$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft File: 0q268NfVLLlNShOXizIFO833eg8.mft (raw, json) Hash identifier: GLeHyLlLkCKNIXj869GQrx7VmhRWBQuAyYsTPvzmIgI= Subject key identifier: 56:B2:53:D8:55:B6:C5:4F:42:D0:A5:33:0E:B2:61:EA:85:B7:8F:C1 Authority key identifier: D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F Certificate issuer: /CN=A91BE514/serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft Manifest number: 0126 Signing time: Tue 13 May 2025 03:52:37 +0000 Manifest this update: Tue 13 May 2025 03:52:37 +0000 Manifest next update: Tue 20 May 2025 03:52:37 +0000 Files and hashes: 1: 0q268NfVLLlNShOXizIFO833eg8.crl (hash: RhOetDwiTrSNNJgc9AHZ44PbeOiT6Old5Xca/mos/m0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:52:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE514, serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F Validity Not Before: May 13 03:52:37 2025 GMT Not After : May 20 03:52:37 2025 GMT Subject: CN=6822c205-29ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:da:20:bb:27:04:d0:c3:12:06:6c:e1:f6:32: c2:91:1a:29:27:b3:38:1b:aa:fc:4e:60:1b:46:cf: c2:d6:10:b2:e8:b9:92:61:fc:5a:bd:97:7a:d5:f2: ed:55:ec:11:cc:57:a9:1e:af:1a:a2:61:96:b3:a4: b0:94:60:bb:21:81:a1:58:99:99:d7:c1:4a:1a:1c: fc:ff:79:f3:5c:3a:f1:6b:05:a7:ce:bc:3c:c8:fb: 4d:7f:91:9d:6d:45:2d:9b:c2:c5:16:5d:96:07:04: f0:dd:a7:d6:46:6f:b8:55:c0:5e:10:5c:51:3c:d0: e4:f4:02:7f:c2:39:5a:be:e3:42:de:64:99:3a:0f: 39:8c:48:a1:df:40:c5:1d:49:f9:14:2f:c6:8d:15: 18:51:70:8b:80:ca:98:8b:ba:05:ba:e7:d8:d1:cb: 17:f8:50:d4:b2:5f:de:7f:d0:c7:13:15:d3:81:eb: 06:4b:f9:f6:3d:06:0f:c7:43:d6:f6:5b:8c:17:da: 16:16:e0:02:6f:a5:b2:8c:4e:e6:84:b1:73:61:7d: db:c4:bb:3e:3e:7b:13:7c:89:f8:b8:fb:48:af:35: 19:69:7f:a2:52:74:f3:f6:76:ab:d7:3a:94:70:a2: 08:21:07:19:8e:18:52:1e:85:93:81:9e:a0:5f:1e: 7a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B2:53:D8:55:B6:C5:4F:42:D0:A5:33:0E:B2:61:EA:85:B7:8F:C1 X509v3 Authority Key Identifier: keyid:D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:93:16:37:12:f7:ea:29:39:27:34:cf:fb:51:81:28:7a:96: 6d:0b:2c:80:38:fc:86:be:87:16:72:75:47:b8:3f:e2:ae:44: 13:e2:5e:14:c7:bf:0e:9d:18:f3:aa:eb:ed:27:7b:ae:dd:37: c2:e5:c4:02:20:f2:0d:83:87:d6:9a:d1:f4:01:c5:a9:13:10: a1:3b:13:c5:da:ca:d5:d4:b1:7c:c4:8c:69:43:da:6f:75:5f: f1:d1:8a:b5:cf:e0:61:c5:5f:c7:68:b0:6c:a2:99:86:49:27: 46:57:97:12:7e:f9:95:b9:42:70:3b:13:bb:05:ca:36:27:42: 1f:67:21:b3:4a:e8:33:2f:71:4b:b7:2a:14:8e:41:e9:f8:42: 12:29:63:3a:e5:4b:3f:a5:ac:08:ba:f7:d3:4d:ad:87:de:7c: 0b:dd:81:2f:3b:77:77:df:44:ae:d5:df:bd:27:7a:ed:96:07: 23:c3:f4:cd:31:6f:6f:6d:3b:3c:9e:e3:b0:9f:6d:a5:2f:2e: 3a:63:e7:c8:16:c8:68:db:88:f3:65:5e:6d:a3:92:16:67:a5: d3:3c:8f:97:c2:65:35:85:03:1a:ee:32:35:37:90:e1:b0:e7: d5:e5:ea:75:2d:f2:ef:04:78:67:8a:4b:2c:5a:ee:a1:c1:54: 48:1d:f9:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU1MTQxMTAvBgNVBAUTKEQyQURCQUYwRDdENTJDQjk0RDRBMTM5NzhCMzIwNTNC Q0RGNzdBMEYwHhcNMjUwNTEzMDM1MjM3WhcNMjUwNTIwMDM1MjM3WjAYMRYwFAYD VQQDEw02ODIyYzIwNS0yOWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl9oguycE0MMSBmzh9jLCkRopJ7M4G6r8TmAbRs/C1hCy6LmSYfxavZd61fLt VewRzFepHq8aomGWs6SwlGC7IYGhWJmZ18FKGhz8/3nzXDrxawWnzrw8yPtNf5Gd bUUtm8LFFl2WBwTw3afWRm+4VcBeEFxRPNDk9AJ/wjlavuNC3mSZOg85jEih30DF HUn5FC/GjRUYUXCLgMqYi7oFuufY0csX+FDUsl/ef9DHExXTgesGS/n2PQYPx0PW 9luMF9oWFuACb6WyjE7mhLFzYX3bxLs+PnsTfIn4uPtIrzUZaX+iUnTz9nar1zqU cKIIIQcZjhhSHoWTgZ6gXx561wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFayU9hV tsVPQtClMw6yYeqFt4/BMB8GA1UdIwQYMBaAFNKtuvDX1Sy5TUoTl4syBTvN93oP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTUxNC9EOEVERjY4RTZF RjUxMUVFQkQxODBBMzJDNEY5QUUwMi8wcTI2OE5mVkxMbE5TaE9YaXpJRk84MzNl ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBxMjY4TmZWTExsTlNoT1hpeklGTzgzM2VnOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTUxNC9EOEVERjY4RTZFRjUxMUVFQkQxODBBMzJDNEY5QUUwMi8wcTI2OE5mVkxM bE5TaE9YaXpJRk84MzNlZzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAukxY3EvfqKTknNM/7UYEoepZtCyyAOPyGvocWcnVHuD/irkQT4l4U x78OnRjzquvtJ3uu3TfC5cQCIPINg4fWmtH0AcWpExChOxPF2srV1LF8xIxpQ9pv dV/x0Yq1z+BhxV/HaLBsopmGSSdGV5cSfvmVuUJwOxO7Bco2J0IfZyGzSugzL3FL tyoUjkHp+EISKWM65Us/pawIuvfTTa2H3nwL3YEvO3d330Su1d+9J3rtlgcjw/TN MW9vbTs8nuOwn22lLy46Y+fIFsho24jzZV5to5IWZ6XTPI+XwmU1hQMa7jI1N5Dh sOfV5ep1LfLvBHhnikssWu6hwVRIHfmP -----END CERTIFICATE-----Generated at Wed May 14 09:46:41 2025 by rpki-client