$ rpki-client -vvf rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft File: h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft (raw, json) Hash identifier: lbjZz01BodoNtw3JlzqjnSvdd4QostUIOWuRv08viVE= Subject key identifier: 11:48:A2:6F:84:48:B6:75:B7:A6:67:2D:9A:ED:78:24:DF:8A:11:1E Authority key identifier: 87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03 Certificate issuer: /CN=A911A4F7/serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003 Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft Manifest number: 6F Signing time: Sun 11 May 2025 05:35:49 +0000 Manifest this update: Sun 11 May 2025 05:35:48 +0000 Manifest next update: Sun 18 May 2025 05:35:48 +0000 Files and hashes: 1: h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl (hash: PfqVgwBpKq7IzpsiLQnFVu8iTKgRAUYHN7YjfGiJdgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A4F7, serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003 Validity Not Before: May 11 05:35:48 2025 GMT Not After : May 18 05:35:48 2025 GMT Subject: CN=68203735-11b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a2:91:30:7c:52:e5:29:f0:00:0f:96:cf:3c: c3:33:96:64:fe:ba:c9:4f:3c:ff:90:2e:e5:98:8e: 67:75:61:23:28:ea:bd:f1:16:43:e1:13:7b:9f:b8: 67:49:04:2b:28:87:aa:6f:cb:d2:01:dd:ae:48:e9: 3b:52:45:f0:dd:e2:b0:a4:6f:f1:bb:4c:50:05:0d: 63:4f:e9:da:27:c2:71:e5:26:20:94:73:27:3c:fc: 64:45:f3:21:9e:1f:53:3d:b2:02:59:d9:51:cc:38: 3b:51:75:b1:67:03:c4:da:69:66:74:7c:c4:f1:c5: 53:95:5e:31:35:70:88:a1:7a:ca:36:d7:3c:78:9b: 22:05:2e:e6:21:f3:73:29:0b:eb:80:a1:1b:98:6a: cc:91:7b:d4:7c:50:de:7f:c7:dc:0f:9d:0d:31:b7: bf:fa:26:85:6b:63:f6:ab:92:12:06:1b:80:18:c8: f9:69:7c:21:c2:87:fb:45:77:c9:b8:4e:c3:a8:2a: 1e:44:d2:b7:1a:9e:e9:e4:94:07:f2:37:38:55:de: c7:87:ec:22:d0:94:90:b0:72:46:52:a6:40:b4:4a: ef:2b:56:7a:78:f7:c7:ca:60:76:51:d6:31:c4:94: 1e:b3:98:6d:e3:8d:2c:8c:c2:27:a4:c5:9b:22:57: 78:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:48:A2:6F:84:48:B6:75:B7:A6:67:2D:9A:ED:78:24:DF:8A:11:1E X509v3 Authority Key Identifier: keyid:87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:d3:5e:10:3e:bd:c5:c2:ea:8a:83:61:55:1d:0d:cb:ef:71: 34:23:24:3b:be:98:70:da:8d:49:6a:a2:1c:60:c4:56:96:e0: 51:1f:70:f1:5a:0c:ab:8f:ea:98:74:69:33:60:db:3d:c7:ac: 5b:4b:4a:ca:4f:2c:7c:9c:0d:3a:37:e4:c6:c5:35:e2:28:7c: 4e:bf:42:aa:9a:89:75:4e:b4:5e:ce:de:3a:01:45:c0:c0:5d: cf:c2:c9:0f:bb:98:a6:e4:b0:f2:9d:90:5f:9e:c4:85:f1:cf: 37:a5:d9:28:87:6c:39:66:8b:a5:de:14:24:b1:94:6c:12:fb: da:e9:09:41:0a:60:c3:81:6a:fb:6d:de:bc:c9:71:c9:6a:73: 5f:1f:2d:04:04:1f:dc:b4:89:94:8c:30:e2:d1:62:2b:b8:3d: 44:b9:90:36:2c:c8:09:ac:9a:fe:f2:70:50:e5:b5:4f:66:41: 4c:e9:af:db:e6:e6:60:9d:00:44:63:c7:bf:a5:ac:1b:e5:a1: 71:31:09:1e:c0:09:a6:2d:d5:ca:ab:83:b3:dd:c3:5b:6f:e2: 1f:5d:a9:39:19:63:d7:92:2e:d3:4b:5b:dc:13:53:d3:e4:98: af:7d:8f:4d:c6:0b:02:f8:e3:6e:07:cd:12:12:d6:b2:a3:8a: e8:ff:2e:35 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTRGNzExMC8GA1UEBRMoODc5MkRFMzk5Q0Y2MzE5M0REQzI5RDMwRkJGMEE1ODFF MDI0RjAwMzAeFw0yNTA1MTEwNTM1NDhaFw0yNTA1MTgwNTM1NDhaMBgxFjAUBgNV BAMTDTY4MjAzNzM1LTExYjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmopEwfFLlKfAAD5bPPMMzlmT+uslPPP+QLuWYjmd1YSMo6r3xFkPhE3ufuGdJ BCsoh6pvy9IB3a5I6TtSRfDd4rCkb/G7TFAFDWNP6donwnHlJiCUcyc8/GRF8yGe H1M9sgJZ2VHMODtRdbFnA8TaaWZ0fMTxxVOVXjE1cIiheso21zx4myIFLuYh83Mp C+uAoRuYasyRe9R8UN5/x9wPnQ0xt7/6JoVrY/arkhIGG4AYyPlpfCHCh/tFd8m4 TsOoKh5E0rcanunklAfyNzhV3seH7CLQlJCwckZSpkC0Su8rVnp498fKYHZR1jHE lB6zmG3jjSyMwiekxZsiV3j7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEUiib4RI tnW3pmctmu14JN+KER4wHwYDVR0jBBgwFoAUh5LeOZz2MZPdwp0w+/ClgeAk8AMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBNEY3L0EzREQ2QjlBODVG QzExRUZCQzIxMEY1RUM0RjlBRTAyL2g1TGVPWnoyTVpQZHdwMHctX0NsZ2VBazhB TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaDVMZU9aejJNWlBkd3Awdy1fQ2xnZUFrOEFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB NEY3L0EzREQ2QjlBODVGQzExRUZCQzIxMEY1RUM0RjlBRTAyL2g1TGVPWnoyTVpQ ZHdwMHctX0NsZ2VBazhBTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHXTXhA+vcXC6oqDYVUdDcvvcTQjJDu+mHDajUlqohxgxFaW4FEfcPFa DKuP6ph0aTNg2z3HrFtLSspPLHycDTo35MbFNeIofE6/QqqaiXVOtF7O3joBRcDA Xc/CyQ+7mKbksPKdkF+exIXxzzel2SiHbDlmi6XeFCSxlGwS+9rpCUEKYMOBavtt 3rzJcclqc18fLQQEH9y0iZSMMOLRYiu4PUS5kDYsyAmsmv7ycFDltU9mQUzpr9vm 5mCdAERjx7+lrBvloXExCR7ACaYt1cqrg7Pdw1tv4h9dqTkZY9eSLtNLW9wTU9Pk mK99j03GCwL4424HzRIS1rKjiuj/LjU= -----END CERTIFICATE-----Generated at Mon May 12 12:52:14 2025 by rpki-client