$ rpki-client -vvf rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft File: xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft (raw, json) Hash identifier: YBJJs99kY9pmVsDeeEsX5CX0Z06d6K3hHzGqM5KnZtk= Subject key identifier: FA:96:83:84:07:6A:D4:0A:27:F8:EC:B1:B8:32:14:BC:41:AA:BC:2A Authority key identifier: C5:34:23:28:8F:9F:FC:10:04:84:2B:CC:40:A5:19:23:89:34:AA:77 Certificate issuer: /CN=A918767B/serialNumber=C53423288F9FFC1004842BCC40A519238934AA77 Certificate serial: 0400 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft Manifest number: 0400 Signing time: Fri 25 Apr 2025 00:13:57 +0000 Manifest this update: Fri 25 Apr 2025 00:13:56 +0000 Manifest next update: Fri 02 May 2025 00:13:56 +0000 Files and hashes: 1: xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl (hash: PfhWgQ2Aqj9qM9MFidiOWXWt246Ey+s7ycLxW82vDMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:13:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1024 (0x400) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918767B, serialNumber=C53423288F9FFC1004842BCC40A519238934AA77 Validity Not Before: Apr 25 00:13:56 2025 GMT Not After : May 2 00:13:56 2025 GMT Subject: CN=680ad3c4-504d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:86:16:56:34:68:c5:9c:2a:65:70:9b:cb:dc: 47:c7:b0:86:32:08:66:66:8b:51:54:41:d9:e1:d1: 17:b7:46:06:58:51:3a:2f:36:c8:ec:78:b5:09:2e: 2b:bd:54:77:b3:0d:3d:7c:1d:ef:d8:9a:c1:aa:56: 62:e9:83:50:8c:3b:55:86:a6:99:7f:df:9b:30:13: bd:b4:3e:15:66:a8:a3:dd:de:0e:c0:e4:6d:5f:20: b3:0e:88:3c:4d:9d:6b:72:da:05:00:62:0a:a9:ae: 07:fd:21:46:63:86:ab:84:52:45:4c:bd:61:30:93: c1:d6:9b:06:41:82:5d:02:0d:93:0a:e4:5e:a0:39: fe:45:fd:2e:7d:63:bc:e5:f8:ec:0f:43:72:bf:3e: 99:ec:92:a3:87:b9:e8:31:ce:2c:b8:01:8d:52:85: 43:08:de:c4:17:8c:cf:a8:de:c9:93:9e:8b:1e:b9: 4a:e0:ce:03:f9:32:50:b5:24:64:8c:1b:f7:4a:b9: 23:f5:5c:b9:46:4b:51:f3:8a:a5:78:c9:11:a8:81: 2a:73:de:1d:18:46:fc:89:f7:b0:6b:e6:90:55:bc: b2:ff:31:53:f0:df:09:fc:54:d8:40:cd:89:a0:5b: 99:40:e4:f3:4b:31:09:18:fb:ee:c9:9c:6b:ba:79: 0b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:96:83:84:07:6A:D4:0A:27:F8:EC:B1:B8:32:14:BC:41:AA:BC:2A X509v3 Authority Key Identifier: keyid:C5:34:23:28:8F:9F:FC:10:04:84:2B:CC:40:A5:19:23:89:34:AA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d5:92:9c:ff:44:08:b1:62:6c:de:40:80:22:24:71:9b:22: 86:57:2f:80:fb:54:33:36:50:22:67:41:b5:6b:4a:64:50:77: 32:74:cc:6b:3e:08:f5:60:28:ff:91:90:8f:98:73:83:35:4a: fd:f6:21:35:8a:fb:c1:1c:09:85:f0:da:ac:01:4e:c2:0c:b9: 27:44:a6:33:d1:f3:43:e2:ab:f2:b2:93:a6:6c:f7:8d:4a:11: c5:7e:d0:fb:da:15:5f:62:dd:b5:5d:37:87:e3:f6:c4:84:0f: 7c:db:4d:ff:87:ed:67:e6:b5:c5:c7:c6:2d:2b:2e:ac:47:9a: a6:ac:fb:56:34:e8:3e:57:d5:5a:62:cb:2e:e7:95:0c:8d:12: 20:bf:c5:fc:6e:77:03:41:60:62:a1:28:d9:5e:2a:b7:03:3a: f7:f7:d8:39:3d:34:fb:1e:91:8d:04:1b:b0:64:8e:27:91:42: cf:7a:53:a6:8f:59:6d:61:b1:a7:1f:f9:c0:9d:80:07:1b:c8: 2d:b4:7e:0e:f8:eb:df:cb:6a:33:73:01:1f:86:a9:a2:1f:02: d3:97:41:86:a0:8b:9b:6d:17:26:5f:b7:3d:31:15:15:cd:16: ee:18:93:c9:4d:98:bb:1b:07:48:8f:e6:b2:4e:a4:54:b1:e3: ff:eb:0a:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc2N0IxMTAvBgNVBAUTKEM1MzQyMzI4OEY5RkZDMTAwNDg0MkJDQzQwQTUxOTIz ODkzNEFBNzcwHhcNMjUwNDI1MDAxMzU2WhcNMjUwNTAyMDAxMzU2WjAYMRYwFAYD VQQDEw02ODBhZDNjNC01MDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYYWVjRoxZwqZXCby9xHx7CGMghmZotRVEHZ4dEXt0YGWFE6LzbI7Hi1CS4r vVR3sw09fB3v2JrBqlZi6YNQjDtVhqaZf9+bMBO9tD4VZqij3d4OwORtXyCzDog8 TZ1rctoFAGIKqa4H/SFGY4arhFJFTL1hMJPB1psGQYJdAg2TCuReoDn+Rf0ufWO8 5fjsD0Nyvz6Z7JKjh7noMc4suAGNUoVDCN7EF4zPqN7Jk56LHrlK4M4D+TJQtSRk jBv3Srkj9Vy5RktR84qleMkRqIEqc94dGEb8ifewa+aQVbyy/zFT8N8J/FTYQM2J oFuZQOTzSzEJGPvuyZxrunkLhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqWg4QH atQKJ/jssbgyFLxBqrwqMB8GA1UdIwQYMBaAFMU0IyiPn/wQBIQrzEClGSOJNKp3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzY3Qi9GODdGQUQ5MjZB QzYxMUVDOUVGNUYyNjJDNEY5QUUwMi94VFFqS0ktZl9CQUVoQ3ZNUUtVWkk0azBx bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hUUWpLSS1mX0JBRWhDdk1RS1VaSTRrMHFuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzY3Qi9GODdGQUQ5MjZBQzYxMUVDOUVGNUYyNjJDNEY5QUUwMi94VFFqS0ktZl9C QUVoQ3ZNUUtVWkk0azBxbmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd1ZKc/0QIsWJs3kCAIiRxmyKGVy+A+1QzNlAiZ0G1a0pkUHcydMxr Pgj1YCj/kZCPmHODNUr99iE1ivvBHAmF8NqsAU7CDLknRKYz0fND4qvyspOmbPeN ShHFftD72hVfYt21XTeH4/bEhA98203/h+1n5rXFx8YtKy6sR5qmrPtWNOg+V9Va Yssu55UMjRIgv8X8bncDQWBioSjZXiq3Azr399g5PTT7HpGNBBuwZI4nkULPelOm j1ltYbGnH/nAnYAHG8gttH4O+Ovfy2ozcwEfhqmiHwLTl0GGoIubbRcmX7c9MRUV zRbuGJPJTZi7GwdIj+ayTqRUseP/6wo4 -----END CERTIFICATE-----Generated at Sat Apr 26 12:24:39 2025 by rpki-client