$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft File: i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft (raw, json) Hash identifier: lx8YcgBfuZ67ldOjOpFakE2nHrDLYX1jdzVke3HJqLk= Subject key identifier: 44:1C:01:C3:25:E0:C3:FD:77:CF:F2:D1:9D:48:B4:C6:5B:7B:72:8E Authority key identifier: 8B:E9:D9:2E:3B:31:D4:0C:A3:3B:3B:B6:29:47:43:2E:84:56:D2:90 Certificate issuer: /CN=A918FD04/serialNumber=8BE9D92E3B31D40CA33B3BB62947432E8456D290 Certificate serial: 0C08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft Manifest number: 1486 Signing time: Mon 12 May 2025 18:32:14 +0000 Manifest this update: Mon 12 May 2025 18:32:14 +0000 Manifest next update: Mon 19 May 2025 18:32:14 +0000 Files and hashes: 1: i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl (hash: JwmZFkA/eA0p+vpH4BzH/KDNp9hVU3YT6RXn0anGA+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:32:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3080 (0xc08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FD04, serialNumber=8BE9D92E3B31D40CA33B3BB62947432E8456D290 Validity Not Before: May 12 18:32:14 2025 GMT Not After : May 19 18:32:14 2025 GMT Subject: CN=68223eae-a2ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b8:cb:10:cb:23:8d:b1:cb:2d:2f:30:3e:9c: 1c:ce:e9:02:d3:8f:55:d1:10:8e:67:47:bb:6f:6a: b8:8b:48:df:39:44:43:0d:85:7f:68:ea:9e:da:ab: 3b:ff:78:53:a2:02:9e:be:30:1b:24:ba:a6:d5:d4: 9f:9e:4d:23:ca:8b:5c:94:9b:29:d0:46:a0:0c:92: b6:ee:42:ab:73:48:64:73:57:44:9d:91:67:61:35: c9:17:f2:1c:f9:41:e8:4f:a5:85:fa:d7:f0:2f:ad: 66:9c:e2:6a:e3:c9:7c:58:62:38:50:29:92:71:d0: 86:06:d0:90:d3:d2:44:66:16:80:d3:ae:b5:f9:da: 55:5a:b0:92:b9:ba:6a:97:ff:7d:f3:1f:88:df:a4: e0:13:2e:35:21:5c:4f:be:9f:c8:dd:b1:44:75:0e: 32:99:e4:89:89:92:61:bc:1f:7d:3f:83:86:3a:ea: a1:8e:e1:c6:5f:f5:b5:1d:73:ba:5c:42:00:41:b2: a5:1a:9d:38:a5:86:6c:9b:c7:04:d5:bf:b1:dc:ce: a2:12:00:7b:1c:bf:49:e7:50:69:be:e0:ca:0f:4c: ff:65:a9:e0:4a:d6:e7:ce:01:5c:3e:1b:18:22:25: 0e:5f:e0:26:56:96:54:c9:52:96:e8:02:5e:a1:0b: 97:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:1C:01:C3:25:E0:C3:FD:77:CF:F2:D1:9D:48:B4:C6:5B:7B:72:8E X509v3 Authority Key Identifier: keyid:8B:E9:D9:2E:3B:31:D4:0C:A3:3B:3B:B6:29:47:43:2E:84:56:D2:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:0e:14:3d:e6:f5:7f:e1:c0:64:86:b0:e6:b0:26:ca:f0:62: 52:d2:84:15:b1:a7:0e:ca:b8:c7:59:91:f6:e1:74:a1:9e:d5: 92:1e:82:ab:4c:42:5b:ee:38:f3:65:a8:ab:2b:88:46:a9:6a: ea:46:8c:cb:c5:13:7e:2c:7d:d9:76:da:51:c5:4d:25:01:50: a6:3d:39:8d:05:84:7c:55:a1:06:3d:c3:bc:1d:35:3f:cb:ba: ef:d1:a3:1a:2c:37:2c:81:13:7f:72:e3:22:47:7d:6e:df:e5: b2:35:08:61:c8:31:c0:79:6f:6c:f2:77:f9:5d:cb:79:51:02: 59:04:b1:1f:6c:e1:dc:ea:47:de:94:57:d4:43:60:f9:82:90: 28:08:46:2c:d0:5a:7e:99:21:e4:0a:4b:56:57:e8:ad:a9:1b: e1:e2:28:31:6a:fd:eb:57:f5:8f:52:63:7e:64:1d:85:8a:b2: a7:43:b4:57:ef:dc:8f:9a:e4:b0:75:a2:ff:91:46:c6:9a:75: 25:c1:69:d1:9d:37:db:89:51:7c:68:07:28:78:ea:80:98:dd: 44:74:45:79:52:f5:08:ec:1f:72:ff:84:d3:41:4e:aa:6c:2f: 13:5e:ed:f0:29:dd:d9:9a:dc:79:c1:a9:3d:ea:d5:3c:f9:a3: 7f:b0:7e:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZEMDQxMTAvBgNVBAUTKDhCRTlEOTJFM0IzMUQ0MENBMzNCM0JCNjI5NDc0MzJF ODQ1NkQyOTAwHhcNMjUwNTEyMTgzMjE0WhcNMjUwNTE5MTgzMjE0WjAYMRYwFAYD VQQDEw02ODIyM2VhZS1hMmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7jLEMsjjbHLLS8wPpwczukC049V0RCOZ0e7b2q4i0jfOURDDYV/aOqe2qs7 /3hTogKevjAbJLqm1dSfnk0jyotclJsp0EagDJK27kKrc0hkc1dEnZFnYTXJF/Ic +UHoT6WF+tfwL61mnOJq48l8WGI4UCmScdCGBtCQ09JEZhaA0661+dpVWrCSubpq l/998x+I36TgEy41IVxPvp/I3bFEdQ4ymeSJiZJhvB99P4OGOuqhjuHGX/W1HXO6 XEIAQbKlGp04pYZsm8cE1b+x3M6iEgB7HL9J51BpvuDKD0z/ZangStbnzgFcPhsY IiUOX+AmVpZUyVKW6AJeoQuXTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQcAcMl 4MP9d8/y0Z1ItMZbe3KOMB8GA1UdIwQYMBaAFIvp2S47MdQMozs7tilHQy6EVtKQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkQwNC8wQUJCRjQ3MjBE RjIxMUVBOEVFODkxM0JDNEY5QUUwMi9pLW5aTGpzeDFBeWpPenUyS1VkRExvUlcw cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ktblpManN4MUF5ak96dTJLVWRETG9SVzBwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkQwNC8wQUJCRjQ3MjBERjIxMUVBOEVFODkxM0JDNEY5QUUwMi9pLW5aTGpzeDFB eWpPenUyS1VkRExvUlcwcEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+DhQ95vV/4cBkhrDmsCbK8GJS0oQVsacOyrjHWZH24XShntWSHoKr TEJb7jjzZairK4hGqWrqRozLxRN+LH3ZdtpRxU0lAVCmPTmNBYR8VaEGPcO8HTU/ y7rv0aMaLDcsgRN/cuMiR31u3+WyNQhhyDHAeW9s8nf5Xct5UQJZBLEfbOHc6kfe lFfUQ2D5gpAoCEYs0Fp+mSHkCktWV+itqRvh4igxav3rV/WPUmN+ZB2FirKnQ7RX 79yPmuSwdaL/kUbGmnUlwWnRnTfbiVF8aAcoeOqAmN1EdEV5UvUI7B9y/4TTQU6q bC8TXu3wKd3Zmtx5wak96tU8+aN/sH5z -----END CERTIFICATE-----Generated at Wed May 14 10:26:04 2025 by rpki-client