$ rpki-client -vvf rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft File: F_XLSRgEUqiWf5wPZjdatwnQ52g.mft (raw, json) Hash identifier: WvIwZspp1JxHpJBTLdr4fwIkg25jLu8mk+9k1MUX5c8= Subject key identifier: EB:50:7E:01:AF:47:28:1A:C7:00:67:DB:D5:B9:84:20:32:67:D4:11 Authority key identifier: 17:F5:CB:49:18:04:52:A8:96:7F:9C:0F:66:37:5A:B7:09:D0:E7:68 Certificate issuer: /CN=A917FD40/serialNumber=17F5CB49180452A8967F9C0F66375AB709D0E768 Certificate serial: 04F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft Manifest number: 0531 Signing time: Thu 24 Apr 2025 23:29:10 +0000 Manifest this update: Thu 24 Apr 2025 23:29:09 +0000 Manifest next update: Thu 01 May 2025 23:29:09 +0000 Files and hashes: 1: F_XLSRgEUqiWf5wPZjdatwnQ52g.crl (hash: 1LgjHExO506JWu9A4uVLzGKtPdhxNE4EB30d0y7HME0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.crl rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:29:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1264 (0x4f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FD40, serialNumber=17F5CB49180452A8967F9C0F66375AB709D0E768 Validity Not Before: Apr 24 23:29:09 2025 GMT Not After : May 1 23:29:09 2025 GMT Subject: CN=680ac945-6aca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c8:0c:13:90:39:7e:97:7e:1f:c8:50:37:d9: b4:8d:47:10:32:18:c3:ba:68:e2:ff:ea:cd:33:08: f1:03:78:d3:62:0e:aa:ef:9b:1e:a6:50:84:fa:ce: 7e:e1:57:6e:2d:10:99:03:d5:33:d5:36:80:35:f4: 26:e6:90:d9:46:5d:2f:12:77:25:95:b1:cd:cb:b5: 5f:f6:4e:cc:c5:91:4f:b0:78:60:a6:74:25:35:ea: 6b:3a:3f:0f:d4:37:a5:d3:29:09:53:fc:55:24:c8: 78:1f:9a:89:db:82:db:e4:49:09:4a:02:7f:95:a1: 88:42:c1:f2:25:94:3c:3f:79:a3:92:90:3f:70:df: 96:ae:5b:cb:2d:03:c4:35:28:af:26:79:1e:51:fd: 46:2f:eb:24:3c:db:55:26:c8:de:24:89:48:b0:80: 94:34:2e:63:f9:56:3d:1b:86:4c:8d:e3:85:d3:8c: 49:3b:0e:e6:5d:5c:e1:29:c1:6f:34:37:35:da:3c: 0c:9e:e2:3f:c8:78:1b:8a:e7:9e:10:8c:6f:3e:17: 39:68:53:38:25:46:52:56:f9:64:9e:44:e3:7c:b0: 64:65:b8:51:46:8b:82:7a:1b:49:6e:20:02:5c:2f: 37:ee:89:a8:c1:ac:91:4c:ff:81:5b:27:84:4f:20: 8c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:50:7E:01:AF:47:28:1A:C7:00:67:DB:D5:B9:84:20:32:67:D4:11 X509v3 Authority Key Identifier: keyid:17:F5:CB:49:18:04:52:A8:96:7F:9C:0F:66:37:5A:B7:09:D0:E7:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:b9:1e:81:24:c3:5a:13:2d:21:7f:e5:43:cf:9a:b3:50:d0: 6c:a7:76:21:6f:75:17:a9:fe:bb:67:25:07:76:85:c5:85:52: 27:db:c7:f3:cc:e9:cf:34:e4:42:7e:63:26:87:f0:3b:3e:2e: df:fa:76:e8:ad:90:ed:b2:6b:c5:1a:56:bf:88:e1:16:e8:db: bf:d9:0c:05:d6:f5:fd:e3:56:d1:3d:ae:88:0b:98:0f:74:cc: 1b:f2:ea:91:4b:f0:82:55:63:75:15:52:5b:b9:7a:b9:07:8c: 2b:db:72:bd:48:37:3a:f4:e8:99:14:6a:a0:eb:98:57:f6:07: 92:ae:08:e9:12:d1:0b:e2:c4:87:9a:91:38:29:58:32:48:2b: 81:4b:32:1d:c6:ba:ee:d5:6f:65:8f:4d:14:2e:f0:27:b8:2d: b5:11:2f:8b:d4:47:28:08:e4:fd:48:5b:b4:e3:09:22:b4:f9: 11:01:35:3c:b6:d4:f5:a4:10:dc:0d:4e:be:5d:60:56:1f:6b: f5:a1:a8:27:14:6d:f7:3b:33:c5:28:63:df:cf:dc:9c:bc:7a: 63:af:75:3f:40:49:a6:ca:4e:70:d4:29:20:cf:f5:bf:c4:0a: 6b:90:90:1e:a9:10:4e:a3:4f:49:0f:b4:a2:6e:c7:c6:5f:5b: 59:04:e6:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZENDAxMTAvBgNVBAUTKDE3RjVDQjQ5MTgwNDUyQTg5NjdGOUMwRjY2Mzc1QUI3 MDlEMEU3NjgwHhcNMjUwNDI0MjMyOTA5WhcNMjUwNTAxMjMyOTA5WjAYMRYwFAYD VQQDEw02ODBhYzk0NS02YWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcgME5A5fpd+H8hQN9m0jUcQMhjDumji/+rNMwjxA3jTYg6q75seplCE+s5+ 4VduLRCZA9Uz1TaANfQm5pDZRl0vEncllbHNy7Vf9k7MxZFPsHhgpnQlNeprOj8P 1Del0ykJU/xVJMh4H5qJ24Lb5EkJSgJ/laGIQsHyJZQ8P3mjkpA/cN+WrlvLLQPE NSivJnkeUf1GL+skPNtVJsjeJIlIsICUNC5j+VY9G4ZMjeOF04xJOw7mXVzhKcFv NDc12jwMnuI/yHgbiueeEIxvPhc5aFM4JUZSVvlknkTjfLBkZbhRRouCehtJbiAC XC837omowayRTP+BWyeETyCMgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtQfgGv RygaxwBn29W5hCAyZ9QRMB8GA1UdIwQYMBaAFBf1y0kYBFKoln+cD2Y3WrcJ0Odo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkQ0MC9GQzIxOTU1RTBC RDYxMUVDOEY5OUQwNjNDNEY5QUUwMi9GX1hMU1JnRVVxaVdmNXdQWmpkYXR3blE1 MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfWExTUmdFVXFpV2Y1d1BaamRhdHduUTUyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkQ0MC9GQzIxOTU1RTBCRDYxMUVDOEY5OUQwNjNDNEY5QUUwMi9GX1hMU1JnRVVx aVdmNXdQWmpkYXR3blE1MmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOuR6BJMNaEy0hf+VDz5qzUNBsp3Yhb3UXqf67ZyUHdoXFhVIn28fz zOnPNORCfmMmh/A7Pi7f+nborZDtsmvFGla/iOEW6Nu/2QwF1vX941bRPa6IC5gP dMwb8uqRS/CCVWN1FVJbuXq5B4wr23K9SDc69OiZFGqg65hX9geSrgjpEtEL4sSH mpE4KVgySCuBSzIdxrru1W9lj00ULvAnuC21ES+L1EcoCOT9SFu04wkitPkRATU8 ttT1pBDcDU6+XWBWH2v1oagnFG33OzPFKGPfz9ycvHpjr3U/QEmmyk5w1Ckgz/W/ xAprkJAeqRBOo09JD7SibsfGX1tZBOYL -----END CERTIFICATE-----Generated at Sat Apr 26 07:59:15 2025 by rpki-client