$ rpki-client -vvf rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft File: wP8fMmfYrZgSiz45fM_3lzt1CM0.mft (raw, json) Hash identifier: fflGm8dO/WL62dCjuek0fbbo3+fn/4nJkiDsbYUM0Kw= Subject key identifier: 4A:1A:86:92:17:3B:1E:4D:65:A3:0D:05:96:6A:1E:58:CD:F9:8F:10 Authority key identifier: C0:FF:1F:32:67:D8:AD:98:12:8B:3E:39:7C:CF:F7:97:3B:75:08:CD Certificate issuer: /CN=A91653D3/serialNumber=C0FF1F3267D8AD98128B3E397CCFF7973B7508CD Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft Manifest number: AB Signing time: Fri 25 Apr 2025 05:05:57 +0000 Manifest this update: Fri 25 Apr 2025 05:05:57 +0000 Manifest next update: Fri 02 May 2025 05:05:57 +0000 Files and hashes: 1: wP8fMmfYrZgSiz45fM_3lzt1CM0.crl (hash: tUJRRqef9iulxJNrsW8bWG+qfDI1nDKBWdjclMwPlCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.crl rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91653D3, serialNumber=C0FF1F3267D8AD98128B3E397CCFF7973B7508CD Validity Not Before: Apr 25 05:05:57 2025 GMT Not After : May 2 05:05:57 2025 GMT Subject: CN=680b1835-4161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:09:90:f1:72:6a:56:a9:d8:9e:8b:4b:85:bc: 09:36:e9:cd:3d:b0:15:18:3d:9c:07:ee:e9:6a:91: 30:c4:40:17:6a:1c:c3:67:39:08:14:3a:07:4c:10: c5:39:5f:6b:78:24:e1:f5:aa:8b:f9:bd:d1:70:fc: 39:6a:2e:8d:5f:f7:66:64:e0:10:c0:0c:92:2f:ea: b7:dc:42:6e:c6:99:a9:88:2d:88:d3:50:68:fd:ac: e3:1f:da:9d:28:cb:0d:b8:eb:1e:42:8a:d3:c8:c5: 7f:43:81:7b:4e:bd:8b:70:7d:d3:d1:86:a2:3f:2b: 03:ab:cd:20:3d:60:27:c1:f0:f1:1b:9d:ab:29:69: d0:06:fe:e9:03:71:63:ff:64:0b:c9:aa:81:eb:43: 03:82:56:8d:4b:94:9e:0b:64:89:8b:7b:31:7d:0a: 99:9d:72:5e:c1:0a:07:7f:35:8a:49:45:24:e5:c9: 7f:f1:02:26:5d:23:ed:42:ec:a3:4b:14:c7:8d:9e: 2f:22:43:5c:a9:55:c3:31:77:30:21:d0:8d:35:55: 84:3a:8b:a2:20:5c:82:ac:ee:99:29:c5:82:a7:70: 34:d4:ae:8b:7a:85:6d:e1:6c:ec:20:33:ed:86:76: ca:c0:18:57:65:8b:bb:ad:41:f2:a7:18:72:ca:ac: 04:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1A:86:92:17:3B:1E:4D:65:A3:0D:05:96:6A:1E:58:CD:F9:8F:10 X509v3 Authority Key Identifier: keyid:C0:FF:1F:32:67:D8:AD:98:12:8B:3E:39:7C:CF:F7:97:3B:75:08:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b7:5a:c0:53:30:24:05:00:0a:b5:79:fa:48:1d:a8:82:40: f8:da:a1:b3:1e:a3:86:a4:cb:00:b0:00:e0:b9:56:58:ff:e5: 88:4d:f2:99:1d:dc:dd:d0:de:1b:8c:f8:c7:a3:80:10:b0:aa: 90:c9:fe:b7:b0:bf:8c:06:09:83:47:67:36:0a:cf:f4:92:78: ab:d1:12:ab:86:bf:01:4f:05:59:f6:c6:7b:5a:1a:9e:0a:26: 0a:b9:e7:14:fb:78:9d:22:c7:91:91:38:a3:f6:74:8f:5d:7b: 36:2d:ba:25:f8:0b:07:b2:b0:2b:db:6e:21:77:8f:34:02:09: db:25:0f:d7:a5:9f:95:32:a9:18:ea:ed:fd:fb:86:0c:89:c6: a0:86:3a:19:33:60:4b:25:75:cb:ca:7e:86:a0:b5:ef:84:c2: 33:4f:a6:4c:be:26:b4:38:72:e0:05:92:64:60:2e:79:c8:ab: 10:5b:c4:44:0f:36:05:4e:a4:1f:f0:bc:98:26:36:43:b4:e6: d0:34:55:47:06:94:c8:4f:f5:20:6b:61:2b:12:17:35:e5:5f: 36:97:ec:59:0c:95:b9:d7:df:b0:24:01:9a:88:ff:31:79:34: 4e:55:24:0e:84:83:29:75:0f:16:b3:fc:de:6a:89:5a:79:82: d1:1b:b2:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUzRDMxMTAvBgNVBAUTKEMwRkYxRjMyNjdEOEFEOTgxMjhCM0UzOTdDQ0ZGNzk3 M0I3NTA4Q0QwHhcNMjUwNDI1MDUwNTU3WhcNMjUwNTAyMDUwNTU3WjAYMRYwFAYD VQQDEw02ODBiMTgzNS00MTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywmQ8XJqVqnYnotLhbwJNunNPbAVGD2cB+7papEwxEAXahzDZzkIFDoHTBDF OV9reCTh9aqL+b3RcPw5ai6NX/dmZOAQwAySL+q33EJuxpmpiC2I01Bo/azjH9qd KMsNuOseQorTyMV/Q4F7Tr2LcH3T0YaiPysDq80gPWAnwfDxG52rKWnQBv7pA3Fj /2QLyaqB60MDglaNS5SeC2SJi3sxfQqZnXJewQoHfzWKSUUk5cl/8QImXSPtQuyj SxTHjZ4vIkNcqVXDMXcwIdCNNVWEOouiIFyCrO6ZKcWCp3A01K6LeoVt4WzsIDPt hnbKwBhXZYu7rUHypxhyyqwEOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEoahpIX Ox5NZaMNBZZqHljN+Y8QMB8GA1UdIwQYMBaAFMD/HzJn2K2YEos+OXzP95c7dQjN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTNEMy80MjUyOUY5RTFE ODgxMUVGQTNDNjRBNUVDNEY5QUUwMi93UDhmTW1mWXJaZ1NpejQ1Zk1fM2x6dDFD TTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dQOGZNbWZZclpnU2l6NDVmTV8zbHp0MUNNMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTNEMy80MjUyOUY5RTFEODgxMUVGQTNDNjRBNUVDNEY5QUUwMi93UDhmTW1mWXJa Z1NpejQ1Zk1fM2x6dDFDTTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAet1rAUzAkBQAKtXn6SB2ogkD42qGzHqOGpMsAsADguVZY/+WITfKZ Hdzd0N4bjPjHo4AQsKqQyf63sL+MBgmDR2c2Cs/0knir0RKrhr8BTwVZ9sZ7Whqe CiYKuecU+3idIseRkTij9nSPXXs2Lbol+AsHsrAr224hd480AgnbJQ/XpZ+VMqkY 6u39+4YMicaghjoZM2BLJXXLyn6GoLXvhMIzT6ZMvia0OHLgBZJkYC55yKsQW8RE DzYFTqQf8LyYJjZDtObQNFVHBpTIT/Uga2ErEhc15V82l+xZDJW519+wJAGaiP8x eTROVSQOhIMpdQ8Ws/zeaolaeYLRG7LF -----END CERTIFICATE-----Generated at Sat Apr 26 04:37:48 2025 by rpki-client