$ rpki-client -vvf rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft File: B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft (raw, json) Hash identifier: pKvBo4mypAjYPF9nx7KBxEMwvmV0GfVhOZdAh9ANGZo= Subject key identifier: 73:4E:6A:D0:A0:AA:D1:4A:7F:9A:DD:2E:6C:84:93:C5:1D:BC:C2:C9 Authority key identifier: 07:FE:41:71:DD:50:DC:E7:B6:4F:76:99:89:67:A5:71:CF:93:C4:0B Certificate issuer: /CN=A911BFB0/serialNumber=07FE4171DD50DCE7B64F76998967A571CF93C40B Certificate serial: 0F44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft Manifest number: 10FD Signing time: Sat 10 May 2025 17:27:57 +0000 Manifest this update: Sat 10 May 2025 17:27:57 +0000 Manifest next update: Sat 17 May 2025 17:27:57 +0000 Files and hashes: 1: B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.crl (hash: EwH+0l5cnCotlMNo674MSInUHczMsPi0uOWJhL9DjXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.crl rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3908 (0xf44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BFB0, serialNumber=07FE4171DD50DCE7B64F76998967A571CF93C40B Validity Not Before: May 10 17:27:57 2025 GMT Not After : May 17 17:27:57 2025 GMT Subject: CN=681f8c9d-c0cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b5:f4:d8:38:54:cc:4d:e3:81:31:c3:dd:5e: 79:3a:a2:f6:bf:a3:f6:78:eb:e2:b8:f1:11:ae:36: eb:56:ee:d8:da:57:85:a3:f8:41:95:65:21:e3:03: d0:35:9a:6b:37:fd:11:be:5c:be:42:24:19:c6:41: 9f:77:f5:df:d1:e5:58:17:59:a9:81:55:6b:a7:79: ff:75:7a:f2:9e:99:d4:01:6d:66:66:81:2f:25:78: 2e:01:15:97:32:72:61:e9:ed:f3:1d:ce:63:55:90: 86:cc:bd:bf:21:7a:35:15:c2:2f:21:6b:f3:86:6a: 60:bd:c5:d8:d5:d8:e5:02:13:63:dd:79:cb:6b:68: 84:3a:a1:7a:a5:27:e6:d0:94:52:e7:bc:94:ee:b8: 5f:eb:83:ca:dd:09:74:1f:b6:b4:57:e0:d0:eb:0f: 8e:c0:f3:2a:4d:b7:60:aa:63:d5:a3:dd:bb:4c:1b: 64:7b:8e:9e:4d:2e:28:4b:fd:9d:d0:8d:48:5f:b1: c4:99:62:71:f2:7c:f8:3f:1e:7b:08:b9:90:fa:c9: d4:1f:89:9d:42:d1:cc:8d:1f:b7:2a:a9:fe:33:89: 43:e5:5d:71:c0:3e:96:ca:99:a7:6c:17:1e:d8:4b: 47:96:8a:0a:5e:1f:c6:c6:be:f9:81:ab:9a:58:5a: e9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:4E:6A:D0:A0:AA:D1:4A:7F:9A:DD:2E:6C:84:93:C5:1D:BC:C2:C9 X509v3 Authority Key Identifier: keyid:07:FE:41:71:DD:50:DC:E7:B6:4F:76:99:89:67:A5:71:CF:93:C4:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:29:ab:66:81:26:1b:e9:9c:90:7a:ae:3f:07:e0:e7:f9:c6: 7a:5c:b2:43:b8:12:5c:9b:b7:98:31:92:15:88:f5:1e:81:99: 77:e9:32:e1:4f:7f:60:20:30:2d:6c:a3:ff:47:bf:7c:6a:f6: 91:c7:2c:ff:44:ef:59:7a:bd:d7:c8:1b:59:a7:11:a4:4d:e3: a2:97:5c:f1:50:44:87:90:cf:8d:3a:51:8b:c9:f4:58:e0:bc: 4e:0b:d8:13:b4:03:c3:7e:7c:4d:b3:20:d1:18:67:94:f0:12: aa:54:19:7e:42:19:15:20:18:1e:36:c3:7c:d8:ba:e0:65:3b: de:e2:00:73:98:9a:cd:38:22:50:6d:29:06:4d:2a:48:6c:41: 5f:95:67:39:77:14:b4:84:de:1a:43:8f:e3:d9:cd:c0:be:04: 49:77:82:49:30:ac:e2:7d:77:56:6b:ff:c2:27:7d:4b:0d:59: ad:31:3a:f8:0b:2f:e5:eb:62:97:7d:cf:a8:83:b2:cf:9b:b1: 50:e3:90:a7:5a:f4:1f:9a:34:0f:d5:20:ca:f0:7a:a6:4d:cc: 27:5e:09:f9:b9:21:bb:f3:35:f6:f6:84:4e:ab:4e:e1:2f:53: 5c:7b:6c:e1:80:e9:1c:28:e9:9a:95:10:19:79:fd:3d:af:ba: 9b:15:40:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJGQjAxMTAvBgNVBAUTKDA3RkU0MTcxREQ1MERDRTdCNjRGNzY5OTg5NjdBNTcx Q0Y5M0M0MEIwHhcNMjUwNTEwMTcyNzU3WhcNMjUwNTE3MTcyNzU3WjAYMRYwFAYD VQQDEw02ODFmOGM5ZC1jMGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybX02DhUzE3jgTHD3V55OqL2v6P2eOviuPERrjbrVu7Y2leFo/hBlWUh4wPQ NZprN/0Rvly+QiQZxkGfd/Xf0eVYF1mpgVVrp3n/dXrynpnUAW1mZoEvJXguARWX MnJh6e3zHc5jVZCGzL2/IXo1FcIvIWvzhmpgvcXY1djlAhNj3XnLa2iEOqF6pSfm 0JRS57yU7rhf64PK3Ql0H7a0V+DQ6w+OwPMqTbdgqmPVo927TBtke46eTS4oS/2d 0I1IX7HEmWJx8nz4Px57CLmQ+snUH4mdQtHMjR+3Kqn+M4lD5V1xwD6WypmnbBce 2EtHlooKXh/Gxr75gauaWFrpgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNOatCg qtFKf5rdLmyEk8UdvMLJMB8GA1UdIwQYMBaAFAf+QXHdUNzntk92mYlnpXHPk8QL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkZCMC8yMkMyNTE0NjZD QzIxMUU5QTBENkFGNjdDNEY5QUUwMi9CXzVCY2QxUTNPZTJUM2FaaVdlbGNjLVR4 QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JfNUJjZDFRM09lMlQzYVppV2VsY2MtVHhBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkZCMC8yMkMyNTE0NjZDQzIxMUU5QTBENkFGNjdDNEY5QUUwMi9CXzVCY2QxUTNP ZTJUM2FaaVdlbGNjLVR4QXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvKatmgSYb6ZyQeq4/B+Dn+cZ6XLJDuBJcm7eYMZIViPUegZl36TLh T39gIDAtbKP/R798avaRxyz/RO9Zer3XyBtZpxGkTeOil1zxUESHkM+NOlGLyfRY 4LxOC9gTtAPDfnxNsyDRGGeU8BKqVBl+QhkVIBgeNsN82LrgZTve4gBzmJrNOCJQ bSkGTSpIbEFflWc5dxS0hN4aQ4/j2c3AvgRJd4JJMKzifXdWa//CJ31LDVmtMTr4 Cy/l62KXfc+og7LPm7FQ45CnWvQfmjQP1SDK8HqmTcwnXgn5uSG78zX29oROq07h L1Nce2zhgOkcKOmalRAZef09r7qbFUBJ -----END CERTIFICATE-----Generated at Mon May 12 07:24:38 2025 by rpki-client