$ rpki-client -vvf rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft File: 5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft (raw, json) Hash identifier: drbD2EAUO+sd+b9gWXkbRU3HrRiQM5hkDiBwHl7dStI= Subject key identifier: B9:5A:B0:F0:AE:AC:AA:C6:B5:C9:31:04:FA:3D:11:4C:F6:59:D6:DB Authority key identifier: E6:1F:A1:24:A6:18:E2:56:67:CC:31:CC:FC:49:16:CE:07:6F:DA:57 Certificate issuer: /CN=A91F35BB/serialNumber=E61FA124A618E25667CC31CCFC4916CE076FDA57 Certificate serial: 04AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft Manifest number: 04AB Signing time: Thu 24 Apr 2025 23:40:06 +0000 Manifest this update: Thu 24 Apr 2025 23:40:06 +0000 Manifest next update: Thu 01 May 2025 23:40:06 +0000 Files and hashes: 1: 5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl (hash: vAgVNYlXyeThjnUczUZqZYuozrJRXi1lNfB5P79qIpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1195 (0x4ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F35BB, serialNumber=E61FA124A618E25667CC31CCFC4916CE076FDA57 Validity Not Before: Apr 24 23:40:06 2025 GMT Not After : May 1 23:40:06 2025 GMT Subject: CN=680acbd6-fc47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bc:32:25:75:1c:3b:59:d2:87:12:a3:58:59: c3:d3:2a:57:65:3b:4c:78:06:ef:fa:54:e7:4c:3e: 27:a4:ab:6f:2a:52:f2:aa:91:c6:0d:9c:98:f8:87: e6:c6:79:62:f7:08:bb:81:2c:ed:9f:78:d9:dc:29: 44:86:03:bd:98:f1:50:bf:6c:49:ed:ed:27:8d:80: 26:4c:af:9e:aa:e1:a7:1e:90:75:38:f4:b3:e3:c6: 4b:89:a1:b7:2a:31:b8:53:c1:25:66:f3:c1:79:70: 36:97:ae:91:9a:2f:b5:5d:99:e3:4b:c0:52:4e:5b: 63:51:ee:e4:fe:e1:69:75:28:e7:28:4e:0c:13:f1: 59:75:99:b8:97:0f:95:4e:3f:ea:83:30:b4:68:89: 6f:74:be:0f:7e:2c:a4:d7:8f:2c:a5:65:f9:3a:e1: ba:7e:88:1e:0c:89:a9:52:c2:76:67:5b:bc:5b:79: f1:60:75:41:41:b9:8f:1a:fe:39:4b:71:14:4e:f5: 0b:96:c9:92:49:5b:97:02:6c:0e:25:7a:80:58:1c: 7f:c9:c7:a5:7e:35:40:cb:be:c4:53:56:96:cd:36: 24:d3:49:07:fb:20:6f:4a:34:9d:68:bc:86:a4:18: 25:8b:6c:2c:c0:52:44:8c:ca:8e:1b:33:e0:aa:6b: 59:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:5A:B0:F0:AE:AC:AA:C6:B5:C9:31:04:FA:3D:11:4C:F6:59:D6:DB X509v3 Authority Key Identifier: keyid:E6:1F:A1:24:A6:18:E2:56:67:CC:31:CC:FC:49:16:CE:07:6F:DA:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:ee:99:4f:bc:eb:d8:6d:65:b5:7f:54:e7:38:cd:72:b8:c7: f8:bd:0a:99:1f:44:65:72:3b:df:5f:82:9b:22:6c:91:ef:d0: 84:86:21:de:d1:6e:72:73:3e:45:2b:c9:32:72:db:a0:99:75: 7e:4b:3d:df:3e:81:3d:a3:06:ed:a9:08:c9:fa:8d:2b:1c:ff: a1:34:10:bd:1c:b9:87:8e:4f:53:13:29:66:e2:28:d4:0e:d4: 84:8b:8a:10:9a:a7:86:f3:55:82:ab:d8:b2:d8:b0:cb:6b:4f: 71:b6:43:af:c6:f9:02:da:a1:a0:66:cd:f0:80:31:dc:ff:d0: 88:e5:91:18:ca:cb:c0:4c:5a:5b:39:40:79:45:5c:32:ed:d4: 13:0b:8a:ad:78:c7:f7:9e:56:f9:ca:cb:43:c6:08:38:a3:03: 9b:bf:dc:10:9e:c8:f5:c4:3e:dd:63:a5:d0:f4:0d:c2:9b:34: b1:fc:28:7e:82:60:a4:1e:c7:0e:af:aa:73:06:62:f9:ec:0c: fd:ae:74:df:70:67:c2:bf:3d:0e:d3:39:8b:64:c0:dc:9c:7e: 59:ca:24:76:6a:23:54:ee:8b:aa:f4:7e:b1:d1:ea:5f:64:20: 84:fb:44:2b:01:0e:71:9e:0c:6e:67:2f:96:0d:c4:08:3a:2c: 6d:66:d6:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM1QkIxMTAvBgNVBAUTKEU2MUZBMTI0QTYxOEUyNTY2N0NDMzFDQ0ZDNDkxNkNF MDc2RkRBNTcwHhcNMjUwNDI0MjM0MDA2WhcNMjUwNTAxMjM0MDA2WjAYMRYwFAYD VQQDEw02ODBhY2JkNi1mYzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrwyJXUcO1nShxKjWFnD0ypXZTtMeAbv+lTnTD4npKtvKlLyqpHGDZyY+Ifm xnli9wi7gSztn3jZ3ClEhgO9mPFQv2xJ7e0njYAmTK+equGnHpB1OPSz48ZLiaG3 KjG4U8ElZvPBeXA2l66Rmi+1XZnjS8BSTltjUe7k/uFpdSjnKE4ME/FZdZm4lw+V Tj/qgzC0aIlvdL4Pfiyk148spWX5OuG6fogeDImpUsJ2Z1u8W3nxYHVBQbmPGv45 S3EUTvULlsmSSVuXAmwOJXqAWBx/ycelfjVAy77EU1aWzTYk00kH+yBvSjSdaLyG pBgli2wswFJEjMqOGzPgqmtZpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlasPCu rKrGtckxBPo9EUz2WdbbMB8GA1UdIwQYMBaAFOYfoSSmGOJWZ8wxzPxJFs4Hb9pX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzVCQi8wNzYzN0QwMjI3 RkIxMUVDODg4MEQxNzBDNEY5QUUwMi81aC1oSktZWTRsWm56REhNX0VrV3pnZHYy bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVoLWhKS1lZNGxabnpESE1fRWtXemdkdjJsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzVCQi8wNzYzN0QwMjI3RkIxMUVDODg4MEQxNzBDNEY5QUUwMi81aC1oSktZWTRs Wm56REhNX0VrV3pnZHYybGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb7plPvOvYbWW1f1TnOM1yuMf4vQqZH0RlcjvfX4KbImyR79CEhiHe 0W5ycz5FK8kyctugmXV+Sz3fPoE9owbtqQjJ+o0rHP+hNBC9HLmHjk9TEylm4ijU DtSEi4oQmqeG81WCq9iy2LDLa09xtkOvxvkC2qGgZs3wgDHc/9CI5ZEYysvATFpb OUB5RVwy7dQTC4qteMf3nlb5ystDxgg4owObv9wQnsj1xD7dY6XQ9A3CmzSx/Ch+ gmCkHscOr6pzBmL57Az9rnTfcGfCvz0O0zmLZMDcnH5ZyiR2aiNU7ouq9H6x0epf ZCCE+0QrAQ5xngxuZy+WDcQIOixtZtb+ -----END CERTIFICATE-----Generated at Sat Apr 26 13:33:30 2025 by rpki-client