$ rpki-client -vvf rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft File: e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft (raw, json) Hash identifier: Mq5tLW57IeGqz9hJJBdWYtvG6X27+aLN+nMjkng+dKc= Subject key identifier: DE:DD:36:E5:3E:BA:96:61:02:AE:C7:82:16:37:D1:F4:4F:7B:E9:F7 Authority key identifier: 7B:53:4A:ED:D3:0F:24:45:95:88:0D:64:E7:64:6B:D1:33:34:AF:B4 Certificate issuer: /CN=A913C83A/serialNumber=7B534AEDD30F244595880D64E7646BD13334AFB4 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1NK7dMPJEWViA1k52Rr0TM0r7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft Manifest number: 4A Signing time: Fri 25 Apr 2025 06:23:05 +0000 Manifest this update: Fri 25 Apr 2025 06:23:05 +0000 Manifest next update: Fri 02 May 2025 06:23:05 +0000 Files and hashes: 1: e1NK7dMPJEWViA1k52Rr0TM0r7Q.crl (hash: di5StEoDf0WZ5zJbGLbIPA2EkFEJv8rP7me0CXJ6Pd8=) 2: 265BE218B69F11EFB2CFE86CC4F9AE02.roa (hash: vLV5ILypZ5+6/MGlQ4HJDangMObqhJh2n/QaZfHAWOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.crl rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1NK7dMPJEWViA1k52Rr0TM0r7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C83A, serialNumber=7B534AEDD30F244595880D64E7646BD13334AFB4 Validity Not Before: Apr 25 06:23:05 2025 GMT Not After : May 2 06:23:05 2025 GMT Subject: CN=680b2a49-c60a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:dd:f4:4e:11:5e:03:31:a0:17:e2:7d:dd:83: e3:96:ba:7a:30:cf:8a:69:10:a9:08:02:31:8a:4a: 07:a7:ba:5c:16:2f:d6:f4:4e:2b:03:44:a7:ca:92: 43:ae:a4:b9:fe:7f:51:d1:d4:63:0b:5d:89:1b:e1: 01:eb:32:f9:ef:f5:8c:fd:83:34:5d:18:92:e8:9a: 3f:57:89:ae:ec:95:90:54:fc:27:dc:92:12:b7:1a: 7a:0c:35:9d:5a:d2:88:46:2a:b4:d2:51:10:ff:73: 6b:73:4c:da:d5:3c:b1:ed:21:df:20:7a:cf:ca:e6: 39:4f:07:eb:26:59:29:bf:eb:db:da:7d:fb:89:42: 4e:91:af:c6:88:b3:fa:34:95:c2:b6:17:55:96:c6: 2c:06:e4:1b:c4:22:e2:be:1c:68:2f:bd:ce:2c:06: d8:0e:85:34:ca:40:6d:40:5f:36:f6:47:e7:e7:36: 2b:14:45:62:68:25:15:cf:ad:96:78:58:53:ce:bf: 12:81:1a:8c:67:2d:cd:7e:dc:08:cd:24:e8:07:f7: 3e:17:04:f9:81:67:2b:94:63:b1:3b:9a:7a:f8:a2: 76:28:b3:7f:72:ce:93:88:86:ff:29:4a:b0:50:d5: 28:92:3f:a3:f7:ba:a2:b3:73:23:5c:6c:27:f9:d6: f9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DD:36:E5:3E:BA:96:61:02:AE:C7:82:16:37:D1:F4:4F:7B:E9:F7 X509v3 Authority Key Identifier: keyid:7B:53:4A:ED:D3:0F:24:45:95:88:0D:64:E7:64:6B:D1:33:34:AF:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1NK7dMPJEWViA1k52Rr0TM0r7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a3:95:41:26:2f:01:88:90:28:83:07:fd:ed:5a:71:3c:3b: d3:65:93:ab:47:39:e3:1f:b3:da:32:ef:c1:cc:ae:c8:58:c6: d3:9a:4b:c4:1d:01:29:30:47:ca:9d:75:1c:c3:5a:bb:05:92: fa:9e:98:2f:71:7c:7d:b8:8f:96:7f:83:82:ab:a1:cc:0d:8e: fc:7c:88:a5:b5:15:91:35:5b:fa:57:87:40:47:dc:bb:52:8a: 64:05:48:b6:2d:77:88:b9:b6:0e:14:e9:80:ea:ce:ee:c2:6f: 5b:7d:d3:ec:f7:fc:bf:69:35:b5:e2:ab:8f:c5:34:2b:c9:b1: fe:e8:eb:d4:2b:e1:bb:a5:bb:18:01:9e:a6:34:f5:23:ee:9a: b6:dd:fe:99:1b:d0:fa:a9:f3:6d:0f:1b:2a:1f:35:a3:98:e1: 3e:55:7d:b1:08:06:34:6e:5e:b2:d9:4f:5f:7b:0e:7a:13:b3: 2d:01:8d:22:53:64:22:0e:6f:ef:e2:cb:76:10:42:4c:a5:b7: 8c:03:ba:a6:a8:f8:70:08:56:b5:6e:e4:e2:e2:1b:ec:b7:f8: ad:08:a8:59:b5:ef:a6:c5:a0:49:fa:bb:fe:23:7c:bf:f5:52: 50:19:b6:b3:59:ba:af:e4:64:c8:7c:d0:3f:89:12:29:47:2a: c4:2d:2a:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QzgzQTExMC8GA1UEBRMoN0I1MzRBRUREMzBGMjQ0NTk1ODgwRDY0RTc2NDZCRDEz MzM0QUZCNDAeFw0yNTA0MjUwNjIzMDVaFw0yNTA1MDIwNjIzMDVaMBgxFjAUBgNV BAMTDTY4MGIyYTQ5LWM2MGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC73fROEV4DMaAX4n3dg+OWunowz4ppEKkIAjGKSgenulwWL9b0TisDRKfKkkOu pLn+f1HR1GMLXYkb4QHrMvnv9Yz9gzRdGJLomj9Xia7slZBU/CfckhK3GnoMNZ1a 0ohGKrTSURD/c2tzTNrVPLHtId8ges/K5jlPB+smWSm/69vaffuJQk6Rr8aIs/o0 lcK2F1WWxiwG5BvEIuK+HGgvvc4sBtgOhTTKQG1AXzb2R+fnNisURWJoJRXPrZZ4 WFPOvxKBGoxnLc1+3AjNJOgH9z4XBPmBZyuUY7E7mnr4onYos39yzpOIhv8pSrBQ 1SiSP6P3uqKzcyNcbCf51vmHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3t025T66 lmECrseCFjfR9E976fcwHwYDVR0jBBgwFoAUe1NK7dMPJEWViA1k52Rr0TM0r7Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDODNBL0NCNjJBMEFBQjY5 RDExRUZBODEzOTg0QkM0RjlBRTAyL2UxTks3ZE1QSkVXVmlBMWs1MlJyMFRNMHI3 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZTFOSzdkTVBKRVdWaUExazUyUnIwVE0wcjdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTND ODNBL0NCNjJBMEFBQjY5RDExRUZBODEzOTg0QkM0RjlBRTAyL2UxTks3ZE1QSkVX VmlBMWs1MlJyMFRNMHI3US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC6jlUEmLwGIkCiDB/3tWnE8O9Nlk6tHOeMfs9oy78HMrshYxtOaS8Qd ASkwR8qddRzDWrsFkvqemC9xfH24j5Z/g4KrocwNjvx8iKW1FZE1W/pXh0BH3LtS imQFSLYtd4i5tg4U6YDqzu7Cb1t90+z3/L9pNbXiq4/FNCvJsf7o69Qr4buluxgB nqY09SPumrbd/pkb0Pqp820PGyofNaOY4T5VfbEIBjRuXrLZT197DnoTsy0BjSJT ZCIOb+/iy3YQQkylt4wDuqao+HAIVrVu5OLiG+y3+K0IqFm176bFoEn6u/4jfL/1 UlAZtrNZuq/kZMh80D+JEilHKsQtKmw= -----END CERTIFICATE-----Generated at Sat Apr 26 16:57:03 2025 by rpki-client