$ rpki-client -vvf rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft File: lCeAdFXYAaHRECh75X8-hPYpDKA.mft (raw, json) Hash identifier: N6QnhPtMHHC/WJorFq0IyELUGBcztz3Yr6cmgRAwars= Subject key identifier: BD:01:83:9F:21:C0:46:C0:5F:EC:CF:30:CB:38:5D:DE:9A:79:38:5F Authority key identifier: 94:27:80:74:55:D8:01:A1:D1:10:28:7B:E5:7F:3E:84:F6:29:0C:A0 Certificate issuer: /CN=A91D585E/serialNumber=9427807455D801A1D110287BE57F3E84F6290CA0 Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft Manifest number: AC Signing time: Sun 27 Apr 2025 04:56:26 +0000 Manifest this update: Sun 27 Apr 2025 04:56:26 +0000 Manifest next update: Sun 04 May 2025 04:56:26 +0000 Files and hashes: 1: lCeAdFXYAaHRECh75X8-hPYpDKA.crl (hash: pT510Q8nYF2bDIWO9IzQ9hA5bX2ZGNCVLFBTB1ipSiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.crl rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 04:56:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D585E, serialNumber=9427807455D801A1D110287BE57F3E84F6290CA0 Validity Not Before: Apr 27 04:56:26 2025 GMT Not After : May 4 04:56:26 2025 GMT Subject: CN=680db8fa-27a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:01:c7:58:fa:96:b9:17:db:82:f2:26:19:dc: a0:a9:b1:2a:39:78:7e:ec:6d:53:9d:bb:95:b1:85: 44:a2:10:a0:0f:39:6d:7f:67:f8:f4:6c:4e:cb:46: f1:9c:73:58:35:af:9e:dc:bd:81:8d:b9:6f:63:10: 84:0d:d8:21:e3:41:70:4e:2a:86:1a:dc:6b:5b:fa: 2e:27:d8:a4:b0:a4:69:10:6d:5a:5a:f3:b7:b3:f6: 01:a8:94:26:87:64:bf:c6:c8:66:5f:7e:18:60:16: d3:4a:4e:6e:cf:4e:4c:5b:d6:c3:cd:d6:b3:ee:b1: 09:5b:70:47:59:df:71:fd:5e:d2:0a:13:5c:39:da: 07:cf:1f:08:d3:ec:90:63:b0:a0:ff:5c:5f:1d:54: 3a:6a:f0:6b:95:d1:71:a7:c2:9b:e6:ad:7f:3f:74: d6:81:58:6a:6e:87:d2:5c:83:73:91:5d:ab:be:2c: 40:95:37:4a:e3:a9:dc:93:99:5c:59:0c:ec:b4:c3: b9:54:6a:bc:a1:1d:d6:e8:db:a0:50:92:d3:0a:e3: ec:a1:13:4a:dc:24:1c:1d:9f:8a:5c:ac:8c:6b:e3: 46:f5:e6:5a:42:c5:ba:6b:f1:f6:e7:fc:e1:2f:1d: 20:6d:c8:2c:5d:db:56:04:b9:4d:02:a2:3a:52:6a: 6e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:01:83:9F:21:C0:46:C0:5F:EC:CF:30:CB:38:5D:DE:9A:79:38:5F X509v3 Authority Key Identifier: keyid:94:27:80:74:55:D8:01:A1:D1:10:28:7B:E5:7F:3E:84:F6:29:0C:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:e4:7b:9d:00:d6:da:ad:24:8c:da:bb:c6:95:b3:f9:8b:8a: 3a:0b:27:a1:03:ca:e0:2f:a9:97:62:74:cb:db:28:df:af:f1: cd:91:cb:18:9a:aa:46:99:71:4c:66:45:6f:69:1a:64:d2:25: 3d:62:b0:85:7b:31:bb:e0:72:43:c3:83:b1:00:ed:be:c7:d5: dd:ed:72:37:fe:72:f7:e3:41:bf:a8:98:5d:74:0f:15:18:ff: b4:57:32:16:d2:2a:dc:12:5f:b6:8b:45:66:60:c5:02:5e:04: 0b:6e:9e:46:44:52:8e:5f:62:c4:59:a5:a1:cc:61:53:88:43: 53:45:9f:f1:0a:df:1c:7e:37:60:72:ce:05:84:97:48:04:ab: c6:68:40:a7:70:15:0a:c1:59:5c:fd:15:6e:a3:61:23:e6:c7: 1f:29:64:30:c5:f7:44:18:1f:0b:01:4f:fb:1f:9f:f7:a8:6a: f8:d9:df:a1:6e:57:82:95:0e:6a:b2:a1:9e:d1:fb:8e:65:f3: 9c:8e:ef:4d:8a:8c:98:02:2a:07:4a:e6:73:57:f0:fb:32:41: 53:a9:03:83:d2:79:1b:00:56:65:6e:6f:84:42:33:c2:ba:25: 6b:ca:7b:79:58:68:1c:32:37:10:9d:1f:9d:5e:e4:ad:20:10: 80:9e:90:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4NUUxMTAvBgNVBAUTKDk0Mjc4MDc0NTVEODAxQTFEMTEwMjg3QkU1N0YzRTg0 RjYyOTBDQTAwHhcNMjUwNDI3MDQ1NjI2WhcNMjUwNTA0MDQ1NjI2WjAYMRYwFAYD VQQDEw02ODBkYjhmYS0yN2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAHHWPqWuRfbgvImGdygqbEqOXh+7G1TnbuVsYVEohCgDzltf2f49GxOy0bx nHNYNa+e3L2BjblvYxCEDdgh40FwTiqGGtxrW/ouJ9iksKRpEG1aWvO3s/YBqJQm h2S/xshmX34YYBbTSk5uz05MW9bDzdaz7rEJW3BHWd9x/V7SChNcOdoHzx8I0+yQ Y7Cg/1xfHVQ6avBrldFxp8Kb5q1/P3TWgVhqbofSXINzkV2rvixAlTdK46nck5lc WQzstMO5VGq8oR3W6NugUJLTCuPsoRNK3CQcHZ+KXKyMa+NG9eZaQsW6a/H25/zh Lx0gbcgsXdtWBLlNAqI6UmpuQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0Bg58h wEbAX+zPMMs4Xd6aeThfMB8GA1UdIwQYMBaAFJQngHRV2AGh0RAoe+V/PoT2KQyg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTg1RS80QkRBNzQ0NDFF NkMxMUVGOUZFNzQ4NzdDNEY5QUUwMi9sQ2VBZEZYWUFhSFJFQ2g3NVg4LWhQWXBE S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDZUFkRlhZQWFIUkVDaDc1WDgtaFBZcERLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTg1RS80QkRBNzQ0NDFFNkMxMUVGOUZFNzQ4NzdDNEY5QUUwMi9sQ2VBZEZYWUFh SFJFQ2g3NVg4LWhQWXBES0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA25HudANbarSSM2rvGlbP5i4o6CyehA8rgL6mXYnTL2yjfr/HNkcsY mqpGmXFMZkVvaRpk0iU9YrCFezG74HJDw4OxAO2+x9Xd7XI3/nL340G/qJhddA8V GP+0VzIW0ircEl+2i0VmYMUCXgQLbp5GRFKOX2LEWaWhzGFTiENTRZ/xCt8cfjdg cs4FhJdIBKvGaECncBUKwVlc/RVuo2Ej5scfKWQwxfdEGB8LAU/7H5/3qGr42d+h bleClQ5qsqGe0fuOZfOcju9NioyYAioHSuZzV/D7MkFTqQOD0nkbAFZlbm+EQjPC uiVrynt5WGgcMjcQnR+dXuStIBCAnpCk -----END CERTIFICATE-----Generated at Mon Apr 28 10:43:29 2025 by rpki-client