$ rpki-client -vvf rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft File: fjqkjWfrmWmcArgfcWlt9GWopuU.mft (raw, json) Hash identifier: craoLOjGdrmsS6d9qmurF7IUuA9JoxvuouApk9zgxQM= Subject key identifier: BD:0C:EC:FD:72:7C:E2:D0:E6:52:0C:32:1B:0D:CD:2D:9B:0C:86:FF Authority key identifier: 7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5 Certificate issuer: /CN=A9142420/serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft Manifest number: 4E Signing time: Fri 25 Apr 2025 06:18:06 +0000 Manifest this update: Fri 25 Apr 2025 06:18:05 +0000 Manifest next update: Fri 02 May 2025 06:18:05 +0000 Files and hashes: 1: fjqkjWfrmWmcArgfcWlt9GWopuU.crl (hash: wY1PvDehEM3ahOLXkgFCduiUsSfZIHO/moxx2fD2ieM=) 2: E010D234AC8D11EF93B1CB46C4F9AE02.roa (hash: YpSnYb0YINnTM8lhx7+T2YYXN8o6CWyYil8vXxTtBGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:18:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142420, serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5 Validity Not Before: Apr 25 06:18:05 2025 GMT Not After : May 2 06:18:05 2025 GMT Subject: CN=680b291e-d5ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:52:1f:a7:28:f7:e4:62:fe:7f:20:1d:95:7d: e3:1d:c2:41:d3:b3:d6:17:2b:76:b9:d4:e9:69:5e: 1d:a4:1e:05:9d:02:be:2c:54:90:11:92:cd:4d:bf: d7:a6:5e:e9:24:28:59:6d:56:57:33:b7:c2:0d:21: 8f:ce:5a:0e:a7:21:9a:33:d3:b6:5f:af:46:47:99: cb:da:37:70:f4:67:62:f0:2a:11:4b:4e:64:d9:fa: c1:cf:1e:68:bd:aa:c7:0a:7e:2c:5d:d0:8c:72:ea: cb:0a:6b:42:47:ce:c4:94:d3:d3:2f:5b:9f:e7:82: be:78:44:da:fb:9c:3c:44:43:b3:41:f0:62:5c:03: e2:b9:3e:37:7a:11:01:86:39:8d:47:e1:74:97:c8: 40:c3:fe:6b:f4:45:e6:e6:d4:40:b4:cd:dd:f4:3b: 2f:7c:4f:4c:27:12:5c:9f:af:d2:13:17:c6:27:84: 93:53:75:f7:2a:f5:5f:dc:b2:4e:62:3c:81:00:67: 6c:6e:e6:12:30:1e:63:72:87:97:4f:50:89:26:28: 71:05:ff:28:b0:ee:e4:fe:dd:3b:fb:ef:bb:56:c8: 79:41:45:de:84:d9:37:c8:42:79:2f:f1:fe:ac:51: b1:43:e1:29:b4:17:5e:62:a4:e1:cb:e2:73:56:98: 2f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:0C:EC:FD:72:7C:E2:D0:E6:52:0C:32:1B:0D:CD:2D:9B:0C:86:FF X509v3 Authority Key Identifier: keyid:7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:66:07:2d:21:83:af:94:20:ee:a0:88:86:ae:b7:a1:be:6a: fe:47:ec:ad:ce:0e:69:c3:2c:d6:18:34:57:1e:1a:ef:68:a6: 6d:84:1f:8b:2a:25:32:77:18:32:97:5c:62:2f:4f:9a:d2:d2: af:58:1e:83:8e:20:76:ea:2d:ee:97:ce:be:9d:98:95:2d:aa: dd:9b:f2:d4:08:ae:15:1d:20:a5:4c:b1:b4:73:80:b3:b1:a7: 06:d4:9e:38:fc:0d:47:f4:ba:3d:31:38:d6:f5:6d:34:e2:e9: 56:95:22:f4:e1:44:dc:73:a2:05:df:5d:3d:48:f6:81:c1:87: f8:11:07:33:0c:1b:8c:95:96:6c:c1:46:5c:1b:d7:80:ca:48: 0d:8f:c6:50:1d:6e:28:9a:38:f7:d9:94:4a:72:64:18:45:6d: 6d:df:65:e7:68:73:cb:0a:ed:87:5c:1f:96:57:d9:2d:0f:50: 8e:c9:ad:e4:a7:b3:ab:f0:00:bf:d9:f5:40:eb:2b:bc:fa:23: 41:73:11:c2:e5:e7:72:c2:d7:cc:f6:5b:ea:b9:9e:22:85:34: f1:4a:ad:10:7e:1a:02:24:87:99:bf:5a:ba:17:8b:81:e9:c8: 96:8a:7e:0b:ae:59:3a:9e:27:63:5e:a3:95:94:30:99:9e:b6: 79:1a:be:2f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjQyMDExMC8GA1UEBRMoN0UzQUE0OEQ2N0VCOTk2OTlDMDJCODFGNzE2OTZERjQ2 NUE4QTZFNTAeFw0yNTA0MjUwNjE4MDVaFw0yNTA1MDIwNjE4MDVaMBgxFjAUBgNV BAMTDTY4MGIyOTFlLWQ1ZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1Uh+nKPfkYv5/IB2VfeMdwkHTs9YXK3a51OlpXh2kHgWdAr4sVJARks1Nv9em XukkKFltVlczt8INIY/OWg6nIZoz07Zfr0ZHmcvaN3D0Z2LwKhFLTmTZ+sHPHmi9 qscKfixd0Ixy6ssKa0JHzsSU09MvW5/ngr54RNr7nDxEQ7NB8GJcA+K5Pjd6EQGG OY1H4XSXyEDD/mv0Rebm1EC0zd30Oy98T0wnElyfr9ITF8YnhJNTdfcq9V/csk5i PIEAZ2xu5hIwHmNyh5dPUIkmKHEF/yiw7uT+3Tv777tWyHlBRd6E2TfIQnkv8f6s UbFD4Sm0F15ipOHL4nNWmC9JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvQzs/XJ8 4tDmUgwyGw3NLZsMhv8wHwYDVR0jBBgwFoAUfjqkjWfrmWmcArgfcWlt9GWopuUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNDIwL0M0MkIzM0Q0QUM4 RDExRUY4ODYwQkUzNEM0RjlBRTAyL2ZqcWtqV2ZybVdtY0FyZ2ZjV2x0OUdXb3B1 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZmpxa2pXZnJtV21jQXJnZmNXbHQ5R1dvcHVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy NDIwL0M0MkIzM0Q0QUM4RDExRUY4ODYwQkUzNEM0RjlBRTAyL2ZqcWtqV2ZybVdt Y0FyZ2ZjV2x0OUdXb3B1VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABBmBy0hg6+UIO6giIaut6G+av5H7K3ODmnDLNYYNFceGu9opm2EH4sq JTJ3GDKXXGIvT5rS0q9YHoOOIHbqLe6Xzr6dmJUtqt2b8tQIrhUdIKVMsbRzgLOx pwbUnjj8DUf0uj0xONb1bTTi6VaVIvThRNxzogXfXT1I9oHBh/gRBzMMG4yVlmzB Rlwb14DKSA2PxlAdbiiaOPfZlEpyZBhFbW3fZedoc8sK7YdcH5ZX2S0PUI7JreSn s6vwAL/Z9UDrK7z6I0FzEcLl53LC18z2W+q5niKFNPFKrRB+GgIkh5m/WroXi4Hp yJaKfguuWTqeJ2Neo5WUMJmetnkavi8= -----END CERTIFICATE-----Generated at Sat Apr 26 13:39:12 2025 by rpki-client