$ rpki-client -vvf rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft File: M5IbTpqJQaWGu92a-LGIWo8iX6I.mft (raw, json) Hash identifier: EDsv2oYzXjhJpC7HWSWLYFDS/TG/SvgBj96Sb7QLrN0= Subject key identifier: 55:D8:DD:3F:0C:04:4D:BF:E7:4A:98:29:45:EE:95:63:4A:D9:DE:5E Authority key identifier: 33:92:1B:4E:9A:89:41:A5:86:BB:DD:9A:F8:B1:88:5A:8F:22:5F:A2 Certificate issuer: /CN=A9195A3A/serialNumber=33921B4E9A8941A586BBDD9AF8B1885A8F225FA2 Certificate serial: 3479 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft Manifest number: 3479 Signing time: Sat 10 May 2025 15:00:27 +0000 Manifest this update: Sat 10 May 2025 15:00:26 +0000 Manifest next update: Sat 17 May 2025 15:00:26 +0000 Files and hashes: 1: M5IbTpqJQaWGu92a-LGIWo8iX6I.crl (hash: vk7YosUmpCZMPagsjFaulbwczb9+sJTaS6ZAylp9hc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.crl rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13433 (0x3479) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195A3A, serialNumber=33921B4E9A8941A586BBDD9AF8B1885A8F225FA2 Validity Not Before: May 10 15:00:26 2025 GMT Not After : May 17 15:00:26 2025 GMT Subject: CN=681f6a0b-3612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5a:f9:08:4a:22:23:a5:cb:d6:73:dd:a3:a5: 6c:27:b7:0f:82:80:05:41:57:6b:94:96:24:8d:cc: bf:cb:ce:13:75:90:59:e2:ea:f3:6e:f1:f7:2d:d5: c6:fa:ac:24:15:02:91:2b:8e:07:34:6c:14:08:f8: 2f:67:ce:3c:91:96:e2:8a:12:74:b4:07:64:76:8c: 37:8d:3e:0e:ba:4b:b3:07:62:42:11:4e:3a:ca:91: 1a:a7:08:d3:aa:f3:0b:57:2c:be:47:1f:f7:14:e5: af:4b:2c:31:6a:d8:12:bf:38:ef:a7:ca:1d:97:e9: 6c:96:3e:09:88:07:a2:f0:9d:74:f5:4c:45:84:e8: 49:d6:29:23:a9:e7:80:d4:4e:99:ce:20:77:1d:89: 8a:63:01:af:24:e1:80:04:65:12:fc:90:60:6b:74: aa:ea:2a:24:c9:16:2b:d8:43:49:a4:0a:7f:c8:28: 6c:91:62:48:f9:a2:10:fe:35:10:39:21:84:c8:ef: be:73:be:e6:24:ff:00:27:c1:79:79:e9:0a:98:b5: 50:44:6d:01:d4:18:59:0e:1e:49:70:78:e8:34:db: ef:9e:28:df:a6:8f:2c:7e:3a:d2:83:18:2e:d4:17: 9a:7d:79:d9:34:dd:1f:a2:9c:12:ca:b1:63:d7:89: 77:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D8:DD:3F:0C:04:4D:BF:E7:4A:98:29:45:EE:95:63:4A:D9:DE:5E X509v3 Authority Key Identifier: keyid:33:92:1B:4E:9A:89:41:A5:86:BB:DD:9A:F8:B1:88:5A:8F:22:5F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:09:4b:6e:1a:45:89:80:1a:6c:2d:53:4d:1d:39:cc:37:1b: f6:9c:4a:43:23:33:69:67:84:ed:87:1e:fc:34:fa:8c:1d:f6: 61:74:ad:89:0a:d1:df:bd:d7:05:f1:38:35:33:b6:0f:4f:e5: cc:e0:70:de:c4:3f:ec:d7:ce:13:3a:5d:26:0d:b3:d7:d1:e2: fa:8b:fe:64:eb:fe:e6:92:1d:ce:ad:db:cf:c0:60:6a:bf:69: e0:ab:fe:52:39:2b:24:92:8b:ca:fb:bf:67:08:39:f7:5e:0a: 70:52:25:dd:78:a0:42:86:63:38:78:9f:9f:1e:6b:b1:56:04: 53:26:4e:b7:94:82:78:1c:93:6d:ae:4f:33:bb:5f:28:13:f8: 11:3d:69:a6:c0:52:29:ae:7b:b9:06:ac:8c:6a:8a:0f:2e:10: 80:bd:31:48:eb:4e:27:e8:8a:44:55:4e:c4:ac:a3:f2:6e:16: a4:b5:5b:a6:65:a2:64:bd:f0:92:b3:ef:6e:92:0f:8d:cd:8c: 3f:65:70:6e:16:1d:61:aa:fc:06:f0:ed:06:72:ac:1d:aa:fa: 78:ea:f0:f7:2b:f3:97:9f:87:f1:69:c4:d9:e3:62:ef:11:35: b6:96:9a:21:bc:74:df:c0:32:df:ac:1f:90:f6:aa:2a:d6:fb: c0:7b:df:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBM0ExMTAvBgNVBAUTKDMzOTIxQjRFOUE4OTQxQTU4NkJCREQ5QUY4QjE4ODVB OEYyMjVGQTIwHhcNMjUwNTEwMTUwMDI2WhcNMjUwNTE3MTUwMDI2WjAYMRYwFAYD VQQDEw02ODFmNmEwYi0zNjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1lr5CEoiI6XL1nPdo6VsJ7cPgoAFQVdrlJYkjcy/y84TdZBZ4urzbvH3LdXG +qwkFQKRK44HNGwUCPgvZ848kZbiihJ0tAdkdow3jT4OukuzB2JCEU46ypEapwjT qvMLVyy+Rx/3FOWvSywxatgSvzjvp8odl+lslj4JiAei8J109UxFhOhJ1ikjqeeA 1E6ZziB3HYmKYwGvJOGABGUS/JBga3Sq6iokyRYr2ENJpAp/yChskWJI+aIQ/jUQ OSGEyO++c77mJP8AJ8F5eekKmLVQRG0B1BhZDh5JcHjoNNvvnijfpo8sfjrSgxgu 1BeafXnZNN0fopwSyrFj14l36QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFXY3T8M BE2/50qYKUXulWNK2d5eMB8GA1UdIwQYMBaAFDOSG06aiUGlhrvdmvixiFqPIl+i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUEzQS8yOThEMjU4ODFE OUYxMUUyOTY5MTkwOEYwOEIwMkNEMi9NNUliVHBxSlFhV0d1OTJhLUxHSVdvOGlY NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL001SWJUcHFKUWFXR3U5MmEtTEdJV284aVg2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUEzQS8yOThEMjU4ODFEOUYxMUUyOTY5MTkwOEYwOEIwMkNEMi9NNUliVHBxSlFh V0d1OTJhLUxHSVdvOGlYNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoCUtuGkWJgBpsLVNNHTnMNxv2nEpDIzNpZ4Tthx78NPqMHfZhdK2J CtHfvdcF8Tg1M7YPT+XM4HDexD/s184TOl0mDbPX0eL6i/5k6/7mkh3OrdvPwGBq v2ngq/5SOSskkovK+79nCDn3XgpwUiXdeKBChmM4eJ+fHmuxVgRTJk63lIJ4HJNt rk8zu18oE/gRPWmmwFIprnu5BqyMaooPLhCAvTFI604n6IpEVU7ErKPybhaktVum ZaJkvfCSs+9ukg+NzYw/ZXBuFh1hqvwG8O0Gcqwdqvp46vD3K/OXn4fxacTZ42Lv ETW2lpohvHTfwDLfrB+Q9qoq1vvAe98U -----END CERTIFICATE-----Generated at Mon May 12 16:06:49 2025 by rpki-client