$ rpki-client -vvf rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft File: 0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft (raw, json) Hash identifier: SMg7OCcHwgVzEhm5h4i/YOnPHRbA/IxY9++2/6TGmvY= Subject key identifier: 7F:60:60:11:86:97:30:4A:34:EC:5A:B6:16:B6:E6:F9:57:8F:33:24 Authority key identifier: D1:8F:FC:C5:04:D3:69:3D:7F:8A:38:D8:6D:C1:2E:88:CD:96:0E:56 Certificate issuer: /CN=A91443DC/serialNumber=D18FFCC504D3693D7F8A38D86DC12E88CD960E56 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft Manifest number: A5 Signing time: Fri 09 May 2025 05:10:05 +0000 Manifest this update: Fri 09 May 2025 05:10:04 +0000 Manifest next update: Fri 16 May 2025 05:10:04 +0000 Files and hashes: 1: 0Y_8xQTTaT1_ijjYbcEuiM2WDlY.crl (hash: iL4YVR4iQLoSoPZTJgy7j7iV3jgpEXncXOSvvEA/WIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.crl rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 05:10:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443DC, serialNumber=D18FFCC504D3693D7F8A38D86DC12E88CD960E56 Validity Not Before: May 9 05:10:04 2025 GMT Not After : May 16 05:10:04 2025 GMT Subject: CN=681d8e2d-5adb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ee:9a:ea:de:56:4b:c7:7c:08:47:57:a5:31: 51:e3:46:61:46:07:0d:25:a2:56:7a:ed:98:c4:c8: 95:69:81:13:40:94:77:8b:ec:56:7b:59:9f:3c:5a: 84:31:25:cf:23:8d:73:b0:2c:5a:b3:19:0e:d1:09: 01:a5:62:03:b6:dc:91:67:65:c6:f7:57:c6:2f:9c: f0:fe:d0:71:c3:8c:c6:15:18:2a:f2:a9:50:e8:ec: 9c:08:f6:76:03:4e:33:e6:26:2a:f0:34:80:57:d0: 14:65:ae:09:56:9a:8b:55:bd:62:a7:05:ac:39:02: ad:f7:a3:cd:95:df:93:5e:1a:ce:20:f9:d1:fe:27: bf:74:e0:21:73:96:76:d9:bf:16:56:95:46:3f:07: d7:b6:10:91:5d:c3:26:48:fd:29:14:6f:16:54:f7: e5:bc:28:87:f2:e9:76:14:9c:16:96:cd:39:ff:45: ba:2d:e6:d8:21:5f:f1:ff:36:e3:c3:73:24:2d:e7: b7:fc:22:d5:8c:44:ce:a6:5b:7b:99:83:67:93:b5: c5:7b:ce:97:14:31:43:86:86:2d:a9:5b:2d:a8:27: e7:95:33:76:66:a4:8d:0c:6f:5a:91:b1:36:84:13: 64:c1:f8:03:20:de:69:f8:da:b2:37:7f:4f:25:03: 1c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:60:60:11:86:97:30:4A:34:EC:5A:B6:16:B6:E6:F9:57:8F:33:24 X509v3 Authority Key Identifier: keyid:D1:8F:FC:C5:04:D3:69:3D:7F:8A:38:D8:6D:C1:2E:88:CD:96:0E:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:08:65:41:ab:c6:b3:b0:76:4a:0b:33:3f:0e:13:46:fb:fd: 3e:06:92:ae:66:2d:22:1b:fc:5e:7f:12:3f:c7:7c:9c:61:2d: 71:bf:52:8c:bc:a8:b4:ae:79:46:4d:33:d2:7e:6a:d5:14:3c: b0:06:d6:a7:6f:bb:f1:76:e3:6b:b4:f2:36:bf:fb:a1:12:b3: 64:db:e9:a5:47:bb:f6:72:8f:fb:0a:77:76:c2:2f:f4:28:78: 87:1f:b3:77:a2:b4:6b:86:6b:ee:72:1b:da:fd:45:69:f6:e7: a9:34:f3:af:c3:63:df:2b:a7:63:09:b5:52:d6:21:c1:0b:8e: 75:be:8a:7c:4e:35:b0:21:5b:9d:88:ee:9f:ec:4e:e1:38:b5: fc:c3:1e:e8:99:57:7a:3f:4f:50:f8:47:c4:22:45:e9:ce:d3: 03:01:e6:02:bd:68:76:a0:06:dc:18:ff:ab:51:94:60:e2:5a: 1a:8d:71:7e:98:02:5b:67:bd:90:0e:e5:99:25:ed:26:91:1e: 56:ca:01:c4:71:18:8f:d5:e8:24:1a:ac:9f:32:00:19:3c:38: 8a:1a:48:55:6f:de:8f:f5:2f:41:22:4c:a4:e6:1b:46:cf:14: 7c:b1:76:a2:16:61:df:b5:88:07:14:f5:22:29:b7:7e:42:d7: 59:da:27:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQzREMxMTAvBgNVBAUTKEQxOEZGQ0M1MDREMzY5M0Q3RjhBMzhEODZEQzEyRTg4 Q0Q5NjBFNTYwHhcNMjUwNTA5MDUxMDA0WhcNMjUwNTE2MDUxMDA0WjAYMRYwFAYD VQQDEw02ODFkOGUyZC01YWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+6a6t5WS8d8CEdXpTFR40ZhRgcNJaJWeu2YxMiVaYETQJR3i+xWe1mfPFqE MSXPI41zsCxasxkO0QkBpWIDttyRZ2XG91fGL5zw/tBxw4zGFRgq8qlQ6OycCPZ2 A04z5iYq8DSAV9AUZa4JVpqLVb1ipwWsOQKt96PNld+TXhrOIPnR/ie/dOAhc5Z2 2b8WVpVGPwfXthCRXcMmSP0pFG8WVPflvCiH8ul2FJwWls05/0W6LebYIV/x/zbj w3MkLee3/CLVjETOplt7mYNnk7XFe86XFDFDhoYtqVstqCfnlTN2ZqSNDG9akbE2 hBNkwfgDIN5p+NqyN39PJQMc5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9gYBGG lzBKNOxatha25vlXjzMkMB8GA1UdIwQYMBaAFNGP/MUE02k9f4o42G3BLojNlg5W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDNEQy9BMDY1RDFFQTMw NjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi8wWV84eFFUVGFUMV9pampZYmNFdWlNMldE bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBZXzh4UVRUYVQxX2lqalliY0V1aU0yV0RsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDNEQy9BMDY1RDFFQTMwNjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi8wWV84eFFUVGFU MV9pampZYmNFdWlNMldEbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWCGVBq8azsHZKCzM/DhNG+/0+BpKuZi0iG/xefxI/x3ycYS1xv1KM vKi0rnlGTTPSfmrVFDywBtanb7vxduNrtPI2v/uhErNk2+mlR7v2co/7Cnd2wi/0 KHiHH7N3orRrhmvuchva/UVp9uepNPOvw2PfK6djCbVS1iHBC451vop8TjWwIVud iO6f7E7hOLX8wx7omVd6P09Q+EfEIkXpztMDAeYCvWh2oAbcGP+rUZRg4loajXF+ mAJbZ72QDuWZJe0mkR5WygHEcRiP1egkGqyfMgAZPDiKGkhVb96P9S9BIkyk5htG zxR8sXaiFmHftYgHFPUiKbd+QtdZ2ifc -----END CERTIFICATE-----Generated at Sat May 10 05:14:54 2025 by rpki-client