$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft File: G5AiZjIh2M567rA_P1eZ8NV-phY.mft (raw, json) Hash identifier: I2I5fK7EEFSPAdb8PiC3DoPy8mMp1bgF3cJHQuZBspA= Subject key identifier: 14:BB:54:DF:B8:37:5A:97:C0:BF:18:A6:14:55:3F:71:EE:75:54:3B Authority key identifier: 1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16 Certificate issuer: /CN=A9133E16/serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616 Certificate serial: 08DE Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft Manifest number: 08DE Signing time: Wed 14 May 2025 20:32:05 +0000 Manifest this update: Wed 14 May 2025 20:32:05 +0000 Manifest next update: Wed 21 May 2025 20:32:05 +0000 Files and hashes: 1: G5AiZjIh2M567rA_P1eZ8NV-phY.crl (hash: 21cKFfD2eyIpkgykwE8Tv7IAjVOYzUeEqTcL3U1AWkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 20:32:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2270 (0x8de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133E16, serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616 Validity Not Before: May 14 20:32:05 2025 GMT Not After : May 21 20:32:05 2025 GMT Subject: CN=6824fdc5-e3d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:fc:ea:51:94:c5:dc:81:49:fc:c6:94:5a:e9: 4a:bd:bb:e7:18:05:75:a8:d4:71:91:7e:27:85:1c: ef:f4:c3:e2:13:36:8f:01:bb:86:eb:a9:46:12:fb: bb:0c:73:a5:b4:10:e4:e9:af:95:e7:01:e3:08:61: 59:5a:a7:ec:94:eb:bf:c5:75:5a:5d:f6:70:4a:80: ca:5b:af:a7:7f:1b:85:27:e8:d3:a2:8b:7c:ef:87: 0d:ac:33:c1:10:b8:02:c8:0f:ad:9f:60:d9:af:79: e2:85:ee:bc:9f:e4:51:7f:50:62:20:11:86:f8:cc: 48:19:e6:26:eb:35:6d:38:94:c4:2c:3c:a3:63:a2: ab:cd:35:f6:21:c8:f3:53:d5:38:47:f2:7b:35:6d: c1:27:94:0d:31:b3:1f:15:2d:e4:18:75:31:5e:12: c5:1c:d7:7d:96:4e:1b:98:16:5e:b2:79:4e:af:2b: e3:3e:f1:83:30:b4:2d:28:a8:0b:52:36:83:f4:26: 48:1e:37:30:27:ef:8d:e3:9f:16:e0:6d:b2:81:75: f0:bb:4a:87:5c:33:5d:e9:aa:f5:85:c1:f8:b4:52: a7:0f:05:67:de:1a:48:0e:34:d2:9f:e2:8b:52:fc: 68:bd:fe:8c:21:a3:ab:96:39:79:e7:77:31:11:c4: 25:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:BB:54:DF:B8:37:5A:97:C0:BF:18:A6:14:55:3F:71:EE:75:54:3B X509v3 Authority Key Identifier: keyid:1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:61:88:09:d6:5d:33:a5:34:33:c1:28:59:6b:70:93:ee:56: 6a:3d:ce:48:81:73:31:a8:48:79:88:c6:4c:d4:c4:e1:dc:b5: 98:24:7f:8e:09:1a:b6:9b:7d:9a:85:45:e4:b3:40:1d:83:5e: cb:e5:ac:5a:51:b6:a8:83:50:86:39:60:0f:b3:19:e9:60:87: 9d:3f:10:8e:bd:57:d1:6b:59:e0:98:1a:02:cf:d0:bd:33:5f: 9d:da:24:de:b5:12:61:93:50:61:cf:49:0f:eb:1b:ac:87:80: da:e4:7d:23:e3:4a:1a:5d:0b:49:75:4d:59:ec:00:a1:3b:0b: 05:90:57:74:e7:49:b3:c3:f9:ff:1d:fa:d5:a8:e8:3c:c2:62: c0:9c:dc:8a:80:d9:af:06:bc:44:96:da:db:e2:6f:aa:af:51: ac:08:f8:55:80:d7:34:95:78:cf:ad:8f:7a:d2:07:ee:c5:6b: c5:70:5d:21:09:84:df:3f:6e:a0:82:91:c1:39:d4:8f:72:42: 5a:08:14:48:57:dd:8b:6d:89:51:c1:b5:93:e3:66:b2:05:6c: 9a:d8:5a:62:33:78:a0:2e:22:2c:66:9f:f9:48:3f:dd:8a:40: 11:df:72:3f:af:30:66:a1:4f:b2:13:51:66:c0:f9:c6:b4:33: c0:34:39:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNFMTYxMTAvBgNVBAUTKDFCOTAyMjY2MzIyMUQ4Q0U3QUVFQjAzRjNGNTc5OUYw RDU3RUE2MTYwHhcNMjUwNTE0MjAzMjA1WhcNMjUwNTIxMjAzMjA1WjAYMRYwFAYD VQQDEw02ODI0ZmRjNS1lM2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6/zqUZTF3IFJ/MaUWulKvbvnGAV1qNRxkX4nhRzv9MPiEzaPAbuG66lGEvu7 DHOltBDk6a+V5wHjCGFZWqfslOu/xXVaXfZwSoDKW6+nfxuFJ+jToot874cNrDPB ELgCyA+tn2DZr3nihe68n+RRf1BiIBGG+MxIGeYm6zVtOJTELDyjY6KrzTX2Icjz U9U4R/J7NW3BJ5QNMbMfFS3kGHUxXhLFHNd9lk4bmBZesnlOryvjPvGDMLQtKKgL UjaD9CZIHjcwJ++N458W4G2ygXXwu0qHXDNd6ar1hcH4tFKnDwVn3hpIDjTSn+KL Uvxovf6MIaOrljl553cxEcQl4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBS7VN+4 N1qXwL8YphRVP3HudVQ7MB8GA1UdIwQYMBaAFBuQImYyIdjOeu6wPz9XmfDVfqYW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0UxNi9GNDdCNkNENEFD NzQxMUVBODZFQTlGNDhDNEY5QUUwMi9HNUFpWmpJaDJNNTY3ckFfUDFlWjhOVi1w aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0c1QWlaakloMk01NjdyQV9QMWVaOE5WLXBoWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0UxNi9GNDdCNkNENEFDNzQxMUVBODZFQTlGNDhDNEY5QUUwMi9HNUFpWmpJaDJN NTY3ckFfUDFlWjhOVi1waFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRYYgJ1l0zpTQzwShZa3CT7lZqPc5IgXMxqEh5iMZM1MTh3LWYJH+O CRq2m32ahUXks0Adg17L5axaUbaog1CGOWAPsxnpYIedPxCOvVfRa1ngmBoCz9C9 M1+d2iTetRJhk1Bhz0kP6xush4Da5H0j40oaXQtJdU1Z7AChOwsFkFd050mzw/n/ HfrVqOg8wmLAnNyKgNmvBrxEltrb4m+qr1GsCPhVgNc0lXjPrY960gfuxWvFcF0h CYTfP26ggpHBOdSPckJaCBRIV92LbYlRwbWT42ayBWya2FpiM3igLiIsZp/5SD/d ikAR33I/rzBmoU+yE1FmwPnGtDPANDkC -----END CERTIFICATE-----Generated at Fri May 16 19:21:08 2025 by rpki-client