$ rpki-client -vvf rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft File: nQdEbvmfPFfCnFgta3rKRzX05HA.mft (raw, json) Hash identifier: nbrcxZZKITKG7KbamdQSoF8Xrmtc+M3/vF4VhBmU8HA= Subject key identifier: A5:CC:D4:BC:E1:80:55:F3:B2:EB:95:AD:84:75:54:52:46:56:74:FB Authority key identifier: 9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 Certificate issuer: /CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Certificate serial: 082A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft Manifest number: 07F3 Signing time: Wed 14 May 2025 21:15:31 +0000 Manifest this update: Wed 14 May 2025 21:15:31 +0000 Manifest next update: Wed 21 May 2025 21:15:31 +0000 Files and hashes: 1: nQdEbvmfPFfCnFgta3rKRzX05HA.crl (hash: GjllX6p7F0c2i/KtLT40fz6yQ15IkBvEwM8hfm/xo0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 21:15:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2090 (0x82a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917190F, serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Validity Not Before: May 14 21:15:31 2025 GMT Not After : May 21 21:15:31 2025 GMT Subject: CN=682507f3-9585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ca:a1:49:07:0d:98:58:02:6f:69:d2:b9:de: f2:f6:c3:a0:7e:5f:49:89:fa:da:d3:8a:49:2b:0c: 7e:a5:c9:cd:56:f2:a3:45:af:0e:9a:8d:ab:12:7a: ef:b5:bb:88:59:5f:0a:e0:f5:4c:86:6d:18:b4:91: 7c:04:de:83:49:d5:0c:5f:da:50:41:f3:3c:ab:78: 61:c5:c1:70:9a:7b:15:99:49:e4:5e:75:6c:6a:cf: 18:f3:22:de:58:ca:25:ce:fb:ad:76:bd:63:0e:e2: a1:4b:e3:51:a1:7c:4e:90:4d:f7:7c:5c:d0:25:86: d6:f7:6f:59:f4:c4:89:b9:0c:cc:c0:0c:6a:ad:5f: f7:ae:4f:7c:95:e7:91:c2:83:bd:1a:df:6f:0a:a2: 45:25:67:07:17:ee:e1:99:c9:79:ae:f1:ba:50:0d: 17:55:34:87:c9:6b:ce:63:2d:46:90:39:3e:ba:0c: d3:80:82:5a:b0:cc:e8:9f:21:1e:cf:fd:97:f0:e2: 32:cb:45:18:91:3c:b2:34:3c:4b:6c:d3:4e:be:f8: ee:c5:cc:31:d1:2c:9d:9a:7a:32:85:6e:d3:90:a6: fe:da:74:b3:fe:5f:01:3a:e0:3d:97:b3:62:b3:e7: 15:3d:d9:8e:df:4b:89:d3:e1:51:aa:d0:eb:ab:76: 36:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CC:D4:BC:E1:80:55:F3:B2:EB:95:AD:84:75:54:52:46:56:74:FB X509v3 Authority Key Identifier: keyid:9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:50:cf:03:a6:04:23:0d:7c:3b:e4:b8:4b:46:de:b1:f8:c9: a5:da:4a:3a:c2:d3:bc:52:bc:5d:91:8f:be:8d:0c:d3:00:79: 15:cd:41:c2:20:23:31:f0:81:ec:0e:1a:c7:d4:c5:e1:28:74: 86:c6:82:3d:f6:f6:81:2d:4a:fa:d4:de:ba:9d:d1:ef:f8:85: e9:e8:8b:5b:c5:0c:9d:a7:12:ff:f3:4e:80:4c:00:7e:c1:73: 04:a9:c7:57:6f:65:8f:60:d9:71:10:80:ac:a1:5c:6f:f1:65: 37:6e:26:dd:fe:75:3b:06:0c:75:90:6c:25:e3:c5:a0:9b:44: d0:30:48:4e:48:1a:e6:cc:68:01:5b:15:5d:4e:de:46:74:05: 72:ca:4d:6b:1a:1a:f5:41:2a:fe:12:83:ec:90:d1:fc:b1:cf: 2a:bb:e0:36:8f:3a:24:ae:bd:79:8b:d3:fa:fe:f8:4f:0d:2a: b3:76:b2:9b:c1:48:08:da:52:af:93:23:e0:9b:1f:93:4b:6c: 37:96:50:a5:3a:f9:8d:1a:ba:73:35:55:fd:06:fc:ef:23:fa: 6d:4e:aa:1c:4d:03:6b:bc:2b:b0:dd:32:e5:d9:dc:1c:94:fa: ac:5e:be:5f:a1:20:4d:61:fb:53:20:3e:70:66:db:e4:45:e7: 58:fd:29:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5MEYxMTAvBgNVBAUTKDlEMDc0NDZFRjk5RjNDNTdDMjlDNTgyRDZCN0FDQTQ3 MzVGNEU0NzAwHhcNMjUwNTE0MjExNTMxWhcNMjUwNTIxMjExNTMxWjAYMRYwFAYD VQQDEw02ODI1MDdmMy05NTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA78qhSQcNmFgCb2nSud7y9sOgfl9Jifra04pJKwx+pcnNVvKjRa8Omo2rEnrv tbuIWV8K4PVMhm0YtJF8BN6DSdUMX9pQQfM8q3hhxcFwmnsVmUnkXnVsas8Y8yLe WMolzvutdr1jDuKhS+NRoXxOkE33fFzQJYbW929Z9MSJuQzMwAxqrV/3rk98leeR woO9Gt9vCqJFJWcHF+7hmcl5rvG6UA0XVTSHyWvOYy1GkDk+ugzTgIJasMzonyEe z/2X8OIyy0UYkTyyNDxLbNNOvvjuxcwx0SydmnoyhW7TkKb+2nSz/l8BOuA9l7Ni s+cVPdmO30uJ0+FRqtDrq3Y28QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXM1Lzh gFXzsuuVrYR1VFJGVnT7MB8GA1UdIwQYMBaAFJ0HRG75nzxXwpxYLWt6ykc19ORw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTkwRi9CM0NBNzZDMEZB MzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBGZkNuRmd0YTNyS1J6WDA1 SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RZEVidm1mUEZmQ25GZ3RhM3JLUnpYMDVIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTkwRi9CM0NBNzZDMEZBMzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBG ZkNuRmd0YTNyS1J6WDA1SEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSUM8DpgQjDXw75LhLRt6x+Mml2ko6wtO8UrxdkY++jQzTAHkVzUHC ICMx8IHsDhrH1MXhKHSGxoI99vaBLUr61N66ndHv+IXp6ItbxQydpxL/806ATAB+ wXMEqcdXb2WPYNlxEICsoVxv8WU3bibd/nU7Bgx1kGwl48Wgm0TQMEhOSBrmzGgB WxVdTt5GdAVyyk1rGhr1QSr+EoPskNH8sc8qu+A2jzokrr15i9P6/vhPDSqzdrKb wUgI2lKvkyPgmx+TS2w3llClOvmNGrpzNVX9BvzvI/ptTqocTQNrvCuw3TLl2dwc lPqsXr5foSBNYftTID5wZtvkRedY/SkI -----END CERTIFICATE-----Generated at Fri May 16 17:45:12 2025 by rpki-client