$ rpki-client -vvf rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.mft File: inZEBFIzrjjTDTW4JtlbLntDfZw.mft (raw, json) Hash identifier: frW20FkDlunUglbJmj7RUq4SIwQWjjRhc+QxOC5SQsE= Subject key identifier: 3B:44:34:C0:B5:0F:0E:DB:7A:76:78:AC:A9:06:67:8A:1D:1D:44:D0 Authority key identifier: 8A:76:44:04:52:33:AE:38:D3:0D:35:B8:26:D9:5B:2E:7B:43:7D:9C Certificate issuer: /CN=A919BC3B/serialNumber=8A7644045233AE38D30D35B826D95B2E7B437D9C Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inZEBFIzrjjTDTW4JtlbLntDfZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.mft Manifest number: A3 Signing time: Sat 17 May 2025 05:41:51 +0000 Manifest this update: Sat 17 May 2025 05:41:50 +0000 Manifest next update: Sat 24 May 2025 05:41:50 +0000 Files and hashes: 1: inZEBFIzrjjTDTW4JtlbLntDfZw.crl (hash: EP8IZV6KkS8FFk4y6qI+COoSQyLK9EJsfSfuYo+0vf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.crl rsync://rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inZEBFIzrjjTDTW4JtlbLntDfZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BC3B, serialNumber=8A7644045233AE38D30D35B826D95B2E7B437D9C Validity Not Before: May 17 05:41:50 2025 GMT Not After : May 24 05:41:50 2025 GMT Subject: CN=6828219f-806b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c9:28:a3:bf:b0:1e:79:63:af:63:ae:d4:f7: a7:11:6f:7e:fe:9b:2d:58:5b:f4:21:1d:db:a2:ce: d9:13:4b:15:fc:08:e6:71:2e:d4:a3:fc:b6:05:86: aa:8f:11:6f:9d:2b:ac:4e:62:bc:ca:b4:88:2a:66: ed:65:42:14:9e:cc:49:1b:fd:62:ec:25:1e:fa:25: 40:e6:fc:84:5b:63:36:06:69:38:9d:2a:11:36:4b: 6c:35:15:76:dd:95:79:01:70:7c:f4:f1:22:a8:8c: 91:76:8e:99:6f:31:e4:11:d2:ef:8a:21:cc:5b:8b: 6a:61:c1:a6:04:ca:a1:e3:1d:76:d9:a4:63:bc:b8: 26:af:a3:10:d9:75:f1:ad:34:61:a0:83:bf:40:71: 72:31:97:b6:58:0d:19:0b:e2:46:c4:04:72:95:4d: 6d:19:7c:ae:4d:cf:29:d0:bf:af:c9:a6:1f:14:54: 97:6c:9f:a7:7a:2b:d1:38:2c:88:6d:10:48:2f:89: e8:97:aa:c6:cb:05:12:64:16:28:40:e6:28:33:c9: 12:94:41:83:29:1b:67:4e:82:54:ef:22:a8:52:45: e3:f3:f0:de:88:ec:4c:0a:55:0f:ed:d6:f5:5f:23: 9d:c0:a2:93:4b:14:64:51:d7:53:83:32:78:22:b6: 51:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:44:34:C0:B5:0F:0E:DB:7A:76:78:AC:A9:06:67:8A:1D:1D:44:D0 X509v3 Authority Key Identifier: keyid:8A:76:44:04:52:33:AE:38:D3:0D:35:B8:26:D9:5B:2E:7B:43:7D:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inZEBFIzrjjTDTW4JtlbLntDfZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:97:2a:63:48:55:77:d6:be:09:f9:69:67:10:4a:f0:f7:61: 1a:b7:00:c1:f2:11:c8:23:b9:6e:3b:4b:3c:01:e4:2e:d8:5b: e6:9a:f2:11:f8:6c:c6:f0:bc:46:2f:9b:25:ef:77:df:cf:9b: 7e:6c:57:88:5c:86:4b:d6:80:6b:98:89:3f:37:e1:2f:99:1a: 46:7b:b6:f3:24:e1:5b:0d:8c:8a:8f:98:06:c0:de:79:07:c5: e7:5c:8a:20:c5:ef:a7:89:d0:36:c2:0f:54:4e:b6:b2:a9:f7: 1b:66:7c:39:a1:77:55:a0:1d:61:00:d4:a2:ef:79:17:9f:12: a8:85:27:d2:a8:f6:85:53:6a:12:04:74:fe:ef:63:48:e2:9e: fb:32:f6:0c:f3:32:9f:1b:57:f0:0e:fb:2a:40:18:a4:ee:5e: 42:d9:a9:d5:9b:71:4d:56:10:3f:5c:9d:e7:cd:6d:44:49:7d: a5:97:c0:83:86:a5:1b:64:9d:cb:2a:02:fe:c7:98:08:51:fe: 12:7c:5c:66:f2:84:93:ce:cb:7b:b7:81:aa:3e:de:3a:b2:65: b0:93:b9:ed:93:0f:b5:e0:0c:8d:a1:15:21:bd:75:e2:37:c1: 76:15:4c:b7:b3:06:0a:30:e7:06:11:37:0e:4f:fd:1a:37:a8: 77:c9:33:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJDM0IxMTAvBgNVBAUTKDhBNzY0NDA0NTIzM0FFMzhEMzBEMzVCODI2RDk1QjJF N0I0MzdEOUMwHhcNMjUwNTE3MDU0MTUwWhcNMjUwNTI0MDU0MTUwWjAYMRYwFAYD VQQDEw02ODI4MjE5Zi04MDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMkoo7+wHnljr2Ou1PenEW9+/pstWFv0IR3bos7ZE0sV/AjmcS7Uo/y2BYaq jxFvnSusTmK8yrSIKmbtZUIUnsxJG/1i7CUe+iVA5vyEW2M2Bmk4nSoRNktsNRV2 3ZV5AXB89PEiqIyRdo6ZbzHkEdLviiHMW4tqYcGmBMqh4x122aRjvLgmr6MQ2XXx rTRhoIO/QHFyMZe2WA0ZC+JGxARylU1tGXyuTc8p0L+vyaYfFFSXbJ+neivROCyI bRBIL4nol6rGywUSZBYoQOYoM8kSlEGDKRtnToJU7yKoUkXj8/DeiOxMClUP7db1 XyOdwKKTSxRkUddTgzJ4IrZRSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDtENMC1 Dw7benZ4rKkGZ4odHUTQMB8GA1UdIwQYMBaAFIp2RARSM6440w01uCbZWy57Q32c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkMzQi9DRjM0QzFFRTM5 RUUxMUVGQTQzRDY1ODZDNEY5QUUwMi9pblpFQkZJenJqalREVFc0SnRsYkxudERm WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2luWkVCRkl6cmpqVERUVzRKdGxiTG50RGZady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkMzQi9DRjM0QzFFRTM5RUUxMUVGQTQzRDY1ODZDNEY5QUUwMi9pblpFQkZJenJq alREVFc0SnRsYkxudERmWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+lypjSFV31r4J+WlnEErw92EatwDB8hHII7luO0s8AeQu2FvmmvIR +GzG8LxGL5sl73ffz5t+bFeIXIZL1oBrmIk/N+EvmRpGe7bzJOFbDYyKj5gGwN55 B8XnXIogxe+nidA2wg9UTrayqfcbZnw5oXdVoB1hANSi73kXnxKohSfSqPaFU2oS BHT+72NI4p77MvYM8zKfG1fwDvsqQBik7l5C2anVm3FNVhA/XJ3nzW1ESX2ll8CD hqUbZJ3LKgL+x5gIUf4SfFxm8oSTzst7t4GqPt46smWwk7ntkw+14AyNoRUhvXXi N8F2FUy3swYKMOcGETcOT/0aN6h3yTOS -----END CERTIFICATE-----Generated at Sat May 17 07:39:06 2025 by rpki-client