$ rpki-client -vvf rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft File: 4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft (raw, json) Hash identifier: LJldkZRLNtSRxEdfbzUKdAuPSfl9HC60s/k2rAoBeOg= Subject key identifier: 7C:BD:90:80:0D:10:C1:0F:98:12:5C:D1:1D:B8:90:81:95:CF:BC:9B Authority key identifier: E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E Certificate issuer: /CN=A917336A/serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft Manifest number: 90 Signing time: Thu 15 May 2025 05:44:09 +0000 Manifest this update: Thu 15 May 2025 05:44:09 +0000 Manifest next update: Thu 22 May 2025 05:44:09 +0000 Files and hashes: 1: 4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl (hash: 4JXS8U1r/thh54lmRiOSZwa0Xo79j2yTliSNmsftnJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:44:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917336A, serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E Validity Not Before: May 15 05:44:09 2025 GMT Not After : May 22 05:44:09 2025 GMT Subject: CN=68257f29-ba0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ce:6b:e9:4e:b3:e7:59:58:c0:33:25:4f:7d: f3:0a:be:cd:6a:69:c3:a3:68:65:ce:d1:bf:f3:1b: 2a:5b:bc:f6:72:4f:28:1e:22:d9:15:18:1d:e8:8c: c3:07:f7:61:27:6b:b2:c0:76:35:ac:b7:d3:99:33: 68:e2:a0:d7:d4:d1:c6:78:bf:ec:36:3d:f1:d4:d1: 6b:37:b1:5f:f7:70:15:18:9f:eb:e3:b8:34:a5:36: 22:a3:99:fe:00:ac:8f:7e:dc:33:75:2c:d9:78:28: 2b:bd:fe:68:76:9b:01:d1:30:fe:a4:01:8a:df:9d: d9:2b:39:72:23:a5:43:85:7e:e3:b2:e8:07:d6:e0: b7:bc:c2:18:ff:3e:75:ca:17:34:15:0f:ce:58:a7: bc:05:ac:8a:b4:94:12:c4:48:49:55:7d:3a:8a:27: 49:d3:11:55:f5:bd:5b:75:65:e3:e8:81:3d:b1:e1: 25:c1:27:70:df:d9:4c:9f:a3:da:50:58:5c:15:d1: 05:ea:15:08:be:d0:49:55:5e:0f:f6:9d:b0:08:cf: 3e:bc:63:fa:34:b5:2b:45:a3:bf:27:09:20:e4:48: 75:aa:59:8c:9f:09:3c:90:85:d5:9a:70:88:77:c0: 0a:b8:74:2a:85:d8:8c:bd:96:94:a4:6b:43:5c:12: 95:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:BD:90:80:0D:10:C1:0F:98:12:5C:D1:1D:B8:90:81:95:CF:BC:9B X509v3 Authority Key Identifier: keyid:E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:2b:e1:18:76:2a:b3:46:ad:2f:25:7e:9b:0f:1b:f4:2b:70: 4a:65:c2:45:12:f8:08:ab:11:da:3b:da:e5:28:4b:45:98:e3: 22:b7:12:ea:59:cb:fb:d7:63:e4:53:b4:1d:53:11:40:33:32: b9:25:9a:d5:f5:c8:d0:51:4c:73:19:2b:7c:7b:e4:ba:7b:d9: 89:64:ca:6e:91:b2:df:fc:6e:92:52:7d:89:cb:07:60:2f:f4: 10:de:a2:51:da:43:ec:da:89:f0:7b:63:25:3d:53:62:e9:f9: 96:fc:13:0f:78:e1:e9:c9:8e:28:b9:fd:7d:4d:33:05:ba:de: bd:45:04:45:35:e3:fa:2f:7e:a5:07:ca:30:10:ff:76:de:84: 85:c6:e3:c0:32:10:89:a4:a8:79:e6:ba:79:f6:79:2d:85:59: 32:5b:c6:3f:58:9e:a1:3d:e6:3b:63:02:08:05:8f:c0:28:78: 74:4e:51:69:d3:73:f2:55:9b:21:0d:72:c8:5e:e1:7f:55:93: 97:2e:e2:07:75:d5:a5:a3:a4:76:e3:95:3e:7f:a5:fe:bc:4e: a9:8c:24:f0:82:c9:e3:36:3a:a8:93:07:d9:a8:49:30:af:8e: 63:16:47:b2:e0:f4:18:a1:d1:c0:2d:1a:ed:f8:0c:d8:79:db: ab:7a:91:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMzNkExMTAvBgNVBAUTKEUwQjYwOEFGNTM0MTRCNkY1OTdEMThDQUU3QTIxNDQ4 M0U4QTY1OUUwHhcNMjUwNTE1MDU0NDA5WhcNMjUwNTIyMDU0NDA5WjAYMRYwFAYD VQQDEw02ODI1N2YyOS1iYTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAss5r6U6z51lYwDMlT33zCr7NamnDo2hlztG/8xsqW7z2ck8oHiLZFRgd6IzD B/dhJ2uywHY1rLfTmTNo4qDX1NHGeL/sNj3x1NFrN7Ff93AVGJ/r47g0pTYio5n+ AKyPftwzdSzZeCgrvf5odpsB0TD+pAGK353ZKzlyI6VDhX7jsugH1uC3vMIY/z51 yhc0FQ/OWKe8BayKtJQSxEhJVX06iidJ0xFV9b1bdWXj6IE9seElwSdw39lMn6Pa UFhcFdEF6hUIvtBJVV4P9p2wCM8+vGP6NLUrRaO/Jwkg5Eh1qlmMnwk8kIXVmnCI d8AKuHQqhdiMvZaUpGtDXBKV/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHy9kIAN EMEPmBJc0R24kIGVz7ybMB8GA1UdIwQYMBaAFOC2CK9TQUtvWX0YyueiFEg+imWe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzM2QS84NkQ3Qjg2MjVB RUExMUVGOTRFOTNENkVDNEY5QUUwMi80TFlJcjFOQlMyOVpmUmpLNTZJVVNENkta WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRMWUlyMU5CUzI5WmZSaks1NklVU0Q2S1paNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzM2QS84NkQ3Qjg2MjVBRUExMUVGOTRFOTNENkVDNEY5QUUwMi80TFlJcjFOQlMy OVpmUmpLNTZJVVNENktaWjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgK+EYdiqzRq0vJX6bDxv0K3BKZcJFEvgIqxHaO9rlKEtFmOMitxLq Wcv712PkU7QdUxFAMzK5JZrV9cjQUUxzGSt8e+S6e9mJZMpukbLf/G6SUn2Jywdg L/QQ3qJR2kPs2onwe2MlPVNi6fmW/BMPeOHpyY4ouf19TTMFut69RQRFNeP6L36l B8owEP923oSFxuPAMhCJpKh55rp59nkthVkyW8Y/WJ6hPeY7YwIIBY/AKHh0TlFp 03PyVZshDXLIXuF/VZOXLuIHddWlo6R245U+f6X+vE6pjCTwgsnjNjqokwfZqEkw r45jFkey4PQYodHALRrt+AzYedurepHC -----END CERTIFICATE-----Generated at Fri May 16 20:58:56 2025 by rpki-client