$ rpki-client -vvf rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft File: -L04pMnwxPpzvw2Q_wzKgC2_1tw.mft (raw, json) Hash identifier: i9S5awvrjxISYYGy+Po4ue9HNHEE0EP0iT1gU854RGM= Subject key identifier: 69:80:6C:CB:24:B3:C9:73:08:8C:60:EE:AC:8C:70:1F:6B:21:92:7D Authority key identifier: F8:BD:38:A4:C9:F0:C4:FA:73:BF:0D:90:FF:0C:CA:80:2D:BF:D6:DC Certificate issuer: /CN=A91407B7/serialNumber=F8BD38A4C9F0C4FA73BF0D90FF0CCA802DBFD6DC Certificate serial: 07D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft Manifest number: 07C7 Signing time: Thu 24 Apr 2025 20:54:43 +0000 Manifest this update: Thu 24 Apr 2025 20:54:43 +0000 Manifest next update: Thu 01 May 2025 20:54:43 +0000 Files and hashes: 1: -L04pMnwxPpzvw2Q_wzKgC2_1tw.crl (hash: be1KbNi1L3gveybaKYHPp+5UKsaR2Ne7U3Tz8+wgG10=) 2: 26833348954511EFA5D9B90FC4F9AE02.roa (hash: CyHrVj1UIxTmkHUnWq5JYlTSppmsSZAZAIYgcE9IyY4=) 3: 4878EA2E954511EF87341210C4F9AE02.roa (hash: 3Hi3qHebz75olBYvl7sFul5/x4z+usSMAu2fmKYpx6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.crl rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:54:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2006 (0x7d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91407B7, serialNumber=F8BD38A4C9F0C4FA73BF0D90FF0CCA802DBFD6DC Validity Not Before: Apr 24 20:54:43 2025 GMT Not After : May 1 20:54:43 2025 GMT Subject: CN=680aa513-5562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:01:22:7b:89:1d:fe:5f:69:85:5b:fc:9b:d4: 26:5c:47:05:eb:e9:76:74:79:f9:7c:5f:05:b9:78: a4:7a:c1:e1:5a:7f:a1:cc:71:2d:22:2d:d8:00:c2: 9b:cd:dc:0a:64:5f:21:8a:73:f6:c7:ca:af:f6:28: e9:1d:ba:70:d5:f3:33:50:b0:dc:ad:9c:f6:ce:03: da:f9:ac:15:0b:97:c6:06:d6:39:12:7c:4f:f2:bf: b5:78:9e:ce:e3:54:59:39:77:6d:9d:d6:de:bf:60: 52:63:9d:ba:e5:f2:7a:21:02:92:0c:89:59:98:95: 1c:d4:91:0f:fb:05:5f:2e:33:b5:fb:cf:42:6d:fd: cf:ae:ba:ce:ac:2c:f3:d6:65:1d:ab:62:de:81:ed: 36:60:a6:c3:f1:22:4c:a2:04:24:1f:5f:24:01:79: 7f:73:f3:18:23:ec:21:55:f1:94:dc:83:cb:bd:b9: 28:22:d5:8d:3e:d8:0c:38:fb:03:91:d6:41:c5:f6: 42:4c:57:ed:4d:f3:0d:6e:b2:4b:d8:13:b4:87:3d: 23:b4:d9:73:87:33:99:b9:26:11:97:a8:83:dd:1c: 8c:c9:e3:39:b7:c1:06:59:0d:5d:8a:8c:6e:13:01: c3:be:5f:e6:cc:c8:3f:1e:30:40:b6:ab:86:19:d2: ed:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:80:6C:CB:24:B3:C9:73:08:8C:60:EE:AC:8C:70:1F:6B:21:92:7D X509v3 Authority Key Identifier: keyid:F8:BD:38:A4:C9:F0:C4:FA:73:BF:0D:90:FF:0C:CA:80:2D:BF:D6:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:f6:78:9c:85:08:87:26:7a:14:61:58:bc:86:df:3f:3f:09: a7:5f:af:83:aa:65:85:a9:c6:96:ed:7a:ba:e4:27:34:4d:9d: 9b:f9:c5:6b:b0:3e:cc:b9:22:aa:95:22:c2:b9:25:7f:d6:b7: 20:52:d8:ec:23:22:2d:18:64:ef:91:f2:fe:a5:cf:c1:01:ba: 6d:b2:a0:c1:49:e3:6a:b7:2b:54:6f:3c:ee:83:f8:46:06:1e: 38:01:e6:3c:8d:d2:c5:2b:02:6c:a1:0a:be:b9:85:70:2d:c4: fb:6f:0e:b3:93:45:f9:f7:2d:84:bd:19:ca:a2:f0:32:cf:30: 80:a6:df:fa:54:2a:7a:64:bd:0e:2f:97:e3:c8:a1:30:f6:92: ac:e2:66:06:08:25:2b:9b:cc:15:11:f5:db:38:e8:e5:55:25: 58:c1:58:d8:b6:b6:b1:a8:42:5e:c2:db:ae:6e:a8:6c:dc:7a: 8a:fb:43:72:7b:5e:85:bb:c3:80:79:68:5d:b3:40:28:51:df: 7a:d1:e1:f3:8b:96:ee:60:a8:0c:a1:ab:fc:54:7f:ee:19:55: 11:c0:18:2b:74:1d:c3:77:d3:7f:16:9c:1d:3f:af:bc:52:58: f4:bd:da:5a:08:2d:39:4d:e1:04:da:4d:70:f9:cb:66:fb:8c: 7e:9d:77:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA3QjcxMTAvBgNVBAUTKEY4QkQzOEE0QzlGMEM0RkE3M0JGMEQ5MEZGMENDQTgw MkRCRkQ2REMwHhcNMjUwNDI0MjA1NDQzWhcNMjUwNTAxMjA1NDQzWjAYMRYwFAYD VQQDEw02ODBhYTUxMy01NTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAEie4kd/l9phVv8m9QmXEcF6+l2dHn5fF8FuXikesHhWn+hzHEtIi3YAMKb zdwKZF8hinP2x8qv9ijpHbpw1fMzULDcrZz2zgPa+awVC5fGBtY5EnxP8r+1eJ7O 41RZOXdtndbev2BSY5265fJ6IQKSDIlZmJUc1JEP+wVfLjO1+89Cbf3PrrrOrCzz 1mUdq2Lege02YKbD8SJMogQkH18kAXl/c/MYI+whVfGU3IPLvbkoItWNPtgMOPsD kdZBxfZCTFftTfMNbrJL2BO0hz0jtNlzhzOZuSYRl6iD3RyMyeM5t8EGWQ1dioxu EwHDvl/mzMg/HjBAtquGGdLtpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmAbMsk s8lzCIxg7qyMcB9rIZJ9MB8GA1UdIwQYMBaAFPi9OKTJ8MT6c78NkP8MyoAtv9bc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDdCNy9CRDZGRTg1MEYx NzUxMUVBQjU2QjAwNENDNEY5QUUwMi8tTDA0cE1ud3hQcHp2dzJRX3d6S2dDMl8x dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1MMDRwTW53eFBwenZ3MlFfd3pLZ0MyXzF0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDdCNy9CRDZGRTg1MEYxNzUxMUVBQjU2QjAwNENDNEY5QUUwMi8tTDA0cE1ud3hQ cHp2dzJRX3d6S2dDMl8xdHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm9nichQiHJnoUYVi8ht8/PwmnX6+DqmWFqcaW7Xq65Cc0TZ2b+cVr sD7MuSKqlSLCuSV/1rcgUtjsIyItGGTvkfL+pc/BAbptsqDBSeNqtytUbzzug/hG Bh44AeY8jdLFKwJsoQq+uYVwLcT7bw6zk0X59y2EvRnKovAyzzCApt/6VCp6ZL0O L5fjyKEw9pKs4mYGCCUrm8wVEfXbOOjlVSVYwVjYtraxqEJewtuubqhs3HqK+0Ny e16Fu8OAeWhds0AoUd960eHzi5buYKgMoav8VH/uGVURwBgrdB3Dd9N/FpwdP6+8 Ulj0vdpaCC05TeEE2k1w+ctm+4x+nXcX -----END CERTIFICATE-----Generated at Sat Apr 26 05:07:04 2025 by rpki-client