$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft File: 8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft (raw, json) Hash identifier: fKO4Xe6NVJJs6X3S7esK3qkoFCWV63gM0ZJa/8o+3Og= Subject key identifier: 66:28:E9:EC:38:D3:C6:1C:BD:1A:2D:F8:B9:EF:5E:C2:FE:D6:F4:F0 Authority key identifier: F2:E4:65:7F:B0:B1:51:42:73:C5:0E:EB:F9:0F:44:16:FD:A5:4B:07 Certificate issuer: /CN=A91C9916/serialNumber=F2E4657FB0B1514273C50EEBF90F4416FDA54B07 Certificate serial: 01C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft Manifest number: 01C8 Signing time: Fri 25 Apr 2025 02:02:56 +0000 Manifest this update: Fri 25 Apr 2025 02:02:56 +0000 Manifest next update: Fri 02 May 2025 02:02:56 +0000 Files and hashes: 1: 8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.crl (hash: ySOeMyBiGDzRvmrumgKPO+kS7dyftQxquvHgjv86f5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.crl rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 456 (0x1c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9916, serialNumber=F2E4657FB0B1514273C50EEBF90F4416FDA54B07 Validity Not Before: Apr 25 02:02:56 2025 GMT Not After : May 2 02:02:56 2025 GMT Subject: CN=680aed50-c3c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:69:0f:6c:83:bc:3c:ce:ad:69:0b:3f:2c:d1: 0d:4c:04:b4:6e:c4:d2:90:e4:c9:ec:c2:92:76:38: 82:58:e5:d0:65:aa:77:53:09:db:d0:15:2e:89:0a: 5c:e9:db:36:60:62:c5:6f:db:cc:75:1c:a6:c2:f8: f7:1f:0b:38:6e:ef:fd:fa:28:5c:ea:a8:90:b6:cf: 10:60:a6:f8:8a:15:22:f8:1f:32:e1:30:65:26:f5: b6:02:f7:a8:37:8f:03:0a:ee:4e:3c:d8:b1:69:ea: c2:c6:4b:c1:01:d2:ff:eb:74:fa:dd:d3:a7:1c:e2: 7e:1a:ef:fc:16:e9:bb:93:d7:54:f7:4d:29:3b:15: 1d:cb:e1:30:7a:be:d6:9e:9c:f0:95:b2:a4:b5:c6: ea:a0:91:3f:16:47:b9:1d:27:2b:8d:9b:2b:22:f4: b6:8a:6c:34:7d:a6:ec:21:0c:7d:09:b7:b3:2f:bb: 0f:86:f4:0b:67:20:33:94:25:cb:1a:f7:88:1c:47: 1c:7e:f5:0e:b3:ae:09:39:73:83:5d:84:87:fc:6c: 22:34:de:c2:4d:8a:a9:62:c2:47:13:57:05:a7:74: 9a:27:33:45:8f:12:51:77:33:7b:62:47:78:7b:7c: 4e:d9:18:19:c8:0a:20:b4:32:3c:d4:87:44:1f:bb: da:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:28:E9:EC:38:D3:C6:1C:BD:1A:2D:F8:B9:EF:5E:C2:FE:D6:F4:F0 X509v3 Authority Key Identifier: keyid:F2:E4:65:7F:B0:B1:51:42:73:C5:0E:EB:F9:0F:44:16:FD:A5:4B:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:23:8f:76:b0:00:e3:17:48:a7:c9:bf:f9:5c:53:bb:9e:53: fd:12:1d:2e:88:5a:98:6e:09:1b:cf:79:6b:1f:8e:e4:f5:d7: a4:42:03:a9:fe:d7:2f:b7:40:e4:cd:26:84:28:8e:3a:f6:90: 75:cc:17:d0:b9:8c:c6:b2:9c:93:b9:c4:9e:76:61:ec:e9:27: 53:eb:5f:70:c8:88:74:85:75:76:3b:94:ff:4c:c0:60:07:23: df:2d:2b:a1:c2:20:86:ee:e0:18:1a:c9:ab:83:b6:8b:65:65: cd:12:04:62:3e:14:74:a9:70:52:37:b0:c6:90:93:84:a9:3b: e9:86:ec:56:5f:4f:de:98:cf:54:75:af:4d:dd:e2:75:4c:73: 2e:6d:7e:26:62:24:4c:7b:0a:aa:98:67:35:93:c5:00:ce:b5: be:de:42:ed:c6:74:7d:34:f1:54:7b:12:22:b6:ac:bc:f0:fc: 0b:3b:e0:b9:c6:12:48:ce:08:d9:0d:cd:9d:f6:37:20:39:b8: eb:02:8b:05:c6:39:d3:d7:00:07:d5:27:98:92:36:c2:25:25: ce:57:a1:88:d0:89:66:b1:27:6d:34:64:c8:6c:26:c7:bc:af: db:0e:2d:49:2c:cb:83:bf:1e:14:6e:69:c1:bb:f7:41:c7:69: c9:1f:0b:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk5MTYxMTAvBgNVBAUTKEYyRTQ2NTdGQjBCMTUxNDI3M0M1MEVFQkY5MEY0NDE2 RkRBNTRCMDcwHhcNMjUwNDI1MDIwMjU2WhcNMjUwNTAyMDIwMjU2WjAYMRYwFAYD VQQDEw02ODBhZWQ1MC1jM2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2WkPbIO8PM6taQs/LNENTAS0bsTSkOTJ7MKSdjiCWOXQZap3Uwnb0BUuiQpc 6ds2YGLFb9vMdRymwvj3Hws4bu/9+ihc6qiQts8QYKb4ihUi+B8y4TBlJvW2Aveo N48DCu5OPNixaerCxkvBAdL/63T63dOnHOJ+Gu/8Fum7k9dU900pOxUdy+Ewer7W npzwlbKktcbqoJE/Fke5HScrjZsrIvS2imw0fabsIQx9CbezL7sPhvQLZyAzlCXL GveIHEccfvUOs64JOXODXYSH/GwiNN7CTYqpYsJHE1cFp3SaJzNFjxJRdzN7Ykd4 e3xO2RgZyAogtDI81IdEH7vaMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYo6ew4 08YcvRot+LnvXsL+1vTwMB8GA1UdIwQYMBaAFPLkZX+wsVFCc8UO6/kPRBb9pUsH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTkxNi8yMzlEQzQyNjYx OEIxMUVEODhBQkJDMjJDNEY5QUUwMi84dVJsZjdDeFVVSnp4UTdyLVE5RUZ2MmxT d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh1UmxmN0N4VVVKenhRN3ItUTlFRnYybFN3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTkxNi8yMzlEQzQyNjYxOEIxMUVEODhBQkJDMjJDNEY5QUUwMi84dVJsZjdDeFVV Snp4UTdyLVE5RUZ2MmxTd2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQI492sADjF0inyb/5XFO7nlP9Eh0uiFqYbgkbz3lrH47k9dekQgOp /tcvt0DkzSaEKI469pB1zBfQuYzGspyTucSedmHs6SdT619wyIh0hXV2O5T/TMBg ByPfLSuhwiCG7uAYGsmrg7aLZWXNEgRiPhR0qXBSN7DGkJOEqTvphuxWX0/emM9U da9N3eJ1THMubX4mYiRMewqqmGc1k8UAzrW+3kLtxnR9NPFUexIitqy88PwLO+C5 xhJIzgjZDc2d9jcgObjrAosFxjnT1wAH1SeYkjbCJSXOV6GI0IlmsSdtNGTIbCbH vK/bDi1JLMuDvx4UbmnBu/dBx2nJHwuP -----END CERTIFICATE-----Generated at Sat Apr 26 17:05:54 2025 by rpki-client