$ rpki-client -vvf rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft File: F7t0v8FLOUo_7aIb2MhcQePFu_E.mft (raw, json) Hash identifier: hCvnbdbp+XtJIQXxq9pG+1ttmNZj9VUrpc8BmeRFkgU= Subject key identifier: 3F:30:8D:94:21:DD:51:D4:45:6F:7A:C5:2C:8B:06:C2:5B:9A:E4:6E Authority key identifier: 17:BB:74:BF:C1:4B:39:4A:3F:ED:A2:1B:D8:C8:5C:41:E3:C5:BB:F1 Certificate issuer: /CN=A912BFC5/serialNumber=17BB74BFC14B394A3FEDA21BD8C85C41E3C5BBF1 Certificate serial: 3476 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft Manifest number: 3476 Signing time: Sat 26 Apr 2025 14:16:31 +0000 Manifest this update: Sat 26 Apr 2025 14:16:30 +0000 Manifest next update: Sat 03 May 2025 14:16:30 +0000 Files and hashes: 1: F7t0v8FLOUo_7aIb2MhcQePFu_E.crl (hash: mw7a7sMKZVMEA7tmhfuHrKEHen0nku6MedJ3aoFXrjI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.crl rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13430 (0x3476) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BFC5, serialNumber=17BB74BFC14B394A3FEDA21BD8C85C41E3C5BBF1 Validity Not Before: Apr 26 14:16:30 2025 GMT Not After : May 3 14:16:30 2025 GMT Subject: CN=680ceabe-d67b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7f:bd:8b:47:95:fb:63:e8:17:72:8f:be:be: c6:2d:07:b7:74:b9:51:74:80:4c:4e:03:8e:ae:bb: e5:e5:37:a2:e1:ea:1f:46:5a:4d:94:73:4b:b6:16: 74:fc:f8:d4:8e:a8:70:d1:81:61:41:49:0b:64:a4: 57:2f:47:9c:31:a9:9d:56:67:10:e0:1a:c5:16:f9: 9a:00:a3:9e:8a:5f:fc:e1:cd:26:71:d4:39:b9:62: 8c:6e:82:3c:c4:e6:a4:3a:40:da:79:83:5d:b2:8b: 61:18:22:a7:71:bf:70:81:4b:a1:d3:bc:98:bd:e5: 08:ef:8a:81:ac:11:ad:77:0b:0b:4a:63:1e:1b:fa: 2c:b5:85:94:86:6a:8c:52:9a:65:1f:e9:dd:00:b7: 81:4a:02:77:7e:a7:38:8b:dd:79:36:bb:ae:7b:df: 3d:c6:b2:f1:a2:03:aa:18:e6:ce:f3:79:8f:71:0f: 1f:b1:84:8a:97:94:71:8d:43:4c:5b:6e:76:b8:63: 79:f3:60:a3:8d:9f:14:1c:a1:3b:ff:9f:c1:f9:38: e5:81:bd:67:47:f5:90:da:6e:3b:ce:cc:c5:1d:7f: 10:12:ee:b1:a0:fe:7c:93:e1:af:14:29:61:86:d4: 9b:33:a3:1c:8e:6d:5b:58:3d:96:7c:bc:be:c3:05: e8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:30:8D:94:21:DD:51:D4:45:6F:7A:C5:2C:8B:06:C2:5B:9A:E4:6E X509v3 Authority Key Identifier: keyid:17:BB:74:BF:C1:4B:39:4A:3F:ED:A2:1B:D8:C8:5C:41:E3:C5:BB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:85:29:eb:e9:34:e0:85:aa:f6:8d:af:e6:f2:73:33:61:21: 64:20:33:6e:5e:a3:00:12:5c:35:f2:fd:bb:06:97:62:dc:7f: b3:97:5f:8f:e1:e9:79:82:ac:0c:2d:a7:7f:65:5e:73:a5:27: 02:85:26:74:1f:c3:91:24:ec:aa:f8:7f:90:fe:f3:48:a2:2d: dd:bf:14:bd:9c:86:88:c7:be:8c:ad:2b:a6:d8:88:4b:a8:35: 90:a9:aa:36:ea:cb:64:90:62:52:24:96:23:71:d1:d7:01:4e: 2f:71:d1:4e:e8:c4:65:0f:46:ea:1d:ce:58:ea:fc:c6:0c:49: 30:f8:6c:3b:05:7c:0c:ce:31:58:74:af:55:86:c4:be:36:4b: 8e:fe:6f:85:80:7b:a7:b7:8e:1d:73:af:f9:93:a7:0c:27:79: 90:7e:31:5a:e2:49:45:27:60:a1:9b:53:ae:e5:b9:0e:e9:7c: 05:cf:79:eb:9b:8f:5e:85:f9:de:7e:a8:7d:31:1b:f5:95:64: 28:0f:1d:76:17:d9:d6:f1:61:e7:6b:5c:0b:8a:7d:93:20:76: eb:21:9d:de:43:5c:c7:a0:75:82:dc:ce:8b:e7:23:6f:45:8c: f3:cf:b6:cf:2c:d3:b4:18:0c:81:52:7f:91:6f:75:60:1e:ec: 2d:d5:b0:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJGQzUxMTAvBgNVBAUTKDE3QkI3NEJGQzE0QjM5NEEzRkVEQTIxQkQ4Qzg1QzQx RTNDNUJCRjEwHhcNMjUwNDI2MTQxNjMwWhcNMjUwNTAzMTQxNjMwWjAYMRYwFAYD VQQDEw02ODBjZWFiZS1kNjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4X+9i0eV+2PoF3KPvr7GLQe3dLlRdIBMTgOOrrvl5Tei4eofRlpNlHNLthZ0 /PjUjqhw0YFhQUkLZKRXL0ecMamdVmcQ4BrFFvmaAKOeil/84c0mcdQ5uWKMboI8 xOakOkDaeYNdsothGCKncb9wgUuh07yYveUI74qBrBGtdwsLSmMeG/ostYWUhmqM UpplH+ndALeBSgJ3fqc4i915Nruue989xrLxogOqGObO83mPcQ8fsYSKl5RxjUNM W252uGN582CjjZ8UHKE7/5/B+Tjlgb1nR/WQ2m47zszFHX8QEu6xoP58k+GvFClh htSbM6Mcjm1bWD2WfLy+wwXosQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD8wjZQh 3VHURW96xSyLBsJbmuRuMB8GA1UdIwQYMBaAFBe7dL/BSzlKP+2iG9jIXEHjxbvx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkZDNS8wRDVDNzk0ODFE NkExMUUyQkIyMUIyQTcwOEIwMkNEMi9GN3QwdjhGTE9Vb183YUliMk1oY1FlUEZ1 X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y3dDB2OEZMT1VvXzdhSWIyTWhjUWVQRnVfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkZDNS8wRDVDNzk0ODFENkExMUUyQkIyMUIyQTcwOEIwMkNEMi9GN3QwdjhGTE9V b183YUliMk1oY1FlUEZ1X0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHhSnr6TTghar2ja/m8nMzYSFkIDNuXqMAElw18v27Bpdi3H+zl1+P 4el5gqwMLad/ZV5zpScChSZ0H8ORJOyq+H+Q/vNIoi3dvxS9nIaIx76MrSum2IhL qDWQqao26stkkGJSJJYjcdHXAU4vcdFO6MRlD0bqHc5Y6vzGDEkw+Gw7BXwMzjFY dK9VhsS+NkuO/m+FgHunt44dc6/5k6cMJ3mQfjFa4klFJ2Chm1Ou5bkO6XwFz3nr m49ehfnefqh9MRv1lWQoDx12F9nW8WHna1wLin2TIHbrIZ3eQ1zHoHWC3M6L5yNv RYzzz7bPLNO0GAyBUn+Rb3VgHuwt1bDl -----END CERTIFICATE-----Generated at Sat Apr 26 16:50:54 2025 by rpki-client