$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft File: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft (raw, json) Hash identifier: ngttS6cRM9V5zrrCXDct1Gam3fw4px/Gm0eSpd2yjXI= Subject key identifier: 00:C2:5E:9E:4F:65:8F:FF:3E:72:17:F0:79:D3:03:7D:E0:91:E1:63 Authority key identifier: 7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D Certificate issuer: /CN=A91DF26F/serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D Certificate serial: 3473 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft Manifest number: 3473 Signing time: Thu 24 Apr 2025 14:38:23 +0000 Manifest this update: Thu 24 Apr 2025 14:38:23 +0000 Manifest next update: Thu 01 May 2025 14:38:23 +0000 Files and hashes: 1: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl (hash: I8Bjl7ghABT66KPiCzofcQRC8QyfWncXWHXTHWpPZbs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13427 (0x3473) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF26F, serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D Validity Not Before: Apr 24 14:38:23 2025 GMT Not After : May 1 14:38:23 2025 GMT Subject: CN=680a4cdf-4ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d2:ea:00:a2:25:53:c3:02:bd:25:84:c9:ab: 53:ff:a1:a1:06:66:17:73:71:8c:3c:c3:27:b5:a6: 72:52:21:b3:12:9d:74:08:f0:6d:aa:ce:cd:1a:26: 60:66:22:43:25:78:f2:16:00:46:9b:a7:8f:16:f1: 7c:08:b8:ac:ef:dd:96:61:d3:bb:98:5d:c7:75:b2: 7e:e5:b8:79:84:11:6a:e5:9b:47:53:b2:15:46:2d: e3:bd:1e:40:19:3c:77:58:6d:4a:0a:3b:d3:7e:8c: e3:66:09:68:fc:ce:03:52:29:5a:b7:fe:f4:75:11: 2e:a5:05:51:9f:6e:bb:ad:3b:7d:8d:7a:d3:f7:3a: c3:0c:bf:f7:b5:8f:fc:ca:ef:a2:4a:c6:a5:7a:77: ab:90:6e:20:91:19:1e:f3:2d:a0:67:ba:f9:9b:e0: ae:59:c7:73:f8:94:ff:ce:dd:a2:cc:4a:50:d4:e7: df:0e:8e:9a:39:f6:c6:6f:d2:e1:a3:7a:cd:4b:50: 44:74:07:9f:75:10:b6:23:25:56:ac:2f:d6:89:40: 09:91:9a:42:7f:42:7c:e6:cb:4d:91:a9:2f:ce:21: 5e:6e:f4:fc:d3:c9:90:b3:25:21:c6:fd:94:04:3b: c9:58:54:93:62:71:b4:42:82:d8:6b:c5:84:e4:90: bf:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C2:5E:9E:4F:65:8F:FF:3E:72:17:F0:79:D3:03:7D:E0:91:E1:63 X509v3 Authority Key Identifier: keyid:7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:62:a1:08:cb:81:23:a2:6d:15:15:df:4c:10:99:d0:0e:02: 60:1f:df:ca:6b:65:68:a4:52:61:ac:35:9a:ee:d9:1c:b4:6d: 87:21:e5:64:30:6e:c3:23:66:dc:de:08:cb:cf:15:a7:63:e7: 64:32:31:d6:3a:50:e6:09:6d:13:81:0c:8b:86:6c:2c:a4:c1: b4:77:5b:18:da:07:ad:e8:7f:3d:bf:c4:9d:cf:c7:a6:d7:c9: cb:b7:0e:a9:cb:1c:b2:9d:83:16:73:52:e8:50:ef:53:fc:c3: ff:4c:d0:33:85:ee:29:04:41:ca:64:2e:de:90:1a:0f:f9:fd: 81:98:c8:e8:5d:75:fc:6a:37:8a:ce:0c:ea:63:00:83:45:13: d8:56:b8:8d:f9:a8:1b:ba:95:77:e3:97:6f:c4:e1:8c:c2:4c: fb:22:67:04:e6:8e:94:d8:5b:ae:1b:e6:b8:ec:35:41:66:af: 32:85:13:89:ca:ef:e8:71:52:c4:c8:ab:5e:b0:3f:b3:2c:26: b0:9f:ce:b8:43:c5:63:43:aa:67:38:39:5c:0c:10:8b:7e:7d: 09:39:ed:59:9a:56:be:72:dd:5f:34:13:82:ad:53:d7:c3:23: db:59:fa:63:24:57:c4:d7:1a:4c:88:1f:d3:2b:37:76:1b:70: c9:d0:6e:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYyNkYxMTAvBgNVBAUTKDdDRDRBRUU0N0NCMjFEQUU5ODc3RUZGNDFGMDRCRTk1 RDk3MzY4NkQwHhcNMjUwNDI0MTQzODIzWhcNMjUwNTAxMTQzODIzWjAYMRYwFAYD VQQDEw02ODBhNGNkZi00ZWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstLqAKIlU8MCvSWEyatT/6GhBmYXc3GMPMMntaZyUiGzEp10CPBtqs7NGiZg ZiJDJXjyFgBGm6ePFvF8CLis792WYdO7mF3HdbJ+5bh5hBFq5ZtHU7IVRi3jvR5A GTx3WG1KCjvTfozjZglo/M4DUilat/70dREupQVRn267rTt9jXrT9zrDDL/3tY/8 yu+iSsalenerkG4gkRke8y2gZ7r5m+CuWcdz+JT/zt2izEpQ1OffDo6aOfbGb9Lh o3rNS1BEdAefdRC2IyVWrC/WiUAJkZpCf0J85stNkakvziFebvT808mQsyUhxv2U BDvJWFSTYnG0QoLYa8WE5JC/NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADCXp5P ZY//PnIX8HnTA33gkeFjMB8GA1UdIwQYMBaAFHzUruR8sh2umHfv9B8EvpXZc2ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjI2Ri84Nzk2ODQ5NjFE OEUxMUUyQjE1MUYwRUMwOEIwMkNEMi9mTlN1NUh5eUhhNllkLV8wSHdTLWxkbHph RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZOU3U1SHl5SGE2WWQtXzBId1MtbGRsemFHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjI2Ri84Nzk2ODQ5NjFEOEUxMUUyQjE1MUYwRUMwOEIwMkNEMi9mTlN1NUh5eUhh NllkLV8wSHdTLWxkbHphRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATYqEIy4Ejom0VFd9MEJnQDgJgH9/Ka2VopFJhrDWa7tkctG2HIeVk MG7DI2bc3gjLzxWnY+dkMjHWOlDmCW0TgQyLhmwspMG0d1sY2get6H89v8Sdz8em 18nLtw6pyxyynYMWc1LoUO9T/MP/TNAzhe4pBEHKZC7ekBoP+f2BmMjoXXX8ajeK zgzqYwCDRRPYVriN+agbupV345dvxOGMwkz7ImcE5o6U2FuuG+a47DVBZq8yhROJ yu/ocVLEyKtesD+zLCawn864Q8VjQ6pnODlcDBCLfn0JOe1Zmla+ct1fNBOCrVPX wyPbWfpjJFfE1xpMiB/TKzd2G3DJ0G4r -----END CERTIFICATE-----Generated at Sat Apr 26 13:02:35 2025 by rpki-client