$ rpki-client -vvf rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft File: r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft (raw, json) Hash identifier: iksMRHVJV/Kimz23by+VUHDMulBNEnshF5i5PnOQSC4= Subject key identifier: D4:CC:43:4B:D9:BE:2A:97:D1:9A:CF:F9:F0:7E:4E:3C:C8:8C:A7:19 Authority key identifier: AF:B8:FF:E1:E8:68:62:96:B9:96:C6:3A:A9:02:EA:9C:12:8F:48:FE Certificate issuer: /CN=A912BA82/serialNumber=AFB8FFE1E8686296B996C63AA902EA9C128F48FE Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft Manifest number: E0 Signing time: Fri 25 Apr 2025 04:33:38 +0000 Manifest this update: Fri 25 Apr 2025 04:33:38 +0000 Manifest next update: Fri 02 May 2025 04:33:38 +0000 Files and hashes: 1: r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl (hash: 8S7/LeqYV3e16raKBUxbLAAeSlD0vAyDGaOtKXgd3wE=) 2: 6198218AEB3311EEA75DE77DC4F9AE02.roa (hash: br9VY1Ap5bODWGjIwXH93XykBR4wm+eKQRXiepCLuxo=) 3: 4BFDDACCEB3311EE9D65C57DC4F9AE02.roa (hash: JbXYoZCeV73k0ydVhueXLAHh7xzomEgWbLFpEGgJxiE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:33:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BA82, serialNumber=AFB8FFE1E8686296B996C63AA902EA9C128F48FE Validity Not Before: Apr 25 04:33:38 2025 GMT Not After : May 2 04:33:38 2025 GMT Subject: CN=680b10a2-9c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:82:13:a3:3e:20:60:ee:18:a3:c8:51:17:5e: 1b:b2:4c:5e:aa:30:65:14:63:9a:e7:cf:fe:5f:db: 81:ba:8c:6f:e1:8b:f1:f9:e8:c5:21:88:a0:a9:18: dc:ac:6e:23:7e:22:53:96:ae:d9:f5:e2:1a:25:8e: a0:04:01:40:64:3e:97:84:aa:d0:50:39:04:08:dc: e8:25:4f:e8:7a:f9:e6:bb:62:5a:15:d1:78:d3:99: fb:1d:02:d0:40:24:5a:83:92:0a:97:e9:ab:e9:6f: 7d:5b:27:82:c1:5c:74:2d:2d:ea:e8:53:d3:23:94: a0:e8:9d:09:7a:57:08:4e:be:46:36:9c:5d:2b:ae: ef:90:21:86:58:b0:22:2f:d9:b1:31:ad:ab:db:e9: 37:2d:f1:ab:21:b5:dc:43:7c:83:ed:ec:22:82:5b: 09:14:ff:0a:04:0c:e5:04:4f:e0:4c:f9:2f:04:c1: 26:d7:99:c7:59:62:9e:9b:9d:a2:a0:1d:0a:da:31: 86:13:d7:ec:41:c7:a4:a9:c4:66:31:ec:8d:ff:a4: a1:9e:f8:d9:dc:ac:82:92:21:f1:10:e8:a4:75:29: 02:11:ac:03:6f:47:fd:bb:cf:19:c1:f2:94:97:9e: 1e:06:af:ee:40:94:39:3a:70:68:3e:41:15:b0:f1: 64:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CC:43:4B:D9:BE:2A:97:D1:9A:CF:F9:F0:7E:4E:3C:C8:8C:A7:19 X509v3 Authority Key Identifier: keyid:AF:B8:FF:E1:E8:68:62:96:B9:96:C6:3A:A9:02:EA:9C:12:8F:48:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:6c:af:7f:6a:1d:ce:12:15:56:a5:d9:68:47:e9:10:49:0c: f9:e2:90:4c:59:63:f5:21:be:a3:40:4a:0c:9d:ff:ec:03:e2: ac:63:df:3a:5c:e3:fd:56:2e:74:6d:ad:0a:dc:51:ae:4f:3f: 35:70:1b:93:de:ce:84:53:7a:fc:40:e3:b9:0a:a6:26:52:9e: ba:95:23:db:39:b9:72:ff:e5:1b:e2:95:c8:e4:59:4d:60:71: af:cb:4c:bb:74:8b:73:ff:e9:ad:80:71:47:09:b1:7c:3c:e1: e2:7f:29:fd:b2:5d:77:40:c8:a7:35:15:52:72:92:a4:7b:d4: 5a:89:1b:f2:de:53:cd:8c:40:05:bb:44:d3:32:f2:19:a5:48: 76:7e:0d:ab:f4:d2:19:81:43:a4:2f:91:bf:43:e7:99:98:5e: b5:39:d1:f8:77:ba:6b:76:df:c3:44:59:51:49:56:0b:77:d4: 55:e6:98:c7:ef:c1:99:30:24:1e:e7:ee:ea:5b:61:85:fb:a8: 75:ac:1a:19:c4:69:74:bd:11:c9:e3:e4:87:b1:87:47:72:62: 0c:98:4a:e5:d2:75:e9:bf:db:21:59:fc:6f:dd:b0:98:4f:2b: f3:b8:ef:e3:e8:6c:98:88:06:34:4f:5d:ec:35:a9:b1:6a:29: 27:ef:dd:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJBODIxMTAvBgNVBAUTKEFGQjhGRkUxRTg2ODYyOTZCOTk2QzYzQUE5MDJFQTlD MTI4RjQ4RkUwHhcNMjUwNDI1MDQzMzM4WhcNMjUwNTAyMDQzMzM4WjAYMRYwFAYD VQQDEw02ODBiMTBhMi05Yzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIIToz4gYO4Yo8hRF14bskxeqjBlFGOa58/+X9uBuoxv4Yvx+ejFIYigqRjc rG4jfiJTlq7Z9eIaJY6gBAFAZD6XhKrQUDkECNzoJU/oevnmu2JaFdF405n7HQLQ QCRag5IKl+mr6W99WyeCwVx0LS3q6FPTI5Sg6J0JelcITr5GNpxdK67vkCGGWLAi L9mxMa2r2+k3LfGrIbXcQ3yD7ewiglsJFP8KBAzlBE/gTPkvBMEm15nHWWKem52i oB0K2jGGE9fsQcekqcRmMeyN/6ShnvjZ3KyCkiHxEOikdSkCEawDb0f9u88ZwfKU l54eBq/uQJQ5OnBoPkEVsPFkXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTMQ0vZ viqX0ZrP+fB+TjzIjKcZMB8GA1UdIwQYMBaAFK+4/+HoaGKWuZbGOqkC6pwSj0j+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkE4Mi9GQkREQUMyNENF NUExMUVFOEMzQkQwM0FDNEY5QUUwMi9yN2pfNGVob1lwYTVsc1k2cVFMcW5CS1BT UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3al80ZWhvWXBhNWxzWTZxUUxxbkJLUFNQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkE4Mi9GQkREQUMyNENFNUExMUVFOEMzQkQwM0FDNEY5QUUwMi9yN2pfNGVob1lw YTVsc1k2cVFMcW5CS1BTUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGbK9/ah3OEhVWpdloR+kQSQz54pBMWWP1Ib6jQEoMnf/sA+KsY986 XOP9Vi50ba0K3FGuTz81cBuT3s6EU3r8QOO5CqYmUp66lSPbObly/+Ub4pXI5FlN YHGvy0y7dItz/+mtgHFHCbF8POHifyn9sl13QMinNRVScpKke9RaiRvy3lPNjEAF u0TTMvIZpUh2fg2r9NIZgUOkL5G/Q+eZmF61OdH4d7prdt/DRFlRSVYLd9RV5pjH 78GZMCQe5+7qW2GF+6h1rBoZxGl0vRHJ4+SHsYdHcmIMmErl0nXpv9shWfxv3bCY TyvzuO/j6GyYiAY0T13sNamxaikn792X -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:58 2025 by rpki-client