9a:9e:ec:6c:c9:48:51:90:69:d5:66:1a:13: 0a:cf:f2:0e:b7:d8:f9:cf:f6:e5:bf:6b:dd:a7:10:03:0c:bb: e9:b1:aa:25:5b:f9:18:7d:67:de:f8:ac:00:11:0a:ae:be:69: f6:3f:4f:5f:17:a3:77:55:ba:3e:66:75:e6:1a:b3:60:88:94: 78:8e:ac:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVBQUYxMTAvBgNVBAUTKEU0Q0E2NUI4RDBDN0IxNjVEOUMyMkE3QUJERjgxQUE2 NkZBQUQ0RDEwHhcNMjUwNDI2MTQzOTUxWhcNMjUwNTAzMTQzOTUxWjAYMRYwFAYD VQQDEw02ODBjZjAzNy05YmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA00g9+gCsKhFeFVMZwSFYiIPpK/Q2/8txovqhEFuEn/b1Cs7uiitTkLl8/Hf1 Ve8Fd/M6ps/qXmL4glaZeEKpHXF1rL4lC1ZXNF8Kbexaw7Cn6+MOzgJ5nkngbFHp 6O4v6bL12AbeNiIrG+LZm3e0z7SbweNRu+sOKLXbacXv68d4xCmR5r60NJvwTqhF ydDfuCXhWjsy9bvsJL8h2ngLjGPAhEKzplcakDFZzpvmySF9Ys/M0nRsmI5REQrW 6uc02DfPm/QXtrigebVMpG4m2/STDDueu2Sq5aHIDrhrweDZXf6JsQe97Et5nnJZ w5eLHfxzfBruzhhvv/siohN1hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOC0kOOF KIIPA9v9/bC6IwhCDvCoMB8GA1UdIwQYMBaAFOTKZbjQx7Fl2cIqer34GqZvqtTR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUFBRi9GM0YxOEIyQzFE OEUxMUUyQTMxNEEyRUQwOEIwMkNEMi81TXBsdU5ESHNXWFp3aXA2dmZnYXBtLXEx TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVNcGx1TkRIc1dYWndpcDZ2ZmdhcG0tcTFORS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUFBRi9GM0YxOEIyQzFEOEUxMUUyQTMxNEEyRUQwOEIwMkNEMi81TXBsdU5ESHNX WFp3aXA2dmZnYXBtLXExTkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/c3mkni87p56tm8nzYmjYH6yTyehfu/BdAsD6zfuSQOo0/lgYj4vy +3HKEZpWO+Fj7RamTgkFfatcHj0njIuba6d/UMjwkoSuv6msCVVUsgf5h0ntKMEn 4Zz6GrgAjM6+kzdpSED5TfiKAY9I74smht42pSjxHLUoFminkAfMD5ICSAvi/0lS YPz+HM7HuCkaqk+f6WRgtzSWgmB8CeYKj/DKDGlBa8miHX7JvHR9OS8bGdvsB2hh Qpqe7GzJSFGQadVmGhMKz/IOt9j5z/blv2vdpxADDLvpsaolW/kYfWfe+KwAEQqu vmn2P09fF6N3Vbo+ZnXmGrNgiJR4jqym -----END CERTIFICATE-----Generated at Sat Apr 26 17:18:53 2025 by rpki-client