$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft File: e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft (raw, json) Hash identifier: Wjg4OilG1XQd30EDQ7NC/nuP/M0oz1rhRwG1AM3d+kk= Subject key identifier: 3C:DC:A9:D9:2B:4C:5A:F3:6F:80:65:6A:79:3F:CA:1E:88:9F:20:0C Authority key identifier: 7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D Certificate issuer: /CN=A9187BAC/serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft Manifest number: 3F Signing time: Fri 25 Apr 2025 06:33:35 +0000 Manifest this update: Fri 25 Apr 2025 06:33:34 +0000 Manifest next update: Fri 02 May 2025 06:33:34 +0000 Files and hashes: 1: e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl (hash: rKLLpSjvpTWnLHvaFkQ8WJBPuXv9KubF26fo90zdFZk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187BAC, serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D Validity Not Before: Apr 25 06:33:34 2025 GMT Not After : May 2 06:33:34 2025 GMT Subject: CN=680b2cbf-46f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e5:cf:c0:95:38:93:4d:5b:d2:d7:21:82:ca: 32:e3:b7:e0:27:67:a8:48:16:df:35:52:8e:28:d5: f6:e1:79:91:08:ad:c0:8a:a2:e6:d7:9a:79:61:46: dd:f1:87:31:c7:85:50:e4:28:db:7f:6f:9d:91:db: 3c:df:8d:d5:eb:2c:45:cb:16:c6:94:a3:f3:0f:87: db:ea:00:4a:db:05:4b:53:38:be:44:b7:cc:2e:f2: 84:ba:0e:33:76:01:cf:b2:f7:2c:eb:cf:0b:06:6c: 01:af:d5:de:95:68:3f:4c:26:73:4f:29:52:00:db: 6f:27:58:74:8e:1b:4e:11:90:da:34:65:dd:03:ca: 04:8f:3c:8e:f3:13:6e:da:26:74:d8:10:d6:1e:84: ae:66:36:e7:c0:35:07:78:2c:1f:54:cf:66:f6:d9: 32:f3:89:ea:be:e5:3e:59:10:10:03:c9:0d:e6:60: 54:75:cc:16:16:16:e2:de:2c:6c:e5:ed:04:f5:15: ce:46:e7:bd:86:77:df:b3:50:b5:da:74:11:52:54: a4:3a:f0:50:0c:c9:f3:7a:67:d5:36:83:dc:31:fb: 69:0d:79:e2:5b:24:39:b0:36:76:1f:93:30:50:3e: 08:40:f1:36:08:a9:ce:23:9b:74:2e:7d:a6:7d:90: 82:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:DC:A9:D9:2B:4C:5A:F3:6F:80:65:6A:79:3F:CA:1E:88:9F:20:0C X509v3 Authority Key Identifier: keyid:7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a3:27:14:1e:f5:c6:69:d9:10:ed:7a:92:66:6d:26:94:ad: 44:38:91:cd:82:e3:22:70:4c:d3:cf:d2:28:9b:42:bc:86:07: e0:f3:ff:54:70:dc:cc:84:45:dd:5b:47:61:b4:25:70:3a:59: fa:89:0b:05:1a:fa:fe:50:a4:6a:3c:5c:d6:26:c8:1c:33:e9: 88:29:c7:8c:55:59:7c:97:c6:fd:db:94:e2:93:9e:78:93:ce: 6b:86:c5:47:44:b3:bf:0b:6f:7d:83:8c:62:fb:e6:c4:b4:d6: 0d:1b:b5:a7:5a:a5:42:03:32:ad:4f:e0:17:bd:d0:94:79:3a: f5:92:9c:3a:20:fe:8d:69:cd:42:42:7b:4d:bc:12:df:37:6b: ed:34:b2:e1:93:df:d9:0b:8f:97:2b:bc:c1:ca:0f:89:59:b2: 0b:93:a8:94:93:21:9e:13:cd:64:9e:b0:76:af:29:d0:11:c4: dd:72:40:8f:1d:74:77:00:e9:e3:42:f9:0e:c0:15:e5:27:6b: 82:83:6a:5d:e0:fa:d2:8a:ef:05:1e:05:cd:d4:46:3f:42:61: 30:bd:bd:43:3e:4e:8b:01:bb:55:a2:58:a1:91:ad:b3:8c:7e: 3d:ed:72:a0:2e:8e:e4:bf:6d:ff:61:3e:44:06:83:d4:d4:9a: 1e:1f:6c:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 N0JBQzExMC8GA1UEBRMoN0I2MjYyMEJGRUIzOENFQjY0RDIxMEM5ODA1REMyNDgw NDE1NzA3RDAeFw0yNTA0MjUwNjMzMzRaFw0yNTA1MDIwNjMzMzRaMBgxFjAUBgNV BAMTDTY4MGIyY2JmLTQ2ZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC75c/AlTiTTVvS1yGCyjLjt+AnZ6hIFt81Uo4o1fbheZEIrcCKoubXmnlhRt3x hzHHhVDkKNt/b52R2zzfjdXrLEXLFsaUo/MPh9vqAErbBUtTOL5Et8wu8oS6DjN2 Ac+y9yzrzwsGbAGv1d6VaD9MJnNPKVIA228nWHSOG04RkNo0Zd0DygSPPI7zE27a JnTYENYehK5mNufANQd4LB9Uz2b22TLzieq+5T5ZEBADyQ3mYFR1zBYWFuLeLGzl 7QT1Fc5G572Gd9+zULXadBFSVKQ68FAMyfN6Z9U2g9wx+2kNeeJbJDmwNnYfkzBQ PghA8TYIqc4jm3QufaZ9kIKhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPNyp2StM WvNvgGVqeT/KHoifIAwwHwYDVR0jBBgwFoAUe2JiC/6zjOtk0hDJgF3CSAQVcH0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3QkFDL0JFMzE4RkIwRDAy QzExRUZCNTU4NDkxNUM0RjlBRTAyL2UySmlDXzZ6ak90azBoREpnRjNDU0FRVmNI MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZTJKaUNfNnpqT3RrMGhESmdGM0NTQVFWY0gwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 QkFDL0JFMzE4RkIwRDAyQzExRUZCNTU4NDkxNUM0RjlBRTAyL2UySmlDXzZ6ak90 azBoREpnRjNDU0FRVmNIMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEyjJxQe9cZp2RDtepJmbSaUrUQ4kc2C4yJwTNPP0iibQryGB+Dz/1Rw 3MyERd1bR2G0JXA6WfqJCwUa+v5QpGo8XNYmyBwz6Ygpx4xVWXyXxv3blOKTnniT zmuGxUdEs78Lb32DjGL75sS01g0btadapUIDMq1P4Be90JR5OvWSnDog/o1pzUJC e028Et83a+00suGT39kLj5crvMHKD4lZsguTqJSTIZ4TzWSesHavKdARxN1yQI8d dHcA6eNC+Q7AFeUna4KDal3g+tKK7wUeBc3URj9CYTC9vUM+TosBu1WiWKGRrbOM fj3tcqAujuS/bf9hPkQGg9TUmh4fbPU= -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:07 2025 by rpki-client