$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft File: h81xgndjHgvdtrTzot8esxEio4E.mft (raw, json) Hash identifier: TC8iXn4cmdhgztAYAoNCpQSVK4EKZyqPVFnnUURIPpo= Subject key identifier: 8B:72:A5:6F:B7:E8:E2:F8:72:3E:A2:48:19:B2:8E:92:AD:0A:BE:C5 Authority key identifier: 87:CD:71:82:77:63:1E:0B:DD:B6:B4:F3:A2:DF:1E:B3:11:22:A3:81 Certificate issuer: /CN=A91F2DDD/serialNumber=87CD718277631E0BDDB6B4F3A2DF1EB31122A381 Certificate serial: 0E41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft Manifest number: 1136 Signing time: Thu 24 Apr 2025 17:44:17 +0000 Manifest this update: Thu 24 Apr 2025 17:44:17 +0000 Manifest next update: Thu 01 May 2025 17:44:17 +0000 Files and hashes: 1: h81xgndjHgvdtrTzot8esxEio4E.crl (hash: p3eheSyE5Mo76Fvv6bRE+Gju8zSy/zerBFmIz4SctNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.crl rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:44:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3649 (0xe41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2DDD, serialNumber=87CD718277631E0BDDB6B4F3A2DF1EB31122A381 Validity Not Before: Apr 24 17:44:17 2025 GMT Not After : May 1 17:44:17 2025 GMT Subject: CN=680a7871-1e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:30:a5:e4:53:eb:43:64:c2:dd:c8:33:c8:20: a7:8c:43:bb:bd:99:f6:6f:1f:a2:9a:c8:c1:53:f1: 57:46:32:8a:e4:21:82:7e:0d:ab:a4:13:54:12:0d: ae:62:52:82:ff:53:1a:54:b3:77:97:95:a5:7e:b8: da:2a:c0:b6:ec:c4:75:47:fd:54:02:35:8a:03:98: 14:d2:8a:08:85:a6:3b:b9:17:0b:2b:f4:c5:95:40: 73:c2:29:95:ad:e2:9f:2a:be:f7:a7:0f:1b:50:e0: 43:c0:cd:21:dc:2b:6f:b3:f5:ac:84:00:d6:a9:b9: 63:60:3f:cc:9e:2f:f0:5e:c0:a2:15:6f:09:15:87: 6e:86:5e:31:60:ba:b8:54:14:e6:10:d8:3a:b5:22: 9a:14:01:c6:6f:ec:d6:4b:42:d8:70:0b:7d:01:03: a9:b0:12:a8:64:d7:f9:af:98:18:96:82:3f:cf:da: 10:b4:56:6f:e7:28:ee:01:91:5a:8f:dc:4d:32:14: 6c:a5:e4:34:b0:f2:22:30:27:cd:4c:71:b5:74:af: 76:63:a7:4e:63:d2:2e:17:fd:cf:57:52:c8:79:e9: 2a:01:9e:2c:b7:80:e3:e7:b0:88:73:44:aa:ab:dd: a8:eb:66:4d:ee:59:99:03:cb:05:c9:89:32:d8:5f: b5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:72:A5:6F:B7:E8:E2:F8:72:3E:A2:48:19:B2:8E:92:AD:0A:BE:C5 X509v3 Authority Key Identifier: keyid:87:CD:71:82:77:63:1E:0B:DD:B6:B4:F3:A2:DF:1E:B3:11:22:A3:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:c6:1a:d7:a2:b5:6f:4e:4e:8c:b0:b7:19:39:71:94:a7:b8: aa:19:97:ff:43:0b:03:f8:58:00:47:a7:50:a6:eb:b1:26:86: 2d:55:2c:75:7e:c0:32:c0:8b:f7:aa:72:8a:20:8e:3f:e0:08: 0c:e4:96:54:b0:96:c3:ec:01:38:8a:8d:12:cd:e6:64:9b:ec: 90:4b:49:dc:e5:04:ea:19:8d:e8:d8:6d:34:aa:1a:3b:07:4d: 30:b6:74:0e:df:92:7b:6e:35:8b:29:25:2e:40:fb:35:87:17: 7b:3f:43:ba:2b:29:b6:fb:27:04:f1:3f:92:87:20:c2:22:82: c3:52:ad:b0:21:9f:a0:a3:31:0d:0c:f4:76:12:87:99:ae:de: 6a:1e:4d:e2:65:01:6b:5a:97:5c:be:30:5d:20:f0:0f:bc:26: 7b:97:06:74:3d:27:b0:af:9d:4a:d5:9e:76:5b:ca:51:c0:c7: 51:36:0d:03:22:fd:1b:db:6e:04:bb:17:4f:a8:ba:94:f1:03: 9d:2c:06:ae:71:e6:cc:f5:b2:11:8d:51:66:d3:cc:ff:43:90: 59:5a:0c:dd:4d:8d:a1:a1:e2:3f:99:d2:29:bc:41:df:1a:02: 9a:78:fc:f3:7e:18:71:b7:a1:ab:26:fa:e5:c9:27:fb:53:96: 54:19:1b:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJEREQxMTAvBgNVBAUTKDg3Q0Q3MTgyNzc2MzFFMEJEREI2QjRGM0EyREYxRUIz MTEyMkEzODEwHhcNMjUwNDI0MTc0NDE3WhcNMjUwNTAxMTc0NDE3WjAYMRYwFAYD VQQDEw02ODBhNzg3MS0xZTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6zCl5FPrQ2TC3cgzyCCnjEO7vZn2bx+imsjBU/FXRjKK5CGCfg2rpBNUEg2u YlKC/1MaVLN3l5WlfrjaKsC27MR1R/1UAjWKA5gU0ooIhaY7uRcLK/TFlUBzwimV reKfKr73pw8bUOBDwM0h3Ctvs/WshADWqbljYD/Mni/wXsCiFW8JFYduhl4xYLq4 VBTmENg6tSKaFAHGb+zWS0LYcAt9AQOpsBKoZNf5r5gYloI/z9oQtFZv5yjuAZFa j9xNMhRspeQ0sPIiMCfNTHG1dK92Y6dOY9IuF/3PV1LIeekqAZ4st4Dj57CIc0Sq q92o62ZN7lmZA8sFyYky2F+1kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFItypW+3 6OL4cj6iSBmyjpKtCr7FMB8GA1UdIwQYMBaAFIfNcYJ3Yx4L3ba086LfHrMRIqOB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkRERC9CNEEyODM2MjlF MUIxMUU5OEUxRTRFNUVDNEY5QUUwMi9oODF4Z25kakhndmR0clR6b3Q4ZXN4RWlv NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g4MXhnbmRqSGd2ZHRyVHpvdDhlc3hFaW80RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkRERC9CNEEyODM2MjlFMUIxMUU5OEUxRTRFNUVDNEY5QUUwMi9oODF4Z25kakhn dmR0clR6b3Q4ZXN4RWlvNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJxhrXorVvTk6MsLcZOXGUp7iqGZf/QwsD+FgAR6dQpuuxJoYtVSx1 fsAywIv3qnKKII4/4AgM5JZUsJbD7AE4io0SzeZkm+yQS0nc5QTqGY3o2G00qho7 B00wtnQO35J7bjWLKSUuQPs1hxd7P0O6Kym2+ycE8T+ShyDCIoLDUq2wIZ+gozEN DPR2EoeZrt5qHk3iZQFrWpdcvjBdIPAPvCZ7lwZ0PSewr51K1Z52W8pRwMdRNg0D Iv0b224EuxdPqLqU8QOdLAaucebM9bIRjVFm08z/Q5BZWgzdTY2hoeI/mdIpvEHf GgKaePzzfhhxt6GrJvrlySf7U5ZUGRv0 -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:46 2025 by rpki-client