$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft File: d_7bUqwSiVBJ40An4RJqb9FRHu8.mft (raw, json) Hash identifier: HEJ+DxdlX3gGr8v0kd+h7/YL9lz1Gt1L1JOVzVbNqAI= Subject key identifier: 41:54:E5:6C:FE:BB:E0:C3:FC:6E:97:5A:F2:3F:1A:1F:78:37:DE:3B Authority key identifier: 77:FE:DB:52:AC:12:89:50:49:E3:40:27:E1:12:6A:6F:D1:51:1E:EF Certificate issuer: /CN=A9114D23/serialNumber=77FEDB52AC12895049E34027E1126A6FD1511EEF Certificate serial: 346F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft Manifest number: 346F Signing time: Thu 24 Apr 2025 15:04:56 +0000 Manifest this update: Thu 24 Apr 2025 15:04:56 +0000 Manifest next update: Thu 01 May 2025 15:04:56 +0000 Files and hashes: 1: d_7bUqwSiVBJ40An4RJqb9FRHu8.crl (hash: YxxziwKA/AFYP97dXG1AayUVNU3bRO/c6eg6nfr+IKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.crl rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:04:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13423 (0x346f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D23, serialNumber=77FEDB52AC12895049E34027E1126A6FD1511EEF Validity Not Before: Apr 24 15:04:56 2025 GMT Not After : May 1 15:04:56 2025 GMT Subject: CN=680a5318-72eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ee:df:48:34:25:5d:66:e7:f1:75:62:b4:20: 80:4b:3e:6a:69:e1:a8:32:6d:03:5e:9d:94:bb:22: af:dd:b2:ed:72:3c:c6:90:a0:30:f4:11:87:53:7d: 68:3f:35:12:04:c3:54:00:e8:49:54:d2:65:1f:a9: 61:f4:13:b2:92:95:8b:fd:8a:81:03:d6:f2:97:1c: 4c:83:d5:fc:df:9f:6c:a1:a7:b2:aa:3c:81:fc:b9: f9:ed:58:99:39:e1:3b:3f:d4:34:ee:ee:74:fc:39: f1:47:d8:d6:2c:5f:45:38:3b:69:6c:4d:d9:ce:51: 53:f1:c8:eb:33:80:ab:b8:81:e8:52:6e:3f:b7:f4: f6:86:84:d4:7a:27:92:2d:13:fb:78:38:0a:69:b0: 47:90:ce:60:63:11:5a:02:4a:f5:13:fc:c9:33:73: f3:3c:b2:f8:7d:2a:bc:0f:c3:4a:8c:25:e3:ca:c5: 06:74:3a:4b:c5:6c:ed:e7:be:b8:94:a8:18:7d:51: 6b:cc:19:1c:63:13:ef:e3:3a:66:b2:6d:0c:d8:74: b4:a4:0e:e2:1d:c5:98:c2:40:b9:d2:24:cd:06:2c: ba:fa:49:cc:db:c0:77:62:48:3c:8d:e0:34:14:a7: 39:1a:a0:58:55:39:30:a4:29:67:eb:22:26:99:94: 5f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:54:E5:6C:FE:BB:E0:C3:FC:6E:97:5A:F2:3F:1A:1F:78:37:DE:3B X509v3 Authority Key Identifier: keyid:77:FE:DB:52:AC:12:89:50:49:E3:40:27:E1:12:6A:6F:D1:51:1E:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:a4:b0:e7:8c:5a:0a:2a:8f:26:24:6e:56:d5:c8:71:87:7b: 84:88:cf:66:41:1f:ac:99:62:78:58:0b:68:4d:d8:ea:e3:5b: 10:d2:21:2d:ab:a9:a0:95:91:5f:d9:39:ad:f7:ee:64:94:a8: a7:46:2c:73:0f:c5:16:a9:48:af:80:81:66:c5:de:93:dd:9b: 15:e4:95:54:1d:1b:c4:6a:e2:3c:4b:2c:74:3f:0f:b2:d3:03: 74:1e:61:17:35:0a:7a:74:8b:61:e4:10:0a:15:81:19:be:a5: 91:b9:d2:aa:56:87:d4:17:28:ec:92:bf:0f:be:95:c0:15:94: ec:c1:1f:47:d3:84:33:77:4a:89:b3:9b:f8:38:4a:2f:32:79: 4a:b8:35:cb:63:45:34:82:81:b5:5a:9f:18:5e:7b:99:64:80: a7:f9:e5:b2:65:3b:7d:70:27:28:cc:a7:42:86:b1:fd:a8:3b: fe:78:1b:58:9e:df:c5:d3:51:6b:f3:20:4c:9f:e0:60:52:46: 27:50:ad:67:ea:5d:a5:c4:2c:a1:cb:9e:a1:89:f4:cf:9e:f4: fd:72:9e:5f:06:ad:5f:6d:cd:d1:8c:e2:92:c6:c1:14:49:67: ac:61:34:ee:c5:a4:3c:07:0b:89:bb:a0:07:d0:a7:65:2f:b1: e3:da:f2:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTREMjMxMTAvBgNVBAUTKDc3RkVEQjUyQUMxMjg5NTA0OUUzNDAyN0UxMTI2QTZG RDE1MTFFRUYwHhcNMjUwNDI0MTUwNDU2WhcNMjUwNTAxMTUwNDU2WjAYMRYwFAYD VQQDEw02ODBhNTMxOC03MmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqO7fSDQlXWbn8XVitCCASz5qaeGoMm0DXp2UuyKv3bLtcjzGkKAw9BGHU31o PzUSBMNUAOhJVNJlH6lh9BOykpWL/YqBA9bylxxMg9X8359soaeyqjyB/Ln57ViZ OeE7P9Q07u50/DnxR9jWLF9FODtpbE3ZzlFT8cjrM4CruIHoUm4/t/T2hoTUeieS LRP7eDgKabBHkM5gYxFaAkr1E/zJM3PzPLL4fSq8D8NKjCXjysUGdDpLxWzt5764 lKgYfVFrzBkcYxPv4zpmsm0M2HS0pA7iHcWYwkC50iTNBiy6+knM28B3Ykg8jeA0 FKc5GqBYVTkwpCln6yImmZRfkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFU5Wz+ u+DD/G6XWvI/Gh94N947MB8GA1UdIwQYMBaAFHf+21KsEolQSeNAJ+ESam/RUR7v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQyMy8wNDY5MDk3ODFE QTExMUUyQTU2REY2OTIwOEIwMkNEMi9kXzdiVXF3U2lWQko0MEFuNFJKcWI5RlJI dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RfN2JVcXdTaVZCSjQwQW40UkpxYjlGUkh1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEQyMy8wNDY5MDk3ODFEQTExMUUyQTU2REY2OTIwOEIwMkNEMi9kXzdiVXF3U2lW Qko0MEFuNFJKcWI5RlJIdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNpLDnjFoKKo8mJG5W1chxh3uEiM9mQR+smWJ4WAtoTdjq41sQ0iEt q6mglZFf2Tmt9+5klKinRixzD8UWqUivgIFmxd6T3ZsV5JVUHRvEauI8Syx0Pw+y 0wN0HmEXNQp6dIth5BAKFYEZvqWRudKqVofUFyjskr8PvpXAFZTswR9H04Qzd0qJ s5v4OEovMnlKuDXLY0U0goG1Wp8YXnuZZICn+eWyZTt9cCcozKdChrH9qDv+eBtY nt/F01Fr8yBMn+BgUkYnUK1n6l2lxCyhy56hifTPnvT9cp5fBq1fbc3RjOKSxsEU SWesYTTuxaQ8BwuJu6AH0KdlL7Hj2vLv -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:09 2025 by rpki-client