$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft File: xM4RIyFRinKEfG1X56ijVDRVNzs.mft (raw, json) Hash identifier: 58HwqRNFYOVw+tDudifAawecQ5j0/PE7PQeN55i+jOY= Subject key identifier: A1:7B:E4:F7:12:5B:5E:82:16:63:74:0F:F7:D7:75:9D:49:13:81:A9 Authority key identifier: C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B Certificate issuer: /CN=A9116D64/serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Certificate serial: 3478 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft Manifest number: 3478 Signing time: Sat 10 May 2025 15:07:08 +0000 Manifest this update: Sat 10 May 2025 15:07:07 +0000 Manifest next update: Sat 17 May 2025 15:07:07 +0000 Files and hashes: 1: xM4RIyFRinKEfG1X56ijVDRVNzs.crl (hash: JuHdHArJOhtTRpA2IuWhs8sp8nnwUwDXL5Oam53Paz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13432 (0x3478) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116D64, serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Validity Not Before: May 10 15:07:07 2025 GMT Not After : May 17 15:07:07 2025 GMT Subject: CN=681f6b9c-32a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ca:42:9e:90:6c:83:25:3b:8a:c2:47:d8:98: a7:42:d6:7a:45:ec:8a:4c:42:26:c9:78:71:89:da: 76:2d:f5:fb:58:ce:79:e5:c3:64:b8:a2:6b:cc:a5: a1:9e:b0:fa:59:13:14:c2:22:19:8f:1b:53:6b:15: 2a:37:a1:d1:7e:3d:42:b6:da:a1:83:43:95:b8:bf: 0e:20:64:d8:b1:dd:bc:7d:71:5f:8e:5a:74:be:ff: 45:63:71:52:04:60:72:27:ce:a7:35:a5:0e:47:db: 96:19:b8:ef:d7:cf:f9:02:1e:63:a7:35:d7:bd:e2: cc:98:93:c9:53:00:6c:26:8c:42:20:98:be:4a:40: 8b:57:f9:71:b8:91:c7:e3:00:a2:90:31:59:e6:ed: ac:ba:05:b3:f5:af:10:04:fb:2e:e6:36:03:0c:f4: f3:f4:be:3b:5a:80:33:a3:c8:88:aa:7a:d6:b9:1d: 17:9c:84:54:c3:47:1c:45:bd:f8:44:b8:d0:fb:f6: 39:82:a6:c5:76:19:6d:b0:22:f1:9c:82:2f:4d:b2: 74:50:40:89:6b:d5:00:bf:41:81:00:81:bc:b2:b2: 1a:22:14:9b:cb:5e:65:68:28:81:4e:df:29:23:25: 5b:12:99:4f:94:0e:2a:13:2d:b1:4d:0e:70:0c:77: 44:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7B:E4:F7:12:5B:5E:82:16:63:74:0F:F7:D7:75:9D:49:13:81:A9 X509v3 Authority Key Identifier: keyid:C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:46:cf:bd:72:78:f5:a5:19:ca:31:ab:00:ac:47:00:a1:fb: 25:61:03:95:82:b0:7b:6c:30:34:34:ba:c9:9b:7e:9b:ee:75: 73:48:86:ca:a9:75:18:6c:f6:be:a0:ce:dc:ea:c7:2c:1d:4f: e1:ab:a0:5e:69:2d:cc:2e:b5:de:e3:e8:4a:0a:b9:bb:08:fa: c8:e3:f5:8d:95:4c:dd:b7:f3:38:8c:48:19:bf:29:d5:76:11: 6b:08:cc:18:7a:2d:dc:99:9b:22:a1:be:b0:32:e0:a3:c3:30: b7:92:f6:b0:50:e2:c2:99:cd:ad:9f:64:08:29:12:2d:90:42: 39:b0:2c:18:b9:60:07:8a:21:30:7f:d7:ae:70:22:d6:f9:f2: 42:58:8f:e8:82:1b:0a:f8:ca:f5:c8:f1:ea:03:95:d7:19:58: f0:2a:0a:98:7c:7a:f1:cb:69:d7:87:6e:87:72:14:de:7b:8f: ec:f5:48:cc:f8:d3:36:f9:8f:80:42:e9:c8:53:57:3d:2c:c7: 6d:8b:03:5d:e9:eb:44:31:75:55:8e:7e:ba:e9:57:b8:c5:a6: c6:d0:68:71:d1:2f:84:b8:e5:08:7b:1b:2a:de:79:40:43:dc: 74:00:e9:74:fa:ed:5c:17:b7:e2:41:2c:a7:14:d6:8c:55:dc: 06:92:43:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZENjQxMTAvBgNVBAUTKEM0Q0UxMTIzMjE1MThBNzI4NDdDNkQ1N0U3QThBMzU0 MzQ1NTM3M0IwHhcNMjUwNTEwMTUwNzA3WhcNMjUwNTE3MTUwNzA3WjAYMRYwFAYD VQQDEw02ODFmNmI5Yy0zMmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcpCnpBsgyU7isJH2JinQtZ6ReyKTEImyXhxidp2LfX7WM555cNkuKJrzKWh nrD6WRMUwiIZjxtTaxUqN6HRfj1Cttqhg0OVuL8OIGTYsd28fXFfjlp0vv9FY3FS BGByJ86nNaUOR9uWGbjv18/5Ah5jpzXXveLMmJPJUwBsJoxCIJi+SkCLV/lxuJHH 4wCikDFZ5u2sugWz9a8QBPsu5jYDDPTz9L47WoAzo8iIqnrWuR0XnIRUw0ccRb34 RLjQ+/Y5gqbFdhltsCLxnIIvTbJ0UECJa9UAv0GBAIG8srIaIhSby15laCiBTt8p IyVbEplPlA4qEy2xTQ5wDHdEfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKF75PcS W16CFmN0D/fXdZ1JE4GpMB8GA1UdIwQYMBaAFMTOESMhUYpyhHxtV+eoo1Q0VTc7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2NC8zQUY5Q0FEODFE QTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmluS0VmRzFYNTZpalZEUlZO enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hNNFJJeUZSaW5LRWZHMVg1NmlqVkRSVk56cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkQ2NC8zQUY5Q0FEODFEQTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmlu S0VmRzFYNTZpalZEUlZOenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTRs+9cnj1pRnKMasArEcAofslYQOVgrB7bDA0NLrJm36b7nVzSIbK qXUYbPa+oM7c6scsHU/hq6BeaS3MLrXe4+hKCrm7CPrI4/WNlUzdt/M4jEgZvynV dhFrCMwYei3cmZsiob6wMuCjwzC3kvawUOLCmc2tn2QIKRItkEI5sCwYuWAHiiEw f9eucCLW+fJCWI/oghsK+Mr1yPHqA5XXGVjwKgqYfHrxy2nXh26HchTee4/s9UjM +NM2+Y+AQunIU1c9LMdtiwNd6etEMXVVjn666Ve4xabG0Ghx0S+EuOUIexsq3nlA Q9x0AOl0+u1cF7fiQSynFNaMVdwGkkOW -----END CERTIFICATE-----Generated at Mon May 12 04:14:47 2025 by rpki-client