$ rpki-client -vvf rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft File: mIulA6dlHjJofEyW9u3hh8c9BDg.mft (raw, json) Hash identifier: 4bdSRnfZjaUCNYAd0KDQeHJ1crXUlYdDx0GxuwMA3gc= Subject key identifier: C3:3A:28:8C:42:8D:B7:AE:59:CC:EF:9F:01:AC:64:31:4F:7F:00:43 Authority key identifier: 98:8B:A5:03:A7:65:1E:32:68:7C:4C:96:F6:ED:E1:87:C7:3D:04:38 Certificate issuer: /CN=A91E923A/serialNumber=988BA503A7651E32687C4C96F6EDE187C73D0438 Certificate serial: 0CC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft Manifest number: 0DE8 Signing time: Thu 24 Apr 2025 18:06:50 +0000 Manifest this update: Thu 24 Apr 2025 18:06:50 +0000 Manifest next update: Thu 01 May 2025 18:06:50 +0000 Files and hashes: 1: mIulA6dlHjJofEyW9u3hh8c9BDg.crl (hash: VlCg1vmgXUT9br+6ESTB+wTYfWXVbZxs0dh/O+qz9+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.crl rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:06:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3268 (0xcc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E923A, serialNumber=988BA503A7651E32687C4C96F6EDE187C73D0438 Validity Not Before: Apr 24 18:06:50 2025 GMT Not After : May 1 18:06:50 2025 GMT Subject: CN=680a7dba-07fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:49:cc:57:0c:95:72:13:1e:d5:b6:b7:10:e5: 60:64:50:e2:77:aa:32:31:72:28:59:10:e0:e4:cc: a7:3a:c3:a7:62:a4:8f:39:aa:55:36:f6:c1:3a:c2: 5c:07:52:10:68:95:16:73:c4:94:2f:92:40:a2:ee: 2c:b1:da:78:33:db:47:c6:f9:ed:2b:ca:18:cd:eb: fd:41:f0:27:d7:f6:8b:b2:45:9e:a6:6e:4d:fd:fd: 7b:c0:5c:99:20:6f:07:59:7e:27:d2:ef:96:1f:fb: da:3e:1e:32:81:16:6c:c4:cc:96:e6:f4:84:fe:87: 85:f0:3f:3b:7a:29:39:97:2e:2f:c4:14:26:c5:b0: b0:87:b7:14:68:3f:39:1c:36:b7:76:1e:60:6e:a9: 11:32:ba:15:2c:aa:a3:5e:cb:cc:c2:b7:1e:6b:f0: 52:81:0e:bd:bb:3c:20:65:da:13:09:51:11:a2:42: f4:16:52:dd:df:60:58:90:9e:fb:00:f4:1c:67:3b: 1a:7c:23:4e:b1:72:e5:cf:57:2f:b3:fb:15:f5:3d: f6:b5:f9:54:13:3b:e1:19:f5:db:25:ab:d7:45:fb: df:6d:db:83:fb:a0:67:b1:43:af:8e:ab:54:1f:05: a2:31:bf:8c:d1:76:23:bb:4e:30:cf:b4:12:db:b4: ee:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3A:28:8C:42:8D:B7:AE:59:CC:EF:9F:01:AC:64:31:4F:7F:00:43 X509v3 Authority Key Identifier: keyid:98:8B:A5:03:A7:65:1E:32:68:7C:4C:96:F6:ED:E1:87:C7:3D:04:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:e9:bc:a3:40:e8:16:bb:2a:ad:20:db:7f:63:9e:6b:ea:8d: f6:75:f5:dd:7d:3c:a8:9a:00:03:64:f7:c0:fa:f1:7d:1d:eb: 54:82:32:df:53:74:75:68:0a:48:83:da:56:67:b1:23:57:72: 26:da:cd:14:22:c7:96:79:aa:ad:70:8c:d8:e7:c8:b0:60:4e: 2e:3d:57:f0:44:9b:08:7a:4e:9b:24:8b:1b:a3:ec:f1:d8:df: 70:44:db:5c:2a:46:04:f5:05:85:9b:2c:50:0e:15:23:9b:aa: 5e:d3:6c:a3:e6:d1:26:f3:91:5a:de:60:66:9c:40:9c:07:6b: 71:a5:94:5e:8c:77:3d:b8:3b:a6:d8:fa:3c:0e:1f:92:1d:04: 47:b0:40:ca:54:c8:f4:ca:8a:06:f9:48:81:4a:7d:eb:98:98: 36:64:5c:96:11:a5:0b:ef:49:fe:c4:3f:f6:ed:84:56:bf:e2: ff:aa:0c:cd:7a:ed:a5:ae:24:6e:25:e3:61:26:b2:92:9b:dd: 03:80:6d:d6:aa:cf:e7:e9:e6:b8:28:f1:1e:e0:39:f2:68:75: f2:9a:b2:66:e5:37:d9:a5:3d:a8:5b:ed:41:c1:fc:3d:bd:64: 1e:52:d5:d0:8d:a9:34:b8:e9:14:36:58:84:dd:63:1d:9f:37: a8:28:2e:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkyM0ExMTAvBgNVBAUTKDk4OEJBNTAzQTc2NTFFMzI2ODdDNEM5NkY2RURFMTg3 QzczRDA0MzgwHhcNMjUwNDI0MTgwNjUwWhcNMjUwNTAxMTgwNjUwWjAYMRYwFAYD VQQDEw02ODBhN2RiYS0wN2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2knMVwyVchMe1ba3EOVgZFDid6oyMXIoWRDg5MynOsOnYqSPOapVNvbBOsJc B1IQaJUWc8SUL5JAou4ssdp4M9tHxvntK8oYzev9QfAn1/aLskWepm5N/f17wFyZ IG8HWX4n0u+WH/vaPh4ygRZsxMyW5vSE/oeF8D87eik5ly4vxBQmxbCwh7cUaD85 HDa3dh5gbqkRMroVLKqjXsvMwrcea/BSgQ69uzwgZdoTCVERokL0FlLd32BYkJ77 APQcZzsafCNOsXLlz1cvs/sV9T32tflUEzvhGfXbJavXRfvfbduD+6BnsUOvjqtU HwWiMb+M0XYju04wz7QS27TusQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMM6KIxC jbeuWczvnwGsZDFPfwBDMB8GA1UdIwQYMBaAFJiLpQOnZR4yaHxMlvbt4YfHPQQ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTIzQS9DOUIzQ0M1NEVD MTExMUU5OEUwRjg2NDdDNEY5QUUwMi9tSXVsQTZkbEhqSm9mRXlXOXUzaGg4YzlC RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21JdWxBNmRsSGpKb2ZFeVc5dTNoaDhjOUJEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTIzQS9DOUIzQ0M1NEVDMTExMUU5OEUwRjg2NDdDNEY5QUUwMi9tSXVsQTZkbEhq Sm9mRXlXOXUzaGg4YzlCRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC16byjQOgWuyqtINt/Y55r6o32dfXdfTyomgADZPfA+vF9HetUgjLf U3R1aApIg9pWZ7EjV3Im2s0UIseWeaqtcIzY58iwYE4uPVfwRJsIek6bJIsbo+zx 2N9wRNtcKkYE9QWFmyxQDhUjm6pe02yj5tEm85Fa3mBmnECcB2txpZRejHc9uDum 2Po8Dh+SHQRHsEDKVMj0yooG+UiBSn3rmJg2ZFyWEaUL70n+xD/27YRWv+L/qgzN eu2lriRuJeNhJrKSm90DgG3Wqs/n6ea4KPEe4DnyaHXymrJm5TfZpT2oW+1Bwfw9 vWQeUtXQjak0uOkUNliE3WMdnzeoKC4y -----END CERTIFICATE-----Generated at Sat Apr 26 03:59:04 2025 by rpki-client