$ rpki-client -vvf rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft File: Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft (raw, json) Hash identifier: 2A9WiZVKLce/a3jb8F3I7q378+1Ff1LVHunaHZG1oNU= Subject key identifier: 32:93:F0:C8:06:61:96:47:96:A5:FF:49:32:22:8B:DD:D1:86:E7:24 Authority key identifier: 2B:3D:21:1F:C9:99:8D:F2:03:5E:20:D9:1A:A5:5E:DE:C6:28:F0:A3 Certificate issuer: /CN=A912B75A/serialNumber=2B3D211FC9998DF2035E20D91AA55EDEC628F0A3 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft Manifest number: 8E Signing time: Thu 15 May 2025 05:44:48 +0000 Manifest this update: Thu 15 May 2025 05:44:48 +0000 Manifest next update: Thu 22 May 2025 05:44:48 +0000 Files and hashes: 1: Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl (hash: c7w0M+Z360tYNBkQfWwbsYWYmIautx8ORvXPcID9Svk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B75A, serialNumber=2B3D211FC9998DF2035E20D91AA55EDEC628F0A3 Validity Not Before: May 15 05:44:48 2025 GMT Not After : May 22 05:44:48 2025 GMT Subject: CN=68257f50-9e62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:59:ca:ca:23:c5:ed:6a:dd:d9:98:37:c9:b8: b7:75:0f:29:21:d7:d9:17:0a:cf:83:13:c4:66:82: 83:7b:ef:d2:2f:e7:7c:a9:a6:fb:7a:22:16:2e:57: 6c:98:3c:ce:7f:45:c8:e8:67:17:41:29:58:77:09: 9c:3c:17:f5:0d:2f:6b:e0:25:ea:bf:c6:96:80:a3: 36:95:71:da:3a:f9:8a:d7:5c:0c:a0:f4:1b:a2:19: 75:f6:15:a3:0c:4a:b0:8e:5e:ee:18:de:32:05:78: 15:1f:60:fc:09:72:58:21:f7:6c:ed:47:d3:56:7d: 7e:4f:51:d3:36:e6:37:1e:d4:8a:57:06:68:8c:91: 10:5c:fd:35:89:17:84:ec:3a:8b:fe:a5:77:bf:13: b8:25:0f:2f:03:6a:4f:13:e9:9b:5a:58:ed:3f:9b: ee:d2:2d:aa:59:ba:20:72:36:07:32:cd:bb:8a:7b: bf:5f:65:cb:cd:ad:70:3b:6f:d7:34:ea:91:12:13: 11:83:84:69:27:9b:c6:aa:97:a9:f4:36:0c:6d:af: 03:40:16:f1:f7:82:3c:f8:fd:17:a6:8f:1e:6a:b4: 2b:56:7a:c2:23:55:a5:82:39:49:7c:78:ed:bb:41: 7e:1e:ed:47:2a:64:96:8a:1b:f1:b7:1e:08:b6:97: ff:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:93:F0:C8:06:61:96:47:96:A5:FF:49:32:22:8B:DD:D1:86:E7:24 X509v3 Authority Key Identifier: keyid:2B:3D:21:1F:C9:99:8D:F2:03:5E:20:D9:1A:A5:5E:DE:C6:28:F0:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:90:88:0c:b9:0e:ae:62:0c:c5:12:cf:de:63:2d:3b:99:ad: 1d:b1:5e:2b:d2:5a:24:2b:b4:19:98:5a:e3:8b:e5:b8:a9:5e: d7:89:f8:a8:ec:79:a2:dd:ef:36:03:0c:b4:66:44:9f:f3:3d: c7:cb:7d:88:7f:17:17:de:7e:b4:f9:80:a4:f0:6c:5b:b3:34: c2:19:8d:71:37:8a:f5:ca:01:52:0a:5d:72:b0:d1:39:2c:46: a6:0b:48:44:be:d1:d1:eb:9d:9f:c4:ad:69:52:bb:b0:30:6f: fb:65:1d:a2:65:4b:60:c7:67:c8:0e:40:4d:96:9e:55:97:bf: 27:b0:c0:7b:ef:39:3b:32:38:94:07:ff:6d:96:78:b3:5b:ce: e9:41:58:41:34:c2:2c:24:cc:b5:41:8a:9d:38:22:ce:a5:04: 74:a2:cb:66:d6:77:96:0e:77:58:c6:ca:09:c4:82:a8:01:37: d1:13:c7:50:98:1c:f0:9a:7e:16:9d:aa:a1:21:99:fc:1e:74: 74:31:e5:6e:bc:7f:5d:2a:a0:42:22:a6:a2:4f:39:6d:6e:a1: 84:10:81:90:37:0b:f8:34:4a:8a:0a:63:f5:8f:ec:b0:91:17: 93:a6:5d:85:f0:8f:eb:0c:15:b1:b4:49:17:08:77:e0:60:43: 08:df:2f:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI3NUExMTAvBgNVBAUTKDJCM0QyMTFGQzk5OThERjIwMzVFMjBEOTFBQTU1RURF QzYyOEYwQTMwHhcNMjUwNTE1MDU0NDQ4WhcNMjUwNTIyMDU0NDQ4WjAYMRYwFAYD VQQDEw02ODI1N2Y1MC05ZTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVnKyiPF7Wrd2Zg3ybi3dQ8pIdfZFwrPgxPEZoKDe+/SL+d8qab7eiIWLlds mDzOf0XI6GcXQSlYdwmcPBf1DS9r4CXqv8aWgKM2lXHaOvmK11wMoPQbohl19hWj DEqwjl7uGN4yBXgVH2D8CXJYIfds7UfTVn1+T1HTNuY3HtSKVwZojJEQXP01iReE 7DqL/qV3vxO4JQ8vA2pPE+mbWljtP5vu0i2qWbogcjYHMs27inu/X2XLza1wO2/X NOqREhMRg4RpJ5vGqpep9DYMba8DQBbx94I8+P0Xpo8earQrVnrCI1WlgjlJfHjt u0F+Hu1HKmSWihvxtx4Itpf/FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKT8MgG YZZHlqX/STIii93RhuckMB8GA1UdIwQYMBaAFCs9IR/JmY3yA14g2RqlXt7GKPCj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjc1QS8xQjIyRTFGRTVC OUExMUVGODIwMjc2NDBDNEY5QUUwMi9LejBoSDhtWmpmSURYaURaR3FWZTNzWW84 S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t6MGhIOG1aamZJRFhpRFpHcVZlM3NZbzhLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjc1QS8xQjIyRTFGRTVCOUExMUVGODIwMjc2NDBDNEY5QUUwMi9LejBoSDhtWmpm SURYaURaR3FWZTNzWW84S00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwkIgMuQ6uYgzFEs/eYy07ma0dsV4r0lokK7QZmFrji+W4qV7Xifio 7Hmi3e82Awy0ZkSf8z3Hy32IfxcX3n60+YCk8GxbszTCGY1xN4r1ygFSCl1ysNE5 LEamC0hEvtHR652fxK1pUruwMG/7ZR2iZUtgx2fIDkBNlp5Vl78nsMB77zk7MjiU B/9tlnizW87pQVhBNMIsJMy1QYqdOCLOpQR0ostm1neWDndYxsoJxIKoATfRE8dQ mBzwmn4WnaqhIZn8HnR0MeVuvH9dKqBCIqaiTzltbqGEEIGQNwv4NEqKCmP1j+yw kReTpl2F8I/rDBWxtEkXCHfgYEMI3y/G -----END CERTIFICATE-----Generated at Fri May 16 09:24:30 2025 by rpki-client