$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft File: l0tKVlSG4EjQwXaY1yJ2cM88mac.mft (raw, json) Hash identifier: /wCAeumUCHlmEhtOdhmanWHvpKHN5wCva5YFrOTJFCs= Subject key identifier: C0:D0:BF:DE:C6:A2:D7:76:2F:B4:B7:E0:F3:49:2F:E3:E3:9E:39:7E Authority key identifier: 97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7 Certificate issuer: /CN=A916069A/serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft Manifest number: 59 Signing time: Fri 25 Apr 2025 06:07:42 +0000 Manifest this update: Fri 25 Apr 2025 06:07:42 +0000 Manifest next update: Fri 02 May 2025 06:07:41 +0000 Files and hashes: 1: l0tKVlSG4EjQwXaY1yJ2cM88mac.crl (hash: CKiwJ9Sc2WsIJFi2pTB4d6dbYC9B3lz1ryPeb4Ak2lE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.crl rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:07:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916069A, serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7 Validity Not Before: Apr 25 06:07:42 2025 GMT Not After : May 2 06:07:41 2025 GMT Subject: CN=680b26ae-19b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:59:05:88:83:c0:03:28:ce:2d:4f:a1:70:c6: ea:a6:f5:ad:bb:bd:73:da:c5:ae:af:1f:f5:ed:f8: b4:a2:ac:e0:ef:8a:05:92:d5:c8:7c:65:9c:af:71: 0b:9a:3f:b9:f7:78:45:d0:1e:db:0a:a2:c5:dd:9a: 16:bb:d9:aa:3b:37:ca:f1:2a:72:a2:f1:11:bf:ac: fa:36:4f:20:63:f6:8c:f8:97:d2:14:5f:e6:ad:64: af:c5:f3:02:32:4e:2d:42:6b:d3:8b:62:08:0e:ef: 96:d1:8b:e3:a7:dc:6c:bb:80:c8:86:db:f1:52:01: 18:d8:da:3a:67:35:5a:5c:7b:b8:2c:a2:22:ba:d8: 96:8b:c0:b1:45:5e:1b:66:5a:a6:e9:29:77:a0:8e: 91:e4:12:17:29:ea:54:ca:36:c6:0f:7c:f4:02:98: e6:c8:f5:23:1c:2e:39:2d:78:f3:ff:44:7f:af:57: 05:58:77:d7:cd:42:06:ff:37:7f:39:55:50:53:52: 82:ae:be:73:2c:34:83:34:71:cd:69:b4:d5:66:10: 5e:a3:51:ab:5c:f8:8a:97:02:fd:67:ff:1d:4d:f7: bd:5c:f5:d9:fd:f9:d1:27:69:34:28:aa:c4:27:f5: 7e:0c:f9:20:f4:7d:d4:8e:d4:cd:63:45:c3:ef:62: 01:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D0:BF:DE:C6:A2:D7:76:2F:B4:B7:E0:F3:49:2F:E3:E3:9E:39:7E X509v3 Authority Key Identifier: keyid:97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:4c:7f:26:c4:1c:a6:e2:b2:92:d3:a8:1e:d5:8b:fb:a5:1d: 33:6e:ee:77:b6:b9:ad:03:5c:09:fa:12:2b:d1:e8:42:8a:aa: 43:69:95:76:ac:66:56:aa:76:3c:60:69:bd:fd:5a:ec:66:e6: 5b:09:2b:72:f5:5e:43:1e:ca:ca:83:22:1b:92:cd:54:15:fe: 55:ba:1d:dd:f5:0e:86:cf:ce:db:a5:c2:88:82:45:87:58:07: 80:38:4c:97:9c:a9:b2:a6:08:15:68:7e:e0:cd:09:d8:2b:ac: 7c:0e:08:f2:0c:f2:3a:29:39:f7:01:8e:95:70:18:d0:fc:b1: f9:a3:6c:bb:54:ca:26:24:82:32:82:75:00:dd:68:00:96:f5: 99:4c:9f:63:51:57:39:a8:38:d0:38:2b:5a:81:54:ef:d2:f4: 89:8e:c2:f0:6b:4f:9f:04:08:35:9d:5b:89:8e:c6:27:91:d6: 73:fb:d5:42:41:f0:26:58:44:55:9e:da:48:6b:91:6b:c4:0a: 45:6a:1b:3c:02:6d:09:79:77:a0:65:a1:90:ef:ca:6b:ee:a9: ad:f9:e2:d9:54:82:10:89:72:02:d0:a5:98:d8:e7:5f:4b:72: b8:de:59:a3:a7:51:99:6f:c9:59:76:d9:17:e7:da:a2:c3:56: 5d:94:fc:c0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MDY5QTExMC8GA1UEBRMoOTc0QjRBNTY1NDg2RTA0OEQwQzE3Njk4RDcyMjc2NzBD RjNDOTlBNzAeFw0yNTA0MjUwNjA3NDJaFw0yNTA1MDIwNjA3NDFaMBgxFjAUBgNV BAMTDTY4MGIyNmFlLTE5YjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEWQWIg8ADKM4tT6Fwxuqm9a27vXPaxa6vH/Xt+LSirODvigWS1ch8ZZyvcQua P7n3eEXQHtsKosXdmha72ao7N8rxKnKi8RG/rPo2TyBj9oz4l9IUX+atZK/F8wIy Ti1Ca9OLYggO75bRi+On3Gy7gMiG2/FSARjY2jpnNVpce7gsoiK62JaLwLFFXhtm WqbpKXegjpHkEhcp6lTKNsYPfPQCmObI9SMcLjktePP/RH+vVwVYd9fNQgb/N385 VVBTUoKuvnMsNIM0cc1ptNVmEF6jUatc+IqXAv1n/x1N971c9dn9+dEnaTQoqsQn 9X4M+SD0fdSO1M1jRcPvYgGFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwNC/3sai 13YvtLfg80kv4+OeOX4wHwYDVR0jBBgwFoAUl0tKVlSG4EjQwXaY1yJ2cM88macw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwNjlBLzM2RDVENjJDOUJG MDExRUY4MUM5MDI2N0M0RjlBRTAyL2wwdEtWbFNHNEVqUXdYYVkxeUoyY004OG1h Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbDB0S1ZsU0c0RWpRd1hhWTF5SjJjTTg4bWFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw NjlBLzM2RDVENjJDOUJGMDExRUY4MUM5MDI2N0M0RjlBRTAyL2wwdEtWbFNHNEVq UXdYYVkxeUoyY004OG1hYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAFMfybEHKbispLTqB7Vi/ulHTNu7ne2ua0DXAn6EivR6EKKqkNplXas Zlaqdjxgab39Wuxm5lsJK3L1XkMeysqDIhuSzVQV/lW6Hd31DobPztulwoiCRYdY B4A4TJecqbKmCBVofuDNCdgrrHwOCPIM8jopOfcBjpVwGND8sfmjbLtUyiYkgjKC dQDdaACW9ZlMn2NRVzmoONA4K1qBVO/S9ImOwvBrT58ECDWdW4mOxieR1nP71UJB 8CZYRFWe2khrkWvECkVqGzwCbQl5d6BloZDvymvuqa354tlUghCJcgLQpZjY519L crjeWaOnUZlvyVl22Rfn2qLDVl2U/MA= -----END CERTIFICATE-----Generated at Sat Apr 26 17:13:58 2025 by rpki-client