$ rpki-client -vvf rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft File: 4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft (raw, json) Hash identifier: fdiaQiEix4Qg8C4DN3SFWmHt16zy8UdI1NWGgR/Aipw= Subject key identifier: 47:07:A5:69:4A:97:19:BE:5C:34:A1:13:AF:B6:37:51:B1:A2:69:3F Authority key identifier: E0:8D:6C:7F:E3:5F:E3:66:42:FE:6F:66:CC:DA:28:66:A6:62:42:F1 Certificate issuer: /CN=A918D96C/serialNumber=E08D6C7FE35FE36642FE6F66CCDA2866A66242F1 Certificate serial: 3473 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft Manifest number: 3473 Signing time: Thu 24 Apr 2025 14:49:35 +0000 Manifest this update: Thu 24 Apr 2025 14:49:35 +0000 Manifest next update: Thu 01 May 2025 14:49:35 +0000 Files and hashes: 1: 4I1sf-Nf42ZC_m9mzNooZqZiQvE.crl (hash: F93lP8j9BO47jgYmur2u07sBlaTTwyGuoDoxhZYsDDA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.crl rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13427 (0x3473) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D96C, serialNumber=E08D6C7FE35FE36642FE6F66CCDA2866A66242F1 Validity Not Before: Apr 24 14:49:35 2025 GMT Not After : May 1 14:49:35 2025 GMT Subject: CN=680a4f7f-f05a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:69:1f:59:e7:16:57:8c:7d:d6:b4:b8:06:55: 9b:1b:1a:cb:a8:b5:2f:0f:ec:b3:f8:e2:9d:ae:48: b9:84:26:5e:6f:75:30:4b:57:94:b0:5f:47:6e:a7: 6e:84:51:ff:d5:f0:6f:6b:eb:ac:cb:1a:2e:70:18: 76:c9:d2:f0:07:54:7b:53:93:c9:2a:6d:b8:7a:35: 8c:7c:e0:d8:9f:cf:a9:bb:07:ec:6e:07:ef:87:85: 3e:1f:92:d3:bb:ae:6f:2d:10:8b:d9:ea:43:bb:a3: 4d:35:fd:e1:02:91:70:87:78:f8:cb:d8:ed:cc:e9: a1:b2:3c:a3:f2:c9:09:a9:b0:c1:11:b2:de:d5:cd: 36:72:12:2f:d8:6d:b5:d0:da:fa:db:57:54:09:6a: c8:6d:48:6b:8a:b3:c6:8e:20:f2:ca:60:7e:8a:40: 84:a8:62:17:a9:20:a3:28:db:28:60:e3:77:a9:52: 03:7d:f9:05:7a:e5:18:a7:da:a2:b5:14:03:6e:41: a0:b5:b0:54:af:2c:07:92:7e:b5:41:f7:c0:58:c8: 29:77:10:be:ea:e2:a2:84:e9:a3:7c:bb:a2:0c:ca: 28:0d:f5:ff:5f:a4:6f:4b:e9:bc:ed:af:82:2b:76: 35:03:d2:89:cc:6e:34:36:f7:a1:09:40:2b:12:ae: 7c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:07:A5:69:4A:97:19:BE:5C:34:A1:13:AF:B6:37:51:B1:A2:69:3F X509v3 Authority Key Identifier: keyid:E0:8D:6C:7F:E3:5F:E3:66:42:FE:6F:66:CC:DA:28:66:A6:62:42:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:f5:cf:99:fa:58:90:54:b6:49:f9:47:ea:1b:57:f7:3c:9e: 13:ee:9b:47:ea:3c:ab:7c:e0:eb:1d:41:a8:7e:af:da:e9:6a: a7:82:74:f8:86:56:ee:b8:fe:93:cf:0a:1b:d5:69:6c:2b:23: 2a:5e:ed:88:38:25:53:04:25:7c:bf:b3:58:ba:82:7f:35:26: 51:c2:6b:5a:59:78:67:c2:11:37:59:e5:5f:72:32:dd:62:95: 13:1d:b3:da:f9:0a:a8:0f:b5:15:76:37:52:c4:ea:25:e1:a2: 92:2e:78:be:24:37:b4:42:1b:6e:c1:4d:af:22:20:80:a5:34: 3e:15:d1:03:69:86:b3:d5:dd:52:87:61:ce:5a:7a:97:69:a2: 0d:3d:db:f3:18:5a:47:c4:1d:ce:cb:5f:08:0a:b7:65:22:ad: 2a:f6:77:4c:cc:b1:30:6e:ab:1c:82:dc:ca:cc:fc:47:99:50: ac:c7:1c:af:89:41:7b:f2:86:79:95:1c:e3:b8:3f:ba:4e:1a: 69:14:6e:b6:b5:5b:3c:5c:9d:49:1c:b6:95:be:19:5d:45:54: 55:86:bc:99:1f:99:4f:3f:b1:3a:d5:de:a2:51:86:57:bf:e2: b5:35:ae:fe:06:f0:ca:fc:32:e9:96:c5:a8:c5:1e:e7:6a:cf: 05:53:18:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ5NkMxMTAvBgNVBAUTKEUwOEQ2QzdGRTM1RkUzNjY0MkZFNkY2NkNDREEyODY2 QTY2MjQyRjEwHhcNMjUwNDI0MTQ0OTM1WhcNMjUwNTAxMTQ0OTM1WjAYMRYwFAYD VQQDEw02ODBhNGY3Zi1mMDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmkfWecWV4x91rS4BlWbGxrLqLUvD+yz+OKdrki5hCZeb3UwS1eUsF9Hbqdu hFH/1fBva+usyxoucBh2ydLwB1R7U5PJKm24ejWMfODYn8+puwfsbgfvh4U+H5LT u65vLRCL2epDu6NNNf3hApFwh3j4y9jtzOmhsjyj8skJqbDBEbLe1c02chIv2G21 0Nr621dUCWrIbUhrirPGjiDyymB+ikCEqGIXqSCjKNsoYON3qVIDffkFeuUYp9qi tRQDbkGgtbBUrywHkn61QffAWMgpdxC+6uKihOmjfLuiDMooDfX/X6RvS+m87a+C K3Y1A9KJzG40NvehCUArEq58BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcHpWlK lxm+XDShE6+2N1Gxomk/MB8GA1UdIwQYMBaAFOCNbH/jX+NmQv5vZszaKGamYkLx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDk2Qy9BNDJFMzdGRTFE OTYxMUUyOUM1RjRBN0YwOEIwMkNEMi80STFzZi1OZjQyWkNfbTltek5vb1pxWmlR dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRJMXNmLU5mNDJaQ19tOW16Tm9vWnFaaVF2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDk2Qy9BNDJFMzdGRTFEOTYxMUUyOUM1RjRBN0YwOEIwMkNEMi80STFzZi1OZjQy WkNfbTltek5vb1pxWmlRdkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCu9c+Z+liQVLZJ+UfqG1f3PJ4T7ptH6jyrfODrHUGofq/a6WqngnT4 hlbuuP6Tzwob1WlsKyMqXu2IOCVTBCV8v7NYuoJ/NSZRwmtaWXhnwhE3WeVfcjLd YpUTHbPa+QqoD7UVdjdSxOol4aKSLni+JDe0QhtuwU2vIiCApTQ+FdEDaYaz1d1S h2HOWnqXaaINPdvzGFpHxB3Oy18ICrdlIq0q9ndMzLEwbqscgtzKzPxHmVCsxxyv iUF78oZ5lRzjuD+6ThppFG62tVs8XJ1JHLaVvhldRVRVhryZH5lPP7E61d6iUYZX v+K1Na7+BvDK/DLplsWoxR7nas8FUxiE -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:50 2025 by rpki-client