$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE449/73CB9304910011EBAD5F7E5DC4F9AE02/fH06qZRpRKT9iR5GspbjygcKOF4.mft File: fH06qZRpRKT9iR5GspbjygcKOF4.mft (raw, json) Hash identifier: EIHRu5CERjFN2fKplUP/IkC9rzfJuj3baL6birLU+J8= Subject key identifier: 7A:7A:25:B1:28:0B:93:E3:6D:40:7E:84:58:5C:8F:3E:67:B8:6B:89 Authority key identifier: 7C:7D:3A:A9:94:69:44:A4:FD:89:1E:46:B2:96:E3:CA:07:0A:38:5E Certificate issuer: /CN=A91FE449/serialNumber=7C7D3AA9946944A4FD891E46B296E3CA070A385E Certificate serial: 0624 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fH06qZRpRKT9iR5GspbjygcKOF4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE449/73CB9304910011EBAD5F7E5DC4F9AE02/fH06qZRpRKT9iR5GspbjygcKOF4.mft Manifest number: 0624 Signing time: Thu 24 Apr 2025 22:29:21 +0000 Manifest this update: Thu 24 Apr 2025 22:29:21 +0000 Manifest next update: Thu 01 May 2025 22:29:21 +0000 Files and hashes: 1: fH06qZRpRKT9iR5GspbjygcKOF4.crl (hash: AQSZPDm9ZCuiDbeZDWXASW60A1WkosNkJqpNxjCbbpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE449/73CB9304910011EBAD5F7E5DC4F9AE02/fH06qZRpRKT9iR5GspbjygcKOF4.crl rsync://rpki.apnic.net/member_repository/A91FE449/73CB9304910011EBAD5F7E5DC4F9AE02/fH06qZRpRKT9iR5GspbjygcKOF4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fH06qZRpRKT9iR5GspbjygcKOF4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1572 (0x624) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE449, serialNumber=7C7D3AA9946944A4FD891E46B296E3CA070A385E Validity Not Before: Apr 24 22:29:21 2025 GMT Not After : May 1 22:29:21 2025 GMT Subject: CN=680abb41-33f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:eb:1a:0e:24:5d:e3:09:d0:62:14:50:74:a1: a0:e6:44:44:7b:19:1e:4b:68:20:ea:3e:5f:d1:cd: 88:d8:1b:c8:00:33:4c:05:03:c1:45:b8:66:0f:f4: 69:4f:7f:fd:b9:20:33:dd:86:8b:cf:18:e2:30:f7: 61:46:27:d7:3f:f9:d2:8c:01:56:c8:e1:e8:6f:23: 50:97:2b:c3:62:bf:ac:c7:10:e1:df:8e:16:34:7a: 9b:94:e3:40:c5:70:a8:41:ea:1a:89:5d:ab:9a:99: 49:3c:d1:ec:86:48:8b:60:d9:94:ab:8d:20:02:e2: fb:9e:33:36:d8:25:6c:db:02:da:55:9c:69:00:c2: 3e:cd:1e:94:9b:ec:02:f6:5e:21:39:37:2a:a6:0e: fe:e7:9f:3a:6f:b4:48:c9:91:78:c6:dc:fc:eb:f6: cd:94:d3:42:61:d1:91:a2:f8:5d:6a:14:9a:75:83: 0b:ea:cc:11:af:b1:d6:63:a7:02:92:89:58:39:3b: f9:17:c1:7e:af:52:9d:81:e0:41:1d:eb:87:ce:f6: ee:a0:df:43:20:c0:d7:77:95:0a:a9:36:62:bf:ac: d3:ff:9b:93:f4:d9:36:75:b5:ce:fa:12:f8:2e:3b: d8:fa:b8:ba:fb:0a:55:fc:c5:2d:8b:17:2a:40:63: a2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7A:25:B1:28:0B:93:E3:6D:40:7E:84:58:5C:8F:3E:67:B8:6B:89 X509v3 Authority Key Identifier: keyid:7C:7D:3A:A9:94:69:44:A4:FD:89:1E:46:B2:96:E3:CA:07:0A:38:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE449/73CB9304910011EBAD5F7E5DC4F9AE02/fH06qZRpRKT9iR5GspbjygcKOF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fH06qZRpRKT9iR5GspbjygcKOF4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE449/73CB9304910011EBAD5F7E5DC4F9AE02/fH06qZRpRKT9iR5GspbjygcKOF4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:2a:43:c1:30:b2:50:fb:1d:c5:8a:85:36:8a:37:6e:72:2d: 1f:81:d3:71:c3:a9:fb:1c:cd:83:6f:e5:1b:2c:11:2c:11:06: 2f:1b:bb:6a:42:4a:62:79:01:4f:a7:fd:f4:13:4b:fb:50:03: 0d:47:be:ba:c8:83:36:da:69:60:4d:45:59:ad:6a:d0:7a:0f: 5d:d1:32:5a:8b:36:7f:b2:0f:8d:45:c9:39:e2:4c:b5:71:0b: 4b:4c:0d:d2:fd:90:66:ed:83:b6:21:98:ca:9b:2d:f6:1b:fe: 82:9d:25:2f:b3:b4:0f:83:a5:b0:73:f1:07:f6:5a:5d:9d:0b: fb:ed:16:bd:bc:06:1e:1d:8c:1d:c9:ec:75:35:95:4c:64:0c: a2:73:99:71:32:62:63:9c:7e:a4:39:62:a1:e6:08:8d:8d:1d: c4:87:e4:0b:95:ce:48:3b:d2:3b:a8:d8:e0:da:05:88:78:f4: 82:71:48:62:a0:96:8d:ea:e2:77:54:45:81:50:32:f9:c0:2d: 56:b7:38:80:16:c8:3b:00:eb:8a:a1:0c:d3:3d:e8:d2:5b:f3: ff:6c:53:2d:70:f1:8a:04:67:ee:3b:a7:ab:be:d9:1b:2b:56: 50:a7:49:8b:fe:bf:63:a4:5d:43:b3:04:41:32:96:0a:a4:a8: 4d:33:d4:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU0NDkxMTAvBgNVBAUTKDdDN0QzQUE5OTQ2OTQ0QTRGRDg5MUU0NkIyOTZFM0NB MDcwQTM4NUUwHhcNMjUwNDI0MjIyOTIxWhcNMjUwNTAxMjIyOTIxWjAYMRYwFAYD VQQDEw02ODBhYmI0MS0zM2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwusaDiRd4wnQYhRQdKGg5kREexkeS2gg6j5f0c2I2BvIADNMBQPBRbhmD/Rp T3/9uSAz3YaLzxjiMPdhRifXP/nSjAFWyOHobyNQlyvDYr+sxxDh344WNHqblONA xXCoQeoaiV2rmplJPNHshkiLYNmUq40gAuL7njM22CVs2wLaVZxpAMI+zR6Um+wC 9l4hOTcqpg7+5586b7RIyZF4xtz86/bNlNNCYdGRovhdahSadYML6swRr7HWY6cC kolYOTv5F8F+r1KdgeBBHeuHzvbuoN9DIMDXd5UKqTZiv6zT/5uT9Nk2dbXO+hL4 LjvY+ri6+wpV/MUtixcqQGOiZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHp6JbEo C5PjbUB+hFhcjz5nuGuJMB8GA1UdIwQYMBaAFHx9OqmUaUSk/YkeRrKW48oHCjhe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTQ0OS83M0NCOTMwNDkx MDAxMUVCQUQ1RjdFNURDNEY5QUUwMi9mSDA2cVpScFJLVDlpUjVHc3BianlnY0tP RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZIMDZxWlJwUktUOWlSNUdzcGJqeWdjS09GNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTQ0OS83M0NCOTMwNDkxMDAxMUVCQUQ1RjdFNURDNEY5QUUwMi9mSDA2cVpScFJL VDlpUjVHc3BianlnY0tPRjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSKkPBMLJQ+x3FioU2ijduci0fgdNxw6n7HM2Db+UbLBEsEQYvG7tq QkpieQFPp/30E0v7UAMNR766yIM22mlgTUVZrWrQeg9d0TJaizZ/sg+NRck54ky1 cQtLTA3S/ZBm7YO2IZjKmy32G/6CnSUvs7QPg6Wwc/EH9lpdnQv77Ra9vAYeHYwd yex1NZVMZAyic5lxMmJjnH6kOWKh5giNjR3Eh+QLlc5IO9I7qNjg2gWIePSCcUhi oJaN6uJ3VEWBUDL5wC1WtziAFsg7AOuKoQzTPejSW/P/bFMtcPGKBGfuO6ervtkb K1ZQp0mL/r9jpF1DswRBMpYKpKhNM9SA -----END CERTIFICATE-----Generated at Sat Apr 26 14:55:47 2025 by rpki-client