$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft File: CNP7qN3CGMuzA5wDdh5qtwduT6I.mft (raw, json) Hash identifier: hzCm3D4lK4aMPqM4MlH/gaA4HwSxuAETVklNWW8BrZg= Subject key identifier: 7E:8D:2F:FD:43:05:B4:27:D3:6D:EA:F7:66:B3:8D:C3:14:78:32:7B Authority key identifier: 08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2 Certificate issuer: /CN=A914C10B/serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2 Certificate serial: 05EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft Manifest number: 05E4 Signing time: Wed 30 Apr 2025 22:39:07 +0000 Manifest this update: Wed 30 Apr 2025 22:39:07 +0000 Manifest next update: Wed 07 May 2025 22:39:07 +0000 Files and hashes: 1: CNP7qN3CGMuzA5wDdh5qtwduT6I.crl (hash: dvmkp+pKjNnQpk0lg4hta3K8aFNQDKzV8o4UhlWSMv8=) 2: CA16E952AF6411EB95CDDD18C4F9AE02.roa (hash: 2zuRRC9X9QGiy5zsxYozQv/RNV6iHA3e11RJdVWl2NQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 22:39:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1514 (0x5ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C10B, serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2 Validity Not Before: Apr 30 22:39:07 2025 GMT Not After : May 7 22:39:07 2025 GMT Subject: CN=6812a68b-b24e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:55:7f:70:ec:19:c9:84:2d:87:79:23:81:e7: c0:8f:cd:c3:7b:39:75:e9:f8:6d:a5:af:3a:4b:9e: 82:46:ab:20:2d:8c:b7:bf:1e:34:f3:31:cc:22:c4: 96:b7:5d:12:fc:98:23:aa:1a:a4:5a:37:ad:9d:bc: 7e:d7:c8:1b:a6:c6:57:82:4e:ac:31:9c:f4:f7:d8: b7:2d:4c:e6:13:03:40:0e:3a:e9:69:0f:ad:c9:7e: c8:bf:70:60:8c:5b:e5:a9:ea:02:c7:ff:62:ac:12: 82:7c:ec:55:3b:fb:44:42:55:e4:eb:5f:cb:87:c6: 3c:97:9f:af:5c:cd:0a:43:58:0c:32:8a:eb:4c:73: dc:4c:3f:51:89:33:81:72:fc:a7:b9:5e:1a:92:ee: 49:de:e0:a4:29:9a:54:fc:3f:d3:25:f7:fb:82:7f: c8:ec:71:23:e1:cf:05:d8:1f:82:b3:45:77:45:55: f6:71:f8:87:6b:f0:8f:13:d5:ba:e3:68:ca:68:82: c6:aa:5b:4e:1b:4d:90:09:12:f4:6d:6a:f8:ab:62: b6:25:58:15:88:8f:67:9c:00:a9:5d:a3:72:cf:d9: 9f:e5:2a:13:7f:74:1e:cd:0a:e4:08:34:18:02:8f: 6f:e8:41:0d:f7:ee:cc:a1:75:32:80:37:5c:76:bf: 8a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:8D:2F:FD:43:05:B4:27:D3:6D:EA:F7:66:B3:8D:C3:14:78:32:7B X509v3 Authority Key Identifier: keyid:08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:2e:f2:df:27:24:ec:9d:9b:3a:67:bd:bc:08:3b:ed:07:4b: f2:61:1d:ac:50:45:bc:0b:28:d0:f3:1d:5b:a5:36:b8:ef:fa: e9:15:4c:fb:28:a9:8d:d9:01:24:a4:76:7e:22:04:85:ff:72: 88:8e:0a:3c:ab:47:bf:58:22:79:d8:eb:62:1b:ed:04:4f:37: e0:e8:f6:58:44:49:64:b2:f1:a0:47:e5:34:84:43:25:55:52: cf:17:9c:6f:3c:f1:b2:8f:f6:c1:69:85:dc:19:0d:2e:80:30: ff:b0:a6:9f:7d:02:e2:c6:84:42:68:ea:5c:31:84:8d:87:e2: ef:a3:a6:d0:ff:d3:cc:bb:93:b3:73:fa:5f:0e:03:41:91:90: ae:55:d6:16:89:e1:37:7e:61:b3:93:2b:f1:c8:8c:d2:94:d1: 49:e2:9d:20:a9:31:27:aa:76:a1:09:77:91:6a:89:2c:f2:f0: d2:93:20:71:3b:d2:84:fc:1a:a1:79:ea:7b:9f:3f:12:ca:53: 3b:d1:1b:7f:ab:3d:7e:0d:7d:a7:fc:e6:40:6e:ca:39:32:d1: 55:ec:3e:f3:23:ff:40:b3:16:b3:39:36:bf:5a:b5:71:ae:18: 21:20:71:14:0e:7d:4e:15:2d:e7:ae:5e:b9:10:18:5d:fc:96: 12:7d:45:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMxMEIxMTAvBgNVBAUTKDA4RDNGQkE4RERDMjE4Q0JCMzAzOUMwMzc2MUU2QUI3 MDc2RTRGQTIwHhcNMjUwNDMwMjIzOTA3WhcNMjUwNTA3MjIzOTA3WjAYMRYwFAYD VQQDEw02ODEyYTY4Yi1iMjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArFV/cOwZyYQth3kjgefAj83Dezl16fhtpa86S56CRqsgLYy3vx408zHMIsSW t10S/JgjqhqkWjetnbx+18gbpsZXgk6sMZz099i3LUzmEwNADjrpaQ+tyX7Iv3Bg jFvlqeoCx/9irBKCfOxVO/tEQlXk61/Lh8Y8l5+vXM0KQ1gMMorrTHPcTD9RiTOB cvynuV4aku5J3uCkKZpU/D/TJff7gn/I7HEj4c8F2B+Cs0V3RVX2cfiHa/CPE9W6 42jKaILGqltOG02QCRL0bWr4q2K2JVgViI9nnACpXaNyz9mf5SoTf3QezQrkCDQY Ao9v6EEN9+7MoXUygDdcdr+KWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6NL/1D BbQn023q92azjcMUeDJ7MB8GA1UdIwQYMBaAFAjT+6jdwhjLswOcA3YearcHbk+i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzEwQi83QjZDQTEyMkFG NjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9DTlA3cU4zQ0dNdXpBNXdEZGg1cXR3ZHVU NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOUDdxTjNDR011ekE1d0RkaDVxdHdkdVQ2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzEwQi83QjZDQTEyMkFGNjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9DTlA3cU4zQ0dN dXpBNXdEZGg1cXR3ZHVUNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkLvLfJyTsnZs6Z728CDvtB0vyYR2sUEW8CyjQ8x1bpTa47/rpFUz7 KKmN2QEkpHZ+IgSF/3KIjgo8q0e/WCJ52OtiG+0ETzfg6PZYRElksvGgR+U0hEMl VVLPF5xvPPGyj/bBaYXcGQ0ugDD/sKaffQLixoRCaOpcMYSNh+Lvo6bQ/9PMu5Oz c/pfDgNBkZCuVdYWieE3fmGzkyvxyIzSlNFJ4p0gqTEnqnahCXeRaoks8vDSkyBx O9KE/Bqheep7nz8SylM70Rt/qz1+DX2n/OZAbso5MtFV7D7zI/9AsxazOTa/WrVx rhghIHEUDn1OFS3nrl65EBhd/JYSfUV6 -----END CERTIFICATE-----Generated at Thu May 1 19:22:48 2025 by rpki-client