$ rpki-client -vvf rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft File: rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft (raw, json) Hash identifier: wPfPEIDh4Xwar2Gavj88z9bD9ipmmqXMR+x2mQUSAV8= Subject key identifier: 6A:84:3B:22:12:E2:52:8E:A8:73:F6:04:14:35:79:8B:07:4B:66:A2 Authority key identifier: AD:01:9F:03:5B:FF:3F:3B:17:32:3C:DB:BB:14:A0:7D:5D:E8:EC:33 Certificate issuer: /CN=A91D837B/serialNumber=AD019F035BFF3F3B17323CDBBB14A07D5DE8EC33 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft Manifest number: 47 Signing time: Sun 27 Apr 2025 06:14:17 +0000 Manifest this update: Sun 27 Apr 2025 06:14:17 +0000 Manifest next update: Sun 04 May 2025 06:14:17 +0000 Files and hashes: 1: rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl (hash: +fbVJfbfYoK9L+0x7avURMS5CiB1+AjR9DNEF2rTj28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 06:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D837B, serialNumber=AD019F035BFF3F3B17323CDBBB14A07D5DE8EC33 Validity Not Before: Apr 27 06:14:17 2025 GMT Not After : May 4 06:14:17 2025 GMT Subject: CN=680dcb39-7662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a7:ca:c9:b1:ee:c9:c7:f4:ed:9f:6a:b9:a6: d8:de:d1:ff:ff:ad:c1:30:c0:42:fe:84:55:f5:f7: 04:ee:df:40:c8:a2:08:23:0d:1f:2f:30:ea:25:a6: c2:87:f2:05:13:09:76:ee:a2:2f:c2:2e:63:1f:f6: da:d6:61:78:52:f2:9b:da:2d:26:89:cc:d8:e5:f1: c3:0e:97:9c:47:8f:4e:5a:4f:e6:81:10:f0:1f:b7: 80:32:a1:a3:6e:4d:20:1f:e5:9b:b9:73:08:d1:22: 7d:33:72:e2:6d:c2:f4:05:9a:96:04:d1:c9:d0:53: f7:75:0f:80:5a:17:73:30:a1:30:06:b0:59:42:ad: f6:b1:d4:b7:d7:e8:c4:f6:14:1c:82:86:54:1e:72: ef:4c:8f:bd:3c:54:e9:b3:d1:8e:39:5f:61:2c:27: 51:f6:53:f1:70:c3:20:82:17:ff:d3:61:54:ce:b2: c7:8f:e4:10:3f:ff:f0:3b:b6:77:f0:c2:5e:0a:5c: b0:92:e6:79:a2:8a:2e:f6:36:97:68:13:6d:e4:5f: ea:91:97:14:a7:7d:cf:47:1a:42:d8:7e:1b:8d:63: 1a:f6:3e:98:c8:9f:10:13:c2:7c:93:69:6f:34:2f: b4:d2:5f:ee:17:81:04:30:be:a7:88:5f:c1:c3:86: c2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:84:3B:22:12:E2:52:8E:A8:73:F6:04:14:35:79:8B:07:4B:66:A2 X509v3 Authority Key Identifier: keyid:AD:01:9F:03:5B:FF:3F:3B:17:32:3C:DB:BB:14:A0:7D:5D:E8:EC:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:d4:27:e0:56:a4:e1:d4:1c:af:f2:46:60:b9:e5:76:04:8c: 87:da:a3:6c:8a:7e:64:7e:d0:bb:45:e4:38:74:40:f6:cd:55: 55:d5:49:30:d7:26:bd:55:1c:d7:cb:8d:6b:dc:4d:5e:d9:9e: cf:93:3a:df:ec:3f:71:5b:41:fa:10:ad:25:49:cc:01:e4:e4: b0:5f:b2:46:7d:82:32:45:6e:91:6c:fd:a4:39:c9:cb:ed:38: 67:61:e4:f9:d5:98:09:fb:10:fe:83:0b:fe:34:e6:ea:a2:cf: a6:e2:24:b7:e3:86:1f:fa:4a:45:ef:71:af:90:1d:7d:f9:8d: 54:83:a9:81:0e:4c:8f:24:2b:01:c3:7f:ba:e1:34:d8:00:61: 4e:7c:0f:cb:ba:dd:d9:a9:51:19:51:a0:b1:33:d0:3a:aa:28: d2:3d:5e:1d:0b:e4:57:7f:ec:59:cf:18:49:25:dc:e7:25:56: 34:b1:c6:58:33:98:26:59:83:bf:34:cf:d4:4b:52:09:40:7f: cc:05:43:f9:94:8e:fb:b9:04:83:bb:a5:7c:b2:bd:b5:9a:00: 76:4b:26:61:51:cb:88:ac:5b:c9:79:0f:de:8d:75:68:eb:65: 82:8d:f4:37:85:7d:e4:8f:9e:01:b2:2b:49:ab:db:3e:3a:9e: 80:59:39:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODM3QjExMC8GA1UEBRMoQUQwMTlGMDM1QkZGM0YzQjE3MzIzQ0RCQkIxNEEwN0Q1 REU4RUMzMzAeFw0yNTA0MjcwNjE0MTdaFw0yNTA1MDQwNjE0MTdaMBgxFjAUBgNV BAMTDTY4MGRjYjM5LTc2NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5p8rJse7Jx/Ttn2q5ptje0f//rcEwwEL+hFX19wTu30DIoggjDR8vMOolpsKH 8gUTCXbuoi/CLmMf9trWYXhS8pvaLSaJzNjl8cMOl5xHj05aT+aBEPAft4AyoaNu TSAf5Zu5cwjRIn0zcuJtwvQFmpYE0cnQU/d1D4BaF3MwoTAGsFlCrfax1LfX6MT2 FByChlQecu9Mj708VOmz0Y45X2EsJ1H2U/FwwyCCF//TYVTOsseP5BA///A7tnfw wl4KXLCS5nmiii72NpdoE23kX+qRlxSnfc9HGkLYfhuNYxr2PpjInxATwnyTaW80 L7TSX+4XgQQwvqeIX8HDhsIpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaoQ7IhLi Uo6oc/YEFDV5iwdLZqIwHwYDVR0jBBgwFoAUrQGfA1v/PzsXMjzbuxSgfV3o7DMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MzdCLzFEN0I2M0JDQjk5 QzExRUY5NjM4Rjc2OUM0RjlBRTAyL3JRR2ZBMXZfUHpzWE1qemJ1eFNnZlYzbzdE TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvclFHZkExdl9QenNYTWp6YnV4U2dmVjNvN0RNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 MzdCLzFEN0I2M0JDQjk5QzExRUY5NjM4Rjc2OUM0RjlBRTAyL3JRR2ZBMXZfUHpz WE1qemJ1eFNnZlYzbzdETS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACfUJ+BWpOHUHK/yRmC55XYEjIfao2yKfmR+0LtF5Dh0QPbNVVXVSTDX Jr1VHNfLjWvcTV7Zns+TOt/sP3FbQfoQrSVJzAHk5LBfskZ9gjJFbpFs/aQ5ycvt OGdh5PnVmAn7EP6DC/405uqiz6biJLfjhh/6SkXvca+QHX35jVSDqYEOTI8kKwHD f7rhNNgAYU58D8u63dmpURlRoLEz0DqqKNI9Xh0L5Fd/7FnPGEkl3OclVjSxxlgz mCZZg780z9RLUglAf8wFQ/mUjvu5BIO7pXyyvbWaAHZLJmFRy4isW8l5D96NdWjr ZYKN9DeFfeSPngGyK0mr2z46noBZOSg= -----END CERTIFICATE-----Generated at Mon Apr 28 03:16:18 2025 by rpki-client