$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft File: I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft (raw, json) Hash identifier: 367ExSc6fbzRM4MwFZ9Dg66iBM/4BMKoYLuQP5kjLo8= Subject key identifier: 14:CC:F9:58:12:E2:63:40:4C:36:91:5F:25:52:91:90:84:4C:36:53 Authority key identifier: 23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC Certificate issuer: /CN=A9135F3C/serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC Certificate serial: 0699 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft Manifest number: 0690 Signing time: Thu 24 Apr 2025 22:02:51 +0000 Manifest this update: Thu 24 Apr 2025 22:02:50 +0000 Manifest next update: Thu 01 May 2025 22:02:50 +0000 Files and hashes: 1: I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl (hash: uKsdSPvD9vFLFLora4Cv+WD72EHD3dQZ4JNsMMt1Z4Q=) 2: 1396BBE630E811EEAE1F1212C4F9AE02.roa (hash: XjK0DsWTt9iTXDA89UqXS5hBINy5fzGd49slH38OEAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1689 (0x699) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F3C, serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC Validity Not Before: Apr 24 22:02:50 2025 GMT Not After : May 1 22:02:50 2025 GMT Subject: CN=680ab50b-e90b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:24:c2:19:ed:a4:7b:41:3d:24:7c:6e:0d:3e: d2:6f:f8:e0:17:54:6c:26:27:a3:88:ef:43:6e:e6: 8c:bb:b7:2c:bb:8c:49:15:dc:e3:c6:82:10:3a:84: d7:04:49:6e:ca:f2:5c:0a:13:70:e8:90:8e:14:7a: 46:7a:2a:39:3c:ff:10:15:b2:e3:5d:fb:3b:73:91: 23:cb:38:09:fa:1c:c6:38:55:cb:8c:c9:bb:c7:db: 09:2c:77:ac:ec:8c:f5:dd:7c:d5:0d:95:b2:6d:f1: fd:7a:15:81:69:2f:54:59:88:d7:90:bc:c8:4a:da: 65:ea:7a:5c:1e:5b:78:7f:1a:7d:6b:e8:3b:41:e6: 52:6a:6c:67:35:4c:54:06:87:99:20:f7:32:f2:bc: 09:64:73:77:a7:79:8f:44:52:f8:e4:32:90:e5:9f: 8f:67:6b:33:88:3e:18:74:4a:82:f5:e1:9a:9b:21: f3:06:b1:fc:36:7a:d1:8b:78:cb:7e:3b:97:32:1f: 03:35:7a:d6:88:74:21:fd:84:83:c6:d3:d7:7b:4b: 83:45:c6:c4:27:ed:db:ff:f0:89:e2:e5:a5:23:a1: 95:1a:20:9d:18:d0:56:c0:7b:9b:95:0f:7d:3b:d3: ab:89:c7:dd:d6:d6:2b:7b:c1:1b:db:22:eb:28:62: 08:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:CC:F9:58:12:E2:63:40:4C:36:91:5F:25:52:91:90:84:4C:36:53 X509v3 Authority Key Identifier: keyid:23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:ef:69:49:77:84:cc:0d:24:9f:07:2f:49:ca:64:05:4e:28: da:12:fe:4f:67:34:08:fd:b2:20:b3:3c:c3:eb:b6:5a:2e:a3: 2d:69:ec:6b:9d:b5:85:2a:c5:95:38:cf:91:fd:9a:bd:8d:49: 88:7f:b2:2c:09:a2:12:cc:35:ad:a5:71:ff:df:24:61:d2:e5: 86:1b:96:b6:08:be:d8:51:fa:38:e3:49:c5:b9:ba:59:48:dd: 5e:e0:bf:08:d5:b2:cb:91:a0:33:af:f3:d1:65:69:80:16:76: 65:29:8d:e7:0c:99:27:19:27:ab:bf:6b:74:95:e5:7f:78:84: e0:69:3e:bb:5a:74:64:03:79:c3:ab:2c:df:01:87:d9:c4:50: 69:e8:1f:41:2a:7d:31:b0:bb:bc:83:8e:11:2e:32:f2:79:db: 4a:48:76:80:1f:e5:73:72:f4:d8:30:35:4e:41:0b:ea:cd:d9: 7b:c4:b1:87:83:78:ab:d1:8b:bb:83:6b:84:fe:d5:ad:78:e8: 63:aa:77:7f:15:46:e2:2b:4a:d4:70:1d:97:a8:06:fe:50:5e: 81:cd:12:a5:fe:05:10:c2:78:78:8f:ba:9a:28:af:7f:ec:af: e6:f0:99:55:2b:c0:c8:35:63:ec:5e:2f:63:aa:47:8b:e3:63: a8:aa:6e:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVGM0MxMTAvBgNVBAUTKDIzQjMzQjkwMTZFMzExRUVBNkI3MjFDOEI5MzkzOUZC MUE4NzBCRUMwHhcNMjUwNDI0MjIwMjUwWhcNMjUwNTAxMjIwMjUwWjAYMRYwFAYD VQQDEw02ODBhYjUwYi1lOTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoSTCGe2ke0E9JHxuDT7Sb/jgF1RsJiejiO9DbuaMu7csu4xJFdzjxoIQOoTX BEluyvJcChNw6JCOFHpGeio5PP8QFbLjXfs7c5EjyzgJ+hzGOFXLjMm7x9sJLHes 7Iz13XzVDZWybfH9ehWBaS9UWYjXkLzIStpl6npcHlt4fxp9a+g7QeZSamxnNUxU BoeZIPcy8rwJZHN3p3mPRFL45DKQ5Z+PZ2sziD4YdEqC9eGamyHzBrH8NnrRi3jL fjuXMh8DNXrWiHQh/YSDxtPXe0uDRcbEJ+3b//CJ4uWlI6GVGiCdGNBWwHublQ99 O9Oricfd1tYre8Eb2yLrKGIIhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTM+VgS 4mNATDaRXyVSkZCETDZTMB8GA1UdIwQYMBaAFCOzO5AW4xHuprchyLk5Ofsahwvs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUYzQy80Nzg2ODM2QTZB QzkxMUVCODZDQjZCMjBDNEY5QUUwMi9JN003a0JiakVlNm10eUhJdVRrNS14cUhD LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k3TTdrQmJqRWU2bXR5SEl1VGs1LXhxSEMtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUYzQy80Nzg2ODM2QTZBQzkxMUVCODZDQjZCMjBDNEY5QUUwMi9JN003a0JiakVl Nm10eUhJdVRrNS14cUhDLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDE72lJd4TMDSSfBy9JymQFTijaEv5PZzQI/bIgszzD67ZaLqMtaexr nbWFKsWVOM+R/Zq9jUmIf7IsCaISzDWtpXH/3yRh0uWGG5a2CL7YUfo440nFubpZ SN1e4L8I1bLLkaAzr/PRZWmAFnZlKY3nDJknGServ2t0leV/eITgaT67WnRkA3nD qyzfAYfZxFBp6B9BKn0xsLu8g44RLjLyedtKSHaAH+VzcvTYMDVOQQvqzdl7xLGH g3ir0Yu7g2uE/tWteOhjqnd/FUbiK0rUcB2XqAb+UF6BzRKl/gUQwnh4j7qaKK9/ 7K/m8JlVK8DINWPsXi9jqkeL42Ooqm6B -----END CERTIFICATE-----Generated at Sat Apr 26 13:02:13 2025 by rpki-client