$ rpki-client -vvf rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.mft File: T_Dy-NvzsUpesSO0H-neZzsSUX8.mft (raw, json) Hash identifier: bE/+ciYdWkg3dxcNRltFg6/pQcDUoz8v7dUucs1dGb0= Subject key identifier: C2:3B:B3:23:DC:78:9D:93:39:7A:70:10:59:16:0F:58:AD:4D:71:3C Authority key identifier: 4F:F0:F2:F8:DB:F3:B1:4A:5E:B1:23:B4:1F:E9:DE:67:3B:12:51:7F Certificate issuer: /CN=A913F3A2/serialNumber=4FF0F2F8DBF3B14A5EB123B41FE9DE673B12517F Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_Dy-NvzsUpesSO0H-neZzsSUX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.mft Manifest number: 56 Signing time: Tue 13 May 2025 06:24:50 +0000 Manifest this update: Tue 13 May 2025 06:24:50 +0000 Manifest next update: Tue 20 May 2025 06:24:50 +0000 Files and hashes: 1: T_Dy-NvzsUpesSO0H-neZzsSUX8.crl (hash: +dUSjaCd3/bDhEu/1IUXtRX7PKsfuKLHDO1sV1KJgrU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.crl rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_Dy-NvzsUpesSO0H-neZzsSUX8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F3A2, serialNumber=4FF0F2F8DBF3B14A5EB123B41FE9DE673B12517F Validity Not Before: May 13 06:24:50 2025 GMT Not After : May 20 06:24:50 2025 GMT Subject: CN=6822e5b2-31f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f9:7d:f8:9c:db:ad:96:01:f3:50:c6:ca:88: 9b:79:ba:b1:b8:ef:1c:a8:09:f9:91:df:22:ba:56: e7:bb:4e:7d:35:96:85:af:0c:51:f9:d1:12:b5:bd: 27:26:f7:93:fb:23:17:c4:7d:ee:be:00:8e:29:f2: 6b:da:38:b0:6c:b2:88:d0:05:1a:dc:db:5d:5b:ea: 3d:47:79:be:ed:b7:d6:66:57:5c:17:c3:04:b2:63: 0a:f1:b1:16:75:12:a1:35:82:16:bc:8f:50:59:83: eb:69:6b:bb:93:8b:79:f5:a0:d7:08:23:11:d4:d7: d5:38:dd:ef:6c:3d:26:74:e5:23:32:63:3e:a1:70: a9:33:9a:05:73:1f:66:54:60:b1:66:93:d9:11:80: 18:7d:5b:e1:83:1c:2a:b7:19:d5:e8:38:3f:db:af: 2c:b1:ad:37:97:57:33:52:93:30:fa:31:84:16:3f: ab:15:ec:6a:ed:e3:37:71:9f:b5:c3:d2:d5:7b:cb: bb:fe:6d:f5:f5:03:53:ce:9c:5f:d9:e3:d0:43:0e: 6d:e4:0e:90:9d:26:76:b8:ad:4e:91:13:02:56:a5: d7:35:16:0c:d7:6d:4a:74:a5:a4:93:7b:2d:66:eb: 0f:f8:1d:d9:b0:b0:58:b4:a0:57:33:a2:a0:6c:f0: eb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3B:B3:23:DC:78:9D:93:39:7A:70:10:59:16:0F:58:AD:4D:71:3C X509v3 Authority Key Identifier: keyid:4F:F0:F2:F8:DB:F3:B1:4A:5E:B1:23:B4:1F:E9:DE:67:3B:12:51:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_Dy-NvzsUpesSO0H-neZzsSUX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:67:72:22:9c:24:b7:88:a7:19:e1:ce:dc:b5:40:d6:c5:54: 14:ae:23:9a:4b:db:a2:f9:0e:56:fc:a4:dd:db:95:99:2a:37: 53:f1:d8:a1:df:c4:8f:70:8d:1a:72:ea:1b:11:57:da:93:bc: 3a:ab:d8:b7:3d:89:ac:ba:bd:dd:3b:04:af:44:05:2d:a2:12: 49:24:42:2b:75:66:ac:2d:5e:c3:53:b4:bb:b0:7c:81:bf:78: 85:b7:b7:2f:f8:db:cc:27:ce:a9:f4:19:be:52:78:2c:b3:ca: 2e:f9:89:ed:65:9f:85:68:a6:f9:83:6e:4f:a8:61:da:7a:55: 5b:a0:ba:1d:ab:2b:dd:a2:32:6e:0f:43:83:42:80:4e:17:20: aa:42:3c:da:36:e8:35:7f:56:5f:fe:a2:df:08:23:57:19:53: c0:75:2a:05:c9:b3:1e:68:bc:a8:dd:53:44:89:40:c7:d3:bb: 55:cf:37:16:1b:41:cd:d7:92:72:7d:e1:c6:a7:6e:1c:d1:ce: c4:87:41:3f:8d:9a:91:d0:eb:51:2b:74:49:ae:fa:9d:fc:04: 85:d2:80:92:e7:8e:00:8b:0c:15:eb:9b:0b:44:78:8a:6a:aa: 8b:77:4a:13:ab:dc:17:5f:67:da:01:89:a9:52:dd:b1:c9:51: 02:e8:6e:49 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RjNBMjExMC8GA1UEBRMoNEZGMEYyRjhEQkYzQjE0QTVFQjEyM0I0MUZFOURFNjcz QjEyNTE3RjAeFw0yNTA1MTMwNjI0NTBaFw0yNTA1MjAwNjI0NTBaMBgxFjAUBgNV BAMTDTY4MjJlNWIyLTMxZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDB+X34nNutlgHzUMbKiJt5urG47xyoCfmR3yK6Vue7Tn01loWvDFH50RK1vScm 95P7IxfEfe6+AI4p8mvaOLBssojQBRrc211b6j1Heb7tt9ZmV1wXwwSyYwrxsRZ1 EqE1gha8j1BZg+tpa7uTi3n1oNcIIxHU19U43e9sPSZ05SMyYz6hcKkzmgVzH2ZU YLFmk9kRgBh9W+GDHCq3GdXoOD/bryyxrTeXVzNSkzD6MYQWP6sV7Grt4zdxn7XD 0tV7y7v+bfX1A1POnF/Z49BDDm3kDpCdJna4rU6REwJWpdc1FgzXbUp0paSTey1m 6w/4HdmwsFi0oFczoqBs8Ov1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwjuzI9x4 nZM5enAQWRYPWK1NcTwwHwYDVR0jBBgwFoAUT/Dy+NvzsUpesSO0H+neZzsSUX8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGM0EyLzY3OEFDQTE0QUU0 OTExRUY5QjI5NTIzOUM0RjlBRTAyL1RfRHktTnZ6c1VwZXNTTzBILW5lWnpzU1VY OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVF9EeS1OdnpzVXBlc1NPMEgtbmVaenNTVVg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNG M0EyLzY3OEFDQTE0QUU0OTExRUY5QjI5NTIzOUM0RjlBRTAyL1RfRHktTnZ6c1Vw ZXNTTzBILW5lWnpzU1VYOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJxnciKcJLeIpxnhzty1QNbFVBSuI5pL26L5Dlb8pN3blZkqN1Px2KHf xI9wjRpy6hsRV9qTvDqr2Lc9iay6vd07BK9EBS2iEkkkQit1ZqwtXsNTtLuwfIG/ eIW3ty/428wnzqn0Gb5SeCyzyi75ie1ln4VopvmDbk+oYdp6VVuguh2rK92iMm4P Q4NCgE4XIKpCPNo26DV/Vl/+ot8II1cZU8B1KgXJsx5ovKjdU0SJQMfTu1XPNxYb Qc3XknJ94canbhzRzsSHQT+NmpHQ61ErdEmu+p38BIXSgJLnjgCLDBXrmwtEeIpq qot3ShOr3BdfZ9oBialS3bHJUQLobkk= -----END CERTIFICATE-----Generated at Wed May 14 20:46:19 2025 by rpki-client