$ rpki-client -vvf rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft File: UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft (raw, json) Hash identifier: fkdVUIUF7pbb+tLSZZbg3yKP4nlEsqv9Ef2P5ynAYqI= Subject key identifier: B2:71:CF:19:A8:0A:AB:9D:A7:02:76:7F:6E:61:7E:F8:14:D2:6D:E4 Authority key identifier: 52:B3:E8:3B:16:21:AF:B3:DC:CF:0A:CF:67:F2:7E:E0:B1:D6:C8:36 Certificate issuer: /CN=A916B30C/serialNumber=52B3E83B1621AFB3DCCF0ACF67F27EE0B1D6C836 Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft Manifest number: F4 Signing time: Thu 01 May 2025 04:10:37 +0000 Manifest this update: Thu 01 May 2025 04:10:36 +0000 Manifest next update: Thu 08 May 2025 04:10:36 +0000 Files and hashes: 1: UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl (hash: bPX1zXRoy9CxMuVnEj9A4doBXrQZ6QBYZDkesDUvMio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 04:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B30C, serialNumber=52B3E83B1621AFB3DCCF0ACF67F27EE0B1D6C836 Validity Not Before: May 1 04:10:36 2025 GMT Not After : May 8 04:10:36 2025 GMT Subject: CN=6812f43d-baa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bd:63:86:c9:c2:41:03:41:e8:65:33:77:ce: f1:13:51:af:71:08:5f:2f:79:3f:f6:f1:47:93:36: 64:db:f6:fc:b5:a2:65:4a:b9:49:b2:33:2e:9d:e4: 59:e1:c9:90:b2:76:23:d8:34:a2:c7:10:71:5e:0a: 67:79:03:39:51:36:c7:8d:7d:08:78:72:bc:92:38: 2f:e0:95:8f:9e:f3:f1:41:76:76:cd:c5:c7:30:f1: 1c:6d:f1:fe:d2:2a:98:1b:a1:59:78:10:ab:2c:9b: a4:97:3f:43:f9:fe:c5:37:60:d8:4c:ef:d1:84:f4: 33:60:da:10:74:eb:a9:16:11:65:43:6b:19:a4:b9: c0:4f:e8:3b:49:a9:5b:ae:0e:38:ae:62:15:ec:e2: 7b:83:17:53:86:08:10:2f:4d:37:83:94:a0:e6:ff: 17:a5:fb:74:dc:85:71:a0:bc:f7:63:25:c7:f1:a9: 52:ce:cb:43:a5:36:8e:a5:24:9c:f3:70:b4:8c:a9: fb:45:f8:90:76:65:9a:7d:26:f7:85:b9:ce:13:0a: e8:6a:f0:40:43:c0:e4:e6:cd:db:5f:85:9e:16:9d: f9:79:a8:36:7f:85:15:ff:f6:b2:53:35:af:64:f7: a7:93:61:bc:ff:52:3a:75:41:26:4f:e4:18:35:cc: 08:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:71:CF:19:A8:0A:AB:9D:A7:02:76:7F:6E:61:7E:F8:14:D2:6D:E4 X509v3 Authority Key Identifier: keyid:52:B3:E8:3B:16:21:AF:B3:DC:CF:0A:CF:67:F2:7E:E0:B1:D6:C8:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:78:e6:2c:da:1d:f1:27:3c:95:cd:d4:09:b4:0b:3f:39:c8: d2:47:8d:ca:c4:30:65:3d:f4:c3:bb:65:97:85:0c:c1:93:e5: 3e:c4:ea:85:dd:89:bf:7e:3f:96:46:ed:8c:88:f7:4d:a1:88: f7:30:f4:7b:0d:b0:45:9c:6d:ba:16:4a:f1:f8:9f:2e:08:df: 6f:e8:c4:58:69:75:ca:c7:88:78:af:db:67:be:92:ed:38:3d: 05:ac:f5:01:75:e0:78:b3:c7:6a:9e:dc:9e:c0:98:54:f3:43: 98:70:e4:b3:3a:e5:8f:e5:e9:1a:07:cf:70:ec:5e:fb:f7:86: c8:18:bf:32:2b:c0:27:20:d1:f3:58:a0:76:78:bc:76:fb:d1: 5b:e6:84:ab:a8:38:d8:5f:ae:e0:74:4a:f6:a5:00:8c:41:19: 48:b0:dc:01:b6:83:fc:f6:4b:c4:a6:c1:a8:19:5d:82:d1:ac: c9:6c:df:d0:40:1e:78:83:33:da:3b:08:fd:9a:59:8d:57:c2: dd:3a:fa:da:05:f6:58:2f:ed:76:2c:38:b4:62:b1:5e:e8:7a: 56:a9:04:12:b8:8b:19:12:a4:70:c5:2d:93:da:c8:59:d7:cb: d1:af:ef:71:95:1f:39:56:1d:b6:be:5d:c5:a4:37:6b:8e:d7: fc:aa:a5:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIzMEMxMTAvBgNVBAUTKDUyQjNFODNCMTYyMUFGQjNEQ0NGMEFDRjY3RjI3RUUw QjFENkM4MzYwHhcNMjUwNTAxMDQxMDM2WhcNMjUwNTA4MDQxMDM2WjAYMRYwFAYD VQQDEw02ODEyZjQzZC1iYWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr71jhsnCQQNB6GUzd87xE1GvcQhfL3k/9vFHkzZk2/b8taJlSrlJsjMuneRZ 4cmQsnYj2DSixxBxXgpneQM5UTbHjX0IeHK8kjgv4JWPnvPxQXZ2zcXHMPEcbfH+ 0iqYG6FZeBCrLJuklz9D+f7FN2DYTO/RhPQzYNoQdOupFhFlQ2sZpLnAT+g7Salb rg44rmIV7OJ7gxdThggQL003g5Sg5v8Xpft03IVxoLz3YyXH8alSzstDpTaOpSSc 83C0jKn7RfiQdmWafSb3hbnOEwroavBAQ8Dk5s3bX4WeFp35eag2f4UV//ayUzWv ZPenk2G8/1I6dUEmT+QYNcwIkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJxzxmo CqudpwJ2f25hfvgU0m3kMB8GA1UdIwQYMBaAFFKz6DsWIa+z3M8Kz2fyfuCx1sg2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjMwQy85QTg3NTQzQUIw NUUxMUVFOTdDNzhCNzVDNEY5QUUwMi9VclBvT3hZaHI3UGN6d3JQWl9KLTRMSFd5 RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyUG9PeFlocjdQY3p3clBaX0otNExIV3lEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjMwQy85QTg3NTQzQUIwNUUxMUVFOTdDNzhCNzVDNEY5QUUwMi9VclBvT3hZaHI3 UGN6d3JQWl9KLTRMSFd5RFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXeOYs2h3xJzyVzdQJtAs/OcjSR43KxDBlPfTDu2WXhQzBk+U+xOqF 3Ym/fj+WRu2MiPdNoYj3MPR7DbBFnG26Fkrx+J8uCN9v6MRYaXXKx4h4r9tnvpLt OD0FrPUBdeB4s8dqntyewJhU80OYcOSzOuWP5ekaB89w7F7794bIGL8yK8AnINHz WKB2eLx2+9Fb5oSrqDjYX67gdEr2pQCMQRlIsNwBtoP89kvEpsGoGV2C0azJbN/Q QB54gzPaOwj9mlmNV8LdOvraBfZYL+12LDi0YrFe6HpWqQQSuIsZEqRwxS2T2shZ 18vRr+9xlR85Vh22vl3FpDdrjtf8qqU1 -----END CERTIFICATE-----Generated at Sat May 3 03:03:02 2025 by rpki-client