$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft File: x7Jkc1A4Cmo0404yzv41GZN-l8g.mft (raw, json) Hash identifier: tESL3e4DlHUGROCjvP/TfBHHBjHmXWlNv99nzLuQDeA= Subject key identifier: F1:42:77:A8:93:6C:91:04:EA:B8:15:3F:6A:9F:C9:82:42:98:B4:2A Authority key identifier: C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8 Certificate issuer: /CN=A9144F59/serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8 Certificate serial: 16D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft Manifest number: 16A8 Signing time: Thu 24 Apr 2025 16:42:38 +0000 Manifest this update: Thu 24 Apr 2025 16:42:37 +0000 Manifest next update: Thu 01 May 2025 16:42:37 +0000 Files and hashes: 1: x7Jkc1A4Cmo0404yzv41GZN-l8g.crl (hash: MriuQ1uBLTmgUj3SyPXUSQeOyWrfKow87pDanTpkY0w=) 2: CCE4818E514D11EEADBDDC4DC4F9AE02.roa (hash: mHHD4iG0u+Xkwk4pjbL/x0UUJaJ5cYa7RlAiU7ksSOM=) 3: 0897E314434811EF8E76757AC4F9AE02.roa (hash: VmGRRamI92gsFHH67DOcSNfpbQCDWa56npBMPnLQFzI=) 4: 453489B8BE6311EE90BF9241C4F9AE02.roa (hash: bqFmiv55QKtXboSAyhppicmxMvI2sf59cazaYPcU9EY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:42:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5840 (0x16d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F59, serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8 Validity Not Before: Apr 24 16:42:37 2025 GMT Not After : May 1 16:42:37 2025 GMT Subject: CN=680a69fe-ab20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d8:ff:ce:52:73:7f:20:86:60:6b:f5:a7:d6: 92:84:f3:6d:6a:77:66:c8:5b:66:0b:0b:0d:ec:44: 82:5e:0a:7f:81:74:6e:fc:35:90:7e:99:af:61:68: 86:bd:3b:d1:79:82:03:cd:92:01:01:6f:6d:24:e3: aa:e7:be:55:c4:6f:ce:20:36:3f:5b:1c:23:e8:db: 41:de:34:56:53:e0:81:36:49:b6:ab:0c:f5:d2:c1: fc:4a:84:b9:a5:2b:67:7f:64:3a:8e:86:fc:d5:02: a3:e8:e5:50:00:7b:21:4c:48:d1:33:51:67:27:33: 11:be:21:6c:91:82:c5:51:44:72:e7:75:a1:3b:9a: 8a:82:d5:ae:45:d5:1b:8f:02:57:ea:a2:2f:4e:07: b0:17:2c:75:8d:45:33:fe:4a:cc:fa:40:69:df:3a: f3:03:39:95:32:a6:b6:73:20:10:b9:14:dd:fa:92: 0a:e0:cf:80:62:a4:bc:de:9c:1c:89:53:e7:85:0e: ea:64:ea:18:75:fd:c5:78:3e:66:3b:e0:61:a7:47: 12:62:8b:30:ae:e5:b9:18:1a:68:75:d7:c9:ab:15: c0:77:53:d9:87:d7:59:f2:02:9e:3d:18:22:a4:a5: 3d:d0:0b:99:28:ec:31:65:05:2a:3f:d4:95:3d:90: 58:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:42:77:A8:93:6C:91:04:EA:B8:15:3F:6A:9F:C9:82:42:98:B4:2A X509v3 Authority Key Identifier: keyid:C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:28:b1:de:df:f0:de:b7:5c:82:7c:7c:56:b2:fa:8a:67:46: e6:dd:f3:8b:34:1a:bf:18:f7:a2:f8:65:d7:e2:e6:f7:88:23: bf:3b:b3:58:17:bd:c9:e2:78:97:4e:6e:7c:68:77:72:ba:ec: 83:a4:9c:e1:87:5d:83:e7:4a:c3:38:ea:3d:2d:4d:ea:21:2c: f9:13:08:28:75:f1:30:ea:30:ac:5e:33:87:69:77:55:14:9f: 3e:6a:99:9b:02:47:a5:06:26:81:46:53:62:cd:29:d9:fc:94: ee:61:9d:ee:60:fe:92:89:f0:53:c6:e6:3b:3c:08:b8:46:09: 26:5f:36:53:dc:8c:24:d4:d8:53:3a:f9:43:78:29:92:48:f0: 90:36:f0:6e:5d:a7:e2:35:bc:f6:e7:a5:3f:e5:98:19:c2:f3: ca:96:af:dc:1a:ba:7f:56:dd:b8:3a:fc:8d:e2:03:1c:28:9e: 0b:90:c4:54:5d:9b:4d:b2:ee:e2:b4:6f:72:30:4f:a7:95:d2: 91:62:1a:28:d2:62:d7:2e:1b:66:d7:3d:1d:3c:48:0c:00:eb: fb:b5:97:63:c3:33:32:e2:af:ef:cc:86:c5:67:52:08:57:b4: ac:bb:f6:b0:8b:7b:6c:b2:74:21:c3:c3:0a:7c:38:47:3b:43: dc:a5:55:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGNTkxMTAvBgNVBAUTKEM3QjI2NDczNTAzODBBNkEzNEUzNEUzMkNFRkUzNTE5 OTM3RTk3QzgwHhcNMjUwNDI0MTY0MjM3WhcNMjUwNTAxMTY0MjM3WjAYMRYwFAYD VQQDEw02ODBhNjlmZS1hYjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttj/zlJzfyCGYGv1p9aShPNtandmyFtmCwsN7ESCXgp/gXRu/DWQfpmvYWiG vTvReYIDzZIBAW9tJOOq575VxG/OIDY/Wxwj6NtB3jRWU+CBNkm2qwz10sH8SoS5 pStnf2Q6job81QKj6OVQAHshTEjRM1FnJzMRviFskYLFUURy53WhO5qKgtWuRdUb jwJX6qIvTgewFyx1jUUz/krM+kBp3zrzAzmVMqa2cyAQuRTd+pIK4M+AYqS83pwc iVPnhQ7qZOoYdf3FeD5mO+Bhp0cSYoswruW5GBpoddfJqxXAd1PZh9dZ8gKePRgi pKU90AuZKOwxZQUqP9SVPZBYKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFCd6iT bJEE6rgVP2qfyYJCmLQqMB8GA1UdIwQYMBaAFMeyZHNQOApqNONOMs7+NRmTfpfI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY1OS80Qjk1OEJDRTAw Q0IxMUU4QkVCMUVGMTBDNEY5QUUwMi94N0prYzFBNENtbzA0MDR5enY0MUdaTi1s OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3SmtjMUE0Q21vMDQwNHl6djQxR1pOLWw4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEY1OS80Qjk1OEJDRTAwQ0IxMUU4QkVCMUVGMTBDNEY5QUUwMi94N0prYzFBNENt bzA0MDR5enY0MUdaTi1sOGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqKLHe3/Det1yCfHxWsvqKZ0bm3fOLNBq/GPei+GXX4ub3iCO/O7NY F73J4niXTm58aHdyuuyDpJzhh12D50rDOOo9LU3qISz5EwgodfEw6jCsXjOHaXdV FJ8+apmbAkelBiaBRlNizSnZ/JTuYZ3uYP6SifBTxuY7PAi4RgkmXzZT3Iwk1NhT OvlDeCmSSPCQNvBuXafiNbz256U/5ZgZwvPKlq/cGrp/Vt24OvyN4gMcKJ4LkMRU XZtNsu7itG9yME+nldKRYhoo0mLXLhtm1z0dPEgMAOv7tZdjwzMy4q/vzIbFZ1II V7Ssu/awi3tssnQhw8MKfDhHO0PcpVVF -----END CERTIFICATE-----Generated at Sat Apr 26 13:11:35 2025 by rpki-client