$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft File: pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft (raw, json) Hash identifier: YPcgk9yylg6ipEq47z5ssRf+9WY1Yo0aXkOweeT5Hdk= Subject key identifier: 31:E3:97:5F:BF:83:BC:CC:2F:FB:F3:69:BD:06:ED:95:EE:6C:7C:D4 Authority key identifier: A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 Certificate issuer: /CN=A91D6552/serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Certificate serial: 3470 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft Manifest number: 3470 Signing time: Thu 24 Apr 2025 14:54:40 +0000 Manifest this update: Thu 24 Apr 2025 14:54:40 +0000 Manifest next update: Thu 01 May 2025 14:54:40 +0000 Files and hashes: 1: pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl (hash: XFDQI4x/GqzteehU1Vt0xcgqkYpzRe1TUCoeP36x1os=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:54:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13424 (0x3470) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6552, serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Validity Not Before: Apr 24 14:54:40 2025 GMT Not After : May 1 14:54:40 2025 GMT Subject: CN=680a50b0-28a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bc:98:65:a0:d0:d3:6b:2f:98:e4:e1:d1:6c: 2b:25:4a:ec:90:26:ca:7e:6e:e2:0a:d3:67:ed:4d: 32:e5:4e:14:ae:c9:34:a8:7f:ec:d0:a8:49:d3:89: 92:d1:73:ed:05:d6:46:15:ab:86:98:03:c3:dd:45: 03:7c:7d:11:d9:3d:b7:57:c8:d2:a2:d4:ec:e9:22: eb:39:4e:6f:d3:01:7f:e5:ad:64:bc:85:d8:a5:e0: 63:3f:c6:da:6b:a4:2c:40:c4:e5:fc:8d:e3:3f:94: 0e:c4:41:df:a4:c3:72:41:80:fa:fe:a2:3e:92:a7: bd:b9:85:48:8b:be:00:aa:90:37:1c:db:10:13:f2: 8b:04:d0:8a:b7:79:f4:c0:9d:03:c3:5b:04:8d:9a: 59:6f:e2:05:52:1b:11:0f:5e:90:39:de:2f:d9:eb: c4:52:44:ff:6c:05:57:6a:07:e1:99:a0:33:e2:e9: f0:27:6a:f8:b8:1b:d6:0a:aa:08:6d:c5:ae:85:7e: 89:10:cd:4d:13:f2:1d:89:b0:31:bb:7d:e5:ff:2c: d2:8b:e9:db:d8:7c:61:62:70:b6:a5:fa:fd:30:bf: 7e:7f:c7:8f:6b:fb:b6:89:0c:d1:eb:5e:00:ce:d1: 0c:b4:03:cb:d3:a9:53:bd:b6:31:9f:e4:04:cd:2a: 20:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E3:97:5F:BF:83:BC:CC:2F:FB:F3:69:BD:06:ED:95:EE:6C:7C:D4 X509v3 Authority Key Identifier: keyid:A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:c1:de:78:cf:14:d6:e6:96:29:75:c9:7e:37:e1:d9:10:63: 75:78:d7:cc:b4:48:44:93:51:6a:1f:f7:ec:ae:b2:01:f7:3f: 25:61:03:d7:03:4f:95:f8:7b:e9:32:6d:f8:19:81:e0:fc:32: 99:b9:70:a6:dc:c5:a8:85:e3:6b:a5:b6:0a:52:1d:1b:fb:c0: 61:ee:6f:2b:43:a9:41:4f:49:6c:56:3e:54:1d:14:1b:f7:74: 35:92:49:b0:fc:b3:3a:29:05:f6:a0:cc:a9:e3:5e:40:1d:a0: 8a:76:f4:ba:d2:0d:58:13:b6:c8:f3:5b:8d:a4:fc:e3:57:91: 8f:80:8d:26:b4:76:f0:c4:f9:92:05:6b:d3:e1:13:a0:21:de: c1:44:1f:8c:28:29:60:55:ba:3c:95:c6:6e:72:8d:02:5d:df: 1f:69:48:52:f4:79:2e:af:78:86:b7:84:c7:a7:91:78:ee:c5: 4b:20:cd:74:91:c5:a5:f7:ca:d6:17:5b:ba:84:5e:5c:a6:82: 38:84:17:c4:74:76:1d:0e:31:6c:ff:67:1e:d7:b3:50:43:28: 37:bb:57:5a:33:ed:b5:86:a9:86:59:e1:fc:fe:5e:24:c2:1c: 11:35:4e:63:84:3b:86:08:f0:b0:3d:7d:17:63:48:1c:8d:36: 62:ec:d2:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1NTIxMTAvBgNVBAUTKEE1NkUwNDMzQUVCOEIwRkNDNTlFRkU5MUYwRUFGNTA2 MUI3MEQxMTgwHhcNMjUwNDI0MTQ1NDQwWhcNMjUwNTAxMTQ1NDQwWjAYMRYwFAYD VQQDEw02ODBhNTBiMC0yOGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ryYZaDQ02svmOTh0WwrJUrskCbKfm7iCtNn7U0y5U4Ursk0qH/s0KhJ04mS 0XPtBdZGFauGmAPD3UUDfH0R2T23V8jSotTs6SLrOU5v0wF/5a1kvIXYpeBjP8ba a6QsQMTl/I3jP5QOxEHfpMNyQYD6/qI+kqe9uYVIi74AqpA3HNsQE/KLBNCKt3n0 wJ0Dw1sEjZpZb+IFUhsRD16QOd4v2evEUkT/bAVXagfhmaAz4unwJ2r4uBvWCqoI bcWuhX6JEM1NE/IdibAxu33l/yzSi+nb2HxhYnC2pfr9ML9+f8ePa/u2iQzR614A ztEMtAPL06lTvbYxn+QEzSoglQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDHjl1+/ g7zML/vzab0G7ZXubHzUMB8GA1UdIwQYMBaAFKVuBDOuuLD8xZ7+kfDq9QYbcNEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjU1Mi84ODdENzUxMjFE OTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQekZudjZSOE9yMUJodHcw UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXNEVNNjY0c1B6Rm52NlI4T3IxQmh0dzBSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjU1Mi84ODdENzUxMjFEOTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQ ekZudjZSOE9yMUJodHcwUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLwd54zxTW5pYpdcl+N+HZEGN1eNfMtEhEk1FqH/fsrrIB9z8lYQPX A0+V+HvpMm34GYHg/DKZuXCm3MWoheNrpbYKUh0b+8Bh7m8rQ6lBT0lsVj5UHRQb 93Q1kkmw/LM6KQX2oMyp415AHaCKdvS60g1YE7bI81uNpPzjV5GPgI0mtHbwxPmS BWvT4ROgId7BRB+MKClgVbo8lcZuco0CXd8faUhS9Hkur3iGt4THp5F47sVLIM10 kcWl98rWF1u6hF5cpoI4hBfEdHYdDjFs/2ce17NQQyg3u1daM+21hqmGWeH8/l4k whwRNU5jhDuGCPCwPX0XY0gcjTZi7NJQ -----END CERTIFICATE-----Generated at Sat Apr 26 14:51:39 2025 by rpki-client