$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft File: K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft (raw, json) Hash identifier: uZkWrtYnxmwMmDVvt1ommeSdGm/SxSByLOb1ikpiiaI= Subject key identifier: F4:D4:40:C0:55:80:DB:A8:ED:B3:3C:6C:10:BC:4C:60:00:65:AD:21 Authority key identifier: 2B:94:EB:A4:78:E9:D1:12:B1:E5:0A:0D:E3:30:D2:AD:85:8E:1C:D0 Certificate issuer: /CN=A9140E40/serialNumber=2B94EBA478E9D112B1E50A0DE330D2AD858E1CD0 Certificate serial: 218E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft Manifest number: 218E Signing time: Sat 10 May 2025 15:50:14 +0000 Manifest this update: Sat 10 May 2025 15:50:13 +0000 Manifest next update: Sat 17 May 2025 15:50:13 +0000 Files and hashes: 1: K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl (hash: 91KxmVXDQKyEyGVq4ScPAPeE7tMbVsStYL0n22czjxE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8590 (0x218e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140E40, serialNumber=2B94EBA478E9D112B1E50A0DE330D2AD858E1CD0 Validity Not Before: May 10 15:50:13 2025 GMT Not After : May 17 15:50:13 2025 GMT Subject: CN=681f75b5-2de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ea:0a:06:2a:23:4b:a4:89:0c:1f:6a:58:ce: 40:0e:11:9f:97:63:c4:45:df:a2:15:a2:af:fb:38: 56:74:15:a5:68:07:03:dd:2b:89:f5:72:23:a7:e1: 77:14:54:23:d0:d3:41:3a:44:a0:ef:6e:0a:27:a2: ee:24:b3:9e:1c:83:0a:8a:e6:e8:57:72:39:18:2d: 49:a2:ef:07:cc:58:02:0d:df:3f:79:ec:bb:ae:28: 5e:f4:40:54:1e:48:90:55:a5:71:8d:54:f0:87:ac: 0b:32:0c:7a:dc:ab:dc:d8:05:43:d7:b2:6f:da:68: 4c:89:65:67:52:7a:f2:e1:08:98:bf:45:20:76:7b: 27:fa:a7:53:75:f1:5f:02:d5:f2:a4:e3:0d:8b:eb: fe:a2:c6:a0:b3:f4:90:2d:07:5e:69:11:5a:26:20: f1:c8:01:84:fc:fe:2f:67:58:94:3b:a0:05:e6:4b: af:f5:aa:01:33:d0:7d:45:66:9f:f2:3b:9e:b9:a0: e7:d0:9b:96:43:70:3c:59:2b:5a:ca:3a:fb:f9:ed: 8d:56:aa:74:99:cd:57:4f:e0:cd:17:5c:7a:69:ae: e0:82:96:99:e4:e2:6f:31:9c:63:53:0a:c4:47:c4: 89:d2:91:44:b9:30:a2:74:13:d9:3c:64:3e:9f:11: b9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D4:40:C0:55:80:DB:A8:ED:B3:3C:6C:10:BC:4C:60:00:65:AD:21 X509v3 Authority Key Identifier: keyid:2B:94:EB:A4:78:E9:D1:12:B1:E5:0A:0D:E3:30:D2:AD:85:8E:1C:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:b3:af:95:08:36:65:23:f9:3f:08:75:3f:07:35:56:68:e4: f0:8d:57:3b:1d:ff:dc:17:9d:3f:e6:11:4a:89:3d:cd:6b:e1: 2b:4c:bf:e3:2c:b1:e9:1c:8a:a6:01:02:dc:34:70:e3:c7:41: b0:3b:0e:38:8b:15:9c:93:fb:d7:1f:83:85:95:69:a1:33:52: e5:b1:df:23:5a:04:3a:55:4a:29:e4:cc:76:7d:aa:39:92:8f: c4:03:94:e8:cc:56:6e:af:59:13:71:19:9c:a4:2b:81:76:bf: ca:1e:8a:9c:54:0a:b2:76:92:89:7e:58:a4:0b:3c:69:21:03: 6c:a8:9d:49:80:13:71:e7:1b:4b:89:b3:9b:a0:50:b6:20:64: fb:b2:88:63:20:57:ee:3a:4a:ef:a1:72:1f:fa:79:7b:5d:29: 44:de:c3:1b:a0:26:a5:c5:f9:cf:51:da:c7:5a:09:28:6a:e0: f0:dc:6e:09:36:1a:5c:c2:f0:cc:f7:14:51:eb:ac:75:0c:49: d6:e0:2a:28:74:5a:5a:4e:62:d9:d1:30:0b:51:80:17:f2:ec: 10:51:78:c2:19:cd:af:0c:4a:34:bf:d9:5e:72:18:54:e8:db: cb:56:9c:1e:57:c8:6c:d0:0f:23:4e:87:5e:67:48:21:46:ea: 06:af:8c:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBFNDAxMTAvBgNVBAUTKDJCOTRFQkE0NzhFOUQxMTJCMUU1MEEwREUzMzBEMkFE ODU4RTFDRDAwHhcNMjUwNTEwMTU1MDEzWhcNMjUwNTE3MTU1MDEzWjAYMRYwFAYD VQQDEw02ODFmNzViNS0yZGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+oKBiojS6SJDB9qWM5ADhGfl2PERd+iFaKv+zhWdBWlaAcD3SuJ9XIjp+F3 FFQj0NNBOkSg724KJ6LuJLOeHIMKiuboV3I5GC1Jou8HzFgCDd8/eey7rihe9EBU HkiQVaVxjVTwh6wLMgx63Kvc2AVD17Jv2mhMiWVnUnry4QiYv0Ugdnsn+qdTdfFf AtXypOMNi+v+osags/SQLQdeaRFaJiDxyAGE/P4vZ1iUO6AF5kuv9aoBM9B9RWaf 8jueuaDn0JuWQ3A8WStayjr7+e2NVqp0mc1XT+DNF1x6aa7ggpaZ5OJvMZxjUwrE R8SJ0pFEuTCidBPZPGQ+nxG5SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTUQMBV gNuo7bM8bBC8TGAAZa0hMB8GA1UdIwQYMBaAFCuU66R46dESseUKDeMw0q2FjhzQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEU0MC9FMzYxMUJENkQz OEIxMUU1ODM5MkY1NERDNEY5QUUwMi9LNVRycEhqcDBSS3g1UW9ONHpEU3JZV09I TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s1VHJwSGpwMFJLeDVRb040ekRTcllXT0hOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEU0MC9FMzYxMUJENkQzOEIxMUU1ODM5MkY1NERDNEY5QUUwMi9LNVRycEhqcDBS S3g1UW9ONHpEU3JZV09ITkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAks6+VCDZlI/k/CHU/BzVWaOTwjVc7Hf/cF50/5hFKiT3Na+ErTL/j LLHpHIqmAQLcNHDjx0GwOw44ixWck/vXH4OFlWmhM1Llsd8jWgQ6VUop5Mx2fao5 ko/EA5TozFZur1kTcRmcpCuBdr/KHoqcVAqydpKJflikCzxpIQNsqJ1JgBNx5xtL ibOboFC2IGT7sohjIFfuOkrvoXIf+nl7XSlE3sMboCalxfnPUdrHWgkoauDw3G4J NhpcwvDM9xRR66x1DEnW4CoodFpaTmLZ0TALUYAX8uwQUXjCGc2vDEo0v9lechhU 6NvLVpweV8hs0A8jTodeZ0ghRuoGr4wL -----END CERTIFICATE-----Generated at Sun May 11 22:00:42 2025 by rpki-client