$ rpki-client -vvf rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft File: P7w69DECztpPoPf6m9kbLWU0bW4.mft (raw, json) Hash identifier: owAMAxfpr/XqkciKkzc+m9hZK4FAf9xs16Ve5YA/W1o= Subject key identifier: 8E:87:D3:AA:60:BE:9D:6F:DC:31:DF:2D:14:A4:3E:CC:45:74:DC:7B Authority key identifier: 3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E Certificate issuer: /CN=A9161DF8/serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E Certificate serial: 0236 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft Manifest number: 020A Signing time: Fri 25 Apr 2025 01:59:22 +0000 Manifest this update: Fri 25 Apr 2025 01:59:21 +0000 Manifest next update: Fri 02 May 2025 01:59:21 +0000 Files and hashes: 1: P7w69DECztpPoPf6m9kbLWU0bW4.crl (hash: QHebbNO6CePAutUWXs/mG80+f8ov9bHJ8tPairMya6w=) 2: 845D92BAFC5111EFA8505536C4F9AE02.roa (hash: b6MhCI2q2jPGB8Vadu+OAGml/y/4nQ509qbcxbzKawM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 566 (0x236) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161DF8, serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E Validity Not Before: Apr 25 01:59:21 2025 GMT Not After : May 2 01:59:21 2025 GMT Subject: CN=680aec79-15bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:94:a9:ac:71:29:1e:0a:36:dd:19:07:17:27: b7:20:7e:00:3b:98:a0:c8:c6:97:f4:3d:da:ee:2b: 2b:2a:08:fc:dd:94:b3:12:0d:2f:05:df:9b:9a:d5: 5d:5d:82:5c:fa:2f:66:40:2e:d8:e3:af:4a:78:88: d5:b7:1b:64:54:4c:ce:5c:dd:e1:db:61:e9:3b:19: 6f:74:7a:53:1a:f9:39:66:7d:3b:19:b2:84:30:65: b2:49:59:d2:71:a2:d4:2e:fa:bf:a1:9f:10:29:66: 13:ef:20:52:37:11:e6:b6:f3:6a:46:3d:09:fb:42: 9a:0d:fd:40:bc:35:89:35:b1:96:41:98:e0:9a:d4: 66:5a:47:3c:a7:d1:21:74:fc:9b:21:9e:a9:d0:b7: 91:d9:31:92:12:bb:14:ec:d1:80:2d:a5:19:5b:50: 08:29:56:96:05:de:f7:fe:46:27:14:b8:dc:62:dc: dc:95:f6:31:53:86:26:2c:6e:a9:b1:11:7b:8e:20: 5a:70:a8:f3:fc:dd:b3:46:35:82:e9:c3:fc:60:6b: a6:13:f0:17:6f:be:e4:4a:bc:78:92:0b:1a:c8:21: ee:07:1b:c9:c2:f5:b0:fb:ea:91:fa:23:14:0b:76: f2:0d:a4:0d:3d:e5:f9:e9:8a:28:5c:39:58:36:cf: 79:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:87:D3:AA:60:BE:9D:6F:DC:31:DF:2D:14:A4:3E:CC:45:74:DC:7B X509v3 Authority Key Identifier: keyid:3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:d6:b8:a3:b8:c1:d3:93:91:59:bb:f0:fb:b2:ec:a9:eb:33: 72:17:0c:35:f0:1a:63:cc:8a:34:92:31:9e:c4:18:89:17:6a: 5f:c2:cb:7e:36:34:11:d4:41:27:36:a3:6b:62:8b:96:ec:50: 14:33:23:10:a9:ca:9c:46:64:1d:87:ac:02:c1:c9:34:ad:8f: b3:d8:26:c3:c7:0d:cb:f8:23:d5:fc:6b:91:ab:81:a7:d8:14: 0b:f2:5a:5d:73:4d:d3:0e:1d:f4:db:04:0e:ad:92:8e:f5:18: ff:84:d7:bf:6c:4f:d3:f3:42:17:29:e4:3b:eb:e4:99:ac:81: 05:fd:dd:f1:4f:d8:e8:2f:27:72:ee:f3:a8:3d:8f:f4:fe:d7: 8f:85:1b:1f:72:a2:37:d3:4c:c7:90:c7:13:66:76:06:92:d4: f5:01:03:c5:46:98:3e:7e:83:30:91:73:c0:c8:0a:c7:d4:34: ce:81:03:89:f5:3c:95:96:8d:e4:c5:fc:d6:46:f8:de:e4:69: 35:12:0b:26:36:2c:38:ab:8a:41:e3:9b:7a:9a:bf:e7:58:da: 4e:41:7d:1b:95:8e:2c:b1:e7:0f:f4:e3:3b:94:f7:f3:b4:31: dd:48:36:48:9f:a5:a4:ac:37:d1:57:02:0c:7a:22:f1:de:d1: 33:44:f5:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFERjgxMTAvBgNVBAUTKDNGQkMzQUY0MzEwMkNFREE0RkEwRjdGQTlCRDkxQjJE NjUzNDZENkUwHhcNMjUwNDI1MDE1OTIxWhcNMjUwNTAyMDE1OTIxWjAYMRYwFAYD VQQDEw02ODBhZWM3OS0xNWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA15SprHEpHgo23RkHFye3IH4AO5igyMaX9D3a7isrKgj83ZSzEg0vBd+bmtVd XYJc+i9mQC7Y469KeIjVtxtkVEzOXN3h22HpOxlvdHpTGvk5Zn07GbKEMGWySVnS caLULvq/oZ8QKWYT7yBSNxHmtvNqRj0J+0KaDf1AvDWJNbGWQZjgmtRmWkc8p9Eh dPybIZ6p0LeR2TGSErsU7NGALaUZW1AIKVaWBd73/kYnFLjcYtzclfYxU4YmLG6p sRF7jiBacKjz/N2zRjWC6cP8YGumE/AXb77kSrx4kgsayCHuBxvJwvWw++qR+iMU C3byDaQNPeX56YooXDlYNs95TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6H06pg vp1v3DHfLRSkPsxFdNx7MB8GA1UdIwQYMBaAFD+8OvQxAs7aT6D3+pvZGy1lNG1u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MURGOC8yNkU1MzExNDU1 MDYxMUVEOTUwNkMwNDVDNEY5QUUwMi9QN3c2OURFQ3p0cFBvUGY2bTlrYkxXVTBi VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A3dzY5REVDenRwUG9QZjZtOWtiTFdVMGJXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MURGOC8yNkU1MzExNDU1MDYxMUVEOTUwNkMwNDVDNEY5QUUwMi9QN3c2OURFQ3p0 cFBvUGY2bTlrYkxXVTBiVzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCz1rijuMHTk5FZu/D7suyp6zNyFww18BpjzIo0kjGexBiJF2pfwst+ NjQR1EEnNqNrYouW7FAUMyMQqcqcRmQdh6wCwck0rY+z2CbDxw3L+CPV/GuRq4Gn 2BQL8lpdc03TDh302wQOrZKO9Rj/hNe/bE/T80IXKeQ76+SZrIEF/d3xT9joLydy 7vOoPY/0/tePhRsfcqI300zHkMcTZnYGktT1AQPFRpg+foMwkXPAyArH1DTOgQOJ 9TyVlo3kxfzWRvje5Gk1EgsmNiw4q4pB45t6mr/nWNpOQX0blY4ssecP9OM7lPfz tDHdSDZIn6WkrDfRVwIMeiLx3tEzRPVd -----END CERTIFICATE-----Generated at Sat Apr 26 05:13:45 2025 by rpki-client