$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft File: x67AwRtt8SmLElCYMaTMAkTa3PI.mft (raw, json) Hash identifier: 3uD8Ud/GXT/VuMlzSftVLWwYVoH/ibSZzHGTyqi/79c= Subject key identifier: 7C:5A:88:38:CE:40:53:D4:4B:95:77:28:05:3D:98:0A:65:24:D6:FF Authority key identifier: C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2 Certificate issuer: /CN=A91C612E/serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2 Certificate serial: 06A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft Manifest number: 1294 Signing time: Thu 24 Apr 2025 18:33:49 +0000 Manifest this update: Thu 24 Apr 2025 18:33:48 +0000 Manifest next update: Thu 01 May 2025 18:33:48 +0000 Files and hashes: 1: x67AwRtt8SmLElCYMaTMAkTa3PI.crl (hash: IUg1KulPbCVxggGjy3mUPCu+WBNr2nLbfd0l7v7FQvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1701 (0x6a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C612E, serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2 Validity Not Before: Apr 24 18:33:48 2025 GMT Not After : May 1 18:33:48 2025 GMT Subject: CN=680a840d-02a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9e:96:63:86:6e:3e:a7:e5:98:c7:42:70:14: ad:fe:24:5a:28:36:1a:fd:03:02:39:d4:0d:4e:05: 00:37:3f:0e:99:41:77:bc:1d:55:4b:90:5c:ee:c1: a6:e7:d5:a8:6c:cb:8f:9e:5f:9c:42:09:8c:22:1b: cf:fb:9c:94:40:67:43:bf:d1:d1:8c:a4:23:41:a4: 60:c5:ec:6c:6a:40:95:f4:42:4d:aa:ac:3f:d3:b1: 57:da:2c:75:14:7c:36:1f:60:67:25:37:88:9c:7c: 90:93:61:62:80:09:fb:1d:6f:d4:5f:5a:b4:4d:10: a8:95:98:4f:91:08:9d:dd:9a:fa:e2:56:82:06:b6: e4:5d:74:1b:ce:92:9a:36:e4:1d:88:2d:4b:04:d1: dd:bc:fb:3a:31:ae:07:59:90:99:26:d5:7f:27:90: 31:06:ca:61:1e:10:87:41:71:d3:60:d1:d9:fa:f1: 4a:9e:82:e4:9c:7c:48:71:d4:e3:ae:fc:48:d2:10: e9:5d:d5:c9:b2:67:6e:63:07:2d:87:8f:be:ea:b2: b1:6e:55:8b:70:bf:d8:d7:b7:3b:13:04:c7:61:ec: 85:90:e9:23:cf:4c:6a:f8:e8:60:6f:42:08:3f:40: c9:51:64:28:b8:ca:a7:1d:36:c6:f7:fa:ef:d1:56: be:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:5A:88:38:CE:40:53:D4:4B:95:77:28:05:3D:98:0A:65:24:D6:FF X509v3 Authority Key Identifier: keyid:C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:0b:e3:a2:f5:84:91:7b:74:28:ac:53:1c:42:8f:7d:31:9b: 71:1d:8e:67:60:1c:0c:52:21:29:a6:c6:8b:d5:6a:23:df:fc: d7:f4:62:c2:00:7a:cf:27:18:dd:15:ee:3b:7c:82:3d:93:2c: b9:6e:5b:e4:09:da:c3:71:76:a6:8d:ad:aa:f5:04:3f:2a:8b: cd:58:18:9c:a9:a1:e3:c1:c1:72:a3:7e:23:e1:a3:41:6f:af: 38:f2:54:fb:af:2a:25:98:3e:7e:94:37:47:47:39:2c:23:e8: 2e:e3:29:89:7a:4b:02:ed:86:c5:08:49:a3:94:18:fe:ad:2a: f1:9b:6d:5f:66:a6:63:0d:9b:fd:ad:66:ef:e8:29:a3:40:90: 21:b0:a0:5a:fa:2a:12:20:92:33:44:99:67:82:8a:fa:e2:79: c8:f4:33:65:1e:dc:11:c4:58:59:06:86:72:f6:8c:56:04:3e: 8a:70:ea:c8:f1:5a:8b:9b:73:72:39:a5:86:9b:b9:5f:3a:19: a1:8b:da:31:e4:fc:37:c2:88:ff:8c:1e:87:05:a3:2b:bd:38: aa:d7:b7:f1:03:04:80:bd:c1:2f:4d:a2:b9:6a:8e:51:0e:da: 1e:38:74:1b:67:e8:bb:86:07:b0:5f:8f:02:f9:51:ef:47:6e: 88:37:f8:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYxMkUxMTAvBgNVBAUTKEM3QUVDMEMxMUI2REYxMjk4QjEyNTA5ODMxQTRDQzAy NDREQURDRjIwHhcNMjUwNDI0MTgzMzQ4WhcNMjUwNTAxMTgzMzQ4WjAYMRYwFAYD VQQDEw02ODBhODQwZC0wMmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4p6WY4ZuPqflmMdCcBSt/iRaKDYa/QMCOdQNTgUANz8OmUF3vB1VS5Bc7sGm 59WobMuPnl+cQgmMIhvP+5yUQGdDv9HRjKQjQaRgxexsakCV9EJNqqw/07FX2ix1 FHw2H2BnJTeInHyQk2FigAn7HW/UX1q0TRColZhPkQid3Zr64laCBrbkXXQbzpKa NuQdiC1LBNHdvPs6Ma4HWZCZJtV/J5AxBsphHhCHQXHTYNHZ+vFKnoLknHxIcdTj rvxI0hDpXdXJsmduYwcth4++6rKxblWLcL/Y17c7EwTHYeyFkOkjz0xq+Ohgb0II P0DJUWQouMqnHTbG9/rv0Va+hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxaiDjO QFPUS5V3KAU9mAplJNb/MB8GA1UdIwQYMBaAFMeuwMEbbfEpixJQmDGkzAJE2tzy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjEyRS82NUJDMTdEMjBC NjExMUVBQUYwNDJGNjhDNEY5QUUwMi94NjdBd1J0dDhTbUxFbENZTWFUTUFrVGEz UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g2N0F3UnR0OFNtTEVsQ1lNYVRNQWtUYTNQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjEyRS82NUJDMTdEMjBCNjExMUVBQUYwNDJGNjhDNEY5QUUwMi94NjdBd1J0dDhT bUxFbENZTWFUTUFrVGEzUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTC+Oi9YSRe3QorFMcQo99MZtxHY5nYBwMUiEppsaL1Woj3/zX9GLC AHrPJxjdFe47fII9kyy5blvkCdrDcXamja2q9QQ/KovNWBicqaHjwcFyo34j4aNB b6848lT7ryolmD5+lDdHRzksI+gu4ymJeksC7YbFCEmjlBj+rSrxm21fZqZjDZv9 rWbv6CmjQJAhsKBa+ioSIJIzRJlngor64nnI9DNlHtwRxFhZBoZy9oxWBD6KcOrI 8VqLm3NyOaWGm7lfOhmhi9ox5Pw3woj/jB6HBaMrvTiq17fxAwSAvcEvTaK5ao5R DtoeOHQbZ+i7hgewX48C+VHvR26IN/iV -----END CERTIFICATE-----Generated at Sat Apr 26 05:13:47 2025 by rpki-client