$ rpki-client -vvf rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft File: CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft (raw, json) Hash identifier: g1faGrIKTtLCHTWFrYYBajfpQpjUeRfQaslvfsERC0U= Subject key identifier: 5B:4B:B9:84:12:19:CD:03:91:F1:18:53:2C:12:53:98:8E:8F:C2:27 Authority key identifier: 09:E2:C7:58:14:1C:01:44:F4:62:B9:F0:F8:FB:E7:48:AA:05:CB:21 Certificate issuer: /CN=A919C203/serialNumber=09E2C758141C0144F462B9F0F8FBE748AA05CB21 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft Manifest number: EC Signing time: Tue 13 May 2025 04:31:25 +0000 Manifest this update: Tue 13 May 2025 04:31:25 +0000 Manifest next update: Tue 20 May 2025 04:31:25 +0000 Files and hashes: 1: CeLHWBQcAUT0Yrnw-PvnSKoFyyE.crl (hash: DIDFkjUUyY/kTKmJK/A+uAphT35VC/flckprstLZcJk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.crl rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:31:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C203, serialNumber=09E2C758141C0144F462B9F0F8FBE748AA05CB21 Validity Not Before: May 13 04:31:25 2025 GMT Not After : May 20 04:31:25 2025 GMT Subject: CN=6822cb1d-f5eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8b:3f:99:b8:e4:96:78:9f:37:36:cb:d3:29: be:48:68:f1:9a:39:d5:8d:35:b6:c8:c3:9f:54:cf: b8:15:6c:a3:8f:f2:83:1c:18:e7:42:64:04:f0:ee: 34:95:84:2c:b9:20:c7:a2:e4:b3:d2:b1:e4:b9:de: 29:df:3f:df:51:eb:49:65:c5:09:60:50:49:04:74: 71:dd:94:61:e1:39:25:66:7a:ab:0c:1c:40:81:c7: 6d:28:0a:d9:45:67:35:50:48:85:60:a1:54:2b:1c: f5:24:a8:16:8f:31:e9:b2:26:8b:82:ac:31:d4:09: 10:b9:49:ed:f0:8c:23:1f:eb:69:76:84:2f:6b:87: e5:ff:c4:e6:d9:f0:f6:e5:26:cd:e0:04:7c:9a:ba: f3:ec:ae:8b:bf:66:42:70:d7:41:9b:60:65:e1:82: 0a:fd:1e:1d:d6:61:43:cc:06:a4:dd:80:8b:5f:4e: da:64:bd:ac:24:c8:c4:37:ce:6c:fb:4f:ac:b1:d9: dc:3e:32:79:17:35:fb:94:bb:de:a5:51:18:a9:29: 93:c2:e5:ec:4f:bd:c8:71:29:67:b9:98:2d:28:41: 0e:af:7a:b3:75:95:4a:d1:2b:89:be:53:70:0a:7a: bd:fa:26:df:99:c4:fe:9c:41:27:5f:a8:6d:79:9c: 9f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:4B:B9:84:12:19:CD:03:91:F1:18:53:2C:12:53:98:8E:8F:C2:27 X509v3 Authority Key Identifier: keyid:09:E2:C7:58:14:1C:01:44:F4:62:B9:F0:F8:FB:E7:48:AA:05:CB:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:9b:06:4d:fa:9e:af:d8:3d:55:63:7d:13:ec:a5:6d:e5:ec: 15:35:39:48:f0:ae:ab:c8:74:e0:f1:a3:da:6d:9f:9d:4f:f5: c2:62:c4:db:ad:f0:2e:02:21:1c:32:59:c8:86:f2:14:a8:5f: bd:77:e9:a8:ac:27:2a:2e:7f:7c:55:cf:0f:6e:63:b3:e5:67: 03:ae:a1:c0:c6:64:d3:9b:6d:74:49:94:e3:0f:35:55:fd:f2: bd:f5:ba:3e:e6:dd:de:04:aa:b9:dc:14:3e:76:be:4f:eb:c9: 7d:9c:53:61:95:d4:2a:c0:03:5a:59:63:41:18:79:02:8e:99: 9e:a6:58:ed:6c:27:be:92:ca:a9:ca:25:71:ec:cf:f2:c1:18: ec:a4:40:b4:2f:70:d0:ec:4a:68:bc:7f:d8:0b:c6:2a:c3:78: 21:f6:85:a9:2b:74:28:9c:d1:48:ff:4c:9f:77:aa:65:7e:00: 67:a1:d1:19:da:07:a2:27:08:08:25:60:57:6e:8a:5f:b5:b3: 42:a4:aa:49:ba:83:59:e8:40:88:6d:26:75:9f:e0:8d:07:bc: 94:65:90:0b:45:40:8c:ec:f2:55:6c:92:80:66:09:f0:1c:2e: 46:c9:e5:89:e6:f4:47:d0:5e:3d:ee:87:31:90:07:0c:b7:d0: dc:05:6f:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMyMDMxMTAvBgNVBAUTKDA5RTJDNzU4MTQxQzAxNDRGNDYyQjlGMEY4RkJFNzQ4 QUEwNUNCMjEwHhcNMjUwNTEzMDQzMTI1WhcNMjUwNTIwMDQzMTI1WjAYMRYwFAYD VQQDEw02ODIyY2IxZC1mNWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnIs/mbjklnifNzbL0ym+SGjxmjnVjTW2yMOfVM+4FWyjj/KDHBjnQmQE8O40 lYQsuSDHouSz0rHkud4p3z/fUetJZcUJYFBJBHRx3ZRh4TklZnqrDBxAgcdtKArZ RWc1UEiFYKFUKxz1JKgWjzHpsiaLgqwx1AkQuUnt8IwjH+tpdoQva4fl/8Tm2fD2 5SbN4AR8mrrz7K6Lv2ZCcNdBm2Bl4YIK/R4d1mFDzAak3YCLX07aZL2sJMjEN85s +0+ssdncPjJ5FzX7lLvepVEYqSmTwuXsT73IcSlnuZgtKEEOr3qzdZVK0SuJvlNw Cnq9+ibfmcT+nEEnX6hteZyfTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFtLuYQS Gc0DkfEYUywSU5iOj8InMB8GA1UdIwQYMBaAFAnix1gUHAFE9GK58Pj750iqBcsh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzIwMy9DRUMxMjJDQUM1 ODYxMUVFOTExNjZCODNDNEY5QUUwMi9DZUxIV0JRY0FVVDBZcm53LVB2blNLb0Z5 eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NlTEhXQlFjQVVUMFlybnctUHZuU0tvRnl5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzIwMy9DRUMxMjJDQUM1ODYxMUVFOTExNjZCODNDNEY5QUUwMi9DZUxIV0JRY0FV VDBZcm53LVB2blNLb0Z5eUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrmwZN+p6v2D1VY30T7KVt5ewVNTlI8K6ryHTg8aPabZ+dT/XCYsTb rfAuAiEcMlnIhvIUqF+9d+morCcqLn98Vc8PbmOz5WcDrqHAxmTTm210SZTjDzVV /fK99bo+5t3eBKq53BQ+dr5P68l9nFNhldQqwANaWWNBGHkCjpmepljtbCe+ksqp yiVx7M/ywRjspEC0L3DQ7EpovH/YC8Yqw3gh9oWpK3QonNFI/0yfd6plfgBnodEZ 2geiJwgIJWBXbopftbNCpKpJuoNZ6ECIbSZ1n+CNB7yUZZALRUCM7PJVbJKAZgnw HC5GyeWJ5vRH0F497ocxkAcMt9DcBW8O -----END CERTIFICATE-----Generated at Wed May 14 08:17:38 2025 by rpki-client