$ rpki-client -vvf rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft File: 7C-kN5G65saorcWjDpmoUrYSj68.mft (raw, json) Hash identifier: fvwIi7GW4LZjXw1skYY5fUNdrG5q3j+mNJjn8HmQ6jU= Subject key identifier: B6:B5:5B:B2:57:4A:96:1B:05:60:E6:0F:CE:FD:61:3F:AC:E7:59:9D Authority key identifier: EC:2F:A4:37:91:BA:E6:C6:A8:AD:C5:A3:0E:99:A8:52:B6:12:8F:AF Certificate issuer: /CN=A915A813/serialNumber=EC2FA43791BAE6C6A8ADC5A30E99A852B6128FAF Certificate serial: 3471 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft Manifest number: 3471 Signing time: Thu 24 Apr 2025 14:30:59 +0000 Manifest this update: Thu 24 Apr 2025 14:30:59 +0000 Manifest next update: Thu 01 May 2025 14:30:59 +0000 Files and hashes: 1: 7C-kN5G65saorcWjDpmoUrYSj68.crl (hash: eSQ7G6S3JN5tShNMnGIkmzaVx4t+TkTF56xpxTh7eyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.crl rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13425 (0x3471) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A813, serialNumber=EC2FA43791BAE6C6A8ADC5A30E99A852B6128FAF Validity Not Before: Apr 24 14:30:59 2025 GMT Not After : May 1 14:30:59 2025 GMT Subject: CN=680a4b23-2492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f6:b0:c9:bc:6c:78:82:29:e4:eb:a1:73:bd: ea:7c:0b:b5:61:46:30:04:1e:cb:97:8d:07:d2:ab: 22:b2:99:ac:3b:47:52:aa:60:42:f1:4c:d0:65:44: a4:7f:5c:24:1e:8e:a8:f4:fb:b2:ca:02:6e:4b:53: 5a:b3:45:7b:42:f7:66:54:ec:86:a1:bd:72:56:7e: 11:d3:16:71:d3:63:79:72:3f:d2:7e:d8:96:9e:92: e9:bc:f0:5d:a2:38:50:ae:14:bc:bf:c5:48:b1:60: 7f:e2:16:44:7c:ab:84:4b:df:62:1d:c7:17:63:00: 49:1f:a7:40:ab:f2:88:70:9d:a7:7e:a9:6f:4a:cc: 48:23:c3:fb:f9:64:42:25:52:e6:8d:9f:8a:f1:45: b3:97:a1:04:f6:2e:37:e1:9b:87:fd:7e:10:92:30: b6:77:0d:1b:fb:91:74:ed:ac:84:ee:a8:23:83:ea: 21:06:ee:6c:62:4d:7e:ac:7b:ad:7e:f5:cc:b3:c0: 84:82:bf:6e:ce:24:3f:d8:93:f2:2b:f4:7f:61:a6: 7a:c3:ca:99:29:ed:11:0a:8e:8d:db:ae:e4:bd:f0: 66:86:bf:42:5a:09:b5:03:e2:a8:1f:2f:19:f4:ee: 6e:ec:68:66:51:90:cf:1d:15:ed:cd:cc:8b:d6:40: d8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B5:5B:B2:57:4A:96:1B:05:60:E6:0F:CE:FD:61:3F:AC:E7:59:9D X509v3 Authority Key Identifier: keyid:EC:2F:A4:37:91:BA:E6:C6:A8:AD:C5:A3:0E:99:A8:52:B6:12:8F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:e2:9c:1f:48:e1:ae:65:dc:c5:e4:5d:25:7d:f6:84:9a:91: a6:44:20:0c:6e:37:b0:96:a3:1b:ae:1f:11:a3:f4:d6:fe:80: 7b:bd:b8:bd:60:01:c8:26:59:5f:84:b5:2c:7a:e4:40:77:44: 62:d3:4d:21:7b:34:02:a7:4a:e4:80:f8:4b:ac:49:bd:44:77: 6e:e0:15:94:3d:eb:d7:be:8b:8a:c2:6f:c0:80:00:d9:1c:ae: 21:99:5a:1a:96:7f:b1:16:ee:06:a1:f4:a8:76:c2:b4:60:62: a3:dc:1e:df:1b:7e:19:59:ad:cd:05:90:cb:eb:fb:2e:27:13: 05:2c:dc:dd:74:ec:a1:ed:01:d3:55:6f:86:6f:54:96:02:f8: 35:62:40:a7:ee:d2:fe:c4:d1:b6:9c:5d:6f:b0:74:81:d0:cf: 6a:30:7d:4d:16:87:d6:e9:4e:5e:95:1c:07:fd:33:9c:9e:6b: 7d:4c:c5:ea:60:c8:5e:a0:bf:11:24:0e:70:f3:cd:15:22:bb: 6d:7d:80:06:7b:00:a3:6c:17:78:c9:0b:22:fb:c8:90:31:94: 90:3a:6b:06:09:b6:cd:97:81:6b:9e:ad:21:c9:bb:ed:bd:aa: 47:e2:bb:6d:7f:37:31:8c:9f:0f:5f:8c:6d:14:87:79:dc:24: e7:26:bd:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE4MTMxMTAvBgNVBAUTKEVDMkZBNDM3OTFCQUU2QzZBOEFEQzVBMzBFOTlBODUy QjYxMjhGQUYwHhcNMjUwNDI0MTQzMDU5WhcNMjUwNTAxMTQzMDU5WjAYMRYwFAYD VQQDEw02ODBhNGIyMy0yNDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/awybxseIIp5Ouhc73qfAu1YUYwBB7Ll40H0qsispmsO0dSqmBC8UzQZUSk f1wkHo6o9PuyygJuS1Nas0V7QvdmVOyGob1yVn4R0xZx02N5cj/SftiWnpLpvPBd ojhQrhS8v8VIsWB/4hZEfKuES99iHccXYwBJH6dAq/KIcJ2nfqlvSsxII8P7+WRC JVLmjZ+K8UWzl6EE9i434ZuH/X4QkjC2dw0b+5F07ayE7qgjg+ohBu5sYk1+rHut fvXMs8CEgr9uziQ/2JPyK/R/YaZ6w8qZKe0RCo6N267kvfBmhr9CWgm1A+KoHy8Z 9O5u7GhmUZDPHRXtzcyL1kDYgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLa1W7JX SpYbBWDmD879YT+s51mdMB8GA1UdIwQYMBaAFOwvpDeRuubGqK3Fow6ZqFK2Eo+v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTgxMy81QjREN0Y1MjFE ODkxMUUyQTQyMDg4RTIwOEIwMkNEMi83Qy1rTjVHNjVzYW9yY1dqRHBtb1VyWVNq NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdDLWtONUc2NXNhb3JjV2pEcG1vVXJZU2o2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTgxMy81QjREN0Y1MjFEODkxMUUyQTQyMDg4RTIwOEIwMkNEMi83Qy1rTjVHNjVz YW9yY1dqRHBtb1VyWVNqNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN4pwfSOGuZdzF5F0lffaEmpGmRCAMbjewlqMbrh8Ro/TW/oB7vbi9 YAHIJllfhLUseuRAd0Ri000hezQCp0rkgPhLrEm9RHdu4BWUPevXvouKwm/AgADZ HK4hmVoaln+xFu4GofSodsK0YGKj3B7fG34ZWa3NBZDL6/suJxMFLNzddOyh7QHT VW+Gb1SWAvg1YkCn7tL+xNG2nF1vsHSB0M9qMH1NFofW6U5elRwH/TOcnmt9TMXq YMheoL8RJA5w880VIrttfYAGewCjbBd4yQsi+8iQMZSQOmsGCbbNl4Frnq0hybvt vapH4rttfzcxjJ8PX4xtFId53CTnJr28 -----END CERTIFICATE-----Generated at Sat Apr 26 05:01:55 2025 by rpki-client