$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft File: RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft (raw, json) Hash identifier: yUIhFh3SuLBZO7fGwdHZ54E6XC8byTymTBaVOki3UqY= Subject key identifier: 8C:32:D0:12:4D:58:F4:7B:26:E8:EE:FF:B7:DD:1B:A3:9B:7A:13:29 Authority key identifier: 44:F8:D1:53:B7:7B:09:2B:11:ED:F0:0A:93:E4:BB:64:09:1C:24:47 Certificate issuer: /CN=A91F3C11/serialNumber=44F8D153B77B092B11EDF00A93E4BB64091C2447 Certificate serial: 0979 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft Manifest number: 0979 Signing time: Sat 10 May 2025 14:58:14 +0000 Manifest this update: Sat 10 May 2025 14:58:14 +0000 Manifest next update: Sat 17 May 2025 14:58:14 +0000 Files and hashes: 1: RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl (hash: JnebH02q0lu0kpo2Z4kGaCOag59g85ZmXQILAfb1/ao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2425 (0x979) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3C11, serialNumber=44F8D153B77B092B11EDF00A93E4BB64091C2447 Validity Not Before: May 10 14:58:14 2025 GMT Not After : May 17 14:58:14 2025 GMT Subject: CN=681f6986-5d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cf:0a:81:c7:9d:bb:7f:32:ac:c3:3c:12:47: 4c:27:73:19:38:20:fe:12:eb:87:4c:02:8f:db:ad: 0e:6b:15:c6:65:aa:30:12:cd:0e:59:b0:f0:1c:eb: b4:4f:80:11:fa:23:1c:45:6f:e2:9f:aa:a8:3c:5d: b4:ad:48:3c:51:25:3a:0b:96:c5:f2:8e:8c:30:36: a9:97:7c:5f:cd:5c:89:ee:6a:fd:63:40:48:42:15: b9:a6:5d:50:f4:58:dd:9d:59:3e:b7:80:2f:d2:b9: 65:7f:16:1c:b7:18:38:e8:3d:8b:ba:31:68:c4:7b: 2d:90:0f:20:13:05:a2:34:f3:f0:4b:2d:c1:2e:de: dc:16:b6:89:51:50:56:fe:6c:71:0c:5b:e4:15:4f: 1e:c1:0c:b0:5b:d6:35:2b:fa:a6:af:78:98:1c:9f: 53:1e:31:0c:58:bf:eb:c8:72:93:b7:4f:ed:36:48: 52:3b:9c:9a:ba:f8:ec:5e:7d:ca:89:fa:1c:2e:a9: eb:e9:07:1a:08:ce:66:14:7d:a0:af:66:fa:56:91: a2:a5:86:c2:0c:21:12:0e:0c:fa:0a:61:87:05:29: 78:b1:be:db:69:0a:79:66:1a:0c:c1:74:ce:3d:a7: d5:f9:3f:8a:b0:9b:af:33:d9:23:43:bd:92:44:49: 74:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:32:D0:12:4D:58:F4:7B:26:E8:EE:FF:B7:DD:1B:A3:9B:7A:13:29 X509v3 Authority Key Identifier: keyid:44:F8:D1:53:B7:7B:09:2B:11:ED:F0:0A:93:E4:BB:64:09:1C:24:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:56:bf:7c:a2:7b:58:3d:3d:1f:50:d4:f9:44:29:03:6c:93: 2b:05:a9:86:d5:bc:2d:d9:d7:51:05:a7:c3:2b:7b:94:6c:f8: e3:aa:fc:77:38:56:10:88:e4:ec:74:a9:d8:0c:1c:19:29:cd: 61:e8:a2:d7:bc:08:cf:e0:c7:0a:23:07:f8:c6:82:01:cd:93: e2:a6:a1:2e:11:06:57:ed:eb:04:d4:23:8d:54:fd:89:85:a9: 8f:62:e5:20:f7:86:f1:33:40:f3:f2:3a:bc:da:42:e8:d7:a0: 62:19:82:68:e4:59:74:3e:70:d3:79:cb:7b:20:b4:0f:ba:44: ac:64:84:1b:39:92:3b:25:c5:06:d9:7d:f6:8a:57:92:c5:98: 36:57:d7:82:e0:bb:4e:4d:d1:5c:b5:3f:d1:6d:86:b8:3d:bb: b1:16:37:21:10:b1:d7:24:96:95:e5:de:24:e4:a0:0a:92:7b: ea:ec:20:71:b8:61:27:93:fa:0d:63:d0:2f:5d:bd:a3:a2:72: 8c:c1:7d:7a:b0:f5:10:e7:f6:3e:29:fb:d6:50:07:e2:c2:f0: 35:8d:4e:53:51:50:d9:93:8d:c0:0d:ae:b7:f2:cd:18:cd:00: ac:33:b3:bf:c1:b5:5f:02:a2:2d:b5:41:b3:e3:c1:ee:d2:4e: 35:48:8e:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNDMTExMTAvBgNVBAUTKDQ0RjhEMTUzQjc3QjA5MkIxMUVERjAwQTkzRTRCQjY0 MDkxQzI0NDcwHhcNMjUwNTEwMTQ1ODE0WhcNMjUwNTE3MTQ1ODE0WjAYMRYwFAYD VQQDEw02ODFmNjk4Ni01ZDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAus8Kgcedu38yrMM8EkdMJ3MZOCD+EuuHTAKP260OaxXGZaowEs0OWbDwHOu0 T4AR+iMcRW/in6qoPF20rUg8USU6C5bF8o6MMDapl3xfzVyJ7mr9Y0BIQhW5pl1Q 9FjdnVk+t4Av0rllfxYctxg46D2LujFoxHstkA8gEwWiNPPwSy3BLt7cFraJUVBW /mxxDFvkFU8ewQywW9Y1K/qmr3iYHJ9THjEMWL/ryHKTt0/tNkhSO5yauvjsXn3K ifocLqnr6QcaCM5mFH2gr2b6VpGipYbCDCESDgz6CmGHBSl4sb7baQp5ZhoMwXTO PafV+T+KsJuvM9kjQ72SREl0xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwy0BJN WPR7Juju/7fdG6ObehMpMB8GA1UdIwQYMBaAFET40VO3ewkrEe3wCpPku2QJHCRH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0MxMS81MTk4RkI5NjhG N0IxMUVBOUFDQjdFN0ZDNEY5QUUwMi9SUGpSVTdkN0NTc1I3ZkFLay1TN1pBa2NK RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JQalJVN2Q3Q1NzUjdmQUtrLVM3WkFrY0pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0MxMS81MTk4RkI5NjhGN0IxMUVBOUFDQjdFN0ZDNEY5QUUwMi9SUGpSVTdkN0NT c1I3ZkFLay1TN1pBa2NKRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADVr98ontYPT0fUNT5RCkDbJMrBamG1bwt2ddRBafDK3uUbPjjqvx3 OFYQiOTsdKnYDBwZKc1h6KLXvAjP4McKIwf4xoIBzZPipqEuEQZX7esE1CONVP2J hamPYuUg94bxM0Dz8jq82kLo16BiGYJo5Fl0PnDTect7ILQPukSsZIQbOZI7JcUG 2X32ileSxZg2V9eC4LtOTdFctT/RbYa4PbuxFjchELHXJJaV5d4k5KAKknvq7CBx uGEnk/oNY9AvXb2jonKMwX16sPUQ5/Y+KfvWUAfiwvA1jU5TUVDZk43ADa638s0Y zQCsM7O/wbVfAqIttUGz48Hu0k41SI69 -----END CERTIFICATE-----Generated at Sun May 11 01:28:57 2025 by rpki-client