$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft File: H4-gq_qNf39-fqANVuoBxwky5gc.mft (raw, json) Hash identifier: lYzfG5QkFIKq+e/tXn1oVbrgofVm/4W+aGoLGk/yJ7E= Subject key identifier: 50:9C:DC:32:EE:C2:76:4B:D9:7D:85:0C:9B:69:F6:6F:66:B3:07:7A Authority key identifier: 1F:8F:A0:AB:FA:8D:7F:7F:7E:7E:A0:0D:56:EA:01:C7:09:32:E6:07 Certificate issuer: /CN=A91BDD82/serialNumber=1F8FA0ABFA8D7F7F7E7EA00D56EA01C70932E607 Certificate serial: 0E8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft Manifest number: 0FA4 Signing time: Thu 24 Apr 2025 17:41:44 +0000 Manifest this update: Thu 24 Apr 2025 17:41:44 +0000 Manifest next update: Thu 01 May 2025 17:41:44 +0000 Files and hashes: 1: H4-gq_qNf39-fqANVuoBxwky5gc.crl (hash: LRDqyiGdBRaDogTlIRdNJrVOITLaDUQ3c/Vhqwh/qh8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.crl rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3727 (0xe8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDD82, serialNumber=1F8FA0ABFA8D7F7F7E7EA00D56EA01C70932E607 Validity Not Before: Apr 24 17:41:44 2025 GMT Not After : May 1 17:41:44 2025 GMT Subject: CN=680a77d8-8518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fa:bf:60:e0:e4:82:9f:18:61:51:f2:4f:e6: 9f:82:c7:7c:2e:e7:c2:ff:d6:44:7a:f0:db:c1:86: 18:bd:1f:c7:74:b0:71:93:60:8d:59:86:58:57:34: 25:53:45:4f:98:09:90:d4:d8:13:a0:e7:89:d3:7f: 74:ab:36:71:39:a5:48:5e:88:94:88:3f:20:43:eb: 9e:85:90:0f:11:45:04:51:79:8f:15:c2:74:d0:e6: 0d:8a:20:67:c6:0c:f4:34:e3:ed:67:c8:d7:48:b8: ec:4f:97:74:37:66:4a:61:fe:d7:1b:19:88:c4:ed: 4d:13:f4:dc:f1:e0:b3:6d:fc:b5:fc:a6:6d:ec:05: a1:3d:b1:05:ae:72:ee:8a:d3:dd:0c:fc:32:1a:14: 8b:a8:11:eb:4a:42:48:7e:04:d0:f9:8f:bb:73:61: 66:41:cb:60:2c:18:f6:d4:f6:c5:fc:50:91:06:c2: 87:4c:60:e1:94:8f:8c:1f:bb:27:38:eb:7c:4e:ad: 83:32:9f:80:ec:b3:52:64:c9:6d:64:6f:4a:1a:0d: 33:2b:a8:ce:60:11:fd:24:0e:d3:a3:7b:95:c1:b8: 50:eb:31:9f:2a:c5:2c:b5:69:89:3a:ca:c3:e5:98: fb:c4:2f:ad:7e:c5:ad:e4:5e:a4:a1:59:79:92:84: be:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9C:DC:32:EE:C2:76:4B:D9:7D:85:0C:9B:69:F6:6F:66:B3:07:7A X509v3 Authority Key Identifier: keyid:1F:8F:A0:AB:FA:8D:7F:7F:7E:7E:A0:0D:56:EA:01:C7:09:32:E6:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:3a:3f:fb:ae:29:a3:b6:cf:53:ab:5c:37:07:93:e2:cf:1e: 88:5d:9d:7e:ba:df:50:c8:55:97:fa:25:c0:2e:24:5b:5e:ed: e7:04:56:9e:f7:96:c0:5a:89:df:6b:2e:b9:76:a4:1f:09:13: 95:9c:d0:3e:5a:cc:d2:22:38:30:40:51:b1:78:62:17:30:99: 33:aa:b3:93:b0:c0:db:94:07:5e:67:ad:07:cc:56:5d:d6:59: ec:87:e1:25:61:3e:a0:18:e4:a7:35:51:a1:8a:0e:08:1f:8f: 38:17:ce:5f:0b:cf:45:00:fc:dc:7f:bb:6f:70:99:ec:ec:99: 10:f7:5d:a5:42:45:d3:55:f4:80:85:f2:88:ab:50:dd:31:48: 1d:81:5d:ab:7e:09:3b:af:96:43:49:d9:6e:f9:e6:47:c6:86: a2:6f:fa:b3:a8:8c:da:60:24:0d:7a:d9:18:a7:01:13:35:74: b2:72:b0:61:82:3b:0d:20:22:39:bb:d4:b2:d8:a4:86:37:9c: 23:58:26:da:03:c5:c3:38:68:e4:30:3f:9f:52:da:3a:55:02: d5:58:54:98:22:48:7f:6d:8d:90:f0:4d:f6:96:22:af:c6:92: 34:b0:58:a5:62:0e:fe:0d:4c:84:a8:0f:57:00:56:1b:7a:7c: c3:ca:c8:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkREODIxMTAvBgNVBAUTKDFGOEZBMEFCRkE4RDdGN0Y3RTdFQTAwRDU2RUEwMUM3 MDkzMkU2MDcwHhcNMjUwNDI0MTc0MTQ0WhcNMjUwNTAxMTc0MTQ0WjAYMRYwFAYD VQQDEw02ODBhNzdkOC04NTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvq/YODkgp8YYVHyT+afgsd8LufC/9ZEevDbwYYYvR/HdLBxk2CNWYZYVzQl U0VPmAmQ1NgToOeJ0390qzZxOaVIXoiUiD8gQ+uehZAPEUUEUXmPFcJ00OYNiiBn xgz0NOPtZ8jXSLjsT5d0N2ZKYf7XGxmIxO1NE/Tc8eCzbfy1/KZt7AWhPbEFrnLu itPdDPwyGhSLqBHrSkJIfgTQ+Y+7c2FmQctgLBj21PbF/FCRBsKHTGDhlI+MH7sn OOt8Tq2DMp+A7LNSZMltZG9KGg0zK6jOYBH9JA7To3uVwbhQ6zGfKsUstWmJOsrD 5Zj7xC+tfsWt5F6koVl5koS+2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCc3DLu wnZL2X2FDJtp9m9mswd6MB8GA1UdIwQYMBaAFB+PoKv6jX9/fn6gDVbqAccJMuYH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREQ4Mi8xOTdGOUQ5Mjkx RTIxMUU5OTc2ODg5MEVDNEY5QUUwMi9INC1ncV9xTmYzOS1mcUFOVnVvQnh3a3k1 Z2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g0LWdxX3FOZjM5LWZxQU5WdW9CeHdreTVnYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REQ4Mi8xOTdGOUQ5MjkxRTIxMUU5OTc2ODg5MEVDNEY5QUUwMi9INC1ncV9xTmYz OS1mcUFOVnVvQnh3a3k1Z2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByOj/7rimjts9Tq1w3B5Pizx6IXZ1+ut9QyFWX+iXALiRbXu3nBFae 95bAWonfay65dqQfCROVnNA+WszSIjgwQFGxeGIXMJkzqrOTsMDblAdeZ60HzFZd 1lnsh+ElYT6gGOSnNVGhig4IH484F85fC89FAPzcf7tvcJns7JkQ912lQkXTVfSA hfKIq1DdMUgdgV2rfgk7r5ZDSdlu+eZHxoaib/qzqIzaYCQNetkYpwETNXSycrBh gjsNICI5u9Sy2KSGN5wjWCbaA8XDOGjkMD+fUto6VQLVWFSYIkh/bY2Q8E32liKv xpI0sFilYg7+DUyEqA9XAFYbenzDysg4 -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:46 2025 by rpki-client