$ rpki-client -vvf rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft File: cDXbQxmt4s_Ooig68PFrYgkCbao.mft (raw, json) Hash identifier: 4uPjE/2goNlI2Oy2fmAAECzDC4wq9Up9Jz7g5Zt0JIY= Subject key identifier: 77:D2:65:33:11:99:53:33:8A:3C:89:CD:74:BA:D3:E0:19:2C:D3:BF Authority key identifier: 70:35:DB:43:19:AD:E2:CF:CE:A2:28:3A:F0:F1:6B:62:09:02:6D:AA Certificate issuer: /CN=A918387F/serialNumber=7035DB4319ADE2CFCEA2283AF0F16B6209026DAA Certificate serial: 0620 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft Manifest number: 0620 Signing time: Thu 24 Apr 2025 22:31:43 +0000 Manifest this update: Thu 24 Apr 2025 22:31:43 +0000 Manifest next update: Thu 01 May 2025 22:31:43 +0000 Files and hashes: 1: cDXbQxmt4s_Ooig68PFrYgkCbao.crl (hash: XSxL5PmQSbNf1MB5xrd5pzrAj84nGwoOKAxBXvrfKCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.crl rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:31:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1568 (0x620) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918387F, serialNumber=7035DB4319ADE2CFCEA2283AF0F16B6209026DAA Validity Not Before: Apr 24 22:31:43 2025 GMT Not After : May 1 22:31:43 2025 GMT Subject: CN=680abbcf-ed7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e7:3b:5d:5b:16:87:e1:a5:31:00:7a:b3:da: d4:71:e7:9f:6f:16:f8:72:55:27:6d:2b:71:00:d6: 1b:5f:40:ef:e7:4e:f7:5f:77:3e:7e:09:c1:ae:02: 5e:9d:6d:16:5c:31:e4:ff:45:99:3d:a6:87:2a:cd: aa:b6:f5:ff:02:a0:13:f6:7d:63:cd:ac:9f:d2:7f: c1:a3:50:96:41:b7:58:c1:d0:1c:be:e2:de:d0:d7: a0:78:b6:8d:94:82:2b:80:9e:9e:bb:24:b4:01:b4: 0a:18:c2:e5:ee:ca:45:f5:cd:f7:c6:98:aa:78:fe: f9:4f:df:3c:5f:24:84:51:f0:52:59:9f:5b:2f:16: 25:25:9a:d2:22:f7:cc:d5:3f:8c:b9:78:bf:b7:58: d9:5a:34:a4:31:9c:e0:55:ad:19:e7:98:32:99:f3: 16:0b:5a:d8:e2:30:a7:67:17:c9:b3:bc:f5:e1:ff: f0:71:79:15:11:92:aa:aa:c6:56:8b:57:1e:0c:f8: 28:31:ff:ec:59:87:df:bb:59:37:12:5f:03:72:68: cc:6d:8c:26:79:0f:e1:05:e9:f1:33:c6:d9:29:bc: 78:63:de:96:99:3f:9f:53:e1:e1:70:87:bb:9f:8e: d1:c5:55:97:a2:84:fa:6f:b3:a5:2e:96:92:5d:1b: 72:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D2:65:33:11:99:53:33:8A:3C:89:CD:74:BA:D3:E0:19:2C:D3:BF X509v3 Authority Key Identifier: keyid:70:35:DB:43:19:AD:E2:CF:CE:A2:28:3A:F0:F1:6B:62:09:02:6D:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:62:6a:e6:57:14:8f:bf:09:99:88:df:f3:7e:9a:99:22:9c: c9:b5:19:3e:63:8e:d0:f0:9f:fb:74:c0:2d:18:8d:0f:5d:4d: dd:67:03:df:7c:7b:41:f0:8b:74:fa:6c:14:2c:63:3e:99:91: 2d:5e:0f:1f:24:6d:90:e2:d8:a9:95:f2:42:a0:f8:0d:4c:ba: 72:c2:9d:34:56:e0:d2:19:71:bb:50:db:f7:a4:da:b0:e2:90: af:26:23:b8:69:e3:e1:a5:21:f8:b8:59:60:64:7e:88:df:1a: c4:00:19:b9:42:03:16:c5:87:2a:76:1f:1f:e6:47:82:95:97: d9:07:2b:60:2b:c3:19:e2:25:08:d6:64:19:81:f8:66:a7:34: 21:4e:5b:88:f4:09:fd:4c:f7:40:c1:d4:b0:4b:ab:13:4c:1d: 4c:f2:b3:75:2c:6e:aa:aa:4e:c1:48:c5:fa:a9:09:e7:b7:d4: 62:56:8a:83:85:32:bd:cb:38:65:eb:1f:95:c3:aa:62:fb:ed: 2d:b3:4a:05:97:99:40:1a:8b:f9:f4:a4:cc:b2:ec:25:d8:e0: 97:1d:40:1f:3a:91:c0:d6:20:5b:90:44:14:96:d4:14:a8:20: 83:1d:b7:33:59:d1:46:a8:57:05:82:1c:ac:31:10:99:b5:aa: 5e:60:67:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4N0YxMTAvBgNVBAUTKDcwMzVEQjQzMTlBREUyQ0ZDRUEyMjgzQUYwRjE2QjYy MDkwMjZEQUEwHhcNMjUwNDI0MjIzMTQzWhcNMjUwNTAxMjIzMTQzWjAYMRYwFAYD VQQDEw02ODBhYmJjZi1lZDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzec7XVsWh+GlMQB6s9rUceefbxb4clUnbStxANYbX0Dv5073X3c+fgnBrgJe nW0WXDHk/0WZPaaHKs2qtvX/AqAT9n1jzayf0n/Bo1CWQbdYwdAcvuLe0NegeLaN lIIrgJ6euyS0AbQKGMLl7spF9c33xpiqeP75T988XySEUfBSWZ9bLxYlJZrSIvfM 1T+MuXi/t1jZWjSkMZzgVa0Z55gymfMWC1rY4jCnZxfJs7z14f/wcXkVEZKqqsZW i1ceDPgoMf/sWYffu1k3El8DcmjMbYwmeQ/hBenxM8bZKbx4Y96WmT+fU+HhcIe7 n47RxVWXooT6b7OlLpaSXRtyFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfSZTMR mVMzijyJzXS60+AZLNO/MB8GA1UdIwQYMBaAFHA120MZreLPzqIoOvDxa2IJAm2q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg3Ri9CNEM3OUFGODkz NDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9jRFhiUXhtdDRzX09vaWc2OFBGcllna0Ni YW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NEWGJReG10NHNfT29pZzY4UEZyWWdrQ2Jhby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzg3Ri9CNEM3OUFGODkzNDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9jRFhiUXhtdDRz X09vaWc2OFBGcllna0NiYW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLYmrmVxSPvwmZiN/zfpqZIpzJtRk+Y47Q8J/7dMAtGI0PXU3dZwPf fHtB8It0+mwULGM+mZEtXg8fJG2Q4tiplfJCoPgNTLpywp00VuDSGXG7UNv3pNqw 4pCvJiO4aePhpSH4uFlgZH6I3xrEABm5QgMWxYcqdh8f5keClZfZBytgK8MZ4iUI 1mQZgfhmpzQhTluI9An9TPdAwdSwS6sTTB1M8rN1LG6qqk7BSMX6qQnnt9RiVoqD hTK9yzhl6x+Vw6pi++0ts0oFl5lAGov59KTMsuwl2OCXHUAfOpHA1iBbkEQUltQU qCCDHbczWdFGqFcFghysMRCZtapeYGd3 -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:19 2025 by rpki-client