$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft File: lDuBQuFVPslGJaRyTlaYKhVY_pw.mft (raw, json) Hash identifier: aslC2zf5tfXTjCUG0ZyOQfEe6gBGL/Zux7PLEWEGmf0= Subject key identifier: 70:D8:3A:DD:E1:52:0E:8F:39:72:7A:E1:DB:09:5B:2C:D6:51:D1:22 Authority key identifier: 94:3B:81:42:E1:55:3E:C9:46:25:A4:72:4E:56:98:2A:15:58:FE:9C Certificate issuer: /CN=A91582D9/serialNumber=943B8142E1553EC94625A4724E56982A1558FE9C Certificate serial: 1788 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDuBQuFVPslGJaRyTlaYKhVY_pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft Manifest number: 1F79 Signing time: Sat 10 May 2025 16:30:08 +0000 Manifest this update: Sat 10 May 2025 16:30:08 +0000 Manifest next update: Sat 17 May 2025 16:30:08 +0000 Files and hashes: 1: lDuBQuFVPslGJaRyTlaYKhVY_pw.crl (hash: j3ducK3+VImQ9LI7xzc/GD3tYsLKBQreFpLZV9R7ZGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.crl rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDuBQuFVPslGJaRyTlaYKhVY_pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6024 (0x1788) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91582D9, serialNumber=943B8142E1553EC94625A4724E56982A1558FE9C Validity Not Before: May 10 16:30:08 2025 GMT Not After : May 17 16:30:08 2025 GMT Subject: CN=681f7f10-41f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:80:3f:c9:dd:03:4d:a7:86:48:ee:95:aa:e6: 31:ab:e6:eb:b6:e7:df:80:ec:91:2f:52:19:e9:dd: c3:52:a7:18:83:9c:e8:01:9f:b8:04:68:09:da:54: 60:b9:db:04:9a:be:ba:63:c9:97:56:71:88:aa:0b: 9f:0c:02:97:a4:ad:ab:3a:26:d3:9e:26:1e:aa:f3: 5f:70:65:cd:eb:b0:de:5c:3c:bf:06:8a:89:57:da: 44:03:79:89:51:77:8d:ed:31:3b:af:19:77:c3:b3: f0:69:9c:11:4b:81:53:40:0c:58:f2:b3:ef:48:f2: 0b:2b:c7:e6:07:7c:06:d6:47:c8:ee:00:19:9e:cb: 45:cb:bc:50:06:51:7e:63:9d:a9:22:35:c6:af:fa: 19:07:74:1a:fe:78:8c:63:bb:44:04:9f:42:d7:ce: ea:66:aa:2d:df:67:57:64:87:e1:76:59:52:93:20: fa:97:4d:0f:2b:bd:d1:fa:cb:65:38:e9:3e:6c:96: 75:9e:35:68:cb:51:1f:f7:5b:dc:69:bf:03:c2:f8: 9f:00:94:10:2f:0c:34:63:9f:e8:43:52:9a:63:3c: c1:47:5f:a0:d9:3f:7d:f9:04:69:7f:a9:f9:e0:4f: d0:67:4e:9c:a9:71:0d:7f:47:b2:47:12:5a:e2:4c: 3d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D8:3A:DD:E1:52:0E:8F:39:72:7A:E1:DB:09:5B:2C:D6:51:D1:22 X509v3 Authority Key Identifier: keyid:94:3B:81:42:E1:55:3E:C9:46:25:A4:72:4E:56:98:2A:15:58:FE:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDuBQuFVPslGJaRyTlaYKhVY_pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:27:ee:0c:1d:00:65:24:2f:14:a1:95:49:2a:a1:de:61:b6: 25:99:d9:9e:92:3f:f0:50:da:5b:fa:97:5c:46:b6:1a:69:ae: ee:9c:7f:1b:70:4f:7b:e4:a4:c4:bc:3d:86:c5:1d:a0:73:58: 8d:d6:36:f7:bf:e4:4d:56:46:19:88:e8:ec:44:5f:b3:6e:db: f4:40:6e:3d:b0:14:55:c3:2c:01:60:d3:55:b3:0d:85:45:61: 05:eb:3d:9b:88:5a:01:69:4f:4d:de:38:d5:75:5c:46:0b:b4: ff:ea:dd:23:78:89:ca:a3:4d:97:a7:c2:83:32:50:8e:06:25: 8a:65:98:47:84:9d:ed:f0:dd:2d:72:c7:3f:26:c0:87:02:3d: b3:28:cc:ae:c1:e4:77:b9:15:b1:b6:53:9d:e2:00:2a:db:0d: c1:e5:9b:9f:56:01:5b:8b:bd:7b:1a:15:df:83:d2:7e:15:df: 83:a1:12:a2:4e:8c:3a:36:cc:65:32:e0:5a:e0:11:24:35:cb: cd:74:4a:01:60:bf:13:7f:13:5e:57:85:40:0f:40:80:cc:d6: c2:8a:8e:60:bc:d9:f9:11:33:de:d5:47:d1:3e:31:9b:27:a2: 8e:b5:86:40:cf:71:f5:73:3c:94:2f:d4:4f:b5:c0:62:fa:5e: 8c:64:3d:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgyRDkxMTAvBgNVBAUTKDk0M0I4MTQyRTE1NTNFQzk0NjI1QTQ3MjRFNTY5ODJB MTU1OEZFOUMwHhcNMjUwNTEwMTYzMDA4WhcNMjUwNTE3MTYzMDA4WjAYMRYwFAYD VQQDEw02ODFmN2YxMC00MWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8YA/yd0DTaeGSO6VquYxq+brtuffgOyRL1IZ6d3DUqcYg5zoAZ+4BGgJ2lRg udsEmr66Y8mXVnGIqgufDAKXpK2rOibTniYeqvNfcGXN67DeXDy/BoqJV9pEA3mJ UXeN7TE7rxl3w7PwaZwRS4FTQAxY8rPvSPILK8fmB3wG1kfI7gAZnstFy7xQBlF+ Y52pIjXGr/oZB3Qa/niMY7tEBJ9C187qZqot32dXZIfhdllSkyD6l00PK73R+stl OOk+bJZ1njVoy1Ef91vcab8DwvifAJQQLww0Y5/oQ1KaYzzBR1+g2T99+QRpf6n5 4E/QZ06cqXENf0eyRxJa4kw9UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDYOt3h Ug6POXJ64dsJWyzWUdEiMB8GA1UdIwQYMBaAFJQ7gULhVT7JRiWkck5WmCoVWP6c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODJEOS8wRURBNkQ1RUNE REExMUU3QkRFQThDMkJDNEY5QUUwMi9sRHVCUXVGVlBzbEdKYVJ5VGxhWUtoVllf cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xEdUJRdUZWUHNsR0phUnlUbGFZS2hWWV9wdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODJEOS8wRURBNkQ1RUNEREExMUU3QkRFQThDMkJDNEY5QUUwMi9sRHVCUXVGVlBz bEdKYVJ5VGxhWUtoVllfcHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2J+4MHQBlJC8UoZVJKqHeYbYlmdmekj/wUNpb+pdcRrYaaa7unH8b cE975KTEvD2GxR2gc1iN1jb3v+RNVkYZiOjsRF+zbtv0QG49sBRVwywBYNNVsw2F RWEF6z2biFoBaU9N3jjVdVxGC7T/6t0jeInKo02Xp8KDMlCOBiWKZZhHhJ3t8N0t csc/JsCHAj2zKMyuweR3uRWxtlOd4gAq2w3B5ZufVgFbi717GhXfg9J+Fd+DoRKi Tow6NsxlMuBa4BEkNcvNdEoBYL8TfxNeV4VAD0CAzNbCio5gvNn5ETPe1UfRPjGb J6KOtYZAz3H1czyUL9RPtcBi+l6MZD1J -----END CERTIFICATE-----Generated at Sat May 10 20:06:24 2025 by rpki-client