$ rpki-client -vvf rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft File: tIPaBfgQj61WuWetrdJRxslpwlI.mft (raw, json) Hash identifier: AKplNWmsVVXCooSWtT5hIEC0tTFHMZalmcUFeIU+QSg= Subject key identifier: 62:E6:A7:15:0A:A3:84:23:C8:26:13:A5:9A:67:6B:65:A3:9E:85:B4 Authority key identifier: B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52 Certificate issuer: /CN=A91178F4/serialNumber=B483DA05F8108FAD56B967ADADD251C6C969C252 Certificate serial: 017B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft Manifest number: 017B Signing time: Sat 10 May 2025 18:44:31 +0000 Manifest this update: Sat 10 May 2025 18:44:31 +0000 Manifest next update: Sat 17 May 2025 18:44:31 +0000 Files and hashes: 1: tIPaBfgQj61WuWetrdJRxslpwlI.crl (hash: e//PW3RynghjrSPLGwavUQ7PD7WtFa7gVGbsdKuj35I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.crl rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:44:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91178F4, serialNumber=B483DA05F8108FAD56B967ADADD251C6C969C252 Validity Not Before: May 10 18:44:31 2025 GMT Not After : May 17 18:44:31 2025 GMT Subject: CN=681f9e8f-230c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:23:25:83:ab:4e:a8:6e:4e:9d:ad:76:36:e5: 0a:83:f0:c9:2c:0f:2d:e5:72:20:e3:b8:8b:0a:e4: 95:54:c7:00:2a:ac:6d:dc:3d:1e:f0:9e:00:4d:bc: e0:f4:83:af:b1:30:8f:e2:db:90:a7:49:a6:59:55: d4:a3:08:a6:e2:dd:03:f3:ff:10:22:29:80:65:d8: 9e:24:2f:8b:e5:11:6d:97:4b:26:17:b3:c6:ed:82: a9:43:a5:98:b8:04:65:1a:3b:18:0c:4b:24:90:79: 70:a9:d7:49:4b:db:a9:65:af:04:49:ca:e0:1d:d6: 5c:0c:2c:cd:44:4a:5d:6d:33:90:82:2c:01:2d:2f: a4:64:32:3c:41:7c:c0:2d:5a:b3:d9:ed:68:b2:48: 34:df:5a:86:48:95:2b:7b:fb:42:1d:88:4b:2c:4c: 00:ab:b9:23:f5:47:c0:81:22:b2:be:6f:be:7c:f5: 81:fa:ac:98:56:06:23:71:57:86:7f:d9:74:1e:14: c3:90:20:21:2c:11:76:cd:cd:b7:3e:9b:84:e7:cb: c7:5d:a0:99:37:91:ac:89:79:c3:c8:ea:21:f4:42: 4e:84:95:26:6d:7c:d3:38:05:5b:70:20:f2:dc:4e: 28:da:af:dd:a2:29:0c:81:54:af:30:73:b7:12:d5: d5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E6:A7:15:0A:A3:84:23:C8:26:13:A5:9A:67:6B:65:A3:9E:85:B4 X509v3 Authority Key Identifier: keyid:B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:67:2d:db:49:e8:57:9a:3f:89:40:09:a4:80:d8:1f:38:1b: 56:80:e6:76:da:ce:33:35:56:f1:09:df:95:15:da:57:59:c5: 6c:80:26:16:39:8f:d1:b5:28:f0:83:9b:0d:45:e8:36:54:99: c2:76:36:27:75:57:1b:b8:8c:7c:19:5c:3f:4b:d7:4c:d8:b7: df:f5:d9:c8:db:de:6a:e4:25:a1:86:6d:a8:90:ce:0a:c0:60: da:28:24:03:45:38:10:88:0a:d2:a1:07:c1:b4:1b:e8:15:19: a6:85:f7:bd:a1:01:3c:cf:bd:8a:d7:51:ee:4e:31:3e:2a:db: d9:a5:24:85:65:23:e4:b3:01:5a:e8:4b:24:c8:c0:86:4d:f3: 00:f6:29:f6:8e:9e:e2:5c:a7:88:76:25:1e:c0:10:53:4c:26: a1:29:13:4f:76:d6:af:f0:4e:6a:fd:38:dc:57:5f:73:7e:9e: 9b:14:02:53:4a:a0:80:f3:36:24:19:65:21:65:13:f0:69:93: 6d:30:3a:15:11:ce:56:16:a4:cf:11:9c:5f:27:23:8d:37:e9: 71:89:c0:8f:59:dc:f9:12:7f:3e:89:90:c6:e7:67:02:ce:e7: c6:1f:1f:7a:fc:fd:88:a2:3b:6b:c3:22:19:ad:ae:b6:f1:64: b8:42:46:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4RjQxMTAvBgNVBAUTKEI0ODNEQTA1RjgxMDhGQUQ1NkI5NjdBREFERDI1MUM2 Qzk2OUMyNTIwHhcNMjUwNTEwMTg0NDMxWhcNMjUwNTE3MTg0NDMxWjAYMRYwFAYD VQQDEw02ODFmOWU4Zi0yMzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsiMlg6tOqG5Ona12NuUKg/DJLA8t5XIg47iLCuSVVMcAKqxt3D0e8J4ATbzg 9IOvsTCP4tuQp0mmWVXUowim4t0D8/8QIimAZdieJC+L5RFtl0smF7PG7YKpQ6WY uARlGjsYDEskkHlwqddJS9upZa8EScrgHdZcDCzNREpdbTOQgiwBLS+kZDI8QXzA LVqz2e1oskg031qGSJUre/tCHYhLLEwAq7kj9UfAgSKyvm++fPWB+qyYVgYjcVeG f9l0HhTDkCAhLBF2zc23PpuE58vHXaCZN5GsiXnDyOoh9EJOhJUmbXzTOAVbcCDy 3E4o2q/doikMgVSvMHO3EtXVLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLmpxUK o4QjyCYTpZpna2WjnoW0MB8GA1UdIwQYMBaAFLSD2gX4EI+tVrlnra3SUcbJacJS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzhGNC9CRjBBMUU5QUYw QjYxMUVEQTg4MkU2MjhDNEY5QUUwMi90SVBhQmZnUWo2MVd1V2V0cmRKUnhzbHB3 bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RJUGFCZmdRajYxV3VXZXRyZEpSeHNscHdsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzhGNC9CRjBBMUU5QUYwQjYxMUVEQTg4MkU2MjhDNEY5QUUwMi90SVBhQmZnUWo2 MVd1V2V0cmRKUnhzbHB3bEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbZy3bSehXmj+JQAmkgNgfOBtWgOZ22s4zNVbxCd+VFdpXWcVsgCYW OY/RtSjwg5sNReg2VJnCdjYndVcbuIx8GVw/S9dM2Lff9dnI295q5CWhhm2okM4K wGDaKCQDRTgQiArSoQfBtBvoFRmmhfe9oQE8z72K11HuTjE+KtvZpSSFZSPkswFa 6EskyMCGTfMA9in2jp7iXKeIdiUewBBTTCahKRNPdtav8E5q/TjcV19zfp6bFAJT SqCA8zYkGWUhZRPwaZNtMDoVEc5WFqTPEZxfJyONN+lxicCPWdz5En8+iZDG52cC zufGHx96/P2IojtrwyIZra628WS4QkYY -----END CERTIFICATE-----Generated at Mon May 12 19:44:15 2025 by rpki-client