$ rpki-client -vvf rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft File: 5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft (raw, json) Hash identifier: UtxtaFwFtELaQudC+pF6t/ymrd30nZur51A2icXwYb0= Subject key identifier: 10:9A:BE:B0:E7:28:9F:D8:C5:BC:67:D7:59:CA:76:FC:2E:65:12:E2 Authority key identifier: E5:95:BC:B7:BF:E3:C8:67:2A:82:82:1C:C9:36:BC:8E:C3:92:03:69 Certificate issuer: /CN=A9127B77/serialNumber=E595BCB7BFE3C8672A82821CC936BC8EC3920369 Certificate serial: 3483 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft Manifest number: 3483 Signing time: Fri 16 May 2025 15:18:53 +0000 Manifest this update: Fri 16 May 2025 15:18:52 +0000 Manifest next update: Fri 23 May 2025 15:18:52 +0000 Files and hashes: 1: 5ZW8t7_jyGcqgoIcyTa8jsOSA2k.crl (hash: lUmICMBmv/rBCRpbEVjipsvPxt+8AX4fxle3mVIATC8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.crl rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 15:18:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13443 (0x3483) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127B77, serialNumber=E595BCB7BFE3C8672A82821CC936BC8EC3920369 Validity Not Before: May 16 15:18:52 2025 GMT Not After : May 23 15:18:52 2025 GMT Subject: CN=6827575d-3a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:48:8b:ff:c4:de:d7:85:4e:dd:7f:e4:c4:ae: e9:78:b6:a0:99:04:57:2a:73:8b:05:8f:3f:ad:56: c5:eb:00:99:96:61:61:5b:dc:7b:bd:dc:ee:41:29: 7a:56:98:fe:e4:0b:65:0b:99:78:c9:83:12:c2:a8: d1:bc:7b:73:e2:e4:01:ab:f6:b1:86:00:b2:63:29: ea:2f:24:a2:8e:10:d1:96:14:c4:6f:e4:ab:7b:0b: dc:f9:b7:ee:77:79:09:13:20:f3:55:13:02:c3:79: 7e:0e:61:2b:cc:a7:44:02:09:18:db:72:97:7d:01: d1:a2:61:f9:b4:79:0e:44:74:cd:ee:a0:f3:44:e5: dd:0d:75:58:77:3b:45:24:e2:c1:4d:54:43:ec:a4: 29:3f:03:5d:67:33:06:fd:a2:b8:d8:18:f3:a4:0b: fd:5a:2e:db:57:71:ea:37:47:c7:2b:30:0c:21:05: c8:7b:56:bd:7a:40:32:6b:d0:65:6b:de:2f:29:b8: 58:16:a9:02:bd:4d:1b:62:e5:4a:dc:a4:b4:e1:f9: 3c:68:47:dc:0a:f4:b7:f1:6e:80:32:f2:e2:8c:91: 66:0a:7e:26:56:cd:bc:8b:86:4f:40:8a:28:65:82: e2:02:e3:3a:fe:56:8f:6a:4c:5e:7b:0c:66:42:87: d6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:9A:BE:B0:E7:28:9F:D8:C5:BC:67:D7:59:CA:76:FC:2E:65:12:E2 X509v3 Authority Key Identifier: keyid:E5:95:BC:B7:BF:E3:C8:67:2A:82:82:1C:C9:36:BC:8E:C3:92:03:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:20:8f:47:bf:13:20:4b:77:e1:92:3e:d6:63:c8:ee:37:ba: 04:95:3b:22:d5:5a:a8:e7:13:9d:24:60:aa:ab:fb:65:b8:db: 5e:1a:3e:93:3d:1a:41:b2:5c:21:a8:de:f9:0b:8d:ea:34:16: 02:f0:52:d6:7d:83:e2:89:97:7a:29:a3:b3:74:62:88:88:a2: 33:c6:7a:38:ff:80:ab:3b:07:ef:79:26:da:b4:8c:b6:56:d4: 70:53:32:9a:d3:46:b4:33:b7:16:49:d4:a4:d7:a8:ca:e2:5b: e2:13:04:d2:70:17:a0:e4:02:39:83:54:40:83:52:a3:b4:83: 1e:62:b3:8c:61:37:44:d9:d8:82:02:58:e7:2d:e6:17:35:22: 3d:18:58:31:17:e5:a9:99:2c:79:36:b1:7b:e7:99:aa:f0:65: e2:63:39:0b:4f:e4:f4:61:e4:21:8c:d7:e7:36:18:cf:41:27: 3f:a5:24:dc:5c:0f:08:2d:9c:ee:b7:be:92:45:88:92:2f:a8: c7:94:49:e4:d8:14:32:5a:80:85:63:85:e4:b1:f3:aa:5b:92: 1a:3b:01:92:79:d4:f6:5b:65:24:37:e9:bb:ba:6c:09:36:a9: 52:57:be:28:fd:5e:41:a4:5d:42:22:cc:05:f4:c0:5c:21:5f: 0f:0b:3c:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdCNzcxMTAvBgNVBAUTKEU1OTVCQ0I3QkZFM0M4NjcyQTgyODIxQ0M5MzZCQzhF QzM5MjAzNjkwHhcNMjUwNTE2MTUxODUyWhcNMjUwNTIzMTUxODUyWjAYMRYwFAYD VQQDEw02ODI3NTc1ZC0zYTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0iL/8Te14VO3X/kxK7peLagmQRXKnOLBY8/rVbF6wCZlmFhW9x7vdzuQSl6 Vpj+5AtlC5l4yYMSwqjRvHtz4uQBq/axhgCyYynqLySijhDRlhTEb+Srewvc+bfu d3kJEyDzVRMCw3l+DmErzKdEAgkY23KXfQHRomH5tHkORHTN7qDzROXdDXVYdztF JOLBTVRD7KQpPwNdZzMG/aK42BjzpAv9Wi7bV3HqN0fHKzAMIQXIe1a9ekAya9Bl a94vKbhYFqkCvU0bYuVK3KS04fk8aEfcCvS38W6AMvLijJFmCn4mVs28i4ZPQIoo ZYLiAuM6/laPakxeewxmQofWpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCavrDn KJ/Yxbxn11nKdvwuZRLiMB8GA1UdIwQYMBaAFOWVvLe/48hnKoKCHMk2vI7DkgNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0I3Ny81ODk4QTU2QzFE QTYxMUUyOTc4NTk5OUQwOEIwMkNEMi81Wlc4dDdfanlHY3Fnb0ljeVRhOGpzT1NB MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVaVzh0N19qeUdjcWdvSWN5VGE4anNPU0Eyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0I3Ny81ODk4QTU2QzFEQTYxMUUyOTc4NTk5OUQwOEIwMkNEMi81Wlc4dDdfanlH Y3Fnb0ljeVRhOGpzT1NBMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcII9HvxMgS3fhkj7WY8juN7oElTsi1Vqo5xOdJGCqq/tluNteGj6T PRpBslwhqN75C43qNBYC8FLWfYPiiZd6KaOzdGKIiKIzxno4/4CrOwfveSbatIy2 VtRwUzKa00a0M7cWSdSk16jK4lviEwTScBeg5AI5g1RAg1KjtIMeYrOMYTdE2diC AljnLeYXNSI9GFgxF+WpmSx5NrF755mq8GXiYzkLT+T0YeQhjNfnNhjPQSc/pSTc XA8ILZzut76SRYiSL6jHlEnk2BQyWoCFY4XksfOqW5IaOwGSedT2W2UkN+m7umwJ NqlSV74o/V5BpF1CIswF9MBcIV8PCzxh -----END CERTIFICATE-----Generated at Fri May 16 19:27:02 2025 by rpki-client