$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft File: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft (raw, json) Hash identifier: 4OaI7c5c3ld1PnzryvHk30EUx1iwQVipsX2VUSxCMbo= Subject key identifier: 6E:A2:AA:E3:DF:D6:B0:36:6C:C9:4C:78:EC:8A:04:C2:3F:12:CD:87 Authority key identifier: EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34 Certificate issuer: /CN=A912DD15/serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434 Certificate serial: 019F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft Manifest number: 0195 Signing time: Fri 25 Apr 2025 02:44:41 +0000 Manifest this update: Fri 25 Apr 2025 02:44:41 +0000 Manifest next update: Fri 02 May 2025 02:44:41 +0000 Files and hashes: 1: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl (hash: RctbHONvjnoNlK+jvjLORQIS4Q8RjR3KfKtc2mMJJKY=) 2: E1C173F01EFD11EE88E45C83C4F9AE02.roa (hash: Ak66lCLN9uc1ZY05PmKcoomC7BRhGFb6BczYDdZUa4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:44:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DD15, serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434 Validity Not Before: Apr 25 02:44:41 2025 GMT Not After : May 2 02:44:41 2025 GMT Subject: CN=680af719-71f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:04:a4:f3:3a:f8:1d:28:60:a4:40:95:2e:15: 7b:0b:4c:fe:10:34:f4:7b:de:b3:69:55:0d:93:02: b4:b3:a7:12:49:c6:f9:93:59:96:0b:71:25:a3:0d: eb:96:49:1a:da:73:20:0b:3c:ac:bd:c6:06:74:79: b7:50:b2:5a:ee:56:c1:24:f1:3a:f3:63:f3:6e:05: 3d:de:30:f3:5b:4b:39:0d:37:1f:ce:72:4e:8b:60: 3b:08:63:52:da:91:60:1f:60:f5:b1:0d:0a:d5:e6: cb:e8:0c:fe:0c:0d:dc:bc:3e:d1:95:de:90:a3:2e: 70:06:5c:89:2d:07:e3:b1:1f:06:ff:11:44:e3:71: 04:81:bf:9f:9b:06:8b:d1:99:c1:f1:e8:9e:b0:9e: 86:70:dc:92:de:1a:f2:46:7e:0d:ae:ab:51:9d:ee: db:81:6d:de:f1:62:f4:4c:39:7e:fb:96:4b:fe:3b: d2:ec:6c:78:dc:1f:96:80:b6:5d:57:03:15:e9:f9: ca:4e:8e:6b:7e:09:a8:0f:6a:69:ef:1d:e7:6a:14: ad:62:eb:f3:b4:aa:f4:44:08:55:3e:94:04:41:d6: 1f:e3:81:8e:d3:b3:07:0b:f5:0b:d8:2c:d0:33:e1: 35:f9:79:09:0e:07:01:8c:90:7e:60:ad:ab:e9:02: 69:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A2:AA:E3:DF:D6:B0:36:6C:C9:4C:78:EC:8A:04:C2:3F:12:CD:87 X509v3 Authority Key Identifier: keyid:EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:4d:c4:4a:ec:4c:a2:c1:ea:9f:9f:20:6c:f6:b8:5f:7c:a0: 7a:86:81:82:2c:10:62:8b:69:36:50:a7:a3:7c:51:de:68:5f: 5e:19:0e:e8:70:fd:4f:2a:b6:c3:b3:d0:72:e3:a4:b1:c0:d6: ed:0c:5e:97:7b:92:ef:24:eb:dd:11:93:c7:e1:ec:99:d6:c5: 33:a0:5c:5b:db:61:dc:a0:40:b5:12:b3:50:ff:5b:2d:2b:f7: 1f:d2:3a:8f:29:30:43:b4:9f:84:5e:47:d6:7d:83:72:d7:c3: 53:3b:21:a4:a0:f4:0e:ad:79:e0:3f:a1:cc:af:1c:ff:b8:cf: c4:77:3d:df:6f:8f:ea:f3:6e:e9:16:6c:7a:9e:d6:88:6e:3c: 4a:dd:b7:7c:b4:35:65:bf:4d:e4:05:9a:9a:a5:0f:2b:0e:e7: 8c:d1:f0:52:d9:ad:c6:4b:48:66:d5:ed:ae:94:8f:7b:31:6a: d5:7d:dc:80:11:58:b2:c0:dc:7b:84:b4:49:28:c6:b1:b1:a3: bb:30:7a:f6:37:07:01:14:b9:bf:73:5f:5b:58:0b:d4:10:77: da:0a:d2:f5:2a:16:7b:2d:fd:28:2d:49:32:4b:9c:17:89:e7: 02:21:52:7b:6f:fd:50:3d:f1:21:df:3a:2c:cf:52:1f:02:36: 9b:72:e2:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkREMTUxMTAvBgNVBAUTKEVDNTFBOUVBMDZDMUM4NTdGNDhFQkQyRDI3M0E0MUYy MDFFQTY0MzQwHhcNMjUwNDI1MDI0NDQxWhcNMjUwNTAyMDI0NDQxWjAYMRYwFAYD VQQDEw02ODBhZjcxOS03MWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwASk8zr4HShgpECVLhV7C0z+EDT0e96zaVUNkwK0s6cSScb5k1mWC3Elow3r lkka2nMgCzysvcYGdHm3ULJa7lbBJPE682PzbgU93jDzW0s5DTcfznJOi2A7CGNS 2pFgH2D1sQ0K1ebL6Az+DA3cvD7Rld6Qoy5wBlyJLQfjsR8G/xFE43EEgb+fmwaL 0ZnB8eiesJ6GcNyS3hryRn4NrqtRne7bgW3e8WL0TDl++5ZL/jvS7Gx43B+WgLZd VwMV6fnKTo5rfgmoD2pp7x3nahStYuvztKr0RAhVPpQEQdYf44GO07MHC/UL2CzQ M+E1+XkJDgcBjJB+YK2r6QJp4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG6iquPf 1rA2bMlMeOyKBMI/Es2HMB8GA1UdIwQYMBaAFOxRqeoGwchX9I69LSc6QfIB6mQ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREQxNS9DNzYxQTBBQUND NTIxMUVEQTgyOTFEMTBDNEY5QUUwMi83RkdwNmdiQnlGZjBqcjB0SnpwQjhnSHFa RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGR3A2Z2JCeUZmMGpyMHRKenBCOGdIcVpEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REQxNS9DNzYxQTBBQUNDNTIxMUVEQTgyOTFEMTBDNEY5QUUwMi83RkdwNmdiQnlG ZjBqcjB0SnpwQjhnSHFaRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9TcRK7EyiweqfnyBs9rhffKB6hoGCLBBii2k2UKejfFHeaF9eGQ7o cP1PKrbDs9By46SxwNbtDF6Xe5LvJOvdEZPH4eyZ1sUzoFxb22HcoEC1ErNQ/1st K/cf0jqPKTBDtJ+EXkfWfYNy18NTOyGkoPQOrXngP6HMrxz/uM/Edz3fb4/q827p Fmx6ntaIbjxK3bd8tDVlv03kBZqapQ8rDueM0fBS2a3GS0hm1e2ulI97MWrVfdyA EViywNx7hLRJKMaxsaO7MHr2NwcBFLm/c19bWAvUEHfaCtL1KhZ7Lf0oLUkyS5wX iecCIVJ7b/1QPfEh3zosz1IfAjabcuKk -----END CERTIFICATE-----Generated at Sat Apr 26 17:12:59 2025 by rpki-client