$ rpki-client -vvf rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft File: nQdEbvmfPFfCnFgta3rKRzX05HA.mft (raw, json) Hash identifier: IOILeZfLJTo+XjLYOUn1QiYvr8tTlK8tt1T/bPaFexE= Subject key identifier: E7:6D:95:FE:02:FD:B8:FA:F8:B8:23:6E:F2:36:49:A5:06:A5:F1:3F Authority key identifier: 9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 Certificate issuer: /CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Certificate serial: 0824 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft Manifest number: 07ED Signing time: Fri 02 May 2025 21:20:51 +0000 Manifest this update: Fri 02 May 2025 21:20:51 +0000 Manifest next update: Fri 09 May 2025 21:20:51 +0000 Files and hashes: 1: nQdEbvmfPFfCnFgta3rKRzX05HA.crl (hash: XsLrQldKogfem2DvKhFHRE/vEhUSNSqdZXYNVBcj25U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 21:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2084 (0x824) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917190F, serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Validity Not Before: May 2 21:20:51 2025 GMT Not After : May 9 21:20:51 2025 GMT Subject: CN=68153733-4098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:ad:7c:13:1c:82:b6:71:85:de:72:a7:af:6f: 64:db:59:c0:c8:f0:20:6b:a0:6e:08:fc:05:7a:96: 91:9d:e0:04:09:0a:e4:c9:db:44:67:9c:48:56:d0: 9c:80:be:ff:77:72:31:0f:4e:79:e9:af:9d:56:cc: f8:fc:b2:07:0f:0f:a6:62:a2:fc:6e:a2:f8:de:f1: d3:db:a0:7a:38:f3:4c:94:b9:9f:b3:c9:e0:2b:c6: 71:bd:c4:f0:49:2c:fa:c4:54:fd:d5:f7:73:4b:63: ff:1a:fc:6d:88:6b:ca:9f:f3:f3:0d:a2:f4:73:59: 3f:cf:9a:85:3a:f9:84:1f:f4:c3:48:3e:39:d6:7a: 90:e2:8e:ba:2a:f9:57:4a:f6:38:c3:4a:96:b5:d4: 35:22:78:c8:03:74:5c:33:6e:4a:cf:ea:5b:54:38: 21:ce:d5:90:0b:a1:de:35:d0:a1:4e:55:9c:6c:1a: 5a:93:9c:46:59:a0:9e:0b:08:34:89:1d:6c:c2:fc: bb:11:a0:d3:ba:3b:71:3e:27:30:0f:fa:60:54:6d: 0a:f6:0c:ed:27:fd:c8:95:a2:8f:63:dc:ba:05:8a: ef:ba:f0:3f:86:75:e2:1d:b9:91:af:dd:4e:7f:07: 9c:ea:d3:c2:66:48:4a:24:20:ab:8a:ad:f5:20:7d: 7a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:6D:95:FE:02:FD:B8:FA:F8:B8:23:6E:F2:36:49:A5:06:A5:F1:3F X509v3 Authority Key Identifier: keyid:9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:5f:6b:c1:ee:29:cc:a4:75:50:b0:13:b5:3b:b8:8a:61:d2: ca:9b:f6:0b:d6:32:29:ce:97:c8:0e:b3:b2:07:d8:46:72:ad: 36:d5:b4:fa:af:b9:a0:07:5b:d0:df:65:5b:04:42:4c:bd:14: 26:dd:0d:87:20:09:d2:50:05:80:a7:aa:bc:fe:ca:d4:1e:d9: d8:f4:be:ce:91:0c:1f:16:53:1e:d3:ef:70:98:49:ca:0f:b9: e3:5a:6f:a6:f2:04:46:67:3c:01:c1:46:72:f3:9b:14:05:e4: dd:65:b4:98:90:31:c8:a0:58:6a:4d:6c:55:02:14:e5:24:8f: ea:b2:ab:55:ed:25:1a:f6:92:79:81:4d:0d:73:04:7e:f0:87: 92:31:61:ba:7f:97:67:a1:c0:c2:b1:d6:23:2a:1f:25:77:4a: ec:be:c0:ca:84:4b:7e:5f:4f:f0:4c:92:7c:60:cb:48:24:f8: ad:db:33:af:e0:e6:36:07:eb:11:28:31:f6:fa:22:07:11:6d: 77:2b:8d:67:bf:74:5e:3b:28:c7:09:2b:1c:c4:85:ef:be:2f: 91:e0:ef:14:96:ab:65:24:01:19:ad:fd:40:4e:f5:6a:62:2e: 22:26:40:4c:d0:ee:d0:3a:c1:0c:1f:da:2d:24:cc:7c:38:11: 73:81:75:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5MEYxMTAvBgNVBAUTKDlEMDc0NDZFRjk5RjNDNTdDMjlDNTgyRDZCN0FDQTQ3 MzVGNEU0NzAwHhcNMjUwNTAyMjEyMDUxWhcNMjUwNTA5MjEyMDUxWjAYMRYwFAYD VQQDEw02ODE1MzczMy00MDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+q18ExyCtnGF3nKnr29k21nAyPAga6BuCPwFepaRneAECQrkydtEZ5xIVtCc gL7/d3IxD0556a+dVsz4/LIHDw+mYqL8bqL43vHT26B6OPNMlLmfs8ngK8ZxvcTw SSz6xFT91fdzS2P/GvxtiGvKn/PzDaL0c1k/z5qFOvmEH/TDSD451nqQ4o66KvlX SvY4w0qWtdQ1InjIA3RcM25Kz+pbVDghztWQC6HeNdChTlWcbBpak5xGWaCeCwg0 iR1swvy7EaDTujtxPicwD/pgVG0K9gztJ/3IlaKPY9y6BYrvuvA/hnXiHbmRr91O fwec6tPCZkhKJCCriq31IH167QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOdtlf4C /bj6+LgjbvI2SaUGpfE/MB8GA1UdIwQYMBaAFJ0HRG75nzxXwpxYLWt6ykc19ORw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTkwRi9CM0NBNzZDMEZB MzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBGZkNuRmd0YTNyS1J6WDA1 SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RZEVidm1mUEZmQ25GZ3RhM3JLUnpYMDVIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTkwRi9CM0NBNzZDMEZBMzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBG ZkNuRmd0YTNyS1J6WDA1SEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfX2vB7inMpHVQsBO1O7iKYdLKm/YL1jIpzpfIDrOyB9hGcq021bT6 r7mgB1vQ32VbBEJMvRQm3Q2HIAnSUAWAp6q8/srUHtnY9L7OkQwfFlMe0+9wmEnK D7njWm+m8gRGZzwBwUZy85sUBeTdZbSYkDHIoFhqTWxVAhTlJI/qsqtV7SUa9pJ5 gU0NcwR+8IeSMWG6f5dnocDCsdYjKh8ld0rsvsDKhEt+X0/wTJJ8YMtIJPit2zOv 4OY2B+sRKDH2+iIHEW13K41nv3ReOyjHCSscxIXvvi+R4O8UlqtlJAEZrf1ATvVq Yi4iJkBM0O7QOsEMH9otJMx8OBFzgXVC -----END CERTIFICATE-----Generated at Sat May 3 18:00:18 2025 by rpki-client