$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft File: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft (raw, json) Hash identifier: NFmppt0ruBP9VzmCAdNddkjjNu+kjIWm0GVYWz3QVdM= Subject key identifier: 7E:2B:56:1A:00:B7:A6:30:99:78:30:ED:6F:EF:23:01:94:1C:5A:E6 Authority key identifier: A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D Certificate issuer: /CN=A91D1E4C/serialNumber=A59D836E1C31623CC586448AA752B746853B841D Certificate serial: 0802 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft Manifest number: 0AD2 Signing time: Thu 24 Apr 2025 20:43:42 +0000 Manifest this update: Thu 24 Apr 2025 20:43:41 +0000 Manifest next update: Thu 01 May 2025 20:43:41 +0000 Files and hashes: 1: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl (hash: TnwbdQ1pvowRuAPfDqomswTmkzOZ/qcAwla18r0126E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2050 (0x802) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C, serialNumber=A59D836E1C31623CC586448AA752B746853B841D Validity Not Before: Apr 24 20:43:41 2025 GMT Not After : May 1 20:43:41 2025 GMT Subject: CN=680aa27e-ceae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d9:d0:fe:00:b5:89:7f:68:55:04:06:48:e3: 66:f5:a7:6f:ac:94:a5:e1:93:c0:5e:96:ff:f6:97: 6b:1f:6a:f5:d1:05:f0:b8:32:33:d4:62:6e:e8:6c: 69:38:ec:d6:96:29:3d:ed:9d:b8:30:eb:f9:f9:cf: af:ea:d6:82:96:1d:04:3c:4c:8a:df:80:7e:5f:c3: 2c:b4:04:85:2b:0c:85:a9:21:b5:48:95:ee:de:22: 46:91:7e:69:bb:e2:57:04:e9:24:05:40:05:69:04: 4f:b8:71:b9:65:dc:72:12:54:ad:2e:19:75:6e:f7: 50:dd:dc:11:43:47:84:b0:2f:21:ab:b4:a0:bc:a0: 57:06:62:08:58:4e:49:b5:de:8a:ad:2b:6e:e5:27: c7:ac:fb:e2:80:61:cc:fe:7f:27:e7:dd:c4:f6:e8: 12:a5:ae:fd:07:a3:7f:d6:aa:a3:07:38:8c:67:6d: 5f:48:1e:a0:2e:c3:56:7e:01:68:ce:e6:4c:98:c4: a9:3e:76:30:7e:f0:ea:99:08:00:0d:3a:29:6d:8a: fa:bd:18:31:ca:0f:20:3b:c9:27:70:ec:c5:cd:4d: 5e:a0:ec:99:b3:b1:93:f9:47:88:dc:96:53:26:6a: 4e:ce:63:0d:d5:e6:04:0d:69:09:94:62:35:3b:87: 98:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:2B:56:1A:00:B7:A6:30:99:78:30:ED:6F:EF:23:01:94:1C:5A:E6 X509v3 Authority Key Identifier: keyid:A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:4a:6e:3f:58:1d:00:72:c3:c8:62:09:fb:52:ec:14:69:f6: 18:e6:f5:05:2b:0c:85:f5:c4:d6:8f:6d:f8:49:1a:df:61:09: d2:6e:0e:74:ab:9f:1a:5d:4e:46:9e:49:5c:b6:c6:fb:e8:df: 65:56:d1:b7:32:81:bc:8e:a3:cc:3b:61:19:3c:d1:40:4e:de: 7b:72:99:15:35:df:e8:60:7f:b7:77:7e:e0:f3:6a:d0:61:22: ad:ba:45:1d:49:c3:10:a0:98:23:7d:2e:3f:77:93:2e:ea:c2: 5d:e9:9a:ad:4a:54:04:21:a7:4a:b9:15:7a:31:52:f2:f5:5c: c2:e9:75:41:67:18:a1:02:f9:9e:60:e9:96:c3:97:5c:50:17: b1:89:f7:6c:a3:41:59:ee:43:de:90:72:9e:92:db:46:fa:c8: b2:81:91:10:f3:63:84:e0:b9:15:ac:1d:5f:ac:32:85:e3:56: c7:a9:76:be:11:ad:d1:6f:32:f4:1d:c9:64:1e:d7:38:3a:be: d3:48:98:ae:d1:66:a6:2f:5e:7f:34:53:a4:7e:4f:6d:32:93: 2f:75:f7:83:26:22:7f:44:0e:20:f8:75:37:91:a7:93:2a:a9: 44:24:c0:a2:23:4f:8b:f4:c8:f6:f0:da:0d:e5:a5:39:04:50: 23:34:8c:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEE1OUQ4MzZFMUMzMTYyM0NDNTg2NDQ4QUE3NTJCNzQ2 ODUzQjg0MUQwHhcNMjUwNDI0MjA0MzQxWhcNMjUwNTAxMjA0MzQxWjAYMRYwFAYD VQQDEw02ODBhYTI3ZS1jZWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNnQ/gC1iX9oVQQGSONm9advrJSl4ZPAXpb/9pdrH2r10QXwuDIz1GJu6Gxp OOzWlik97Z24MOv5+c+v6taClh0EPEyK34B+X8MstASFKwyFqSG1SJXu3iJGkX5p u+JXBOkkBUAFaQRPuHG5ZdxyElStLhl1bvdQ3dwRQ0eEsC8hq7SgvKBXBmIIWE5J td6KrStu5SfHrPvigGHM/n8n593E9ugSpa79B6N/1qqjBziMZ21fSB6gLsNWfgFo zuZMmMSpPnYwfvDqmQgADTopbYr6vRgxyg8gO8kncOzFzU1eoOyZs7GT+UeI3JZT JmpOzmMN1eYEDWkJlGI1O4eY/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH4rVhoA t6YwmXgw7W/vIwGUHFrmMB8GA1UdIwQYMBaAFKWdg24cMWI8xYZEiqdSt0aFO4Qd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9wWjJEYmh3eFlqekZoa1NLcDFLM1JvVTdo QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BaMkRiaHd4WWp6RmhrU0twMUszUm9VN2hCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9wWjJEYmh3eFlq ekZoa1NLcDFLM1JvVTdoQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqSm4/WB0AcsPIYgn7UuwUafYY5vUFKwyF9cTWj234SRrfYQnSbg50 q58aXU5Gnklctsb76N9lVtG3MoG8jqPMO2EZPNFATt57cpkVNd/oYH+3d37g82rQ YSKtukUdScMQoJgjfS4/d5Mu6sJd6ZqtSlQEIadKuRV6MVLy9VzC6XVBZxihAvme YOmWw5dcUBexifdso0FZ7kPekHKekttG+siygZEQ82OE4LkVrB1frDKF41bHqXa+ Ea3RbzL0HclkHtc4Or7TSJiu0WamL15/NFOkfk9tMpMvdfeDJiJ/RA4g+HU3kaeT KqlEJMCiI0+L9Mj28NoN5aU5BFAjNIzF -----END CERTIFICATE-----Generated at Sat Apr 26 15:22:18 2025 by rpki-client