$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft File: 47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft (raw, json) Hash identifier: f/LLYJRC/klCin/6hx3LuI+AKoT0KHJyw7mY20fe5m8= Subject key identifier: 20:82:6E:2C:F7:53:32:C6:19:86:89:DF:7C:9E:BE:C6:47:D2:B5:7D Authority key identifier: E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69 Certificate issuer: /CN=A9123072/serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469 Certificate serial: 079F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft Manifest number: 078A Signing time: Thu 24 Apr 2025 21:12:54 +0000 Manifest this update: Thu 24 Apr 2025 21:12:53 +0000 Manifest next update: Thu 01 May 2025 21:12:53 +0000 Files and hashes: 1: 47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl (hash: n6MQKOEeBVyLimRbny3FgRmaergBeIjavjs6cC2QZX8=) 2: E75B22220B5D11EBADED9667C4F9AE02.roa (hash: XG/yWG4WDbh/MIdJR6dBMm/WynV56cePJGSqotWER4c=) 3: 7C8D74D43CC011EFAD90AC3AC4F9AE02.roa (hash: FLuUDUZLzFBpjgjpzZS1FAy/kyT3R1jD8dtHJ+DGsc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:12:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1951 (0x79f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123072, serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469 Validity Not Before: Apr 24 21:12:53 2025 GMT Not After : May 1 21:12:53 2025 GMT Subject: CN=680aa956-c440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:17:23:79:58:c4:7f:50:6c:f9:4b:1e:ad:d4: 34:bb:ea:3d:c4:f8:b2:35:cf:53:7b:88:4c:a0:4b: 2c:3a:f3:e1:ff:35:cc:9a:28:90:06:c5:ba:71:4e: 94:aa:9d:46:f9:8d:23:41:85:0e:44:83:70:5c:db: 41:73:f9:fe:fe:9f:b1:98:50:f8:98:40:25:d0:e2: 7c:d9:dc:3f:ca:c9:48:c2:14:a1:b2:cc:10:7f:b0: 86:63:a5:f2:de:ee:e9:6b:9c:c6:06:89:e7:11:d6: 87:00:54:e5:c1:64:49:d7:48:1e:66:ec:3f:d1:bf: 1d:09:7c:c1:e9:fa:13:13:19:12:c9:86:bb:8e:f0: 31:90:8d:f9:29:8a:bd:ae:a2:8a:66:73:b2:9f:66: e6:06:e6:90:6b:3a:8e:1e:09:1c:f6:29:3a:28:41: d1:83:14:20:da:da:c4:58:11:41:43:2d:00:a5:27: 2b:d2:7b:34:0a:75:9b:8a:68:4e:3a:15:f4:a8:42: 3b:55:bf:35:c2:e7:d2:60:21:cc:79:1c:d7:b6:fa: e1:e9:3d:16:15:f9:19:a8:09:d0:a4:41:96:c3:10: 67:15:d5:42:68:46:22:bc:6e:e8:92:e9:ab:47:f0: b2:60:e2:65:ae:f8:81:d1:d3:20:88:f8:98:da:ba: 4c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:82:6E:2C:F7:53:32:C6:19:86:89:DF:7C:9E:BE:C6:47:D2:B5:7D X509v3 Authority Key Identifier: keyid:E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b4:71:fd:f4:98:fc:c2:0d:8d:b5:d3:84:d8:0f:60:c7:db: 3a:53:75:a4:ad:b8:01:6a:7d:fa:eb:cb:f9:69:49:22:67:06: b5:10:3b:8d:13:b7:49:ba:0e:f6:34:9e:52:73:ac:b8:76:70: 4f:5e:5c:c0:5e:11:cc:23:b1:a8:fe:0b:b8:57:bd:9a:f0:23: 89:fa:d7:74:d3:e0:a1:c2:a1:95:1b:e9:09:34:a4:25:bb:13: b8:3c:28:f2:77:12:ee:1d:48:95:27:d8:f1:aa:8e:3e:f1:fe: 26:94:08:fc:f3:be:97:08:2b:ea:77:ab:26:5a:1f:5c:bc:14: 15:c2:18:58:e5:66:b9:38:89:e4:28:e5:ac:40:24:31:50:5e: 4f:24:cf:f4:5f:77:52:35:ba:89:9d:aa:4e:c7:d6:72:26:07: d8:66:e7:b0:c9:4a:cd:52:fd:df:22:16:1c:15:b8:81:27:56: 77:1d:e0:c3:a3:32:d6:dd:bd:69:92:b3:ec:28:3d:02:7d:13: a4:16:e8:49:3d:df:98:6e:81:6a:ec:a9:d1:42:55:e8:cf:87: 10:0a:02:dd:1e:41:f8:a3:b6:77:d3:3f:b4:28:60:3e:60:26: a5:10:78:77:16:d5:f1:84:00:d6:07:7b:e2:11:b3:7f:74:75: 17:e9:60:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMwNzIxMTAvBgNVBAUTKEUzQkNCQTg4QkVEQzJBNzY4QTk4NjVGNDE2RDY4QTdD MzAzM0Y0NjkwHhcNMjUwNDI0MjExMjUzWhcNMjUwNTAxMjExMjUzWjAYMRYwFAYD VQQDEw02ODBhYTk1Ni1jNDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5hcjeVjEf1Bs+UserdQ0u+o9xPiyNc9Te4hMoEssOvPh/zXMmiiQBsW6cU6U qp1G+Y0jQYUORINwXNtBc/n+/p+xmFD4mEAl0OJ82dw/yslIwhShsswQf7CGY6Xy 3u7pa5zGBonnEdaHAFTlwWRJ10geZuw/0b8dCXzB6foTExkSyYa7jvAxkI35KYq9 rqKKZnOyn2bmBuaQazqOHgkc9ik6KEHRgxQg2trEWBFBQy0ApScr0ns0CnWbimhO OhX0qEI7Vb81wufSYCHMeRzXtvrh6T0WFfkZqAnQpEGWwxBnFdVCaEYivG7okumr R/CyYOJlrviB0dMgiPiY2rpMLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCCbiz3 UzLGGYaJ33yevsZH0rV9MB8GA1UdIwQYMBaAFOO8uoi+3Cp2iphl9BbWinwwM/Rp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzA3Mi8wQ0VBNDk1QzBC NUMxMUVCOTlBMTc1NjJDNEY5QUUwMi80N3k2aUw3Y0tuYUttR1gwRnRhS2ZEQXo5 R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ3eTZpTDdjS25hS21HWDBGdGFLZkRBejlHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzA3Mi8wQ0VBNDk1QzBCNUMxMUVCOTlBMTc1NjJDNEY5QUUwMi80N3k2aUw3Y0tu YUttR1gwRnRhS2ZEQXo5R2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7tHH99Jj8wg2NtdOE2A9gx9s6U3WkrbgBan3668v5aUkiZwa1EDuN E7dJug72NJ5Sc6y4dnBPXlzAXhHMI7Go/gu4V72a8COJ+td00+ChwqGVG+kJNKQl uxO4PCjydxLuHUiVJ9jxqo4+8f4mlAj8876XCCvqd6smWh9cvBQVwhhY5Wa5OInk KOWsQCQxUF5PJM/0X3dSNbqJnapOx9ZyJgfYZuewyUrNUv3fIhYcFbiBJ1Z3HeDD ozLW3b1pkrPsKD0CfROkFuhJPd+YboFq7KnRQlXoz4cQCgLdHkH4o7Z30z+0KGA+ YCalEHh3FtXxhADWB3viEbN/dHUX6WD9 -----END CERTIFICATE-----Generated at Sat Apr 26 05:28:35 2025 by rpki-client