$ rpki-client -vvf rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft File: 4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft (raw, json) Hash identifier: nWf3ievkiTXUlXk/dqd/hbSQC1AQdFcmXhJjDKuGVuE= Subject key identifier: A5:EE:EF:56:7F:EC:42:1F:0F:17:80:75:4F:64:22:36:D9:F6:C8:7E Authority key identifier: E0:8D:6C:7F:E3:5F:E3:66:42:FE:6F:66:CC:DA:28:66:A6:62:42:F1 Certificate issuer: /CN=A918D96C/serialNumber=E08D6C7FE35FE36642FE6F66CCDA2866A66242F1 Certificate serial: 347B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft Manifest number: 347B Signing time: Sat 10 May 2025 14:49:14 +0000 Manifest this update: Sat 10 May 2025 14:49:13 +0000 Manifest next update: Sat 17 May 2025 14:49:13 +0000 Files and hashes: 1: 4I1sf-Nf42ZC_m9mzNooZqZiQvE.crl (hash: vRpl5WZctddVdB0+S2TK7MwBFriDeLjFO8F21q2qIg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.crl rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13435 (0x347b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D96C, serialNumber=E08D6C7FE35FE36642FE6F66CCDA2866A66242F1 Validity Not Before: May 10 14:49:13 2025 GMT Not After : May 17 14:49:13 2025 GMT Subject: CN=681f676a-1fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:35:c1:0c:e2:16:b5:ae:5c:c5:46:2f:a2:d2: 80:75:86:cc:a9:58:2e:f2:ef:17:aa:96:d7:51:cf: a7:96:46:03:f3:b2:08:1f:d2:3a:07:fb:ce:97:18: 1a:68:df:6d:01:5c:32:b2:0e:6e:cf:55:ff:68:04: a2:0e:a2:ac:4b:6a:ef:69:46:97:87:76:b4:d8:b4: 25:dd:7d:96:df:5d:39:6a:b4:fb:c0:0c:6b:73:f4: 26:6c:39:17:b9:c8:10:aa:c9:6b:b5:3d:de:3f:45: 0e:09:fd:69:5a:da:c9:25:82:8a:89:65:75:92:b3: 27:48:ed:b1:af:5b:75:38:a6:d0:39:8e:38:fb:65: 44:f8:4e:3f:b4:89:16:52:54:f6:9e:c0:5d:ba:18: 8c:68:ca:d9:e8:21:c6:fc:a2:e9:42:6b:96:63:d9: 39:43:b6:26:b8:ea:70:ab:dc:d0:fe:a5:43:41:65: 20:a5:34:77:66:0f:0f:14:8f:eb:4a:77:ab:a9:33: 4b:bc:7d:5e:b3:f2:02:66:b6:18:c5:1e:1f:94:08: 45:28:3f:26:5d:81:b2:f7:10:9c:82:47:85:47:61: 46:de:33:ec:e3:1d:29:42:cb:06:78:44:14:f2:d1: 5e:b8:4e:ec:c3:22:d9:16:34:2d:4a:55:3d:da:0a: 64:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:EE:EF:56:7F:EC:42:1F:0F:17:80:75:4F:64:22:36:D9:F6:C8:7E X509v3 Authority Key Identifier: keyid:E0:8D:6C:7F:E3:5F:E3:66:42:FE:6F:66:CC:DA:28:66:A6:62:42:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:0a:53:98:82:96:ee:99:3a:62:be:ca:3e:2a:cf:92:62:e6: 3e:52:5b:9a:0d:5c:5c:2d:ac:dd:41:bf:3f:fb:8b:cb:89:b6: cb:d7:3b:35:cc:92:77:7e:33:a8:6b:a5:ff:ed:ff:d5:43:21: 12:e8:83:d2:42:4b:32:90:cb:c0:f0:70:28:7b:80:a6:0c:3d: ad:91:27:38:44:d0:9e:57:f7:04:69:9c:43:3a:9f:d1:c2:4b: d2:25:1c:50:8e:4f:99:e8:46:db:c2:cc:10:bb:24:aa:b5:c5: 4c:e2:ef:b5:25:b8:da:cb:28:af:ec:0f:ad:bb:50:ca:37:50: 44:76:d2:7c:4e:52:99:b5:bc:0e:27:33:c6:77:13:8e:9b:c2: 63:04:18:34:ad:80:4d:d3:05:42:42:3a:40:43:57:7b:0b:15: b2:e5:54:af:58:da:46:dc:31:34:bf:8c:50:49:77:6c:6a:d7: f3:ad:50:c6:ac:84:22:c0:e1:75:67:ed:2b:1c:c6:32:55:e2: ce:b5:e9:c7:24:71:fe:2d:7c:8d:fb:48:9b:94:09:c4:39:ad: f2:e5:11:6a:92:03:2d:e4:d3:14:0f:40:80:4f:dc:80:9e:26: 18:cd:ee:07:a9:cd:30:e8:1e:d1:fc:0c:6b:9f:14:64:70:49: 6e:bf:71:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ5NkMxMTAvBgNVBAUTKEUwOEQ2QzdGRTM1RkUzNjY0MkZFNkY2NkNDREEyODY2 QTY2MjQyRjEwHhcNMjUwNTEwMTQ0OTEzWhcNMjUwNTE3MTQ0OTEzWjAYMRYwFAYD VQQDEw02ODFmNjc2YS0xZmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTXBDOIWta5cxUYvotKAdYbMqVgu8u8XqpbXUc+nlkYD87IIH9I6B/vOlxga aN9tAVwysg5uz1X/aASiDqKsS2rvaUaXh3a02LQl3X2W3105arT7wAxrc/QmbDkX ucgQqslrtT3eP0UOCf1pWtrJJYKKiWV1krMnSO2xr1t1OKbQOY44+2VE+E4/tIkW UlT2nsBduhiMaMrZ6CHG/KLpQmuWY9k5Q7YmuOpwq9zQ/qVDQWUgpTR3Zg8PFI/r SnerqTNLvH1es/ICZrYYxR4flAhFKD8mXYGy9xCcgkeFR2FG3jPs4x0pQssGeEQU 8tFeuE7swyLZFjQtSlU92gpk+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXu71Z/ 7EIfDxeAdU9kIjbZ9sh+MB8GA1UdIwQYMBaAFOCNbH/jX+NmQv5vZszaKGamYkLx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDk2Qy9BNDJFMzdGRTFE OTYxMUUyOUM1RjRBN0YwOEIwMkNEMi80STFzZi1OZjQyWkNfbTltek5vb1pxWmlR dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRJMXNmLU5mNDJaQ19tOW16Tm9vWnFaaVF2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDk2Qy9BNDJFMzdGRTFEOTYxMUUyOUM1RjRBN0YwOEIwMkNEMi80STFzZi1OZjQy WkNfbTltek5vb1pxWmlRdkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnClOYgpbumTpivso+Ks+SYuY+UluaDVxcLazdQb8/+4vLibbL1zs1 zJJ3fjOoa6X/7f/VQyES6IPSQksykMvA8HAoe4CmDD2tkSc4RNCeV/cEaZxDOp/R wkvSJRxQjk+Z6EbbwswQuySqtcVM4u+1Jbjayyiv7A+tu1DKN1BEdtJ8TlKZtbwO JzPGdxOOm8JjBBg0rYBN0wVCQjpAQ1d7CxWy5VSvWNpG3DE0v4xQSXdsatfzrVDG rIQiwOF1Z+0rHMYyVeLOtenHJHH+LXyN+0iblAnEOa3y5RFqkgMt5NMUD0CAT9yA niYYze4Hqc0w6B7R/AxrnxRkcEluv3GX -----END CERTIFICATE-----Generated at Sun May 11 13:24:30 2025 by rpki-client