$ rpki-client -vvf rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft File: 7dKmloaGUlbJsP3da3FJZtU3jzM.mft (raw, json) Hash identifier: rtFCC5m8ucb1yxg9cNKVN51Y/cG+aWitgppzG7+BfKc= Subject key identifier: 0E:5E:B6:60:E2:4B:7A:88:CD:EF:C0:A2:50:F6:AB:B3:B0:08:15:C8 Authority key identifier: ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33 Certificate issuer: /CN=A912D3CB/serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33 Certificate serial: 0A50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft Manifest number: 0A3B Signing time: Thu 24 Apr 2025 19:39:42 +0000 Manifest this update: Thu 24 Apr 2025 19:39:42 +0000 Manifest next update: Thu 01 May 2025 19:39:42 +0000 Files and hashes: 1: 7dKmloaGUlbJsP3da3FJZtU3jzM.crl (hash: HEwjHn+AXU/9vr1s2zEKhJltnitcOlxKK6xc0tqfbH4=) 2: 923B6404466B11EE8B37E13CC4F9AE02.roa (hash: horX5P75gumDA8WyF+ghzmHcSe0CjNBHMfSInHVl7ao=) 3: C2E32E34466B11EE988B243DC4F9AE02.roa (hash: hBn0Qcv2Wj2OFO1BXPRpxsQ8U4zswJ2i/kTyMm1Zr1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2640 (0xa50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D3CB, serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33 Validity Not Before: Apr 24 19:39:42 2025 GMT Not After : May 1 19:39:42 2025 GMT Subject: CN=680a937e-d570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ec:4b:55:b7:6f:60:d6:f6:57:38:3b:8c:fe: 07:64:51:58:d3:b4:e9:73:8b:e6:e7:48:37:f6:34: 37:35:01:bb:ea:bc:b7:97:0b:b5:00:28:7c:b6:d2: 90:1b:d7:9b:94:45:0f:7a:34:57:09:ee:1b:2d:82: e1:e2:4e:7c:d0:c3:3a:6b:33:c4:de:1a:00:8e:a8: 22:f7:77:0b:2e:d3:4e:25:bd:14:e7:5d:58:b2:f5: 7d:aa:13:92:44:2c:ce:8a:62:39:7e:8c:15:37:c8: 24:f7:51:fe:7f:e8:79:2f:68:01:49:dd:c7:95:14: bc:b7:80:2d:da:b9:6f:fe:40:22:39:85:bf:68:36: 23:95:2f:0d:8e:6e:60:fe:db:b1:c5:a4:60:99:52: 19:04:9b:54:52:a9:bf:7c:1d:1d:1c:21:ec:3f:8c: ca:f8:d3:2b:f2:45:d0:9c:8c:46:5d:00:19:e3:bc: 02:12:ca:3a:c5:34:9f:25:e4:df:5f:c7:47:1a:5f: a1:9e:81:c5:38:21:05:0a:0a:4e:e0:0a:81:29:b6: 05:f1:fa:1d:9b:25:b6:b3:4d:4f:af:8b:ed:88:39: ca:74:42:92:3f:b5:78:9f:9f:dc:d4:9e:e7:6f:b3: 28:bd:35:58:ac:01:5a:cf:59:7f:95:a2:4c:d4:c1: 3c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5E:B6:60:E2:4B:7A:88:CD:EF:C0:A2:50:F6:AB:B3:B0:08:15:C8 X509v3 Authority Key Identifier: keyid:ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:05:2a:c7:71:e3:42:f6:b4:9c:5d:05:78:64:b0:01:90:39: 1a:2e:d1:e4:0b:06:a1:ac:52:ad:18:28:24:04:29:35:d8:9c: ef:7a:2d:c9:78:bc:2d:6d:d9:33:b6:94:03:68:2a:a0:4d:d3: 69:9e:67:af:53:0d:bf:91:71:8f:d5:7e:65:88:e5:f8:32:4a: aa:d9:c8:53:8e:99:a6:21:31:36:05:05:97:5c:fc:c8:2c:8f: 2b:8c:c2:33:c9:ea:98:86:06:ee:0f:08:a2:54:dc:f0:13:5e: d4:f5:9a:86:b3:ce:e0:78:6e:c5:b2:95:e5:00:32:34:51:85: c3:9b:ae:c8:78:44:8a:51:2c:c8:2c:cf:10:6f:73:75:51:29: 9d:df:19:7b:1b:44:42:fc:2e:bb:15:08:e4:6f:3b:da:75:54: 1f:94:1f:dc:08:68:1b:14:f1:7a:13:ef:02:39:ea:57:1d:e7: 60:4d:d9:51:97:84:db:b9:ee:ff:81:da:4f:2d:4b:f4:e1:15: 1a:58:2e:89:a4:cd:fe:de:e5:66:3c:7a:d4:f7:42:05:5c:8f: ab:02:bf:3f:a3:d3:92:b2:53:7c:4c:50:a2:7e:a0:aa:8f:cd: 04:18:25:19:62:d8:47:ae:41:24:1a:34:90:0a:ec:5a:69:50: f0:c8:8b:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQzQ0IxMTAvBgNVBAUTKEVERDJBNjk2ODY4NjUyNTZDOUIwRkRERDZCNzE0OTY2 RDUzNzhGMzMwHhcNMjUwNDI0MTkzOTQyWhcNMjUwNTAxMTkzOTQyWjAYMRYwFAYD VQQDEw02ODBhOTM3ZS1kNTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+xLVbdvYNb2Vzg7jP4HZFFY07Tpc4vm50g39jQ3NQG76ry3lwu1ACh8ttKQ G9eblEUPejRXCe4bLYLh4k580MM6azPE3hoAjqgi93cLLtNOJb0U511YsvV9qhOS RCzOimI5fowVN8gk91H+f+h5L2gBSd3HlRS8t4At2rlv/kAiOYW/aDYjlS8Njm5g /tuxxaRgmVIZBJtUUqm/fB0dHCHsP4zK+NMr8kXQnIxGXQAZ47wCEso6xTSfJeTf X8dHGl+hnoHFOCEFCgpO4AqBKbYF8fodmyW2s01Pr4vtiDnKdEKSP7V4n5/c1J7n b7MovTVYrAFaz1l/laJM1ME8TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5etmDi S3qIze/AolD2q7OwCBXIMB8GA1UdIwQYMBaAFO3SppaGhlJWybD93WtxSWbVN48z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDNDQi9BOUE0MzlGQzY5 QjIxMUVBOTc3OURENDhDNEY5QUUwMi83ZEttbG9hR1VsYkpzUDNkYTNGSlp0VTNq ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdkS21sb2FHVWxiSnNQM2RhM0ZKWnRVM2p6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDNDQi9BOUE0MzlGQzY5QjIxMUVBOTc3OURENDhDNEY5QUUwMi83ZEttbG9hR1Vs YkpzUDNkYTNGSlp0VTNqek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALBSrHceNC9rScXQV4ZLABkDkaLtHkCwahrFKtGCgkBCk12Jzvei3J eLwtbdkztpQDaCqgTdNpnmevUw2/kXGP1X5liOX4Mkqq2chTjpmmITE2BQWXXPzI LI8rjMIzyeqYhgbuDwiiVNzwE17U9ZqGs87geG7FspXlADI0UYXDm67IeESKUSzI LM8Qb3N1USmd3xl7G0RC/C67FQjkbzvadVQflB/cCGgbFPF6E+8COepXHedgTdlR l4Tbue7/gdpPLUv04RUaWC6JpM3+3uVmPHrU90IFXI+rAr8/o9OSslN8TFCifqCq j80EGCUZYthHrkEkGjSQCuxaaVDwyIsq -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:56 2025 by rpki-client