$ rpki-client -vvf rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft File: cRYXAC2fDJ62W07dYfehyR_NuD4.mft (raw, json) Hash identifier: Yzmzm30FGVU7HwJs3N6fd3K6Bzrtrn+J/Jey1BTZw3U= Subject key identifier: 6F:63:2A:56:4C:6E:F2:13:9F:B7:A8:ED:C2:79:3D:84:23:E4:38:83 Authority key identifier: 71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E Certificate issuer: /CN=A919C6E7/serialNumber=711617002D9F0C9EB65B4EDD61F7A1C91FCDB83E Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft Manifest number: 81 Signing time: Fri 25 Apr 2025 05:36:46 +0000 Manifest this update: Fri 25 Apr 2025 05:36:46 +0000 Manifest next update: Fri 02 May 2025 05:36:46 +0000 Files and hashes: 1: cRYXAC2fDJ62W07dYfehyR_NuD4.crl (hash: X7p8ZIqgbiTNECyPd6oaGcQqoCeOv8dE4QvZ2WDWI/g=) 2: 73EF25545DDE11EFBCDB7463C4F9AE02.roa (hash: JrlJ2EvGFrH8+I8VUWwxgID9iYwpW3LVV5yISMkbZ08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.crl rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C6E7, serialNumber=711617002D9F0C9EB65B4EDD61F7A1C91FCDB83E Validity Not Before: Apr 25 05:36:46 2025 GMT Not After : May 2 05:36:46 2025 GMT Subject: CN=680b1f6e-6fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:52:e5:e4:a9:30:23:5c:f6:23:1e:43:a3:b1: b2:39:95:21:b9:d7:c9:62:d8:ea:8b:bd:e4:de:48: 68:2a:b4:10:1c:28:68:33:ae:8c:8b:7f:86:f5:ce: d8:b3:03:13:2f:cb:cc:dd:f4:b5:4b:8c:af:22:17: 7d:97:48:4d:e0:7d:8f:5d:84:5d:45:85:e1:f3:bf: 1b:08:1a:ad:20:ee:42:81:62:04:81:64:7e:b7:a0: 08:2a:05:ec:e7:a3:30:46:0f:a0:20:f5:76:7d:45: a3:bf:44:0f:6b:8b:3f:a5:00:35:8b:f6:cc:89:9d: a7:90:9c:d2:51:c7:0c:55:fb:7f:e7:59:2b:67:ac: 17:84:96:76:18:fe:ec:f2:8b:67:8d:9e:97:d2:ee: 4d:42:80:49:ae:60:df:79:32:97:e9:36:5c:67:85: 8f:3f:1e:99:1a:59:f2:63:6b:68:1b:f6:20:6c:15: 83:d8:23:e5:a3:6e:d2:9a:79:7b:88:a8:ed:89:28: 78:bd:d4:05:3c:36:e5:e0:9d:1b:9f:e3:c5:4e:00: 52:b2:9a:58:99:ea:39:68:e1:8d:ab:f7:f9:eb:26: ec:a0:70:11:9d:43:05:f2:9a:2f:ec:c9:a9:b8:5a: a2:b7:01:0a:3a:37:07:be:c1:34:c5:92:74:f3:71: 7b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:63:2A:56:4C:6E:F2:13:9F:B7:A8:ED:C2:79:3D:84:23:E4:38:83 X509v3 Authority Key Identifier: keyid:71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:7f:51:7d:25:d3:43:ac:b6:b5:fc:de:a0:bd:3c:72:b0:05: 1e:46:eb:45:c3:fe:07:f4:9a:35:75:8c:74:9c:64:93:44:84: 34:9b:90:3e:cb:df:90:03:e7:42:56:99:36:c3:2b:23:94:71: f2:93:f2:11:d9:27:cc:ad:b8:10:70:a7:0f:54:c0:60:56:8a: ac:0b:75:51:98:3b:42:98:f5:a5:8b:29:a4:df:f1:8f:7d:db: 99:b0:a1:ad:df:24:74:9d:00:d6:fc:0b:23:a6:0c:d1:b4:b2: 44:b8:5d:a0:50:9e:95:de:18:38:c9:57:05:c8:ec:c3:33:43: 97:d5:ed:5c:60:dd:c3:c4:57:ae:1a:a6:98:be:05:1c:52:1e: 8e:2f:c7:b9:b2:2b:fa:c3:86:30:16:6c:72:4f:7a:51:46:d3: 39:c7:9c:ee:46:63:73:65:30:b2:12:3b:5c:0b:e7:97:c2:f2: c8:42:d5:62:3a:dd:fb:90:3c:1f:f4:c8:1f:ce:b8:df:5d:c3: 89:05:ad:5f:01:97:9e:11:d3:a8:b8:78:43:44:05:b0:fe:93: 9b:da:59:4f:a8:ef:03:c3:2a:ea:d4:0f:b5:89:8a:09:7f:35: a6:c6:ec:fd:88:4a:21:16:02:7e:6f:c2:ab:98:05:ab:09:36: 67:86:c6:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM2RTcxMTAvBgNVBAUTKDcxMTYxNzAwMkQ5RjBDOUVCNjVCNEVERDYxRjdBMUM5 MUZDREI4M0UwHhcNMjUwNDI1MDUzNjQ2WhcNMjUwNTAyMDUzNjQ2WjAYMRYwFAYD VQQDEw02ODBiMWY2ZS02ZmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlLl5KkwI1z2Ix5Do7GyOZUhudfJYtjqi73k3khoKrQQHChoM66Mi3+G9c7Y swMTL8vM3fS1S4yvIhd9l0hN4H2PXYRdRYXh878bCBqtIO5CgWIEgWR+t6AIKgXs 56MwRg+gIPV2fUWjv0QPa4s/pQA1i/bMiZ2nkJzSUccMVft/51krZ6wXhJZ2GP7s 8otnjZ6X0u5NQoBJrmDfeTKX6TZcZ4WPPx6ZGlnyY2toG/YgbBWD2CPlo27Smnl7 iKjtiSh4vdQFPDbl4J0bn+PFTgBSsppYmeo5aOGNq/f56ybsoHARnUMF8pov7Mmp uFqitwEKOjcHvsE0xZJ083F7YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG9jKlZM bvITn7eo7cJ5PYQj5DiDMB8GA1UdIwQYMBaAFHEWFwAtnwyetltO3WH3ockfzbg+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzZFNy9FNEEwQ0NBRTVE REQxMUVGODMwREY1NjFDNEY5QUUwMi9jUllYQUMyZkRKNjJXMDdkWWZlaHlSX051 RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NSWVhBQzJmREo2MlcwN2RZZmVoeVJfTnVENC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzZFNy9FNEEwQ0NBRTVEREQxMUVGODMwREY1NjFDNEY5QUUwMi9jUllYQUMyZkRK NjJXMDdkWWZlaHlSX051RDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhf1F9JdNDrLa1/N6gvTxysAUeRutFw/4H9Jo1dYx0nGSTRIQ0m5A+ y9+QA+dCVpk2wysjlHHyk/IR2SfMrbgQcKcPVMBgVoqsC3VRmDtCmPWliymk3/GP fduZsKGt3yR0nQDW/AsjpgzRtLJEuF2gUJ6V3hg4yVcFyOzDM0OX1e1cYN3DxFeu GqaYvgUcUh6OL8e5siv6w4YwFmxyT3pRRtM5x5zuRmNzZTCyEjtcC+eXwvLIQtVi Ot37kDwf9MgfzrjfXcOJBa1fAZeeEdOouHhDRAWw/pOb2llPqO8Dwyrq1A+1iYoJ fzWmxuz9iEohFgJ+b8KrmAWrCTZnhsbO -----END CERTIFICATE-----Generated at Sat Apr 26 03:34:06 2025 by rpki-client