$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft File: f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft (raw, json) Hash identifier: TmT8Hs2+KfKmYJ35U16YGGzh0Sp8sRco4eN8ZGRZiyo= Subject key identifier: F4:EC:42:A0:8A:9A:8E:EB:10:8D:24:31:B1:13:77:6C:14:76:0F:E8 Authority key identifier: 7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4 Certificate issuer: /CN=A912C738/serialNumber=7FB23916037E9332966376F2E075541224162AF4 Certificate serial: 05AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft Manifest number: 05A4 Signing time: Thu 24 Apr 2025 22:59:37 +0000 Manifest this update: Thu 24 Apr 2025 22:59:37 +0000 Manifest next update: Thu 01 May 2025 22:59:37 +0000 Files and hashes: 1: f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl (hash: y+gFvk9N3FK0fGu29zMyRz6eb+qrAeCqHinz8IUgppg=) 2: C3623470CF4611EBBBA79165C4F9AE02.roa (hash: YFp3J2bTm7IKBT6KELum1J+LO46Vc2l/xmTiNrhkS6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:59:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1454 (0x5ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C738, serialNumber=7FB23916037E9332966376F2E075541224162AF4 Validity Not Before: Apr 24 22:59:37 2025 GMT Not After : May 1 22:59:37 2025 GMT Subject: CN=680ac259-ee18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:56:1a:8f:04:9f:77:a6:ef:41:d3:6e:e9:af: e9:9d:7b:88:7a:4c:fd:89:91:bd:63:43:25:ae:4a: 2d:b6:fb:41:3e:17:6f:34:59:92:e6:9a:06:c4:3f: fa:c1:61:68:44:6e:b8:f8:89:3d:41:06:36:c6:45: 50:01:7f:8a:9b:55:28:7a:2d:95:a4:eb:b0:ac:99: 42:09:19:9b:1b:3f:c7:2e:db:aa:85:15:5a:42:0d: e0:1d:d8:93:ef:7d:56:a2:91:ba:86:af:16:dd:06: d9:1e:9a:8e:47:58:ba:d7:c7:31:24:30:88:f4:df: 6c:10:8c:44:25:57:d4:64:ec:0b:c7:b1:4f:cd:7a: a7:b5:46:33:c2:a5:5c:0b:a2:30:5b:1f:a8:ec:c7: 95:43:e2:65:c9:30:7f:f8:1d:71:94:05:97:4d:e6: d7:89:1d:e2:55:eb:32:9e:0b:95:79:89:34:c1:57: a3:70:d9:3b:8d:91:30:78:f8:2c:96:89:e5:6d:eb: 45:a2:2e:f5:e5:d3:58:26:6e:bf:d1:fc:49:b2:e2: 42:70:2b:60:10:d4:21:8d:b8:0a:92:7c:f6:4e:8d: 23:31:16:19:bb:8d:06:d4:06:2a:d8:7b:b2:9f:2c: 62:3e:8b:dd:1c:b1:f1:60:bf:73:87:e2:89:bf:0f: f4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:EC:42:A0:8A:9A:8E:EB:10:8D:24:31:B1:13:77:6C:14:76:0F:E8 X509v3 Authority Key Identifier: keyid:7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:2f:fc:fe:c6:33:5e:bf:cd:fd:18:2b:08:21:3d:51:82:b0: 45:15:d0:42:a4:dd:01:d1:82:ac:b0:da:fb:b5:8f:98:f4:cd: bc:57:ad:13:28:5f:9b:3c:f2:aa:43:bc:98:87:54:ab:f6:73: cf:90:13:ce:d0:ea:41:e9:c7:16:ea:13:d2:8c:ce:15:59:5c: 45:60:73:82:e9:a3:65:4a:3a:d8:cc:5f:39:8c:91:81:11:da: a5:31:84:b8:1b:a7:bc:83:d1:8a:e0:06:73:2e:0e:09:ca:8c: 2a:83:63:5c:30:68:d5:ce:99:c0:7f:64:47:50:49:15:9d:47: ae:06:78:d5:26:49:b5:29:51:82:c5:57:5c:5a:bf:45:a3:d1: 17:80:da:3d:d3:67:0d:34:59:bb:80:62:e2:d5:28:c7:6a:62: d6:51:72:bc:5a:bd:4d:c9:da:5b:2c:dd:2f:4d:41:b1:f1:98: 96:c4:cb:3f:d6:40:d4:0a:3f:d8:50:5e:94:ad:b4:48:d4:c4: f7:d5:18:ef:15:3b:58:fe:13:ec:d1:fa:e2:38:65:68:62:37: 50:c2:68:94:d4:4e:1e:40:7e:cf:a2:cf:ff:24:a0:a9:25:02: 57:a8:17:1a:de:62:3a:72:e4:9b:b6:4c:3c:c2:bd:e9:f0:ea: 58:56:a1:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3MzgxMTAvBgNVBAUTKDdGQjIzOTE2MDM3RTkzMzI5NjYzNzZGMkUwNzU1NDEy MjQxNjJBRjQwHhcNMjUwNDI0MjI1OTM3WhcNMjUwNTAxMjI1OTM3WjAYMRYwFAYD VQQDEw02ODBhYzI1OS1lZTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1YajwSfd6bvQdNu6a/pnXuIekz9iZG9Y0MlrkottvtBPhdvNFmS5poGxD/6 wWFoRG64+Ik9QQY2xkVQAX+Km1Uoei2VpOuwrJlCCRmbGz/HLtuqhRVaQg3gHdiT 731WopG6hq8W3QbZHpqOR1i618cxJDCI9N9sEIxEJVfUZOwLx7FPzXqntUYzwqVc C6IwWx+o7MeVQ+JlyTB/+B1xlAWXTebXiR3iVesynguVeYk0wVejcNk7jZEwePgs lonlbetFoi715dNYJm6/0fxJsuJCcCtgENQhjbgKknz2To0jMRYZu40G1AYq2Huy nyxiPovdHLHxYL9zh+KJvw/0qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTsQqCK mo7rEI0kMbETd2wUdg/oMB8GA1UdIwQYMBaAFH+yORYDfpMylmN28uB1VBIkFir0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzczOC8zMjBDM0E5QUM5 RDExMUVCOERDNUQyMTBDNEY5QUUwMi9mN0k1RmdOLWt6S1dZM2J5NEhWVUVpUVdL dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2Y3STVGZ04ta3pLV1kzYnk0SFZVRWlRV0t2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzczOC8zMjBDM0E5QUM5RDExMUVCOERDNUQyMTBDNEY5QUUwMi9mN0k1RmdOLWt6 S1dZM2J5NEhWVUVpUVdLdlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAL/z+xjNev839GCsIIT1RgrBFFdBCpN0B0YKssNr7tY+Y9M28V60T KF+bPPKqQ7yYh1Sr9nPPkBPO0OpB6ccW6hPSjM4VWVxFYHOC6aNlSjrYzF85jJGB EdqlMYS4G6e8g9GK4AZzLg4Jyowqg2NcMGjVzpnAf2RHUEkVnUeuBnjVJkm1KVGC xVdcWr9Fo9EXgNo902cNNFm7gGLi1SjHamLWUXK8Wr1NydpbLN0vTUGx8ZiWxMs/ 1kDUCj/YUF6UrbRI1MT31RjvFTtY/hPs0friOGVoYjdQwmiU1E4eQH7Pos//JKCp JQJXqBca3mI6cuSbtkw8wr3p8OpYVqFA -----END CERTIFICATE-----Generated at Sat Apr 26 15:12:07 2025 by rpki-client