$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft File: EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft (raw, json) Hash identifier: iIc7pYqBy3kgxnYbMlrv6Gw28Piy0G46GmaHnryR1jI= Subject key identifier: 8D:38:2F:7E:02:C5:B7:A8:4D:F7:13:EB:74:5E:B2:1C:9F:B3:7E:A4 Authority key identifier: 11:D8:D8:DC:5D:96:78:DE:03:30:96:7A:2F:38:1D:4F:67:BB:55:B6 Certificate issuer: /CN=A919D6D8/serialNumber=11D8D8DC5D9678DE0330967A2F381D4F67BB55B6 Certificate serial: 0860 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft Manifest number: 130A Signing time: Wed 14 May 2025 19:37:28 +0000 Manifest this update: Wed 14 May 2025 19:37:28 +0000 Manifest next update: Wed 21 May 2025 19:37:28 +0000 Files and hashes: 1: EdjY3F2WeN4DMJZ6LzgdT2e7VbY.crl (hash: rGC+cuv0qCkpe88ufd5JnxxWjA45kw1/bVkYKPOwNDs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.crl rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:37:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2144 (0x860) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D6D8, serialNumber=11D8D8DC5D9678DE0330967A2F381D4F67BB55B6 Validity Not Before: May 14 19:37:28 2025 GMT Not After : May 21 19:37:28 2025 GMT Subject: CN=6824f0f8-2a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ca:5a:ea:c5:ca:67:f9:3e:74:ac:6b:8e:4d: 8c:ff:95:79:da:00:60:1c:25:9e:3a:24:0e:ab:56: 29:b3:aa:e1:83:02:3b:60:2e:05:f2:3a:92:00:23: 74:17:90:0f:52:81:c1:4d:4d:93:8a:4f:42:94:69: 3b:51:8a:94:99:d0:af:90:c4:ca:88:3e:e9:76:38: 06:ba:4a:26:49:26:c5:68:e2:7c:fd:ac:d9:7f:36: 50:32:c1:93:85:63:e1:af:c2:dc:d8:bc:8a:a5:f2: 04:ad:9e:9e:75:20:8b:33:72:19:e9:3c:4e:b9:45: 91:be:3e:6f:81:e2:18:6d:70:29:c3:48:3f:7f:c5: 96:3e:b1:e6:86:f7:9e:56:6b:eb:ea:5d:3d:b2:2e: 4c:3c:aa:b1:83:9f:05:ff:f2:4a:5b:4c:0d:8b:d0: f6:9c:32:c4:90:c7:23:26:4a:b9:df:bd:2c:5b:62: d5:d1:db:e3:e4:90:f2:bf:79:ea:1a:18:e3:87:89: 98:e9:c9:85:64:e5:82:3d:09:8a:19:39:e4:5a:0b: 71:a7:5c:f5:cc:c8:d2:69:d2:e3:09:32:f5:56:9a: 20:fa:bf:2a:ea:41:61:4d:52:3e:0e:66:96:6c:10: 9b:59:bc:9f:e9:e1:5d:a0:c0:36:61:1a:74:f4:e4: f8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:38:2F:7E:02:C5:B7:A8:4D:F7:13:EB:74:5E:B2:1C:9F:B3:7E:A4 X509v3 Authority Key Identifier: keyid:11:D8:D8:DC:5D:96:78:DE:03:30:96:7A:2F:38:1D:4F:67:BB:55:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:8c:da:a5:c0:60:3a:2d:ed:b6:16:5a:3c:11:ae:8e:fc:fc: b4:7f:9d:a6:a8:16:ab:7c:9e:c7:74:60:68:2c:e0:cd:c8:61: 03:fc:d2:14:36:bb:81:64:b4:a5:6b:cf:e6:af:df:0b:65:9a: a8:01:10:3b:bb:d4:52:49:fe:83:0e:d1:97:90:da:a8:97:27: a0:da:8a:cf:6d:9c:f0:9c:f0:5e:97:9b:76:f8:8f:8f:24:5e: e8:df:01:83:09:2d:c1:14:5a:02:c1:89:8c:f6:e9:07:fa:1e: 46:af:a7:b0:11:22:5a:be:70:1d:14:d1:cf:f9:52:ed:2b:0e: 97:90:37:63:33:c5:64:c0:02:c2:5c:c6:b1:c2:ec:89:29:56: 69:d7:d0:83:58:cd:5e:da:b5:7f:90:67:58:18:41:d8:d1:83: 0e:82:53:0d:27:7c:56:dd:16:1a:79:e5:29:3f:8c:95:fa:61: b1:d9:db:11:28:a0:be:74:dd:2a:bf:f4:59:32:05:05:5c:e2: e7:f4:42:d5:6a:10:2e:e6:66:32:35:4a:3f:cb:50:d6:68:51: 70:66:50:18:67:7b:25:c6:6e:91:8e:26:cd:ab:6e:0e:24:42: 9e:74:80:ad:9f:86:e9:bc:dd:db:74:c5:31:d1:cf:96:fb:a9: 94:f6:c1:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2RDgxMTAvBgNVBAUTKDExRDhEOERDNUQ5Njc4REUwMzMwOTY3QTJGMzgxRDRG NjdCQjU1QjYwHhcNMjUwNTE0MTkzNzI4WhcNMjUwNTIxMTkzNzI4WjAYMRYwFAYD VQQDEw02ODI0ZjBmOC0yYTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMpa6sXKZ/k+dKxrjk2M/5V52gBgHCWeOiQOq1Yps6rhgwI7YC4F8jqSACN0 F5APUoHBTU2Tik9ClGk7UYqUmdCvkMTKiD7pdjgGukomSSbFaOJ8/azZfzZQMsGT hWPhr8Lc2LyKpfIErZ6edSCLM3IZ6TxOuUWRvj5vgeIYbXApw0g/f8WWPrHmhvee Vmvr6l09si5MPKqxg58F//JKW0wNi9D2nDLEkMcjJkq5370sW2LV0dvj5JDyv3nq Ghjjh4mY6cmFZOWCPQmKGTnkWgtxp1z1zMjSadLjCTL1Vpog+r8q6kFhTVI+DmaW bBCbWbyf6eFdoMA2YRp09OT4+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI04L34C xbeoTfcT63Reshyfs36kMB8GA1UdIwQYMBaAFBHY2NxdlnjeAzCWei84HU9nu1W2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDZEOC9BMDM3OTZERTUx QzAxMUVBQjI2NUU4ODBDNEY5QUUwMi9FZGpZM0YyV2VONERNSlo2THpnZFQyZTdW YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VkalkzRjJXZU40RE1KWjZMemdkVDJlN1ZiWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDZEOC9BMDM3OTZERTUxQzAxMUVBQjI2NUU4ODBDNEY5QUUwMi9FZGpZM0YyV2VO NERNSlo2THpnZFQyZTdWYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgjNqlwGA6Le22Flo8Ea6O/Py0f52mqBarfJ7HdGBoLODNyGED/NIU NruBZLSla8/mr98LZZqoARA7u9RSSf6DDtGXkNqolyeg2orPbZzwnPBel5t2+I+P JF7o3wGDCS3BFFoCwYmM9ukH+h5Gr6ewESJavnAdFNHP+VLtKw6XkDdjM8VkwALC XMaxwuyJKVZp19CDWM1e2rV/kGdYGEHY0YMOglMNJ3xW3RYaeeUpP4yV+mGx2dsR KKC+dN0qv/RZMgUFXOLn9ELVahAu5mYyNUo/y1DWaFFwZlAYZ3slxm6RjibNq24O JEKedICtn4bpvN3bdMUx0c+W+6mU9sG7 -----END CERTIFICATE-----Generated at Thu May 15 16:19:55 2025 by rpki-client