$ rpki-client -vvf rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft File: 5tR4mVLfAG9kzr8PNVcqW5bktzc.mft (raw, json) Hash identifier: iOGJmOysDsKo0ESgR5u3Um96BPWkQYthTz4VMoQ0VnQ= Subject key identifier: 43:F6:66:E8:B8:74:93:EF:FD:D7:E3:56:AF:9A:5A:05:9A:70:9F:2A Authority key identifier: E6:D4:78:99:52:DF:00:6F:64:CE:BF:0F:35:57:2A:5B:96:E4:B7:37 Certificate issuer: /CN=A918E63A/serialNumber=E6D4789952DF006F64CEBF0F35572A5B96E4B737 Certificate serial: 078C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tR4mVLfAG9kzr8PNVcqW5bktzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft Manifest number: 078C Signing time: Thu 24 Apr 2025 21:07:13 +0000 Manifest this update: Thu 24 Apr 2025 21:07:13 +0000 Manifest next update: Thu 01 May 2025 21:07:13 +0000 Files and hashes: 1: 5tR4mVLfAG9kzr8PNVcqW5bktzc.crl (hash: uRBmzwJ8nUYif+7dx+6zqn6RLMjjHLEaMIWBJl7GwHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.crl rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tR4mVLfAG9kzr8PNVcqW5bktzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1932 (0x78c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E63A, serialNumber=E6D4789952DF006F64CEBF0F35572A5B96E4B737 Validity Not Before: Apr 24 21:07:13 2025 GMT Not After : May 1 21:07:13 2025 GMT Subject: CN=680aa801-586e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ca:4d:6a:11:21:ab:a2:9b:3d:75:6e:6b:0a: 23:a1:59:95:1e:32:1b:c0:82:13:bd:45:d7:8a:2a: 5b:30:89:87:44:f9:fd:27:55:0c:2c:ff:d7:94:db: df:58:37:54:54:72:07:16:67:76:c0:1c:38:f0:51: 11:15:82:3c:04:40:b9:25:c1:ba:e2:77:a7:66:b1: 55:7a:cd:93:d8:7e:74:7b:5d:78:fa:63:f2:5d:9c: e5:24:9f:c2:2f:e0:3a:6f:5c:a3:9a:22:58:60:f9: 84:42:95:c1:a9:f1:c1:35:64:4f:d4:71:d3:c4:fc: 7f:12:66:3a:e9:f5:c8:06:d0:e6:e1:98:c6:a9:0a: 43:f8:3b:52:d7:aa:9e:a5:53:fc:48:fd:fc:01:6f: 34:94:d0:12:30:fd:38:cd:9f:2a:ac:75:66:a3:e1: ed:e5:08:b4:6e:11:63:10:e9:0a:21:c0:94:fb:69: 4c:cc:cc:a0:3a:6b:a1:87:34:34:3f:c2:3f:be:52: 2f:61:f3:1d:e0:98:7c:04:11:7e:63:d2:36:fa:ff: cd:28:aa:bf:39:97:d6:c4:43:3a:55:a5:85:58:80: 68:6c:dd:dc:6c:8c:0a:75:54:0d:6d:9f:ac:c6:71: c0:88:3d:03:60:db:73:25:7e:ae:86:c4:32:62:6b: 52:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F6:66:E8:B8:74:93:EF:FD:D7:E3:56:AF:9A:5A:05:9A:70:9F:2A X509v3 Authority Key Identifier: keyid:E6:D4:78:99:52:DF:00:6F:64:CE:BF:0F:35:57:2A:5B:96:E4:B7:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tR4mVLfAG9kzr8PNVcqW5bktzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:eb:8e:7b:53:c9:54:f8:34:bf:46:81:f5:7b:1a:f8:62:9b: cd:18:c6:c8:8c:0a:6e:11:dd:62:37:c5:38:33:0f:bf:ee:70: 71:8b:93:a9:c3:49:34:94:ef:90:a8:f7:43:78:2a:ed:96:5e: 12:21:31:f6:30:fe:67:b6:b4:5c:8e:a3:a4:76:12:0a:7b:f2: b4:69:ca:ff:9a:3e:c0:a3:16:44:30:71:91:6c:2a:34:0c:5b: 86:d8:42:ab:78:2b:ec:61:d5:38:aa:c5:3f:71:e0:60:d8:c3: 6e:3a:99:0e:65:4a:83:cc:b3:47:7f:e0:47:05:bb:92:cb:8a: 1d:5b:fc:cf:09:d9:d4:cf:d1:b9:58:b6:74:16:25:05:bc:4f: 62:e0:01:9a:61:9a:c9:92:99:5b:e2:69:1b:4c:37:eb:3f:2a: e2:e8:e0:2f:69:85:61:78:4a:81:4e:73:c0:e4:b2:7a:ce:35: 5b:bd:be:8f:19:fc:51:b1:af:86:aa:74:fd:ea:fe:e1:96:42: a3:40:9a:e8:e1:a5:46:1f:99:32:14:fe:54:40:b6:b3:a3:c8: 99:99:de:99:a3:66:ec:2e:aa:9e:ec:1e:77:9c:83:a7:3a:e9: 80:3a:33:85:f6:e7:c0:90:40:f1:12:a5:a2:79:b0:81:d8:93: e2:1c:86:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2M0ExMTAvBgNVBAUTKEU2RDQ3ODk5NTJERjAwNkY2NENFQkYwRjM1NTcyQTVC OTZFNEI3MzcwHhcNMjUwNDI0MjEwNzEzWhcNMjUwNTAxMjEwNzEzWjAYMRYwFAYD VQQDEw02ODBhYTgwMS01ODZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuspNahEhq6KbPXVuawojoVmVHjIbwIITvUXXiipbMImHRPn9J1UMLP/XlNvf WDdUVHIHFmd2wBw48FERFYI8BEC5JcG64nenZrFVes2T2H50e114+mPyXZzlJJ/C L+A6b1yjmiJYYPmEQpXBqfHBNWRP1HHTxPx/EmY66fXIBtDm4ZjGqQpD+DtS16qe pVP8SP38AW80lNASMP04zZ8qrHVmo+Ht5Qi0bhFjEOkKIcCU+2lMzMygOmuhhzQ0 P8I/vlIvYfMd4Jh8BBF+Y9I2+v/NKKq/OZfWxEM6VaWFWIBobN3cbIwKdVQNbZ+s xnHAiD0DYNtzJX6uhsQyYmtSjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEP2Zui4 dJPv/dfjVq+aWgWacJ8qMB8GA1UdIwQYMBaAFObUeJlS3wBvZM6/DzVXKluW5Lc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTYzQS8zN0Q3QTVBRTAz MkYxMUVCQjU4ODJFMEFDNEY5QUUwMi81dFI0bVZMZkFHOWt6cjhQTlZjcVc1Ymt0 emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV0UjRtVkxmQUc5a3pyOFBOVmNxVzVia3R6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTYzQS8zN0Q3QTVBRTAzMkYxMUVCQjU4ODJFMEFDNEY5QUUwMi81dFI0bVZMZkFH OWt6cjhQTlZjcVc1Ymt0emMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF6457U8lU+DS/RoH1exr4YpvNGMbIjApuEd1iN8U4Mw+/7nBxi5Op w0k0lO+QqPdDeCrtll4SITH2MP5ntrRcjqOkdhIKe/K0acr/mj7AoxZEMHGRbCo0 DFuG2EKreCvsYdU4qsU/ceBg2MNuOpkOZUqDzLNHf+BHBbuSy4odW/zPCdnUz9G5 WLZ0FiUFvE9i4AGaYZrJkplb4mkbTDfrPyri6OAvaYVheEqBTnPA5LJ6zjVbvb6P GfxRsa+GqnT96v7hlkKjQJro4aVGH5kyFP5UQLazo8iZmd6Zo2bsLqqe7B53nIOn OumAOjOF9ufAkEDxEqWiebCB2JPiHIbn -----END CERTIFICATE-----Generated at Sat Apr 26 04:39:41 2025 by rpki-client