$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft File: cBtV7SDYPjSNgjfON1l5WevAGCQ.mft (raw, json) Hash identifier: 1gfssmBpCYMkXMyqejVHTfSnG4WaY8sBDOMP9ytYKfA= Subject key identifier: 39:9A:EA:DC:DC:B1:E1:57:CA:BD:B0:B5:79:45:7D:84:7E:D9:87:7C Authority key identifier: 70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24 Certificate issuer: /CN=A91E5D61/serialNumber=701B55ED20D83E348D8237CE37597959EBC01824 Certificate serial: 1285 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft Manifest number: 471D Signing time: Mon 12 May 2025 14:20:57 +0000 Manifest this update: Mon 12 May 2025 14:20:57 +0000 Manifest next update: Mon 19 May 2025 14:20:57 +0000 Files and hashes: 1: cBtV7SDYPjSNgjfON1l5WevAGCQ.crl (hash: CuPLCpKuXaL8C50r6sgRQtr1ZNHKJy7mSXA2atrE7JM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:20:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4741 (0x1285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=701B55ED20D83E348D8237CE37597959EBC01824 Validity Not Before: May 12 14:20:57 2025 GMT Not After : May 19 14:20:57 2025 GMT Subject: CN=682203c9-ac11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5e:d8:c5:6e:cb:1b:33:c8:f1:92:8a:45:ec: 54:57:01:a5:62:ab:19:c7:ac:3c:3a:96:3b:46:2b: 45:89:6e:0e:e7:ce:c3:82:57:cd:f8:96:65:6f:ac: f5:f0:35:2a:f9:61:08:16:20:39:70:3d:55:21:ba: 67:0d:97:9d:9f:3d:e7:c4:06:3c:79:e2:31:8a:4e: 18:b1:d8:f7:55:44:d0:ae:c3:75:e4:b9:b9:1b:67: 3e:17:2c:2f:55:e2:de:e7:bf:a5:42:a1:96:a9:45: af:89:9c:82:a6:59:24:e1:05:84:d0:7d:d6:5a:a6: 2a:65:87:07:1b:bf:cc:3e:6b:75:24:37:d8:a8:0c: d6:15:ff:d0:53:15:10:3f:d7:ab:51:79:05:a9:2a: 8f:e2:7a:1f:df:e0:88:d7:fd:ed:2a:08:f7:5c:e6: b5:38:5d:bd:fb:2e:b3:a4:ad:46:ed:36:33:2a:eb: 18:97:e5:fc:18:08:ba:09:bf:67:4d:5d:f0:05:6c: 34:27:9e:95:80:b6:e6:bb:df:f4:1b:23:d6:1b:55: 2a:c6:6f:a8:4a:89:41:a4:5d:c4:f6:7c:ec:76:a8: a4:44:95:e7:3d:bd:cb:dc:4e:d5:d2:05:5b:cf:b1: 94:dc:aa:df:1e:90:c6:14:52:14:7a:81:ef:36:93: a6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9A:EA:DC:DC:B1:E1:57:CA:BD:B0:B5:79:45:7D:84:7E:D9:87:7C X509v3 Authority Key Identifier: keyid:70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:69:b6:9d:47:79:4a:f8:76:d2:4f:f7:b4:5d:ad:0d:20:69: 87:4a:b0:cd:b9:e2:4a:f0:86:e0:f9:90:70:10:93:b3:0c:a7: 0d:7c:a6:7b:4f:f3:be:ff:ab:59:d0:53:fb:f0:49:c6:91:d1: 2a:12:3e:30:7b:87:cf:8b:b0:e4:eb:a0:61:69:75:c5:55:88: 59:73:15:d8:4e:6f:c6:fa:c1:8b:e2:13:86:21:b0:8d:51:ec: fa:71:23:2d:e8:8b:df:d3:a3:da:fd:d5:8a:66:71:85:cf:dc: 2e:d6:0c:cb:72:e0:8a:a3:32:76:7c:36:21:19:84:9d:03:c8: 88:ff:70:a8:26:d2:4f:0f:6f:b9:5b:b1:97:2b:a1:1d:5e:dc: c7:cf:33:d4:88:35:58:60:e0:78:04:38:40:01:45:06:c7:41: 2d:2b:4e:83:b3:14:02:2c:ad:ac:48:3c:6f:5d:de:9d:4f:e8: e2:d1:86:28:22:59:80:9b:e1:d4:a9:e0:8d:ad:c6:56:0c:72: 13:63:3d:b6:ed:ca:b4:50:f4:d8:58:5c:7e:b6:c9:93:4a:a3: 39:ad:96:c3:58:70:00:78:f3:02:08:45:c0:40:98:cb:e9:86: ff:df:fc:5f:fb:8b:cf:e7:9d:b0:ba:60:79:28:3e:49:05:8c: 91:98:e8:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDcwMUI1NUVEMjBEODNFMzQ4RDgyMzdDRTM3NTk3OTU5 RUJDMDE4MjQwHhcNMjUwNTEyMTQyMDU3WhcNMjUwNTE5MTQyMDU3WjAYMRYwFAYD VQQDEw02ODIyMDNjOS1hYzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsF7YxW7LGzPI8ZKKRexUVwGlYqsZx6w8OpY7RitFiW4O587DglfN+JZlb6z1 8DUq+WEIFiA5cD1VIbpnDZednz3nxAY8eeIxik4Ysdj3VUTQrsN15Lm5G2c+Fywv VeLe57+lQqGWqUWviZyCplkk4QWE0H3WWqYqZYcHG7/MPmt1JDfYqAzWFf/QUxUQ P9erUXkFqSqP4nof3+CI1/3tKgj3XOa1OF29+y6zpK1G7TYzKusYl+X8GAi6Cb9n TV3wBWw0J56VgLbmu9/0GyPWG1Uqxm+oSolBpF3E9nzsdqikRJXnPb3L3E7V0gVb z7GU3KrfHpDGFFIUeoHvNpOmEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDma6tzc seFXyr2wtXlFfYR+2Yd8MB8GA1UdIwQYMBaAFHAbVe0g2D40jYI3zjdZeVnrwBgk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS9FRTY3RDhDMDFE NzgxMUUyODc5RTM4QzUwOEIwMkNEMi9jQnRWN1NEWVBqU05namZPTjFsNVdldkFH Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NCdFY3U0RZUGpTTmdqZk9OMWw1V2V2QUdDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS9FRTY3RDhDMDFENzgxMUUyODc5RTM4QzUwOEIwMkNEMi9jQnRWN1NEWVBq U05namZPTjFsNVdldkFHQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpabadR3lK+HbST/e0Xa0NIGmHSrDNueJK8Ibg+ZBwEJOzDKcNfKZ7 T/O+/6tZ0FP78EnGkdEqEj4we4fPi7Dk66BhaXXFVYhZcxXYTm/G+sGL4hOGIbCN Uez6cSMt6Ivf06Pa/dWKZnGFz9wu1gzLcuCKozJ2fDYhGYSdA8iI/3CoJtJPD2+5 W7GXK6EdXtzHzzPUiDVYYOB4BDhAAUUGx0EtK06DsxQCLK2sSDxvXd6dT+ji0YYo IlmAm+HUqeCNrcZWDHITYz227cq0UPTYWFx+tsmTSqM5rZbDWHAAePMCCEXAQJjL 6Yb/3/xf+4vP552wumB5KD5JBYyRmOga -----END CERTIFICATE-----Generated at Tue May 13 08:12:13 2025 by rpki-client