$ rpki-client -vvf rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft File: aBR3td5WajjZsBVtqHq6-p-vhb0.mft (raw, json) Hash identifier: CUiCoqCUpKLSEUdIn2sl2i3XwuEcPV3rJRddpFEKt9o= Subject key identifier: 8B:89:58:96:98:83:CD:3A:3B:00:B9:10:CA:C7:A5:EA:3E:48:1C:6D Authority key identifier: 68:14:77:B5:DE:56:6A:38:D9:B0:15:6D:A8:7A:BA:FA:9F:AF:85:BD Certificate issuer: /CN=A91972DF/serialNumber=681477B5DE566A38D9B0156DA87ABAFA9FAF85BD Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBR3td5WajjZsBVtqHq6-p-vhb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft Manifest number: 72 Signing time: Fri 25 Apr 2025 05:52:07 +0000 Manifest this update: Fri 25 Apr 2025 05:52:06 +0000 Manifest next update: Fri 02 May 2025 05:52:06 +0000 Files and hashes: 1: aBR3td5WajjZsBVtqHq6-p-vhb0.crl (hash: de5fg1DUy6i8ONWU6Y5Qm5BtyRGc6CCnf33+/+A0yuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.crl rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBR3td5WajjZsBVtqHq6-p-vhb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:52:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91972DF, serialNumber=681477B5DE566A38D9B0156DA87ABAFA9FAF85BD Validity Not Before: Apr 25 05:52:06 2025 GMT Not After : May 2 05:52:06 2025 GMT Subject: CN=680b2306-6b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0f:11:89:54:27:b7:d3:16:e1:91:ec:37:61: 78:60:85:1e:19:f4:fa:d1:eb:24:13:99:88:e7:37: cd:d0:e3:70:45:2b:df:71:c7:a5:46:e6:1f:eb:21: e8:20:70:33:23:48:36:07:30:d5:27:0e:74:a4:5a: 9a:b5:b7:6e:50:9e:48:9b:3b:7a:66:e2:14:e3:03: 8e:27:6e:9a:40:28:f1:22:7e:ad:b1:cc:72:01:75: 6e:ac:83:de:ee:7f:61:c8:2a:26:c8:7f:6f:b2:5c: dc:35:50:3e:54:d4:48:1c:d6:37:7b:55:8c:e7:39: 50:a9:b6:8f:d0:a6:94:be:38:48:68:bf:57:22:61: ec:fb:27:90:0a:b2:d5:46:e4:e9:e4:64:ea:88:40: dd:58:8a:0e:37:87:d7:5f:3c:3b:ed:98:b7:0c:6a: ea:44:e3:5e:a6:47:21:f5:31:04:76:3c:f2:18:f2: cc:3d:95:e2:83:b2:39:7c:8c:55:f2:19:bd:39:a6: 66:39:1e:0a:4a:84:1c:c1:79:19:fc:79:0a:b0:e0: 19:cc:66:dc:2e:2a:31:34:9c:06:23:70:a2:bb:c1: 8b:b3:4f:da:bd:48:c3:16:4f:76:d3:e3:b5:c1:bf: 41:be:0c:7b:51:8d:ea:54:d4:50:34:99:85:cf:d2: e2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:89:58:96:98:83:CD:3A:3B:00:B9:10:CA:C7:A5:EA:3E:48:1C:6D X509v3 Authority Key Identifier: keyid:68:14:77:B5:DE:56:6A:38:D9:B0:15:6D:A8:7A:BA:FA:9F:AF:85:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBR3td5WajjZsBVtqHq6-p-vhb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:0c:5c:83:83:df:7c:2c:2b:79:ab:78:13:44:2a:b4:37:f0: 1a:9e:83:f6:72:24:01:29:bd:a8:2f:24:ea:4a:a2:5e:5a:65: 2a:f9:59:8e:8f:37:ab:ee:ec:37:99:95:bc:69:2d:8f:0c:3e: 87:37:b9:ad:87:4f:51:6c:36:c6:82:ab:05:54:73:db:5d:89: 5c:69:f6:f6:22:6d:2a:a6:e7:83:1c:28:70:7b:57:26:77:eb: 19:19:3e:a5:b8:f1:8a:6d:af:5d:d4:9a:7f:77:8c:31:7c:b0: 3f:17:90:56:c8:01:68:69:8a:4e:3b:be:a0:34:7e:9a:51:eb: c2:82:87:2c:20:4e:7c:da:68:94:04:e9:13:82:01:4f:19:ba: 0c:c8:83:13:12:b8:8f:79:7f:95:ac:6f:c8:5d:72:d7:46:7a: 4e:1b:af:eb:a4:56:3d:07:47:21:de:a0:06:04:b1:35:58:46: 52:2d:92:d5:51:d1:dc:07:e6:ca:1f:d5:1c:94:e4:7e:8e:43: 12:c7:1c:09:8c:97:9c:91:36:9f:ca:1a:43:56:5d:13:bf:89: a3:b0:b7:de:ed:f7:56:45:1b:60:32:46:58:92:9f:f3:77:5a: 47:9b:aa:ef:14:ae:af:22:33:65:2f:c5:4e:fa:31:21:f8:e2: 08:a1:78:62 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NzJERjExMC8GA1UEBRMoNjgxNDc3QjVERTU2NkEzOEQ5QjAxNTZEQTg3QUJBRkE5 RkFGODVCRDAeFw0yNTA0MjUwNTUyMDZaFw0yNTA1MDIwNTUyMDZaMBgxFjAUBgNV BAMTDTY4MGIyMzA2LTZiNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCDxGJVCe30xbhkew3YXhghR4Z9PrR6yQTmYjnN83Q43BFK99xx6VG5h/rIegg cDMjSDYHMNUnDnSkWpq1t25QnkibO3pm4hTjA44nbppAKPEifq2xzHIBdW6sg97u f2HIKibIf2+yXNw1UD5U1Egc1jd7VYznOVCpto/QppS+OEhov1ciYez7J5AKstVG 5OnkZOqIQN1Yig43h9dfPDvtmLcMaupE416mRyH1MQR2PPIY8sw9leKDsjl8jFXy Gb05pmY5HgpKhBzBeRn8eQqw4BnMZtwuKjE0nAYjcKK7wYuzT9q9SMMWT3bT47XB v0G+DHtRjepU1FA0mYXP0uLnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUi4lYlpiD zTo7ALkQysel6j5IHG0wHwYDVR0jBBgwFoAUaBR3td5WajjZsBVtqHq6+p+vhb0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3MkRGL0NDNzhCNzYyN0Mw QjExRUY4OTRBMjkxOUM0RjlBRTAyL2FCUjN0ZDVXYWpqWnNCVnRxSHE2LXAtdmhi MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYUJSM3RkNVdhampac0JWdHFIcTYtcC12aGIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3 MkRGL0NDNzhCNzYyN0MwQjExRUY4OTRBMjkxOUM0RjlBRTAyL2FCUjN0ZDVXYWpq WnNCVnRxSHE2LXAtdmhiMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJoMXIOD33wsK3mreBNEKrQ38Bqeg/ZyJAEpvagvJOpKol5aZSr5WY6P N6vu7DeZlbxpLY8MPoc3ua2HT1FsNsaCqwVUc9tdiVxp9vYibSqm54McKHB7VyZ3 6xkZPqW48Yptr13Umn93jDF8sD8XkFbIAWhpik47vqA0fppR68KChywgTnzaaJQE 6ROCAU8ZugzIgxMSuI95f5Wsb8hdctdGek4br+ukVj0HRyHeoAYEsTVYRlItktVR 0dwH5sof1RyU5H6OQxLHHAmMl5yRNp/KGkNWXRO/iaOwt97t91ZFG2AyRliSn/N3 Wkebqu8Urq8iM2UvxU76MSH44giheGI= -----END CERTIFICATE-----Generated at Sat Apr 26 03:56:39 2025 by rpki-client