$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft File: P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft (raw, json) Hash identifier: UyJOCteNO3lLB0+Y76efBnLXEcaeJ0A34FdgwyjqFA4= Subject key identifier: 6A:01:F8:0F:F4:0C:9C:74:FF:DE:B4:63:C6:03:79:17:5C:A1:C8:BE Authority key identifier: 3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7 Certificate issuer: /CN=A91C4A80/serialNumber=3FD7F555FC7D6FC23539A3A621EF2D048D4C7CC7 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft Manifest number: 32 Signing time: Sun 11 May 2025 06:22:18 +0000 Manifest this update: Sun 11 May 2025 06:22:18 +0000 Manifest next update: Sun 18 May 2025 06:22:18 +0000 Files and hashes: 1: P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl (hash: bRszRUF4FBFrnJ0Qn4MInPxB+mvhsqzknyTKe3MX5yo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4A80, serialNumber=3FD7F555FC7D6FC23539A3A621EF2D048D4C7CC7 Validity Not Before: May 11 06:22:18 2025 GMT Not After : May 18 06:22:18 2025 GMT Subject: CN=6820421a-be3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1c:24:98:25:3d:a3:32:75:07:af:ee:4a:12: 0c:f0:61:49:52:cd:b7:80:d5:41:14:72:8d:71:c9: 1c:ce:90:5a:05:b9:3b:5b:a5:82:79:e2:34:8a:f8: 85:f0:a4:f7:74:8b:63:26:a7:82:f8:df:e0:84:46: 1d:fc:fa:bf:09:02:69:2e:13:0f:f9:0c:c0:01:d3: fb:9f:b3:12:cc:dc:3d:16:5e:f1:52:50:8b:b4:b1: b7:50:11:aa:56:c1:b9:6f:a5:a5:c7:1d:55:27:59: a6:e2:43:ab:81:65:b7:2c:1f:70:51:82:fd:82:2e: b2:46:ca:b4:3e:06:df:2f:07:59:66:db:13:43:8c: c8:31:ce:4f:02:0d:52:f0:9a:76:26:bf:5f:cd:91: 9a:8c:d1:f0:47:dd:0c:e5:7b:be:0b:25:64:37:7a: 03:62:e0:30:b0:0b:67:52:fe:d6:a2:c2:bf:f9:8c: b4:2a:de:a1:e5:45:fd:3d:e2:5f:a6:51:ab:9c:11: fa:cb:ba:ee:56:0c:a1:e6:f6:7c:0c:46:fa:69:32: b6:60:ef:78:e0:35:1a:43:5e:c9:0e:13:15:47:db: 49:2c:de:bc:54:1f:fb:d1:dd:83:b5:af:15:1c:1d: 06:d9:bf:41:23:4a:8a:75:fe:51:62:84:04:ff:c9: 9f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:01:F8:0F:F4:0C:9C:74:FF:DE:B4:63:C6:03:79:17:5C:A1:C8:BE X509v3 Authority Key Identifier: keyid:3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:09:63:51:28:6b:37:21:e1:03:54:9e:f4:e1:2c:dc:32:83: 8c:54:13:67:00:34:83:5a:80:91:85:5f:f5:3e:8a:69:5c:95: 35:d2:04:15:c8:9c:5e:1e:7e:67:b9:da:22:b7:4d:70:80:a8: 90:47:c4:39:2d:c6:03:34:6e:c9:99:cf:1b:7d:12:b0:23:07: e9:dc:1a:b4:2c:63:63:f1:97:65:50:9f:95:78:a8:3b:d8:61: e8:91:ea:d1:73:d2:31:c8:75:17:ed:62:1b:a2:f8:08:9f:98: bf:4f:6b:23:a5:72:4e:2c:7c:32:1b:44:2b:5f:35:22:9c:25: d4:37:12:b8:65:52:68:60:26:e4:8c:90:22:7f:20:d6:63:5f: 5e:ed:70:b7:59:be:0b:fc:11:ba:f7:cb:0f:7d:3c:ee:00:8d: c0:7d:99:ea:76:3f:b1:45:1c:f5:10:4c:35:1f:bb:a0:d6:27: 5a:a1:f6:0e:1a:52:6c:4a:06:ff:4d:0d:a9:8c:7b:aa:32:52: fc:48:fd:4e:87:e2:f5:8e:d4:17:8d:fb:ab:1e:e1:6f:8f:c2: 5f:eb:ab:46:df:02:58:71:9f:91:5a:c0:c9:b2:fa:33:84:7f: 3e:7d:a3:64:d9:da:20:d9:b8:50:5b:30:a4:ae:72:c4:14:e1: b5:62:d5:f1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NEE4MDExMC8GA1UEBRMoM0ZEN0Y1NTVGQzdENkZDMjM1MzlBM0E2MjFFRjJEMDQ4 RDRDN0NDNzAeFw0yNTA1MTEwNjIyMThaFw0yNTA1MTgwNjIyMThaMBgxFjAUBgNV BAMTDTY4MjA0MjFhLWJlM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5HCSYJT2jMnUHr+5KEgzwYUlSzbeA1UEUco1xyRzOkFoFuTtbpYJ54jSK+IXw pPd0i2Mmp4L43+CERh38+r8JAmkuEw/5DMAB0/ufsxLM3D0WXvFSUIu0sbdQEapW wblvpaXHHVUnWabiQ6uBZbcsH3BRgv2CLrJGyrQ+Bt8vB1lm2xNDjMgxzk8CDVLw mnYmv1/NkZqM0fBH3Qzle74LJWQ3egNi4DCwC2dS/taiwr/5jLQq3qHlRf094l+m UaucEfrLuu5WDKHm9nwMRvppMrZg73jgNRpDXskOExVH20ks3rxUH/vR3YO1rxUc HQbZv0EjSop1/lFihAT/yZ8FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUagH4D/QM nHT/3rRjxgN5F1yhyL4wHwYDVR0jBBgwFoAUP9f1Vfx9b8I1OaOmIe8tBI1MfMcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0QTgwLzI5RUM3M0JBRTRF RjExRUZCNzE0RTU2Q0M0RjlBRTAyL1A5ZjFWZng5YjhJMU9hT21JZTh0QkkxTWZN Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUDlmMVZmeDliOEkxT2FPbUllOHRCSTFNZk1jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0 QTgwLzI5RUM3M0JBRTRFRjExRUZCNzE0RTU2Q0M0RjlBRTAyL1A5ZjFWZng5YjhJ MU9hT21JZTh0QkkxTWZNYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEUJY1Eoazch4QNUnvThLNwyg4xUE2cANINagJGFX/U+imlclTXSBBXI nF4efme52iK3TXCAqJBHxDktxgM0bsmZzxt9ErAjB+ncGrQsY2Pxl2VQn5V4qDvY YeiR6tFz0jHIdRftYhui+AifmL9PayOlck4sfDIbRCtfNSKcJdQ3ErhlUmhgJuSM kCJ/INZjX17tcLdZvgv8Ebr3yw99PO4AjcB9mep2P7FFHPUQTDUfu6DWJ1qh9g4a UmxKBv9NDamMe6oyUvxI/U6H4vWO1BeN+6se4W+Pwl/rq0bfAlhxn5FawMmy+jOE fz59o2TZ2iDZuFBbMKSucsQU4bVi1fE= -----END CERTIFICATE-----Generated at Tue May 13 00:17:19 2025 by rpki-client