$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft File: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft (raw, json) Hash identifier: PP7EDmEmTmnqPwbcaUBb6jQ+gtrD5N105fBXzEcB9n4= Subject key identifier: 75:82:A1:A4:A9:90:FE:4E:FD:3E:A8:1D:8F:72:FE:1F:A4:29:07:70 Authority key identifier: EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B Certificate issuer: /CN=A9151258/serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B Certificate serial: 3479 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft Manifest number: 3479 Signing time: Thu 24 Apr 2025 15:12:40 +0000 Manifest this update: Thu 24 Apr 2025 15:12:40 +0000 Manifest next update: Thu 01 May 2025 15:12:40 +0000 Files and hashes: 1: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl (hash: 1m01aXSvNdb1KKEQJwnkW7WTmxJGC5KrlfmZcqcf+t8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:12:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13433 (0x3479) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151258, serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B Validity Not Before: Apr 24 15:12:40 2025 GMT Not After : May 1 15:12:40 2025 GMT Subject: CN=680a54e8-20ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:85:64:88:dd:19:13:97:35:33:81:bd:c3:28: a4:28:f5:5d:71:ac:96:39:98:70:45:fe:dc:6b:ae: 7f:8a:c5:d9:28:b5:ad:c1:71:74:2d:5b:b3:49:5a: a6:4a:5c:3f:b9:94:7c:9b:24:25:00:b7:fc:e1:cd: 3f:28:f2:11:42:16:3c:5e:98:c1:67:41:c5:27:c4: c6:f1:84:c1:1d:e6:50:a0:1f:5c:a5:04:a5:d9:44: 42:37:f1:5a:b5:7b:b4:63:ac:ed:b6:14:02:30:93: 80:91:b1:41:3b:62:b4:8e:99:17:be:9f:d0:e7:c6: 6e:2c:da:65:42:7c:89:87:5e:42:e7:c9:d7:b9:0f: 42:73:79:45:d9:94:27:44:f7:5a:30:15:2b:83:02: 8a:6e:b9:d3:71:32:ce:c1:30:c8:62:63:db:22:c6: 28:50:4b:b8:e9:de:db:68:c5:8e:17:0c:b8:64:11: 7a:19:76:c8:cd:60:cc:04:b9:e1:07:6a:b3:16:9a: e3:c0:a4:a1:ec:e3:c6:49:a6:4c:cb:7b:3b:1f:f0: 0a:83:51:27:c6:8e:1c:91:9e:b8:73:ee:9b:b7:15: 6c:f6:ae:b2:1b:bc:21:e5:60:67:97:22:a8:cc:28: 27:a4:fd:01:a8:7d:fb:5e:96:e8:81:ac:aa:c2:55: d5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:82:A1:A4:A9:90:FE:4E:FD:3E:A8:1D:8F:72:FE:1F:A4:29:07:70 X509v3 Authority Key Identifier: keyid:EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:47:16:99:a1:34:02:49:bd:c8:a0:c8:51:0f:5a:2d:b7:b1: e3:60:20:52:f5:15:f7:a4:17:ac:8e:02:c1:79:79:68:9c:7a: 4b:a0:12:d6:19:14:30:30:8f:98:26:13:44:52:9e:a4:82:01: 72:f1:fc:04:f2:35:ac:82:4d:69:e5:5a:e9:5a:e6:6a:44:8b: 80:2d:7c:63:ad:d7:49:43:fd:da:03:53:4c:9d:48:85:8f:3d: 16:9b:39:1e:46:c7:94:ba:67:c8:19:63:b4:c6:c1:6a:52:dc: a7:a2:22:74:32:96:4e:00:e8:25:79:ad:26:b4:2b:de:10:37: 1b:66:d7:0b:9f:75:b7:4d:71:c7:6b:b4:e5:81:13:83:4f:ad: 05:c3:2f:eb:bd:ab:81:47:1c:01:ce:60:2d:37:2f:62:d2:b7: 36:b0:b1:9a:d4:a2:ba:85:66:c2:5c:b7:16:ef:3f:d2:64:a6: 37:65:3e:43:a7:92:bb:2f:06:47:d0:7b:37:9d:44:26:5d:22: e6:f1:cc:96:46:88:a2:c3:3d:9a:9e:b7:ee:5d:a4:a2:ab:9f: 75:26:7d:0e:f5:d5:99:01:3b:11:70:35:73:ed:6c:91:d6:f0: 33:b8:75:f6:f8:91:40:ce:7f:76:21:9d:e4:72:fd:2a:95:14: b0:8c:ce:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNTgxMTAvBgNVBAUTKEVDNEUwNzkzNTRCNjRFMDU0N0VCOUY0MDU1NTI0QjQ0 MkZCM0Q0M0IwHhcNMjUwNDI0MTUxMjQwWhcNMjUwNTAxMTUxMjQwWjAYMRYwFAYD VQQDEw02ODBhNTRlOC0yMGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4IVkiN0ZE5c1M4G9wyikKPVdcayWOZhwRf7ca65/isXZKLWtwXF0LVuzSVqm Slw/uZR8myQlALf84c0/KPIRQhY8XpjBZ0HFJ8TG8YTBHeZQoB9cpQSl2URCN/Fa tXu0Y6ztthQCMJOAkbFBO2K0jpkXvp/Q58ZuLNplQnyJh15C58nXuQ9Cc3lF2ZQn RPdaMBUrgwKKbrnTcTLOwTDIYmPbIsYoUEu46d7baMWOFwy4ZBF6GXbIzWDMBLnh B2qzFprjwKSh7OPGSaZMy3s7H/AKg1Enxo4ckZ64c+6btxVs9q6yG7wh5WBnlyKo zCgnpP0BqH37XpbogayqwlXV3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHWCoaSp kP5O/T6oHY9y/h+kKQdwMB8GA1UdIwQYMBaAFOxOB5NUtk4FR+ufQFVSS0Qvs9Q7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI1OC9DODQ4Q0U2NDFE QTYxMUUyODZEOTFEOUUwOEIwMkNEMi83RTRIazFTMlRnVkg2NTlBVlZKTFJDLXox RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFNEhrMVMyVGdWSDY1OUFWVkpMUkMtejFEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI1OC9DODQ4Q0U2NDFEQTYxMUUyODZEOTFEOUUwOEIwMkNEMi83RTRIazFTMlRn Vkg2NTlBVlZKTFJDLXoxRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4RxaZoTQCSb3IoMhRD1ott7HjYCBS9RX3pBesjgLBeXlonHpLoBLW GRQwMI+YJhNEUp6kggFy8fwE8jWsgk1p5VrpWuZqRIuALXxjrddJQ/3aA1NMnUiF jz0WmzkeRseUumfIGWO0xsFqUtynoiJ0MpZOAOglea0mtCveEDcbZtcLn3W3TXHH a7TlgRODT60Fwy/rvauBRxwBzmAtNy9i0rc2sLGa1KK6hWbCXLcW7z/SZKY3ZT5D p5K7LwZH0Hs3nUQmXSLm8cyWRoiiwz2anrfuXaSiq591Jn0O9dWZATsRcDVz7WyR 1vAzuHX2+JFAzn92IZ3kcv0qlRSwjM6W -----END CERTIFICATE-----Generated at Sat Apr 26 14:54:32 2025 by rpki-client