$ rpki-client -vvf rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft File: dEy0Bnedz3q-afF952ykOS2ebsM.mft (raw, json) Hash identifier: fS4WAJ6BCTd1s90y+CtKGWfVQDw6vAUGoWDwKLEqvj0= Subject key identifier: C2:A1:FE:8B:DA:06:A3:9E:B1:9C:E4:DA:3D:82:79:75:96:5E:82:24 Authority key identifier: 74:4C:B4:06:77:9D:CF:7A:BE:69:F1:7D:E7:6C:A4:39:2D:9E:6E:C3 Certificate issuer: /CN=A911535B/serialNumber=744CB406779DCF7ABE69F17DE76CA4392D9E6EC3 Certificate serial: 347B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft Manifest number: 347B Signing time: Thu 08 May 2025 14:56:21 +0000 Manifest this update: Thu 08 May 2025 14:56:21 +0000 Manifest next update: Thu 15 May 2025 14:56:21 +0000 Files and hashes: 1: dEy0Bnedz3q-afF952ykOS2ebsM.crl (hash: YhSR/wUz2RLULr9aJBH9CWCFiUghyABYbefwRUh4oyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.crl rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 14:56:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13435 (0x347b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911535B, serialNumber=744CB406779DCF7ABE69F17DE76CA4392D9E6EC3 Validity Not Before: May 8 14:56:21 2025 GMT Not After : May 15 14:56:21 2025 GMT Subject: CN=681cc615-cd1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:45:45:21:60:69:37:0d:6e:92:b3:8b:1d:44: f0:a3:8c:77:39:97:99:98:bf:06:cd:97:de:00:11: 58:80:c3:b2:48:7c:22:ed:0e:73:db:ad:e9:ab:82: 5b:6d:83:0d:b3:0e:b1:da:c1:6b:c2:13:a7:0b:4a: 3c:be:fd:26:83:9e:d4:4d:87:d6:bf:c9:05:ab:a1: 19:e3:eb:e7:a1:3f:7c:6e:79:5b:76:e7:e7:dc:69: fb:e2:bb:51:a0:39:95:c0:57:46:00:26:ac:01:65: 1f:b5:c1:87:bc:19:9d:01:5e:b5:e4:6b:3a:75:71: 77:df:15:c4:fa:1e:c6:42:64:3e:2a:29:dd:7a:02: 85:7b:42:a8:b6:c5:f3:e7:cf:04:56:46:c2:29:81: e5:42:25:d5:69:f7:9c:f9:d2:c4:71:08:2e:db:ec: 3e:8c:1f:70:ad:83:22:50:fb:36:af:74:3d:a9:41: f3:17:0e:3d:d1:51:ec:28:05:77:a0:5a:8c:4f:a0: 55:a8:69:17:54:76:ec:e1:9b:58:f9:58:15:7b:f4: 3f:1f:c7:43:ee:63:77:b7:a2:13:24:c3:f4:16:c0: bc:84:f9:68:f8:1e:65:b3:c6:9c:fa:2e:a1:83:8f: ce:7f:86:c7:83:53:a8:39:20:c0:4e:e5:82:33:00: 19:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A1:FE:8B:DA:06:A3:9E:B1:9C:E4:DA:3D:82:79:75:96:5E:82:24 X509v3 Authority Key Identifier: keyid:74:4C:B4:06:77:9D:CF:7A:BE:69:F1:7D:E7:6C:A4:39:2D:9E:6E:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:77:69:91:33:ef:ac:3b:7c:6c:57:e7:7b:33:49:a8:5f:3a: 92:40:ee:85:31:3b:3b:11:3a:2a:82:86:aa:b4:fe:0d:75:2a: d1:8a:c3:70:de:17:3b:22:5f:4b:aa:24:2d:b4:1b:53:29:5f: 05:61:d4:bb:4b:f8:bf:ba:2c:cf:32:85:1e:de:27:22:11:7b: bb:3f:40:95:df:8e:4e:ad:62:83:d8:10:51:16:68:68:22:5b: b5:61:22:03:9f:60:f9:39:68:3f:06:fe:5d:1a:ef:29:22:ca: 79:bd:3b:7f:c9:d9:bd:1f:8c:5c:1e:83:c1:a6:23:b0:0e:c4: 42:ed:ea:b7:78:2d:78:af:86:15:0f:8d:7c:f4:e7:3a:ea:8e: 5c:fb:ee:2b:39:94:5d:4d:75:67:ae:26:1a:6f:ec:e3:6c:c1: f5:80:32:d5:4b:95:d4:a3:52:ab:e8:60:bb:e9:6f:d2:bf:f8: 67:87:f4:81:13:b5:80:b5:9a:6b:0a:8a:ea:f1:bc:db:92:9c: a8:d1:9f:da:22:46:9c:bb:c7:a6:73:35:8b:25:dd:2c:a4:c4: 4a:c5:52:a1:02:9e:1b:dc:15:00:1c:5f:6e:f8:5f:25:74:7e: 6d:e1:88:5a:76:fe:7c:99:9f:65:12:c2:9e:4f:39:11:0d:f9: bf:38:90:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTUzNUIxMTAvBgNVBAUTKDc0NENCNDA2Nzc5RENGN0FCRTY5RjE3REU3NkNBNDM5 MkQ5RTZFQzMwHhcNMjUwNTA4MTQ1NjIxWhcNMjUwNTE1MTQ1NjIxWjAYMRYwFAYD VQQDEw02ODFjYzYxNS1jZDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1UVFIWBpNw1ukrOLHUTwo4x3OZeZmL8GzZfeABFYgMOySHwi7Q5z263pq4Jb bYMNsw6x2sFrwhOnC0o8vv0mg57UTYfWv8kFq6EZ4+vnoT98bnlbdufn3Gn74rtR oDmVwFdGACasAWUftcGHvBmdAV615Gs6dXF33xXE+h7GQmQ+KindegKFe0KotsXz 588EVkbCKYHlQiXVafec+dLEcQgu2+w+jB9wrYMiUPs2r3Q9qUHzFw490VHsKAV3 oFqMT6BVqGkXVHbs4ZtY+VgVe/Q/H8dD7mN3t6ITJMP0FsC8hPlo+B5ls8ac+i6h g4/Of4bHg1OoOSDATuWCMwAZ7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKh/ova BqOesZzk2j2CeXWWXoIkMB8GA1UdIwQYMBaAFHRMtAZ3nc96vmnxfedspDktnm7D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTM1Qi81NjY3OTI5NjFE OUExMUUyOEFDMTdEODcwOEIwMkNEMi9kRXkwQm5lZHozcS1hZkY5NTJ5a09TMmVi c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RFeTBCbmVkejNxLWFmRjk1MnlrT1MyZWJzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTM1Qi81NjY3OTI5NjFEOUExMUUyOEFDMTdEODcwOEIwMkNEMi9kRXkwQm5lZHoz cS1hZkY5NTJ5a09TMmVic00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNd2mRM++sO3xsV+d7M0moXzqSQO6FMTs7EToqgoaqtP4NdSrRisNw 3hc7Il9LqiQttBtTKV8FYdS7S/i/uizPMoUe3iciEXu7P0CV345OrWKD2BBRFmho Ilu1YSIDn2D5OWg/Bv5dGu8pIsp5vTt/ydm9H4xcHoPBpiOwDsRC7eq3eC14r4YV D4189Oc66o5c++4rOZRdTXVnriYab+zjbMH1gDLVS5XUo1Kr6GC76W/Sv/hnh/SB E7WAtZprCorq8bzbkpyo0Z/aIkacu8emczWLJd0spMRKxVKhAp4b3BUAHF9u+F8l dH5t4Yhadv58mZ9lEsKeTzkRDfm/OJBX -----END CERTIFICATE-----Generated at Fri May 9 12:57:58 2025 by rpki-client