$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft File: -Xh9LKFDLKbpMzLg7e9rB7JF17A.mft (raw, json) Hash identifier: clLuWKXru8EMJSXBfuVUHyYP3k5CAz1bMKSX/Db6z1Y= Subject key identifier: 9C:4E:63:D4:03:2D:C6:D4:08:8A:3F:05:20:46:41:22:2C:F9:13:80 Authority key identifier: F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0 Certificate issuer: /CN=A912DA1F/serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0 Certificate serial: 0803 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft Manifest number: 07FB Signing time: Thu 24 Apr 2025 20:43:51 +0000 Manifest this update: Thu 24 Apr 2025 20:43:51 +0000 Manifest next update: Thu 01 May 2025 20:43:51 +0000 Files and hashes: 1: -Xh9LKFDLKbpMzLg7e9rB7JF17A.crl (hash: PPyTrpBWUU5Cw83XqMFhgPqEz0DEttJO9sSiDg2lToI=) 2: D6883996DABE11EAB12A5209C4F9AE02.roa (hash: BMvYT9IDar1yOpAiOIQ1zT2emoZ3Z/Bj9QOBnQBKVOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2051 (0x803) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1F, serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0 Validity Not Before: Apr 24 20:43:51 2025 GMT Not After : May 1 20:43:51 2025 GMT Subject: CN=680aa287-19b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:63:4b:0f:d3:1c:19:3c:e2:76:bb:4e:28:1c: e4:7d:26:79:4b:10:e1:dc:5e:b7:3c:0e:08:f2:4a: 99:f6:4c:ea:c3:c5:72:c4:52:1d:39:61:9d:6e:23: a6:14:26:61:94:e2:4d:09:27:75:17:77:d9:05:96: 31:de:d6:1f:07:9e:6d:30:fd:ca:b2:68:84:e4:0f: 61:6b:46:43:07:e4:5b:f4:61:b3:eb:15:7f:4d:73: 15:99:6c:04:a4:93:76:81:e9:37:6c:5b:6f:62:7d: e4:76:81:35:56:7b:cc:e7:f8:f5:ee:6e:01:f8:ed: 8a:26:5f:92:60:fe:d5:11:b9:2f:cd:16:37:a4:b7: 9c:e5:e7:51:c4:98:d6:d9:f9:f0:18:2b:27:92:0d: cd:1e:7c:e8:45:d8:24:0c:e3:6a:3e:61:d4:4f:79: 89:2c:74:42:b6:25:08:a4:68:58:38:f8:e7:bd:f7: 39:d1:01:f4:21:7a:00:59:e2:ba:75:06:b8:94:fb: 24:1f:38:18:41:2c:d8:25:da:ed:e5:35:41:64:61: 1a:1c:26:52:e9:6c:84:7d:fa:30:4c:2d:a4:e9:09: f6:75:f8:08:55:78:b7:fb:7c:c9:b4:dc:d8:a7:73: 85:c2:0b:9e:06:b1:31:67:47:be:08:46:4c:fb:45: 4c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:4E:63:D4:03:2D:C6:D4:08:8A:3F:05:20:46:41:22:2C:F9:13:80 X509v3 Authority Key Identifier: keyid:F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:cf:cd:90:e5:0f:9c:c6:6e:b7:4b:93:c2:26:6c:a6:8b:6c: 3d:93:c8:b7:f2:8d:26:48:f1:19:09:82:87:f7:19:0b:28:8a: e5:29:c1:0e:ab:45:50:78:49:79:48:95:63:bc:68:1f:ac:ef: b5:96:f5:f6:90:7b:1d:a8:30:2b:36:e5:38:fc:7d:a0:be:cb: 4b:97:75:3e:e0:50:31:dd:7a:c7:59:a5:98:4e:12:14:ae:35: ea:8f:6c:22:c6:42:f9:7f:6a:6c:4f:3c:b3:8d:76:8f:7b:1b: 1e:35:db:6a:f8:4c:0e:7d:c2:a8:c0:2e:d4:9a:f9:f9:1c:be: be:62:d7:5c:7a:51:64:3d:63:45:ba:5b:04:48:a4:c0:e2:ce: 8e:7e:d1:4c:81:75:38:06:89:80:97:db:5d:c5:7c:f6:6d:e9: 60:1e:24:94:50:d7:ca:72:0f:7c:a8:65:bf:a9:c3:21:ad:6e: 90:f7:5a:69:c9:43:3c:28:35:19:14:c8:b5:4a:c4:43:34:4c: eb:09:1b:1e:41:a3:19:bb:71:dc:eb:7e:43:92:1c:36:3e:be: f5:64:2a:5f:b5:93:b4:7a:ea:20:47:48:63:79:0b:80:c3:00: e9:1a:12:19:bb:b8:83:01:7a:ec:00:8c:b1:ed:db:42:56:e1: 0b:21:e4:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUYxMTAvBgNVBAUTKEY5Nzg3RDJDQTE0MzJDQTZFOTMzMzJFMEVERUY2QjA3 QjI0NUQ3QjAwHhcNMjUwNDI0MjA0MzUxWhcNMjUwNTAxMjA0MzUxWjAYMRYwFAYD VQQDEw02ODBhYTI4Ny0xOWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2NLD9McGTzidrtOKBzkfSZ5SxDh3F63PA4I8kqZ9kzqw8VyxFIdOWGdbiOm FCZhlOJNCSd1F3fZBZYx3tYfB55tMP3KsmiE5A9ha0ZDB+Rb9GGz6xV/TXMVmWwE pJN2gek3bFtvYn3kdoE1VnvM5/j17m4B+O2KJl+SYP7VEbkvzRY3pLec5edRxJjW 2fnwGCsnkg3NHnzoRdgkDONqPmHUT3mJLHRCtiUIpGhYOPjnvfc50QH0IXoAWeK6 dQa4lPskHzgYQSzYJdrt5TVBZGEaHCZS6WyEffowTC2k6Qn2dfgIVXi3+3zJtNzY p3OFwgueBrExZ0e+CEZM+0VMMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxOY9QD LcbUCIo/BSBGQSIs+ROAMB8GA1UdIwQYMBaAFPl4fSyhQyym6TMy4O3vaweyRdew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRi9GQjE0QTg4MkRB QkMxMUVBQTYyMDJDODVDNEY5QUUwMi8tWGg5TEtGRExLYnBNekxnN2U5ckI3SkYx N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YaDlMS0ZETEticE16TGc3ZTlyQjdKRjE3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRi9GQjE0QTg4MkRBQkMxMUVBQTYyMDJDODVDNEY5QUUwMi8tWGg5TEtGRExL YnBNekxnN2U5ckI3SkYxN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0z82Q5Q+cxm63S5PCJmymi2w9k8i38o0mSPEZCYKH9xkLKIrlKcEO q0VQeEl5SJVjvGgfrO+1lvX2kHsdqDArNuU4/H2gvstLl3U+4FAx3XrHWaWYThIU rjXqj2wixkL5f2psTzyzjXaPexseNdtq+EwOfcKowC7Umvn5HL6+YtdcelFkPWNF ulsESKTA4s6OftFMgXU4BomAl9tdxXz2belgHiSUUNfKcg98qGW/qcMhrW6Q91pp yUM8KDUZFMi1SsRDNEzrCRseQaMZu3Hc635Dkhw2Pr71ZCpftZO0euogR0hjeQuA wwDpGhIZu7iDAXrsAIyx7dtCVuELIeT1 -----END CERTIFICATE-----Generated at Sat Apr 26 14:12:51 2025 by rpki-client