$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft File: af6XO37r6w_4mym5y1vrq9DjHWs.mft (raw, json) Hash identifier: BdKuXQ0dx7CyC746N9JSzxJ0kZf4rdQ/mXipSdW29Tk= Subject key identifier: 17:7F:7E:F0:78:7A:E4:6D:66:80:A4:5D:46:71:BC:5E:58:09:8B:9F Authority key identifier: 69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B Certificate issuer: /CN=A9144CD3/serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft Manifest number: 07 Signing time: Fri 25 Apr 2025 07:09:57 +0000 Manifest this update: Fri 25 Apr 2025 07:09:56 +0000 Manifest next update: Fri 02 May 2025 07:09:56 +0000 Files and hashes: 1: af6XO37r6w_4mym5y1vrq9DjHWs.crl (hash: QVeRX5VlcCOmTl2w608bfL9waj4labIzmJjG3DBeHWw=) 2: B51F229E1BC611F08FE24C2CC4F9AE02.roa (hash: +A23Vf7UDZZ1gLqCLzyRAUce3j4brOUg3a6CYPzeOps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:09:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144CD3, serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B Validity Not Before: Apr 25 07:09:56 2025 GMT Not After : May 2 07:09:56 2025 GMT Subject: CN=680b3544-d1bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:74:20:b8:f7:cd:7e:81:fb:8b:52:1e:92:5d: 08:54:cc:fa:b0:38:a0:59:3f:c5:80:3b:8a:36:77: 33:a6:3e:b7:6d:25:1b:69:34:c3:67:ea:6a:33:4c: 9b:76:b9:37:2c:2c:e6:e0:48:fb:1b:3a:7c:f3:98: 83:c0:44:82:f4:48:56:03:38:ed:c5:ec:cd:64:78: 32:58:7e:08:23:57:a5:39:c9:d6:8d:c1:6b:9c:2f: 14:94:da:91:8e:11:38:d1:8c:26:f1:bc:27:87:58: 70:3a:d6:83:91:5d:28:4f:f0:f4:de:1f:8b:14:b6: 93:36:63:05:63:c8:9d:a1:0a:50:47:3c:38:da:e3: c4:fe:4a:8e:4d:26:2a:02:24:11:7c:04:6a:74:cc: 8a:86:34:23:3e:b7:11:2e:b3:02:5c:ba:72:03:9e: 4c:af:95:ef:65:96:2b:45:2c:22:c5:a3:95:81:f7: 79:d2:f9:13:a7:7a:f1:af:d1:88:ef:fd:66:65:7a: 90:93:07:69:8f:25:e3:50:44:7a:aa:e2:b5:86:85: 02:5a:1d:7c:36:fe:06:33:26:e0:e4:9a:6f:c4:b8: 54:07:dd:6d:85:05:f3:d1:3a:d3:5d:43:9b:42:b2: b1:a6:f8:45:d2:8d:fd:95:9f:8a:7c:bb:ea:fd:58: b6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:7F:7E:F0:78:7A:E4:6D:66:80:A4:5D:46:71:BC:5E:58:09:8B:9F X509v3 Authority Key Identifier: keyid:69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:64:d1:6f:07:22:17:34:56:04:6b:72:1b:15:14:62:9b:0f: 64:90:16:d7:f3:06:94:2c:77:2c:76:6d:aa:05:8c:e0:40:7f: df:52:e7:1e:39:7d:c6:13:b2:a3:e7:ef:00:7a:9f:34:c3:a4: 4d:6d:48:70:67:b1:a9:29:94:ca:f5:d7:60:1b:37:94:c5:ab: 33:c8:3e:fd:fc:70:b9:cf:f6:b7:23:c3:c1:69:b5:78:a9:38: f2:84:85:8b:91:20:0b:fd:cf:15:1e:42:69:c5:36:44:7b:88: 7e:84:83:07:42:65:0a:3d:b3:3d:84:05:99:3c:b3:ad:56:90: f5:32:79:57:da:10:7a:4f:23:ca:11:b0:c7:56:7b:af:0b:e8: f7:77:14:4a:11:41:ee:f4:c4:85:ae:f4:6e:80:87:15:71:94: 5c:94:76:30:b5:52:23:a8:93:77:58:87:b4:ba:4a:79:b2:a6: c6:86:15:8e:73:0a:1f:76:c8:1c:8b:78:cf:16:5a:ea:28:91: 50:3f:28:20:13:23:f1:e4:96:cc:1e:65:eb:e9:6a:61:39:e4: 38:b3:45:b0:ed:a2:be:a4:27:a5:08:b6:c4:e7:2b:e8:0f:db: e3:ed:00:43:0d:dc:59:42:02:ac:5c:8c:07:08:51:7f:0e:a5: 76:b6:2b:ec -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NENEMzExMC8GA1UEBRMoNjlGRTk3M0I3RUVCRUIwRkY4OUIyOUI5Q0I1QkVCQUJE MEUzMUQ2QjAeFw0yNTA0MjUwNzA5NTZaFw0yNTA1MDIwNzA5NTZaMBgxFjAUBgNV BAMTDTY4MGIzNTQ0LWQxYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIdCC4981+gfuLUh6SXQhUzPqwOKBZP8WAO4o2dzOmPrdtJRtpNMNn6mozTJt2 uTcsLObgSPsbOnzzmIPARIL0SFYDOO3F7M1keDJYfggjV6U5ydaNwWucLxSU2pGO ETjRjCbxvCeHWHA61oORXShP8PTeH4sUtpM2YwVjyJ2hClBHPDja48T+So5NJioC JBF8BGp0zIqGNCM+txEuswJcunIDnkyvle9llitFLCLFo5WB93nS+ROnevGv0Yjv /WZlepCTB2mPJeNQRHqq4rWGhQJaHXw2/gYzJuDkmm/EuFQH3W2FBfPROtNdQ5tC srGm+EXSjf2Vn4p8u+r9WLYFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUF39+8Hh6 5G1mgKRdRnG8XlgJi58wHwYDVR0jBBgwFoAUaf6XO37r6w/4mym5y1vrq9DjHWsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0Q0QzL0YwQTY1QzNFMUI2 NjExRjBBMDVDQjUyOUM0RjlBRTAyL2FmNlhPMzdyNndfNG15bTV5MXZycTlEakhX cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWY2WE8zN3I2d180bXltNXkxdnJxOURqSFdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 Q0QzL0YwQTY1QzNFMUI2NjExRjBBMDVDQjUyOUM0RjlBRTAyL2FmNlhPMzdyNndf NG15bTV5MXZycTlEakhXcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGpk0W8HIhc0VgRrchsVFGKbD2SQFtfzBpQsdyx2baoFjOBAf99S5x45 fcYTsqPn7wB6nzTDpE1tSHBnsakplMr112AbN5TFqzPIPv38cLnP9rcjw8FptXip OPKEhYuRIAv9zxUeQmnFNkR7iH6EgwdCZQo9sz2EBZk8s61WkPUyeVfaEHpPI8oR sMdWe68L6Pd3FEoRQe70xIWu9G6AhxVxlFyUdjC1UiOok3dYh7S6SnmypsaGFY5z Ch92yByLeM8WWuookVA/KCATI/HklsweZevpamE55DizRbDtor6kJ6UItsTnK+gP 2+PtAEMN3FlCAqxcjAcIUX8OpXa2K+w= -----END CERTIFICATE-----Generated at Sat Apr 26 04:24:33 2025 by rpki-client