$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft File: P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft (raw, json) Hash identifier: GSG4qMN2SJjSHDqoKu1nhBxblYiUamsT7WOP95U35f0= Subject key identifier: 40:00:DE:CC:9B:D8:0E:A6:C8:6B:0D:20:36:30:DA:9D:63:84:F2:C6 Authority key identifier: 3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7 Certificate issuer: /CN=A91C4A80/serialNumber=3FD7F555FC7D6FC23539A3A621EF2D048D4C7CC7 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft Manifest number: 2A Signing time: Fri 25 Apr 2025 06:43:19 +0000 Manifest this update: Fri 25 Apr 2025 06:43:19 +0000 Manifest next update: Fri 02 May 2025 06:43:19 +0000 Files and hashes: 1: P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl (hash: s9x0TjKp86WQkaSW/REuimP92VkPeHjUKU1rWoGmm6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:43:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4A80, serialNumber=3FD7F555FC7D6FC23539A3A621EF2D048D4C7CC7 Validity Not Before: Apr 25 06:43:19 2025 GMT Not After : May 2 06:43:19 2025 GMT Subject: CN=680b2f07-afc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8e:fe:53:21:52:a2:e9:ae:73:93:c1:cb:4f: ff:62:db:2a:17:fc:33:b1:05:20:3b:59:b9:83:dc: 7c:cd:eb:7e:42:a1:76:65:ed:62:a4:20:4d:ef:5e: c2:81:c3:6b:bb:9f:a2:fd:60:c4:51:2b:9d:b7:c2: 86:77:d4:36:0b:57:bb:79:44:dd:1a:f0:ca:62:6c: 97:2a:79:a9:40:76:f9:76:df:bb:82:2e:47:d7:71: 87:4e:fe:65:38:a1:56:61:74:1d:b0:6d:5c:18:4a: aa:9b:08:fc:55:8b:4a:1d:31:db:ac:7e:fd:28:fc: 09:82:91:19:08:b3:8d:6f:6e:57:de:54:2d:e5:93: 8c:71:ee:b4:f3:65:33:2f:ec:26:18:d5:3a:af:40: 1a:5c:40:34:79:33:b8:82:49:34:13:08:81:21:e5: 1b:6b:77:5b:70:31:f3:3c:42:dc:37:d7:cc:a4:cc: 75:d4:74:32:4c:4c:69:2e:7a:6f:40:cb:9d:81:71: b3:c5:f1:b2:56:bd:22:39:68:2f:aa:68:b0:8a:97: 6a:23:dd:b7:b6:5a:68:48:bb:5b:d8:47:90:ee:d4: b0:a2:b0:14:b8:b2:4b:a8:1a:f5:24:8a:0e:9c:d9: e3:2c:69:d1:09:48:f9:75:08:35:9f:f5:11:f5:55: b3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:00:DE:CC:9B:D8:0E:A6:C8:6B:0D:20:36:30:DA:9D:63:84:F2:C6 X509v3 Authority Key Identifier: keyid:3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:dd:35:2d:46:cc:1c:2d:b0:9a:dc:f4:a3:ff:e9:a9:8b:ce: 51:e8:ac:ea:50:81:cf:c6:62:32:f4:8a:2a:85:48:90:2e:20: c7:51:47:37:35:ad:c5:65:58:b1:7a:e2:eb:12:e2:24:ef:fe: bf:3a:66:7b:15:fa:6b:00:0a:b2:31:7a:be:fe:3b:f5:6f:da: 8b:0d:bf:64:e5:f1:db:ae:97:6b:de:83:bd:7b:5d:b0:aa:cb: 3a:ef:ee:ba:53:98:fc:a7:7c:96:58:88:56:ad:36:ba:e0:65: 80:6b:49:89:fe:2a:80:ba:23:7d:93:16:d8:16:05:ae:91:30: 55:53:f8:7f:14:10:4f:50:d0:c9:06:35:c1:f3:7e:3e:4d:2a: af:24:17:dc:7a:c4:18:90:e3:bf:80:95:71:aa:c6:2e:8b:ac: ca:7b:f3:8b:ae:af:51:22:a6:c2:5c:e4:ac:c1:31:59:8d:3f: 7d:db:53:a7:2b:63:13:dd:14:40:71:a8:3b:58:3c:3e:a9:7c: 85:fa:54:b6:be:e9:e0:e7:cd:41:6a:13:2c:d3:1a:dd:8a:a5: 0a:e3:47:e9:5c:18:f5:1f:6f:dc:31:eb:3e:0f:74:71:3a:50: c8:f7:11:28:e2:b0:f9:52:4f:b7:cb:25:8d:0b:00:6b:56:11: 89:25:1e:f7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NEE4MDExMC8GA1UEBRMoM0ZEN0Y1NTVGQzdENkZDMjM1MzlBM0E2MjFFRjJEMDQ4 RDRDN0NDNzAeFw0yNTA0MjUwNjQzMTlaFw0yNTA1MDIwNjQzMTlaMBgxFjAUBgNV BAMTDTY4MGIyZjA3LWFmYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtjv5TIVKi6a5zk8HLT/9i2yoX/DOxBSA7WbmD3HzN635CoXZl7WKkIE3vXsKB w2u7n6L9YMRRK523woZ31DYLV7t5RN0a8MpibJcqealAdvl237uCLkfXcYdO/mU4 oVZhdB2wbVwYSqqbCPxVi0odMdusfv0o/AmCkRkIs41vblfeVC3lk4xx7rTzZTMv 7CYY1TqvQBpcQDR5M7iCSTQTCIEh5Rtrd1twMfM8Qtw318ykzHXUdDJMTGkuem9A y52BcbPF8bJWvSI5aC+qaLCKl2oj3be2WmhIu1vYR5Du1LCisBS4skuoGvUkig6c 2eMsadEJSPl1CDWf9RH1VbPZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQADezJvY DqbIaw0gNjDanWOE8sYwHwYDVR0jBBgwFoAUP9f1Vfx9b8I1OaOmIe8tBI1MfMcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0QTgwLzI5RUM3M0JBRTRF RjExRUZCNzE0RTU2Q0M0RjlBRTAyL1A5ZjFWZng5YjhJMU9hT21JZTh0QkkxTWZN Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUDlmMVZmeDliOEkxT2FPbUllOHRCSTFNZk1jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0 QTgwLzI5RUM3M0JBRTRFRjExRUZCNzE0RTU2Q0M0RjlBRTAyL1A5ZjFWZng5YjhJ MU9hT21JZTh0QkkxTWZNYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI7dNS1GzBwtsJrc9KP/6amLzlHorOpQgc/GYjL0iiqFSJAuIMdRRzc1 rcVlWLF64usS4iTv/r86ZnsV+msACrIxer7+O/Vv2osNv2Tl8duul2veg717XbCq yzrv7rpTmPynfJZYiFatNrrgZYBrSYn+KoC6I32TFtgWBa6RMFVT+H8UEE9Q0MkG NcHzfj5NKq8kF9x6xBiQ47+AlXGqxi6LrMp784uur1EipsJc5KzBMVmNP33bU6cr YxPdFEBxqDtYPD6pfIX6VLa+6eDnzUFqEyzTGt2KpQrjR+lcGPUfb9wx6z4PdHE6 UMj3ESjisPlST7fLJY0LAGtWEYklHvc= -----END CERTIFICATE-----Generated at Sat Apr 26 05:47:21 2025 by rpki-client