$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft File: 67t1Ysakn7ft5XQSvB_61I4a-0k.mft (raw, json) Hash identifier: vHPjMe9sPDjRPc6f/R8daWnRNBDYIN2fO2SjHQ/5qBI= Subject key identifier: DA:AB:4D:E1:E4:A7:47:D5:EE:05:61:62:1F:88:9F:F3:2C:BC:D1:71 Authority key identifier: EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49 Certificate issuer: /CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49 Certificate serial: 0439 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft Manifest number: 0432 Signing time: Fri 25 Apr 2025 00:06:58 +0000 Manifest this update: Fri 25 Apr 2025 00:06:57 +0000 Manifest next update: Fri 02 May 2025 00:06:57 +0000 Files and hashes: 1: 67t1Ysakn7ft5XQSvB_61I4a-0k.crl (hash: mibVmCxSSkJzhzP2SGSkfFS9XWrC2DLyzG3eYyOFFfg=) 2: 9F9CEB425CB911ECAEF7AE14C4F9AE02.roa (hash: 6uFvpip5xKUGRghNdeTpeBy3R93KivQ5uvgIzsfjzEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1081 (0x439) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FE87, serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49 Validity Not Before: Apr 25 00:06:57 2025 GMT Not After : May 2 00:06:57 2025 GMT Subject: CN=680ad221-29c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:da:73:30:e8:33:b9:bc:fb:e2:33:ca:50:c3: 31:03:2c:c6:36:95:be:3d:fb:71:82:fc:68:b7:4f: a6:71:8d:3a:12:f5:96:65:ee:5f:a5:8e:2a:aa:75: 18:4a:29:ef:37:e8:9a:9d:a4:51:0c:c3:54:72:1e: a2:8a:1d:2e:b1:9c:71:75:87:9e:5a:83:8d:09:9d: 6b:07:1b:6e:ee:b1:75:09:1e:87:f3:5a:3d:60:b5: 40:a5:87:94:7f:2c:c1:bc:b6:da:06:bd:80:aa:ec: 44:c9:da:6f:24:d5:23:44:31:a0:86:83:9d:2c:89: a3:eb:54:1d:7a:13:e7:1e:89:d1:58:95:79:14:2a: 03:f1:63:d1:b9:1d:65:54:23:fe:80:3d:84:2e:f9: 43:8b:2b:b5:a2:06:1b:ba:8d:68:a4:fe:95:6f:e5: e2:ba:ad:20:b5:9c:2e:d9:60:46:9f:56:53:35:5b: e0:2a:77:ee:fb:14:d1:b9:a0:d4:62:3a:49:b2:c2: 57:e4:de:31:fc:58:d6:de:bb:70:cb:07:a6:ce:66: b5:58:7b:39:48:24:45:af:1e:f8:8d:e5:b5:a8:b0: 6b:3c:ad:92:03:d6:e2:6e:65:0c:70:26:88:72:6a: 9a:c4:1f:9f:63:d2:db:13:db:1e:4f:ba:8b:0a:1c: 3f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AB:4D:E1:E4:A7:47:D5:EE:05:61:62:1F:88:9F:F3:2C:BC:D1:71 X509v3 Authority Key Identifier: keyid:EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:fd:c8:d1:27:95:3f:92:3d:f6:b9:6a:42:a5:66:de:f6:e9: 80:73:3b:78:4b:fd:28:87:52:e4:d3:fd:56:ff:ac:fd:d8:16: 2f:96:7c:5a:99:f5:a1:4a:6e:5f:a0:fd:be:5a:58:27:4c:00: 3a:d5:03:6e:ef:09:80:9b:30:81:01:0a:38:8e:0d:93:c3:87: 77:f4:b7:6b:48:11:6d:e1:94:6c:db:76:c4:41:3a:9e:33:f3: 51:c3:f1:9b:d3:c6:f9:d2:cc:bb:c6:d7:c7:d7:90:31:4e:48: 34:c1:c6:49:db:6b:df:f7:99:1b:05:5d:e9:d0:95:4a:b8:76: db:b0:01:ca:4b:a1:2b:48:38:2d:81:4d:5d:b9:8c:13:2f:7b: 2b:a4:5d:d9:79:af:53:f9:21:c7:cd:5b:65:cb:01:83:71:7d: 6e:5e:c0:d3:95:dc:52:86:f2:6e:f8:cb:cf:07:32:72:cf:5b: cf:05:6f:20:09:be:3f:ce:db:9a:9f:18:ca:07:b6:b6:d3:1a: dd:a7:fd:e1:6d:93:41:76:86:fe:68:a3:d2:27:dc:15:42:40: 1c:10:6f:d3:a6:18:88:24:78:79:ef:6f:92:bb:d6:f8:da:37: a1:9e:f3:36:60:1a:b7:2b:bc:59:a2:a1:e1:0c:2a:8c:c2:44: ff:c5:5d:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZFODcxMTAvBgNVBAUTKEVCQkI3NTYyQzZBNDlGQjdFREU1NzQxMkJDMUZGQUQ0 OEUxQUZCNDkwHhcNMjUwNDI1MDAwNjU3WhcNMjUwNTAyMDAwNjU3WjAYMRYwFAYD VQQDEw02ODBhZDIyMS0yOWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1tpzMOgzubz74jPKUMMxAyzGNpW+Pftxgvxot0+mcY06EvWWZe5fpY4qqnUY SinvN+ianaRRDMNUch6iih0usZxxdYeeWoONCZ1rBxtu7rF1CR6H81o9YLVApYeU fyzBvLbaBr2AquxEydpvJNUjRDGghoOdLImj61QdehPnHonRWJV5FCoD8WPRuR1l VCP+gD2ELvlDiyu1ogYbuo1opP6Vb+Xiuq0gtZwu2WBGn1ZTNVvgKnfu+xTRuaDU YjpJssJX5N4x/FjW3rtwywemzma1WHs5SCRFrx74jeW1qLBrPK2SA9bibmUMcCaI cmqaxB+fY9LbE9seT7qLChw/9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNqrTeHk p0fV7gVhYh+In/MsvNFxMB8GA1UdIwQYMBaAFOu7dWLGpJ+37eV0Erwf+tSOGvtJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkU4Ny80RTE0MDFFNjVD QjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243ZnQ1WFFTdkJfNjFJNGEt MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3dDFZc2FrbjdmdDVYUVN2Ql82MUk0YS0way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkU4Ny80RTE0MDFFNjVDQjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243 ZnQ1WFFTdkJfNjFJNGEtMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8/cjRJ5U/kj32uWpCpWbe9umAczt4S/0oh1Lk0/1W/6z92BYvlnxa mfWhSm5foP2+WlgnTAA61QNu7wmAmzCBAQo4jg2Tw4d39LdrSBFt4ZRs23bEQTqe M/NRw/Gb08b50sy7xtfH15AxTkg0wcZJ22vf95kbBV3p0JVKuHbbsAHKS6ErSDgt gU1duYwTL3srpF3Zea9T+SHHzVtlywGDcX1uXsDTldxShvJu+MvPBzJyz1vPBW8g Cb4/ztuanxjKB7a20xrdp/3hbZNBdob+aKPSJ9wVQkAcEG/TphiIJHh572+Su9b4 2jehnvM2YBq3K7xZoqHhDCqMwkT/xV0M -----END CERTIFICATE-----Generated at Sat Apr 26 04:32:23 2025 by rpki-client