$ rpki-client -vvf rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft File: d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft (raw, json) Hash identifier: c1j4tr78u/O9h8uz4mky2K7zusZz/J0q4UK6Bvqb/18= Subject key identifier: 77:31:70:A3:A5:38:9A:93:31:A3:7E:08:23:19:14:7A:57:D2:23:77 Authority key identifier: 77:EA:6F:E0:16:65:1C:FB:16:93:41:67:45:E9:A5:BE:A4:74:53:46 Certificate issuer: /CN=A913A69E/serialNumber=77EA6FE016651CFB1693416745E9A5BEA4745346 Certificate serial: 0B7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft Manifest number: 0B74 Signing time: Thu 24 Apr 2025 18:58:36 +0000 Manifest this update: Thu 24 Apr 2025 18:58:36 +0000 Manifest next update: Thu 01 May 2025 18:58:36 +0000 Files and hashes: 1: d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl (hash: MTdOOPQQ+Iq5sfB/WkrEGUr1FkNHGnnrxUX6XMcAN+g=) 2: AB60C088B6E111EDB3BAC26CC4F9AE02.roa (hash: 5XNAMXcyNSOVLGmmucARGwpqHZGGrdPlivmquQGAyUw=) 3: 951CA536C1B511EF87BCEA11C4F9AE02.roa (hash: 7wRjpl4ak/daHT3cAIU8dsdddsw6EG34B50egxoHuUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2941 (0xb7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A69E, serialNumber=77EA6FE016651CFB1693416745E9A5BEA4745346 Validity Not Before: Apr 24 18:58:36 2025 GMT Not After : May 1 18:58:36 2025 GMT Subject: CN=680a89dc-5c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e1:1d:75:b5:86:68:0a:3c:22:2f:fe:9a:ed: d6:b1:17:71:d3:d9:d9:51:55:74:7d:a8:af:72:04: 1f:6f:c7:2c:0a:85:d8:64:87:20:87:d1:8a:08:78: 9f:8b:c2:0c:e4:4b:db:23:17:5d:e2:e8:53:b2:49: 6c:86:e9:7f:c6:60:90:dc:10:dc:50:43:0c:54:e0: 63:e6:1f:68:0d:8d:58:f7:ab:26:ee:f5:6c:b5:4a: a7:c8:0c:70:2e:a2:5e:bf:2d:e7:1c:93:92:c3:ce: bc:85:06:7b:b5:c1:9d:4e:4a:85:1b:9f:9b:f5:ef: c4:29:c8:b1:f5:47:20:5e:56:eb:57:c9:f6:ba:e1: fc:94:1d:ff:cd:2a:a8:27:57:f9:ae:fc:b0:33:50: a2:ff:58:06:5d:cd:75:d5:d6:00:35:95:b8:a5:43: c8:01:a6:1a:e0:33:2e:e3:20:16:14:83:ba:71:15: 3f:a1:dd:07:c8:ff:6d:17:5f:aa:6b:5c:36:d9:45: ee:27:94:eb:70:53:49:33:5d:2c:b4:ce:01:22:4d: e6:fd:69:b0:99:93:fd:7a:9d:0a:84:03:9d:10:f3: 7e:11:7b:87:b4:c9:eb:4f:26:f0:91:53:11:28:d7: 5f:09:8e:ee:05:d0:f0:c6:58:f7:2e:3b:13:23:45: 3d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:31:70:A3:A5:38:9A:93:31:A3:7E:08:23:19:14:7A:57:D2:23:77 X509v3 Authority Key Identifier: keyid:77:EA:6F:E0:16:65:1C:FB:16:93:41:67:45:E9:A5:BE:A4:74:53:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:4d:65:f1:76:39:27:00:45:1c:fe:ee:d1:04:b2:f2:8c:47: 77:48:ee:bc:31:44:4d:c1:79:d6:95:4e:89:c2:a6:c9:a8:a3: 6b:20:55:7b:12:a5:79:64:9a:5b:d2:41:8b:b6:26:8d:82:be: 9f:d3:2e:39:e6:74:e0:0d:d9:96:3a:03:7e:21:36:b3:4d:48: be:eb:5f:0a:55:09:ea:60:b4:7a:f1:1c:a6:97:69:e5:ec:cc: a1:b3:04:71:71:de:f2:0c:74:d5:6b:a6:62:2f:e0:67:11:cd: bf:83:12:6b:06:52:7a:99:65:5e:42:78:88:69:75:3c:84:a6: 04:2e:5c:cf:e0:c5:01:58:49:74:19:ca:4c:72:53:58:b9:b3: 24:b1:d2:39:be:b5:63:ba:35:7d:44:2c:f2:ac:fe:07:3f:2d: 3d:83:e6:54:34:f4:0d:16:00:8d:2d:1a:d8:d6:25:ae:a5:77: 9f:19:a2:dc:ad:fe:53:b4:d4:2b:c2:8b:71:26:d7:e9:de:9d: 5f:4d:ef:e5:2e:86:3e:d4:0a:75:11:e9:42:b3:c5:54:f9:88: 1c:54:4d:e7:b9:a7:18:44:2e:c0:bd:d5:d0:69:cc:4d:33:c0: d6:8a:8e:99:cb:62:9d:a3:71:50:8f:c6:41:d8:3f:07:2f:66: f9:95:58:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E2OUUxMTAvBgNVBAUTKDc3RUE2RkUwMTY2NTFDRkIxNjkzNDE2NzQ1RTlBNUJF QTQ3NDUzNDYwHhcNMjUwNDI0MTg1ODM2WhcNMjUwNTAxMTg1ODM2WjAYMRYwFAYD VQQDEw02ODBhODlkYy01Yzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+EddbWGaAo8Ii/+mu3WsRdx09nZUVV0faivcgQfb8csCoXYZIcgh9GKCHif i8IM5EvbIxdd4uhTsklshul/xmCQ3BDcUEMMVOBj5h9oDY1Y96sm7vVstUqnyAxw LqJevy3nHJOSw868hQZ7tcGdTkqFG5+b9e/EKcix9UcgXlbrV8n2uuH8lB3/zSqo J1f5rvywM1Ci/1gGXc111dYANZW4pUPIAaYa4DMu4yAWFIO6cRU/od0HyP9tF1+q a1w22UXuJ5TrcFNJM10stM4BIk3m/WmwmZP9ep0KhAOdEPN+EXuHtMnrTybwkVMR KNdfCY7uBdDwxlj3LjsTI0U9awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHcxcKOl OJqTMaN+CCMZFHpX0iN3MB8GA1UdIwQYMBaAFHfqb+AWZRz7FpNBZ0Xppb6kdFNG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTY5RS9GQjlGQjkzQTJB RTYxMUVBQUJENTZCMTRDNEY5QUUwMi9kLXB2NEJabEhQc1drMEZuUmVtbHZxUjBV MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QtcHY0QlpsSFBzV2swRm5SZW1sdnFSMFUwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTY5RS9GQjlGQjkzQTJBRTYxMUVBQUJENTZCMTRDNEY5QUUwMi9kLXB2NEJabEhQ c1drMEZuUmVtbHZxUjBVMFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0TWXxdjknAEUc/u7RBLLyjEd3SO68MURNwXnWlU6JwqbJqKNrIFV7 EqV5ZJpb0kGLtiaNgr6f0y455nTgDdmWOgN+ITazTUi+618KVQnqYLR68Ryml2nl 7MyhswRxcd7yDHTVa6ZiL+BnEc2/gxJrBlJ6mWVeQniIaXU8hKYELlzP4MUBWEl0 GcpMclNYubMksdI5vrVjujV9RCzyrP4HPy09g+ZUNPQNFgCNLRrY1iWupXefGaLc rf5TtNQrwotxJtfp3p1fTe/lLoY+1Ap1EelCs8VU+YgcVE3nuacYRC7AvdXQacxN M8DWio6Zy2Kdo3FQj8ZB2D8HL2b5lVjw -----END CERTIFICATE-----Generated at Sat Apr 26 17:10:54 2025 by rpki-client