$ rpki-client -vvf rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft File: TySfPU9SKVXadOhT4AXndAZ6Oaw.mft (raw, json) Hash identifier: KK7R4/La+mSBxXd9y1YQLCcAeWDWckuu5C3Vx9QScD8= Subject key identifier: 76:FD:B9:1A:52:2D:56:4F:35:E4:71:B0:03:CC:77:53:45:B2:53:AF Authority key identifier: 4F:24:9F:3D:4F:52:29:55:DA:74:E8:53:E0:05:E7:74:06:7A:39:AC Certificate issuer: /CN=A919F06A/serialNumber=4F249F3D4F522955DA74E853E005E774067A39AC Certificate serial: 071B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft Manifest number: 071B Signing time: Sat 10 May 2025 21:27:59 +0000 Manifest this update: Sat 10 May 2025 21:27:58 +0000 Manifest next update: Sat 17 May 2025 21:27:58 +0000 Files and hashes: 1: TySfPU9SKVXadOhT4AXndAZ6Oaw.crl (hash: DR4ZAe18N+CYNzHcYtBVTnEKrx54ZVdeUsWiAQqgV+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.crl rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1819 (0x71b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F06A, serialNumber=4F249F3D4F522955DA74E853E005E774067A39AC Validity Not Before: May 10 21:27:58 2025 GMT Not After : May 17 21:27:58 2025 GMT Subject: CN=681fc4df-293b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:61:67:7d:55:ae:6b:a3:9a:e1:56:c1:fd:de: 40:18:b9:8f:f9:63:b1:51:58:c0:7f:b1:7a:19:14: 93:eb:c6:c8:8c:fd:d3:93:fa:a4:4c:91:33:ad:84: 78:50:91:7b:48:98:31:48:d1:75:85:4d:7f:04:45: 83:19:6c:d9:e5:a2:2e:d1:c6:51:22:24:28:fb:44: e5:7c:76:84:0c:eb:e6:33:95:d0:d8:33:67:9f:51: de:ba:13:2c:fe:9e:ce:9c:93:bd:1e:5b:f6:e0:aa: 84:c5:3d:f5:3d:f9:07:2e:40:2a:b1:af:91:94:e9: 8e:d4:8d:67:3b:7a:5e:0d:2d:09:0b:5c:80:99:9a: 65:ab:a9:b7:37:ec:3d:da:0f:de:6c:54:31:e3:9d: 05:6a:64:a8:83:ea:70:8d:ec:22:ff:b6:fb:a8:61: f4:20:c5:a4:0a:17:07:4f:45:45:d5:6a:77:3d:98: 6c:c3:ae:e6:77:f5:c8:39:54:18:a9:e4:90:32:56: db:2f:74:00:61:81:29:ed:cc:ae:f2:9b:8a:88:52: b9:23:df:ac:20:37:f7:4e:3b:05:cc:b0:18:b5:ef: a6:a0:ba:87:39:ef:49:2e:e1:31:c7:2d:c5:0e:fd: c0:4a:4d:1c:de:f0:ae:c0:1a:f2:56:24:5d:7e:e4: 01:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:FD:B9:1A:52:2D:56:4F:35:E4:71:B0:03:CC:77:53:45:B2:53:AF X509v3 Authority Key Identifier: keyid:4F:24:9F:3D:4F:52:29:55:DA:74:E8:53:E0:05:E7:74:06:7A:39:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:b6:fd:82:a4:49:e2:c6:0d:e0:3b:84:0c:59:31:5f:bb:71: 5b:bc:59:6a:30:08:cb:2e:98:f9:f7:0e:70:54:74:85:98:ef: 16:cb:78:f4:32:65:43:54:3d:dc:08:48:6f:8c:4d:3e:92:08: 30:ef:f3:70:e8:04:97:05:28:4a:16:f8:8c:7c:d5:ed:c0:57: 09:f4:a6:8b:38:e1:af:7b:8a:5d:87:f9:ae:04:8b:e3:4e:2e: 51:03:d3:e5:a8:4e:9c:fb:db:c5:61:a2:ff:a5:59:91:d5:95: 15:bc:38:ff:d6:d6:c8:81:d8:12:da:40:91:ab:c4:a3:63:0b: 55:87:14:f9:2f:98:58:6a:a8:3d:31:61:19:61:9d:9d:58:73: 5e:a1:dc:de:77:f0:f3:32:06:87:8a:56:fd:31:c8:35:8f:5a: 84:55:98:61:94:45:4c:86:01:f7:ae:ae:cf:ca:ee:80:bc:6b: 82:9f:60:7d:c5:96:c2:9e:d1:e4:cb:a8:22:4b:63:95:a5:4b: 5e:d3:aa:c4:b0:a0:04:83:18:43:5d:15:28:fb:b1:75:6a:02: 86:c1:b6:19:6b:62:f9:cd:72:5c:71:23:e8:69:20:8b:b6:c2: 3a:6d:89:d8:e0:6f:9e:88:f2:fa:bf:c7:22:3e:62:3c:2a:fc: 56:24:b7:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwNkExMTAvBgNVBAUTKDRGMjQ5RjNENEY1MjI5NTVEQTc0RTg1M0UwMDVFNzc0 MDY3QTM5QUMwHhcNMjUwNTEwMjEyNzU4WhcNMjUwNTE3MjEyNzU4WjAYMRYwFAYD VQQDEw02ODFmYzRkZi0yOTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA42FnfVWua6Oa4VbB/d5AGLmP+WOxUVjAf7F6GRST68bIjP3Tk/qkTJEzrYR4 UJF7SJgxSNF1hU1/BEWDGWzZ5aIu0cZRIiQo+0TlfHaEDOvmM5XQ2DNnn1HeuhMs /p7OnJO9Hlv24KqExT31PfkHLkAqsa+RlOmO1I1nO3peDS0JC1yAmZplq6m3N+w9 2g/ebFQx450FamSog+pwjewi/7b7qGH0IMWkChcHT0VF1Wp3PZhsw67md/XIOVQY qeSQMlbbL3QAYYEp7cyu8puKiFK5I9+sIDf3TjsFzLAYte+moLqHOe9JLuExxy3F Dv3ASk0c3vCuwBryViRdfuQBywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHb9uRpS LVZPNeRxsAPMd1NFslOvMB8GA1UdIwQYMBaAFE8knz1PUilV2nToU+AF53QGejms MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjA2QS9GQ0YyN0FDNjMz QTQxMUVCQUM1NDg1MkVDNEY5QUUwMi9UeVNmUFU5U0tWWGFkT2hUNEFYbmRBWjZP YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R5U2ZQVTlTS1ZYYWRPaFQ0QVhuZEFaNk9hdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjA2QS9GQ0YyN0FDNjMzQTQxMUVCQUM1NDg1MkVDNEY5QUUwMi9UeVNmUFU5U0tW WGFkT2hUNEFYbmRBWjZPYXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMtv2CpEnixg3gO4QMWTFfu3FbvFlqMAjLLpj59w5wVHSFmO8Wy3j0 MmVDVD3cCEhvjE0+kggw7/Nw6ASXBShKFviMfNXtwFcJ9KaLOOGve4pdh/muBIvj Ti5RA9PlqE6c+9vFYaL/pVmR1ZUVvDj/1tbIgdgS2kCRq8SjYwtVhxT5L5hYaqg9 MWEZYZ2dWHNeodzed/DzMgaHilb9Mcg1j1qEVZhhlEVMhgH3rq7Pyu6AvGuCn2B9 xZbCntHky6giS2OVpUte06rEsKAEgxhDXRUo+7F1agKGwbYZa2L5zXJccSPoaSCL tsI6bYnY4G+eiPL6v8ciPmI8KvxWJLd3 -----END CERTIFICATE-----Generated at Mon May 12 21:58:06 2025 by rpki-client