$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft File: i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft (raw, json) Hash identifier: hEYJcyZnjgoZvfrsT+oEQFvsmMUZUm4yit447B4F0v4= Subject key identifier: 9F:33:80:3B:4B:7C:48:EE:72:3C:3A:5D:1B:3C:B2:8D:D2:F8:B1:C2 Authority key identifier: 8B:E9:D9:2E:3B:31:D4:0C:A3:3B:3B:B6:29:47:43:2E:84:56:D2:90 Certificate issuer: /CN=A918FD04/serialNumber=8BE9D92E3B31D40CA33B3BB62947432E8456D290 Certificate serial: 0BFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft Manifest number: 146E Signing time: Thu 24 Apr 2025 18:37:07 +0000 Manifest this update: Thu 24 Apr 2025 18:37:06 +0000 Manifest next update: Thu 01 May 2025 18:37:06 +0000 Files and hashes: 1: i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl (hash: MBiNrgNfi3YCMsW+H8TBZ46KBUslu09v9zrwzr35OIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3069 (0xbfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FD04, serialNumber=8BE9D92E3B31D40CA33B3BB62947432E8456D290 Validity Not Before: Apr 24 18:37:06 2025 GMT Not After : May 1 18:37:06 2025 GMT Subject: CN=680a84d2-6ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:72:57:7c:8c:6c:c7:2c:03:ac:26:92:51:7f: ad:9f:1f:aa:aa:98:89:f4:aa:a5:29:0b:ba:67:85: ec:5a:9c:58:4a:bf:b1:ba:4b:ae:b4:6a:ce:e8:cc: c4:8a:41:6e:4f:f8:96:2f:c9:d2:20:de:80:d4:4d: e1:b4:ae:ce:c2:23:00:7f:0f:f5:fb:c8:ea:76:fb: 3a:f5:be:3c:83:37:6b:ed:79:9e:85:bf:29:c4:d9: dd:b9:ed:bb:d1:a2:7b:f5:c9:6b:ab:e2:9e:89:56: 2b:ac:ec:90:a4:72:e7:87:34:eb:f9:2f:00:e3:3b: a4:72:75:67:b5:3b:97:00:de:a6:a7:a5:1a:05:a4: 65:9e:34:69:9e:3f:b2:6c:8f:01:63:a5:53:6d:18: de:06:c1:6f:0c:d4:72:1b:12:ce:16:b4:eb:f8:37: 55:be:e5:27:0e:89:80:2a:42:95:31:45:af:84:c4: 4a:5b:f2:8c:5e:e8:1e:66:04:73:e9:cf:b1:f1:1a: 42:61:4c:fc:e1:68:b4:61:99:a8:fe:db:4b:2a:45: ae:61:a8:45:fc:d1:b4:dd:fa:4d:27:a4:94:76:6f: af:05:d0:8f:e1:be:80:6e:33:9e:47:91:d4:03:00: a2:b4:fa:f5:79:15:e6:b8:ad:64:31:f1:2f:1f:32: b4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:33:80:3B:4B:7C:48:EE:72:3C:3A:5D:1B:3C:B2:8D:D2:F8:B1:C2 X509v3 Authority Key Identifier: keyid:8B:E9:D9:2E:3B:31:D4:0C:A3:3B:3B:B6:29:47:43:2E:84:56:D2:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:6e:85:3e:b1:8a:a4:3f:5b:f2:c1:c0:48:89:ba:fc:75:2d: 34:7c:d8:c8:9e:31:d9:e3:d1:bc:1d:b1:21:ef:ee:5d:74:49: 9f:11:de:72:58:a5:6a:1a:7b:3b:1a:fd:de:bb:df:e9:d9:4a: 44:cf:c6:dc:d5:a7:1f:ed:56:16:2b:0b:a1:4c:3f:d3:d6:72: 18:87:79:6a:59:7f:d5:ce:68:0e:1f:10:ef:60:06:8d:8b:04: c8:35:20:b4:6b:b0:4b:48:ef:8e:14:8e:99:60:c8:f0:0e:af: f5:69:1e:fb:52:c1:e1:57:e1:94:a3:c4:65:e6:47:7c:47:5a: f0:fd:0c:94:61:c2:c3:eb:29:89:74:8e:37:81:46:a7:ad:9c: 93:ee:ac:61:da:11:26:b1:07:21:0e:0c:b9:ea:d2:c1:df:ea: ec:00:67:11:f8:6e:90:da:d7:8d:35:78:de:4e:fa:04:61:91: a7:00:ba:89:d9:54:49:84:a7:0f:0c:5f:33:ec:36:69:07:c7: ee:d1:7d:86:5c:02:01:87:19:94:e5:b4:95:ca:b2:c2:bd:6e: b8:34:e4:74:a6:5c:09:4b:20:18:5f:4e:1d:6b:4e:25:3e:41: 5e:94:c5:4e:aa:08:d9:9e:40:1b:21:a6:ef:dd:d2:b9:da:38: 02:0f:2b:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZEMDQxMTAvBgNVBAUTKDhCRTlEOTJFM0IzMUQ0MENBMzNCM0JCNjI5NDc0MzJF ODQ1NkQyOTAwHhcNMjUwNDI0MTgzNzA2WhcNMjUwNTAxMTgzNzA2WjAYMRYwFAYD VQQDEw02ODBhODRkMi02YmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA23JXfIxsxywDrCaSUX+tnx+qqpiJ9KqlKQu6Z4XsWpxYSr+xukuutGrO6MzE ikFuT/iWL8nSIN6A1E3htK7OwiMAfw/1+8jqdvs69b48gzdr7Xmehb8pxNndue27 0aJ79clrq+KeiVYrrOyQpHLnhzTr+S8A4zukcnVntTuXAN6mp6UaBaRlnjRpnj+y bI8BY6VTbRjeBsFvDNRyGxLOFrTr+DdVvuUnDomAKkKVMUWvhMRKW/KMXugeZgRz 6c+x8RpCYUz84Wi0YZmo/ttLKkWuYahF/NG03fpNJ6SUdm+vBdCP4b6AbjOeR5HU AwCitPr1eRXmuK1kMfEvHzK0cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8zgDtL fEjucjw6XRs8so3S+LHCMB8GA1UdIwQYMBaAFIvp2S47MdQMozs7tilHQy6EVtKQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkQwNC8wQUJCRjQ3MjBE RjIxMUVBOEVFODkxM0JDNEY5QUUwMi9pLW5aTGpzeDFBeWpPenUyS1VkRExvUlcw cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ktblpManN4MUF5ak96dTJLVWRETG9SVzBwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkQwNC8wQUJCRjQ3MjBERjIxMUVBOEVFODkxM0JDNEY5QUUwMi9pLW5aTGpzeDFB eWpPenUyS1VkRExvUlcwcEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXboU+sYqkP1vywcBIibr8dS00fNjInjHZ49G8HbEh7+5ddEmfEd5y WKVqGns7Gv3eu9/p2UpEz8bc1acf7VYWKwuhTD/T1nIYh3lqWX/VzmgOHxDvYAaN iwTINSC0a7BLSO+OFI6ZYMjwDq/1aR77UsHhV+GUo8Rl5kd8R1rw/QyUYcLD6ymJ dI43gUanrZyT7qxh2hEmsQchDgy56tLB3+rsAGcR+G6Q2teNNXjeTvoEYZGnALqJ 2VRJhKcPDF8z7DZpB8fu0X2GXAIBhxmU5bSVyrLCvW64NOR0plwJSyAYX04da04l PkFelMVOqgjZnkAbIabv3dK52jgCDyvs -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:32 2025 by rpki-client