$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft File: 0I2GgcK-TUfCopBV9m5olVhGF_c.mft (raw, json) Hash identifier: 24ShPY3Tcni1i+n0L2rKiFuSxTccWtK7vje3qTgkf2s= Subject key identifier: 47:4E:9A:76:C6:5D:60:5F:EF:50:92:65:90:93:38:25:69:76:F8:68 Authority key identifier: D0:8D:86:81:C2:BE:4D:47:C2:A2:90:55:F6:6E:68:95:58:46:17:F7 Certificate issuer: /CN=A91FCEB1/serialNumber=D08D8681C2BE4D47C2A29055F66E6895584617F7 Certificate serial: 1A63 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft Manifest number: 214E Signing time: Thu 24 Apr 2025 15:59:11 +0000 Manifest this update: Thu 24 Apr 2025 15:59:10 +0000 Manifest next update: Thu 01 May 2025 15:59:10 +0000 Files and hashes: 1: 0I2GgcK-TUfCopBV9m5olVhGF_c.crl (hash: poSnO4we4kfsLpU9Q5reMjAkBuRaSz5WDIgZfx8ZdjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6755 (0x1a63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1, serialNumber=D08D8681C2BE4D47C2A29055F66E6895584617F7 Validity Not Before: Apr 24 15:59:10 2025 GMT Not After : May 1 15:59:10 2025 GMT Subject: CN=680a5fce-61a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:60:4e:aa:60:e5:27:c8:fd:2c:8b:cf:20:4c: b4:4e:32:7a:85:46:33:ff:ba:10:83:ed:3d:ea:c8: 25:1a:57:30:fe:ef:16:4c:2b:b8:71:fa:c1:a6:3f: 5f:79:48:dd:04:6f:dd:c6:26:63:ff:78:ed:30:e5: 52:05:ec:1c:e9:5e:5a:31:c5:f6:b8:7a:e7:bd:5c: 94:29:0d:cf:c8:4a:d1:af:21:eb:39:27:1c:1c:eb: ab:82:31:c8:cd:58:62:dc:ec:13:d4:b5:96:ff:94: 4b:ed:97:7c:14:f6:c4:22:26:0d:f3:96:54:6a:67: d8:d7:3b:ef:b9:4d:b5:c0:8e:98:9b:63:24:4c:e9: cc:75:bf:6b:0c:40:6d:2f:b2:5f:05:04:cd:2a:b6: 98:e5:f8:cc:54:52:03:17:25:6d:10:ff:e4:bb:4a: 15:02:db:be:70:07:b7:22:1a:22:a9:28:39:88:9c: 06:b4:82:ca:f2:c8:27:1b:5e:4c:b0:96:cf:3b:86: 11:3d:6b:e8:5f:94:4a:4c:b0:7d:7c:35:89:3a:fb: 79:10:0e:eb:9d:a8:eb:c1:4e:c9:16:01:71:64:29: 07:47:da:8b:bd:ab:d4:29:ae:05:a6:0e:a7:73:11: 95:96:85:41:0a:1d:6e:0b:25:53:be:d7:57:b2:80: 4a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4E:9A:76:C6:5D:60:5F:EF:50:92:65:90:93:38:25:69:76:F8:68 X509v3 Authority Key Identifier: keyid:D0:8D:86:81:C2:BE:4D:47:C2:A2:90:55:F6:6E:68:95:58:46:17:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:eb:a0:5a:b3:7e:0c:8e:fa:c0:7f:b7:f2:b2:41:f7:92:f3: cc:7b:82:2e:ae:c4:1b:e8:2d:3a:43:50:c1:06:3d:14:23:ad: 54:50:0c:5f:76:e9:3e:8f:dd:de:88:3b:34:6d:94:2a:c8:ab: 94:56:91:a4:3b:de:5a:70:b7:0a:8c:42:48:7e:9e:17:bc:23: ff:37:64:50:d8:cd:e0:17:d0:6b:a5:4c:d5:45:74:77:a8:30: 14:80:7e:aa:0a:c3:40:58:c3:93:d0:11:ba:94:80:df:38:e7: 37:84:b7:79:3c:7c:a3:09:af:cf:09:81:03:d1:ab:65:ac:fa: f9:69:73:f1:69:1d:b7:f6:30:e6:d3:11:74:0f:df:63:25:e6: 0d:b0:17:54:94:ac:ad:bc:df:72:04:24:c5:79:e4:93:9e:c3: 28:10:45:26:5f:d8:0f:8d:7b:ae:d2:f4:d7:74:f3:a1:cd:ff: 5c:3b:7f:f9:f9:22:16:29:09:e6:0d:c7:da:dd:04:26:f5:ad: 27:75:4a:61:87:03:3b:d8:f7:18:be:6d:30:54:65:f6:08:64: a0:23:3e:1e:52:3b:f5:fa:4c:3c:2e:09:8b:4b:1b:e4:24:26: dc:2f:8d:05:6f:c1:ab:b4:33:fb:4c:ca:19:b6:8c:15:1c:1b: b4:6f:3b:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKEQwOEQ4NjgxQzJCRTRENDdDMkEyOTA1NUY2NkU2ODk1 NTg0NjE3RjcwHhcNMjUwNDI0MTU1OTEwWhcNMjUwNTAxMTU1OTEwWjAYMRYwFAYD VQQDEw02ODBhNWZjZS02MWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmBOqmDlJ8j9LIvPIEy0TjJ6hUYz/7oQg+096sglGlcw/u8WTCu4cfrBpj9f eUjdBG/dxiZj/3jtMOVSBewc6V5aMcX2uHrnvVyUKQ3PyErRryHrOSccHOurgjHI zVhi3OwT1LWW/5RL7Zd8FPbEIiYN85ZUamfY1zvvuU21wI6Ym2MkTOnMdb9rDEBt L7JfBQTNKraY5fjMVFIDFyVtEP/ku0oVAtu+cAe3IhoiqSg5iJwGtILK8sgnG15M sJbPO4YRPWvoX5RKTLB9fDWJOvt5EA7rnajrwU7JFgFxZCkHR9qLvavUKa4Fpg6n cxGVloVBCh1uCyVTvtdXsoBKtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdOmnbG XWBf71CSZZCTOCVpdvhoMB8GA1UdIwQYMBaAFNCNhoHCvk1HwqKQVfZuaJVYRhf3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS85QzE0QjQwNjNB MjExMUU3OUFBMEQ1MUNDNEY5QUUwMi8wSTJHZ2NLLVRVZkNvcEJWOW01b2xWaEdG X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBJMkdnY0stVFVmQ29wQlY5bTVvbFZoR0ZfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS85QzE0QjQwNjNBMjExMUU3OUFBMEQ1MUNDNEY5QUUwMi8wSTJHZ2NLLVRV ZkNvcEJWOW01b2xWaEdGX2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ66Bas34MjvrAf7fyskH3kvPMe4IursQb6C06Q1DBBj0UI61UUAxf duk+j93eiDs0bZQqyKuUVpGkO95acLcKjEJIfp4XvCP/N2RQ2M3gF9BrpUzVRXR3 qDAUgH6qCsNAWMOT0BG6lIDfOOc3hLd5PHyjCa/PCYED0atlrPr5aXPxaR239jDm 0xF0D99jJeYNsBdUlKytvN9yBCTFeeSTnsMoEEUmX9gPjXuu0vTXdPOhzf9cO3/5 +SIWKQnmDcfa3QQm9a0ndUphhwM72PcYvm0wVGX2CGSgIz4eUjv1+kw8LgmLSxvk JCbcL40Fb8GrtDP7TMoZtowVHBu0bzux -----END CERTIFICATE-----Generated at Sat Apr 26 16:43:50 2025 by rpki-client