$ rpki-client -vvf rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.mft File: 7Ko9FfqLFNqq_iBZpAGbIPUn-D0.mft (raw, json) Hash identifier: FpxZMzP5j4+z3opgUGPIkhsalR8znMcUD02tp+yIVls= Subject key identifier: E4:45:9E:CA:AC:34:DC:3E:A9:F3:6A:94:C5:BC:48:D5:CA:6D:BF:06 Authority key identifier: EC:AA:3D:15:FA:8B:14:DA:AA:FE:20:59:A4:01:9B:20:F5:27:F8:3D Certificate issuer: /CN=A913DC07/serialNumber=ECAA3D15FA8B14DAAAFE2059A4019B20F527F83D Certificate serial: 04A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.mft Manifest number: 049B Signing time: Sat 26 Apr 2025 23:39:42 +0000 Manifest this update: Sat 26 Apr 2025 23:39:41 +0000 Manifest next update: Sat 03 May 2025 23:39:41 +0000 Files and hashes: 1: 7Ko9FfqLFNqq_iBZpAGbIPUn-D0.crl (hash: ftzR8SBXjBMADCs5yOJCIw4TvS1m6z/8Y0+AudIYQpk=) 2: 1E6E1BE8DB0711EFBD49DC56C4F9AE02.roa (hash: gvMSrYkjgEBiNDDMq1X7x98IStl9qcCUAlgSn78iVmM=) 3: 18612BE6DB0711EF9B67D356C4F9AE02.roa (hash: K6xw9z5FHd3cBcaSkpj6+6W0ng+CbMowA+OXIfonnos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.crl rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1189 (0x4a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DC07, serialNumber=ECAA3D15FA8B14DAAAFE2059A4019B20F527F83D Validity Not Before: Apr 26 23:39:41 2025 GMT Not After : May 3 23:39:41 2025 GMT Subject: CN=680d6ebe-9e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:62:7e:a5:d3:23:2f:90:44:b3:e7:4b:20:23: d1:d1:97:97:5a:74:73:00:7b:46:46:ce:a1:b9:b5: a9:f4:24:e2:ed:7f:87:5a:72:b1:b2:26:0a:02:86: 4f:66:f3:2a:56:97:7d:6f:18:37:05:08:46:1d:66: d6:7e:c9:05:c5:8e:b2:80:0e:32:f7:05:92:3f:70: 7c:8c:17:d7:8f:4c:ae:6e:11:8c:dd:0e:81:1c:03: 9d:5d:6e:32:ba:0b:24:b8:43:84:29:bd:de:b4:94: fb:89:8e:6f:f7:2b:d2:ed:1f:74:90:41:3f:86:41: 54:86:71:bd:58:99:7f:21:5e:34:c6:ac:7b:f8:0d: 32:ae:e6:41:b8:6a:69:ed:57:28:5b:f9:20:3c:c0: 1f:71:69:d3:23:80:04:de:5a:fe:9b:f4:56:28:71: 08:59:e1:26:59:1a:75:1d:7c:24:e7:f1:9d:5f:92: f2:16:31:35:66:b4:ba:53:fc:02:b0:5d:76:7c:78: d5:dc:b4:23:96:56:a1:b6:90:ba:c6:30:7b:d8:35: b2:c0:1b:17:28:69:3d:da:09:31:2f:24:e1:44:24: 59:61:36:1a:e2:87:d9:f1:5b:82:aa:8d:96:bb:17: 69:21:bb:7c:df:fe:ba:0e:db:12:71:b6:57:54:f5: 05:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:45:9E:CA:AC:34:DC:3E:A9:F3:6A:94:C5:BC:48:D5:CA:6D:BF:06 X509v3 Authority Key Identifier: keyid:EC:AA:3D:15:FA:8B:14:DA:AA:FE:20:59:A4:01:9B:20:F5:27:F8:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:fc:56:14:f6:14:a5:fd:4f:90:82:dc:4e:ca:d2:5a:5a:85: fa:74:09:f2:19:87:ae:b3:56:79:2f:b5:4d:bb:a7:ab:5a:72: b0:ac:76:60:96:b2:ba:75:f4:14:4e:13:3a:22:d6:33:d8:7e: c3:60:d1:a1:de:71:5d:07:de:12:60:f2:67:1f:57:07:d8:6a: fb:19:40:a0:6b:d8:76:32:89:15:d8:75:83:cc:0c:89:f3:ff: 32:d8:94:35:3f:79:74:3b:19:ef:cd:aa:a9:74:65:e7:d3:e1: f2:e6:dd:e2:65:86:5c:c4:b3:e2:48:1e:c0:e4:3a:3b:5c:17: cf:ec:e1:80:75:51:c6:9c:80:71:b3:26:64:6b:86:e9:66:25: 10:0a:bc:98:f7:6a:03:6b:0f:97:8c:2d:62:fa:f5:23:9c:0f: 72:bb:cd:c6:07:b3:ac:85:42:ac:e6:0a:0a:db:90:72:5c:8c: 57:0e:bb:27:d9:49:8f:23:e0:04:01:1f:76:86:39:f5:c8:40: 64:f5:6e:4e:e5:1d:33:91:85:93:58:cc:6f:63:f6:01:1a:a1: 72:58:ec:9b:81:9f:f7:a4:a5:fd:3d:d7:09:60:27:a0:81:2f: 9b:56:a8:6e:14:d3:91:9e:5b:b5:ae:c1:4d:29:8e:2d:41:46: 15:d7:54:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RDMDcxMTAvBgNVBAUTKEVDQUEzRDE1RkE4QjE0REFBQUZFMjA1OUE0MDE5QjIw RjUyN0Y4M0QwHhcNMjUwNDI2MjMzOTQxWhcNMjUwNTAzMjMzOTQxWjAYMRYwFAYD VQQDEw02ODBkNmViZS05ZTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mJ+pdMjL5BEs+dLICPR0ZeXWnRzAHtGRs6hubWp9CTi7X+HWnKxsiYKAoZP ZvMqVpd9bxg3BQhGHWbWfskFxY6ygA4y9wWSP3B8jBfXj0yubhGM3Q6BHAOdXW4y ugskuEOEKb3etJT7iY5v9yvS7R90kEE/hkFUhnG9WJl/IV40xqx7+A0yruZBuGpp 7VcoW/kgPMAfcWnTI4AE3lr+m/RWKHEIWeEmWRp1HXwk5/GdX5LyFjE1ZrS6U/wC sF12fHjV3LQjllahtpC6xjB72DWywBsXKGk92gkxLyThRCRZYTYa4ofZ8VuCqo2W uxdpIbt83/66DtsScbZXVPUFFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORFnsqs NNw+qfNqlMW8SNXKbb8GMB8GA1UdIwQYMBaAFOyqPRX6ixTaqv4gWaQBmyD1J/g9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREMwNy80RUI5RURENjMz NjIxMUVDQTdBQzUxMzFDNEY5QUUwMi83S285RmZxTEZOcXFfaUJacEFHYklQVW4t RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdLbzlGZnFMRk5xcV9pQlpwQUdiSVBVbi1EMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REMwNy80RUI5RURENjMzNjIxMUVDQTdBQzUxMzFDNEY5QUUwMi83S285RmZxTEZO cXFfaUJacEFHYklQVW4tRDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz/FYU9hSl/U+QgtxOytJaWoX6dAnyGYeus1Z5L7VNu6erWnKwrHZg lrK6dfQUThM6ItYz2H7DYNGh3nFdB94SYPJnH1cH2Gr7GUCga9h2MokV2HWDzAyJ 8/8y2JQ1P3l0OxnvzaqpdGXn0+Hy5t3iZYZcxLPiSB7A5Do7XBfP7OGAdVHGnIBx syZka4bpZiUQCryY92oDaw+XjC1i+vUjnA9yu83GB7OshUKs5goK25ByXIxXDrsn 2UmPI+AEAR92hjn1yEBk9W5O5R0zkYWTWMxvY/YBGqFyWOybgZ/3pKX9PdcJYCeg gS+bVqhuFNORnlu1rsFNKY4tQUYV11QU -----END CERTIFICATE-----Generated at Sun Apr 27 09:31:58 2025 by rpki-client