$ rpki-client -vvf rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft File: rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft (raw, json) Hash identifier: cf9X3Bu6S/rLaqAPUNnNKBD0hCgavGEPZooCfjZCxFs= Subject key identifier: 06:DF:E3:8C:13:01:CA:13:45:54:DC:0B:B4:12:4A:8A:90:CF:60:97 Authority key identifier: AD:01:9F:03:5B:FF:3F:3B:17:32:3C:DB:BB:14:A0:7D:5D:E8:EC:33 Certificate issuer: /CN=A91D837B/serialNumber=AD019F035BFF3F3B17323CDBBB14A07D5DE8EC33 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft Manifest number: 4D Signing time: Fri 09 May 2025 06:20:56 +0000 Manifest this update: Fri 09 May 2025 06:20:55 +0000 Manifest next update: Fri 16 May 2025 06:20:55 +0000 Files and hashes: 1: rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl (hash: PWpoLRl35KRVRybQ92otJtOyEuB0ff34KFMz4heZ434=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 06:20:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D837B, serialNumber=AD019F035BFF3F3B17323CDBBB14A07D5DE8EC33 Validity Not Before: May 9 06:20:55 2025 GMT Not After : May 16 06:20:55 2025 GMT Subject: CN=681d9ec8-9ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:07:5f:63:a2:07:12:06:f7:46:94:a3:89:4d: 1c:38:14:00:ee:1d:58:16:1f:a4:c2:ba:35:a6:0e: c8:81:e7:76:30:de:dd:e6:1d:b3:8e:2b:56:29:86: 04:06:83:d3:c6:31:e8:5c:d0:80:8a:cb:df:7a:39: 80:cf:89:c5:06:54:b1:6d:8d:e2:4a:e5:ad:cf:75: 73:eb:8d:78:cf:20:f1:fc:a3:21:ab:40:81:74:08: a4:a8:06:08:11:65:c1:6f:56:e2:c2:44:ac:2d:87: 3e:e8:65:e4:bb:fb:5e:e6:27:63:4d:b1:a5:0a:69: 5a:32:39:fc:aa:91:53:eb:89:ee:c5:c8:fd:c8:59: 3d:8d:67:a9:51:34:45:9f:6c:6c:5c:8c:9d:d3:47: 29:7f:89:98:83:b3:e4:c3:c0:2f:cd:57:b6:b0:9e: 38:9c:15:44:99:07:79:6d:62:da:12:38:7c:3d:c6: d3:00:42:ca:8b:b7:0b:ed:ff:a7:c9:dc:6e:0a:35: c2:35:eb:6c:67:f0:3f:6c:e6:f6:04:d1:63:54:b8: 67:86:4b:44:c9:ea:f7:66:14:57:70:9c:b7:dd:33: 44:cc:16:31:c0:46:cd:16:2b:55:a4:5c:9c:c3:aa: 71:f3:6f:f4:f6:84:c4:62:19:2c:7a:d6:3e:bf:25: 92:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:DF:E3:8C:13:01:CA:13:45:54:DC:0B:B4:12:4A:8A:90:CF:60:97 X509v3 Authority Key Identifier: keyid:AD:01:9F:03:5B:FF:3F:3B:17:32:3C:DB:BB:14:A0:7D:5D:E8:EC:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:21:54:3c:d0:cd:46:97:21:70:30:43:8d:14:72:1a:aa:b5: 6d:b2:ab:66:fc:79:c2:47:30:7d:8b:c6:3e:88:51:a7:e0:ab: 5b:b0:cb:47:c2:c1:c0:5b:d5:e6:a0:a7:78:c3:73:03:fc:35: 71:dc:90:7f:79:23:3c:2d:fc:b3:9c:80:18:82:16:3c:81:fc: fc:2c:d4:29:74:ff:e1:de:d0:52:48:59:c9:45:62:11:a5:fb: 4e:69:9f:73:2f:df:a8:17:9e:ea:78:85:5d:cb:bb:1f:a1:14: 42:a9:d5:86:3c:04:ef:70:b8:a1:6d:6f:07:e1:ec:0d:9f:91: 94:4b:88:f3:cf:9e:b2:1e:f5:f7:ed:d1:ef:eb:ec:4f:62:d6: 80:5e:03:ea:06:2f:de:c3:83:10:b6:05:22:1d:31:1f:e1:cc: b1:13:fa:4e:05:7c:78:b3:d4:f2:05:8f:ea:ce:3a:9c:3b:68: 99:28:f3:cc:dc:ce:9e:3c:43:e6:42:0b:93:25:de:76:5c:cc: 9a:08:20:24:95:5b:45:19:b6:68:5c:46:18:b4:03:f3:19:e5: 2c:02:28:86:82:40:95:9a:5d:f9:43:8e:4e:b2:4c:58:ba:67: 0a:fc:29:f5:3e:21:14:b4:08:e6:60:1e:ef:bb:6f:09:7b:6d: c0:7a:25:b6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODM3QjExMC8GA1UEBRMoQUQwMTlGMDM1QkZGM0YzQjE3MzIzQ0RCQkIxNEEwN0Q1 REU4RUMzMzAeFw0yNTA1MDkwNjIwNTVaFw0yNTA1MTYwNjIwNTVaMBgxFjAUBgNV BAMTDTY4MWQ5ZWM4LTllZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVB19jogcSBvdGlKOJTRw4FADuHVgWH6TCujWmDsiB53Yw3t3mHbOOK1YphgQG g9PGMehc0ICKy996OYDPicUGVLFtjeJK5a3PdXPrjXjPIPH8oyGrQIF0CKSoBggR ZcFvVuLCRKwthz7oZeS7+17mJ2NNsaUKaVoyOfyqkVPrie7FyP3IWT2NZ6lRNEWf bGxcjJ3TRyl/iZiDs+TDwC/NV7awnjicFUSZB3ltYtoSOHw9xtMAQsqLtwvt/6fJ 3G4KNcI162xn8D9s5vYE0WNUuGeGS0TJ6vdmFFdwnLfdM0TMFjHARs0WK1WkXJzD qnHzb/T2hMRiGSx61j6/JZKrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBt/jjBMB yhNFVNwLtBJKipDPYJcwHwYDVR0jBBgwFoAUrQGfA1v/PzsXMjzbuxSgfV3o7DMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MzdCLzFEN0I2M0JDQjk5 QzExRUY5NjM4Rjc2OUM0RjlBRTAyL3JRR2ZBMXZfUHpzWE1qemJ1eFNnZlYzbzdE TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvclFHZkExdl9QenNYTWp6YnV4U2dmVjNvN0RNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 MzdCLzFEN0I2M0JDQjk5QzExRUY5NjM4Rjc2OUM0RjlBRTAyL3JRR2ZBMXZfUHpz WE1qemJ1eFNnZlYzbzdETS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEwhVDzQzUaXIXAwQ40UchqqtW2yq2b8ecJHMH2Lxj6IUafgq1uwy0fC wcBb1eagp3jDcwP8NXHckH95Izwt/LOcgBiCFjyB/Pws1Cl0/+He0FJIWclFYhGl +05pn3Mv36gXnup4hV3Lux+hFEKp1YY8BO9wuKFtbwfh7A2fkZRLiPPPnrIe9fft 0e/r7E9i1oBeA+oGL97DgxC2BSIdMR/hzLET+k4FfHiz1PIFj+rOOpw7aJko88zc zp48Q+ZCC5Ml3nZczJoIICSVW0UZtmhcRhi0A/MZ5SwCKIaCQJWaXflDjk6yTFi6 Zwr8KfU+IRS0COZgHu+7bwl7bcB6JbY= -----END CERTIFICATE-----Generated at Sun May 11 01:46:12 2025 by rpki-client