$ rpki-client -vvf rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft File: cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft (raw, json) Hash identifier: t7qKk0wTRFyBhsVdWgIL+fImVZWdTmNifR62TAhAMwY= Subject key identifier: 99:5A:5F:FE:73:46:04:D1:F9:55:0F:E0:38:0C:F4:BB:69:B2:68:46 Authority key identifier: 71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6 Certificate issuer: /CN=A911F627/serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6 Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft Manifest number: 014F Signing time: Fri 25 Apr 2025 03:16:45 +0000 Manifest this update: Fri 25 Apr 2025 03:16:44 +0000 Manifest next update: Fri 02 May 2025 03:16:44 +0000 Files and hashes: 1: cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl (hash: suaiyjoIYh+3Tv90xxg3KBUZ24ek2BEMYrXnISt+KcM=) 2: C001E5861FCC11EEB409C35EC4F9AE02.roa (hash: HsjfDSOih06ECrmd3NlukL0cYpkEm4olWRK90K810ck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F627, serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6 Validity Not Before: Apr 25 03:16:44 2025 GMT Not After : May 2 03:16:44 2025 GMT Subject: CN=680afe9d-8e6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:de:f3:aa:da:76:61:ec:27:f7:12:8e:e4:d9: c8:80:90:70:95:a2:42:4b:20:a8:de:30:8c:01:87: 1e:15:7a:6c:ba:6a:c0:44:92:38:8d:d2:34:ac:37: c9:1f:7d:19:0b:ae:fb:d4:09:bb:6c:99:62:bc:6b: 9d:08:20:e1:ea:4f:1a:b5:d3:16:18:eb:8b:65:b7: ba:da:7b:5e:80:54:15:33:48:b5:2d:15:b3:aa:86: e7:8f:be:6a:f4:a9:5e:f1:72:ba:b4:bf:25:d7:68: f2:8d:12:8e:be:af:9d:03:53:3e:ad:74:78:f3:74: 72:33:d0:24:8d:ab:5a:8a:b6:73:e3:0d:72:bd:51: 76:2b:dc:b7:b9:88:34:80:bf:c6:21:16:5a:92:f4: 6d:3e:c1:cd:49:2f:28:ea:48:13:4d:40:8a:6e:3b: 09:35:e4:43:36:df:44:67:c4:5e:ef:c8:84:83:cb: 41:91:13:2b:10:8a:a8:11:93:d8:4a:8d:ce:a1:6c: f6:8b:6e:04:71:fd:1f:a3:1c:91:2e:2e:c5:ac:12: 48:c6:41:52:bd:9f:96:55:6c:3f:b8:96:0c:2b:54: ca:14:02:20:eb:83:31:f6:2c:f3:4f:02:de:7b:ba: 4f:af:15:d2:97:31:49:3c:7e:ec:ad:a9:ad:58:97: 8c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5A:5F:FE:73:46:04:D1:F9:55:0F:E0:38:0C:F4:BB:69:B2:68:46 X509v3 Authority Key Identifier: keyid:71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:21:3a:6a:83:7d:ba:78:0a:b5:2f:b4:d0:32:6d:d6:73:4d: a1:ba:f6:70:90:75:75:b1:64:0f:87:ea:83:c4:28:d8:4e:a9: e1:69:a5:16:a6:0a:74:96:65:3f:9e:f7:eb:00:93:73:9e:8c: ee:67:2c:bd:c6:3f:48:03:ef:7c:56:e5:5c:09:58:ff:ab:11: 0f:2e:5e:75:83:4e:91:6b:01:1b:ab:22:de:d3:b3:07:82:f3: c8:00:e8:18:38:f0:90:76:cf:63:38:ed:52:4b:af:9e:45:93: 5b:bf:2c:f2:6c:a4:fd:45:88:72:bd:a5:37:69:2e:2a:f7:49: b3:08:eb:e5:48:f6:6d:2d:6a:61:98:e9:74:f9:a5:8f:b6:9e: c0:c4:c3:1a:78:67:63:d6:64:3b:5f:29:d5:24:00:3b:d4:fd: a3:ba:ac:fd:97:1c:f7:2b:c5:2a:f7:30:53:f8:40:48:01:33: 23:c5:06:08:3f:b5:ea:1c:f7:74:6f:78:0b:41:46:04:38:e2: a9:18:ef:48:db:cf:d5:42:fd:0c:86:c5:eb:4a:41:fe:e1:f7: 88:c5:6e:e0:8a:15:fe:3d:de:eb:dd:ae:bf:b6:c9:61:05:7e: ba:33:3f:c8:84:45:59:94:be:ef:ce:6f:9e:20:b2:75:2e:f4: 72:2b:57:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY2MjcxMTAvBgNVBAUTKDcxMTczRURBNzMwNUNDRkQxMEJENzhEODNBOTMzMEU4 Qzc2NDBERjYwHhcNMjUwNDI1MDMxNjQ0WhcNMjUwNTAyMDMxNjQ0WjAYMRYwFAYD VQQDEw02ODBhZmU5ZC04ZTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAud7zqtp2Yewn9xKO5NnIgJBwlaJCSyCo3jCMAYceFXpsumrARJI4jdI0rDfJ H30ZC6771Am7bJlivGudCCDh6k8atdMWGOuLZbe62ntegFQVM0i1LRWzqobnj75q 9Kle8XK6tL8l12jyjRKOvq+dA1M+rXR483RyM9AkjatairZz4w1yvVF2K9y3uYg0 gL/GIRZakvRtPsHNSS8o6kgTTUCKbjsJNeRDNt9EZ8Re78iEg8tBkRMrEIqoEZPY So3OoWz2i24Ecf0foxyRLi7FrBJIxkFSvZ+WVWw/uJYMK1TKFAIg64Mx9izzTwLe e7pPrxXSlzFJPH7sramtWJeMlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJlaX/5z RgTR+VUP4DgM9LtpsmhGMB8GA1UdIwQYMBaAFHEXPtpzBcz9EL142DqTMOjHZA32 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjYyNy80OTNEQTM2NjFG QzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQMFF2WGpZT3BNdzZNZGtE ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NSYy0ybk1GelAwUXZYallPcE13Nk1ka0RmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjYyNy80OTNEQTM2NjFGQzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQ MFF2WGpZT3BNdzZNZGtEZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmITpqg326eAq1L7TQMm3Wc02huvZwkHV1sWQPh+qDxCjYTqnhaaUW pgp0lmU/nvfrAJNznozuZyy9xj9IA+98VuVcCVj/qxEPLl51g06RawEbqyLe07MH gvPIAOgYOPCQds9jOO1SS6+eRZNbvyzybKT9RYhyvaU3aS4q90mzCOvlSPZtLWph mOl0+aWPtp7AxMMaeGdj1mQ7XynVJAA71P2juqz9lxz3K8Uq9zBT+EBIATMjxQYI P7XqHPd0b3gLQUYEOOKpGO9I28/VQv0MhsXrSkH+4feIxW7gihX+Pd7r3a6/tslh BX66Mz/IhEVZlL7vzm+eILJ1LvRyK1fi -----END CERTIFICATE-----Generated at Sat Apr 26 12:29:27 2025 by rpki-client