$ rpki-client -vvf rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft File: C7z952hnW5lPKiMRTDUUEiAVVbg.mft (raw, json) Hash identifier: XNbukJkJkdlhtje4PhssmprPuYTwW5tAqJykTN6tpFg= Subject key identifier: 51:F5:A7:C2:3F:7F:AA:DF:FB:79:FE:FB:B6:BF:B5:B4:C2:47:46:F2 Authority key identifier: 0B:BC:FD:E7:68:67:5B:99:4F:2A:23:11:4C:35:14:12:20:15:55:B8 Certificate issuer: /CN=A9123193/serialNumber=0BBCFDE768675B994F2A23114C351412201555B8 Certificate serial: 071E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft Manifest number: 0713 Signing time: Thu 24 Apr 2025 21:42:36 +0000 Manifest this update: Thu 24 Apr 2025 21:42:36 +0000 Manifest next update: Thu 01 May 2025 21:42:36 +0000 Files and hashes: 1: C7z952hnW5lPKiMRTDUUEiAVVbg.crl (hash: MEE9kESsBbVhkvXsmTjv14SpQE/ZCt0tYYwNM09JbD4=) 2: 31BF0C48D8DE11EDBACEEE7FC4F9AE02.roa (hash: 9esbbGrIEshCzgVAuh0Un9LyG8pst2lzVqe8bmApqT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.crl rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:42:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1822 (0x71e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123193, serialNumber=0BBCFDE768675B994F2A23114C351412201555B8 Validity Not Before: Apr 24 21:42:36 2025 GMT Not After : May 1 21:42:36 2025 GMT Subject: CN=680ab04c-286a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2c:ec:b7:ff:aa:47:b1:1a:85:fe:b3:54:b0: a6:c1:b2:67:df:81:57:f7:93:92:28:84:74:74:63: e8:bb:7b:37:53:52:a0:73:c6:5d:9e:75:ec:eb:68: c3:b9:55:e0:8a:04:1f:55:53:17:96:fd:fc:e3:b0: de:7f:58:c4:5e:3a:bd:52:2b:37:f6:2a:30:41:6e: fc:33:c5:10:3f:87:35:80:16:57:75:a1:73:8f:78: 28:5e:cc:47:53:db:c6:b3:bb:dd:de:eb:08:47:3a: cd:97:f2:c3:e0:6c:0f:a9:f3:ea:87:06:ed:11:8c: 8d:ff:db:7d:49:28:c3:0e:06:8b:f2:88:49:65:f9: 3d:88:89:13:92:93:4d:c1:8e:9a:74:86:a9:1f:3b: 02:71:86:57:cc:dc:4f:98:2e:ad:2f:9e:a3:22:a4: 41:28:04:42:d4:b1:5f:c0:bb:93:4c:3d:4a:fd:d0: 55:2d:08:c7:b8:9a:bc:ab:92:0a:36:c7:cc:a9:a7: 22:7a:42:0f:84:f5:e8:83:fa:f6:68:a1:43:9d:a1: bc:23:e6:ff:a1:5d:b9:e2:17:d8:9b:a8:8a:48:85: b4:c1:76:14:74:7f:74:43:e1:fe:65:a1:8a:86:30: 67:71:cb:1f:84:48:3c:bb:a6:a9:06:e3:93:44:7a: bb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F5:A7:C2:3F:7F:AA:DF:FB:79:FE:FB:B6:BF:B5:B4:C2:47:46:F2 X509v3 Authority Key Identifier: keyid:0B:BC:FD:E7:68:67:5B:99:4F:2A:23:11:4C:35:14:12:20:15:55:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:5b:8d:04:53:89:a3:4e:14:bb:f9:a9:6d:06:d9:68:76:88: 27:3e:8e:15:c7:9f:5c:a0:a3:6c:0e:d1:a1:6f:79:1c:bc:63: 47:ef:7c:83:1a:54:ff:96:69:fa:5a:2e:19:4b:7b:fe:95:54: e0:22:a3:0f:56:f9:55:38:26:16:10:f3:56:a9:0e:12:84:7c: f4:a3:cd:45:74:ef:a0:f5:b2:37:02:54:8d:9c:20:bd:ed:d2: a0:f3:1e:d0:b1:dc:66:04:1e:3f:2c:59:9c:67:d1:5d:df:43: ee:24:f6:07:89:f6:20:ef:f4:48:1d:e5:89:17:a6:59:da:6f: db:20:ae:78:ff:29:2b:f8:d3:eb:e4:43:20:4f:b6:5c:20:cc: 9e:96:37:8a:e1:e8:4e:f4:f9:e2:9c:e7:55:77:32:76:ef:da: 52:21:9b:5b:96:18:d4:8c:d5:32:68:b1:df:64:e3:9f:39:f0: 45:c8:f4:25:c5:20:00:5f:cb:dc:a6:ca:93:89:34:0f:b6:13: 48:29:f2:4b:ef:ee:bb:ff:10:c7:a0:01:47:a0:05:18:cd:a5: 50:54:54:54:87:b9:ba:88:70:a2:62:e8:fd:73:8b:f6:ec:37: f6:1b:6c:40:4b:f4:a1:cd:cf:38:1d:f5:b3:68:8b:61:54:ed: c9:21:f6:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMxOTMxMTAvBgNVBAUTKDBCQkNGREU3Njg2NzVCOTk0RjJBMjMxMTRDMzUxNDEy MjAxNTU1QjgwHhcNMjUwNDI0MjE0MjM2WhcNMjUwNTAxMjE0MjM2WjAYMRYwFAYD VQQDEw02ODBhYjA0Yy0yODZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCzst/+qR7Eahf6zVLCmwbJn34FX95OSKIR0dGPou3s3U1Kgc8ZdnnXs62jD uVXgigQfVVMXlv3847Def1jEXjq9Uis39iowQW78M8UQP4c1gBZXdaFzj3goXsxH U9vGs7vd3usIRzrNl/LD4GwPqfPqhwbtEYyN/9t9SSjDDgaL8ohJZfk9iIkTkpNN wY6adIapHzsCcYZXzNxPmC6tL56jIqRBKARC1LFfwLuTTD1K/dBVLQjHuJq8q5IK NsfMqaciekIPhPXog/r2aKFDnaG8I+b/oV254hfYm6iKSIW0wXYUdH90Q+H+ZaGK hjBnccsfhEg8u6apBuOTRHq7uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFH1p8I/ f6rf+3n++7a/tbTCR0byMB8GA1UdIwQYMBaAFAu8/edoZ1uZTyojEUw1FBIgFVW4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzE5My9DQThBNEIzQzM5 RDkxMUVCQTc4MUZBNTdDNEY5QUUwMi9DN3o5NTJoblc1bFBLaU1SVERVVUVpQVZW YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M3ejk1MmhuVzVsUEtpTVJURFVVRWlBVlZiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzE5My9DQThBNEIzQzM5RDkxMUVCQTc4MUZBNTdDNEY5QUUwMi9DN3o5NTJoblc1 bFBLaU1SVERVVUVpQVZWYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhW40EU4mjThS7+altBtlodognPo4Vx59coKNsDtGhb3kcvGNH73yD GlT/lmn6Wi4ZS3v+lVTgIqMPVvlVOCYWEPNWqQ4ShHz0o81FdO+g9bI3AlSNnCC9 7dKg8x7QsdxmBB4/LFmcZ9Fd30PuJPYHifYg7/RIHeWJF6ZZ2m/bIK54/ykr+NPr 5EMgT7ZcIMyeljeK4ehO9PninOdVdzJ279pSIZtblhjUjNUyaLHfZOOfOfBFyPQl xSAAX8vcpsqTiTQPthNIKfJL7+67/xDHoAFHoAUYzaVQVFRUh7m6iHCiYuj9c4v2 7Df2G2xAS/Shzc84HfWzaIthVO3JIfan -----END CERTIFICATE-----Generated at Sat Apr 26 15:24:18 2025 by rpki-client