$ rpki-client -vvf rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft File: fIyfexbMnstE8DINx4y4FM1Cp6Y.mft (raw, json) Hash identifier: emfitqw2ZXlWGWHmnZEakIMz3J1oTO6QAlvg8QYhHOg= Subject key identifier: F8:6F:DF:12:78:61:F8:A6:F6:96:22:F9:52:23:B8:78:37:CB:56:61 Authority key identifier: 7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6 Certificate issuer: /CN=A9168973/serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6 Certificate serial: 02C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft Manifest number: 02BF Signing time: Fri 25 Apr 2025 01:10:55 +0000 Manifest this update: Fri 25 Apr 2025 01:10:54 +0000 Manifest next update: Fri 02 May 2025 01:10:54 +0000 Files and hashes: 1: fIyfexbMnstE8DINx4y4FM1Cp6Y.crl (hash: jRgqoncPuPMUEQt2pjAGwPSO/1M/j/el0gI7TnzdX14=) 2: 686A55E2EB4811EC85B4E60EC4F9AE02.roa (hash: DBuDl77P/pL9wYiNriRl+mRJ7TJ0bOfQxLP7wzjEQtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:10:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 707 (0x2c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168973, serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6 Validity Not Before: Apr 25 01:10:54 2025 GMT Not After : May 2 01:10:54 2025 GMT Subject: CN=680ae11f-18bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:92:62:16:88:a4:38:22:d7:2a:bc:bf:5b:4d: 5e:a9:28:14:4e:c1:0b:51:68:4b:e8:0f:e0:70:93: 56:a6:e6:86:4c:76:7b:07:22:45:27:0d:23:72:e1: 3b:97:50:ff:2d:e7:34:15:df:19:7c:50:e8:26:80: 8b:a7:84:f3:96:0f:9e:7e:f4:04:05:de:0a:70:a7: 24:b9:0f:63:51:66:9c:d8:46:6c:77:30:05:30:80: 7a:bd:1b:6a:49:5b:fb:7e:c6:b0:80:c0:aa:14:b1: 8d:90:09:7c:33:ac:fe:25:9b:aa:68:2a:78:01:71: 14:c7:a0:9e:b2:1f:45:27:3f:72:81:64:73:8b:14: cc:40:fd:f0:0d:3c:50:30:6a:dd:3c:fc:9d:f0:fd: 3b:d8:1a:1e:3c:07:9a:72:59:5f:fb:7f:62:12:a7: ea:1e:65:3d:d7:11:f5:aa:68:a0:c9:6e:a3:98:f8: 53:27:87:e1:1a:d1:f8:76:9e:0b:d7:22:85:c2:39: 83:24:5e:59:bc:77:65:31:9a:30:eb:9f:2d:51:a4: e6:cf:ba:1d:ee:9a:47:4e:9b:f3:91:ce:e8:8f:3d: d4:37:74:a0:e1:c7:9b:04:14:a7:b9:33:d9:bd:2e: 6b:6c:92:9b:22:55:97:cb:e9:51:fa:c0:7a:16:a3: a3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:6F:DF:12:78:61:F8:A6:F6:96:22:F9:52:23:B8:78:37:CB:56:61 X509v3 Authority Key Identifier: keyid:7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:50:3b:79:e5:84:62:ce:81:e8:7f:b6:e3:6d:57:74:fb:b8: bb:55:65:b7:4e:76:01:2c:a8:3c:16:b2:7c:df:aa:99:11:5c: ba:4f:cf:aa:7a:7f:83:b1:64:84:75:f5:29:a2:39:78:4f:50: 28:ce:3a:0c:87:a8:0f:42:41:2a:fb:04:06:1b:29:82:0c:ae: a9:f6:46:d1:0d:c5:7f:17:42:f4:cb:a4:11:de:59:c1:a5:52: 23:36:d6:c4:8d:02:d5:67:8f:87:58:7e:94:dc:31:08:b4:0c: 0e:de:ca:9a:6d:33:6b:ac:b1:9e:e5:0c:e4:2b:c5:ac:20:f6: 72:43:06:6b:71:f3:cd:cd:cc:9a:70:e2:a8:88:6f:fb:a2:a3: 63:eb:b0:ec:e1:9c:fa:7a:3b:a1:90:12:96:58:19:67:ce:bd: d1:5e:ef:d8:bd:2e:5b:62:c0:ea:63:56:ea:e8:47:7f:bb:d1: 5f:11:3b:69:f9:11:1d:be:1b:96:66:73:6f:6f:de:ec:d2:c6: bc:8d:fa:6c:b5:de:99:2f:ea:99:8e:66:40:3d:b0:8c:33:83: 7f:5d:b9:3a:17:44:40:b2:be:7d:b2:e9:bd:2b:57:c4:3d:a0: 05:d8:57:9c:f8:a5:1c:f0:a6:81:a5:cd:db:80:c8:f5:2f:b9: c0:a8:e1:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5NzMxMTAvBgNVBAUTKDdDOEM5RjdCMTZDQzlFQ0I0NEYwMzIwREM3OENCODE0 Q0Q0MkE3QTYwHhcNMjUwNDI1MDExMDU0WhcNMjUwNTAyMDExMDU0WjAYMRYwFAYD VQQDEw02ODBhZTExZi0xOGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5pJiFoikOCLXKry/W01eqSgUTsELUWhL6A/gcJNWpuaGTHZ7ByJFJw0jcuE7 l1D/Lec0Fd8ZfFDoJoCLp4Tzlg+efvQEBd4KcKckuQ9jUWac2EZsdzAFMIB6vRtq SVv7fsawgMCqFLGNkAl8M6z+JZuqaCp4AXEUx6Cesh9FJz9ygWRzixTMQP3wDTxQ MGrdPPyd8P072BoePAeacllf+39iEqfqHmU91xH1qmigyW6jmPhTJ4fhGtH4dp4L 1yKFwjmDJF5ZvHdlMZow658tUaTmz7od7ppHTpvzkc7ojz3UN3Sg4cebBBSnuTPZ vS5rbJKbIlWXy+lR+sB6FqOj0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhv3xJ4 Yfim9pYi+VIjuHg3y1ZhMB8GA1UdIwQYMBaAFHyMn3sWzJ7LRPAyDceMuBTNQqem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk3My81NjA2QUUyMkVC NDQxMUVDQURFMUVENjJDNEY5QUUwMi9mSXlmZXhiTW5zdEU4RElOeDR5NEZNMUNw NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZJeWZleGJNbnN0RThESU54NHk0Rk0xQ3A2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODk3My81NjA2QUUyMkVCNDQxMUVDQURFMUVENjJDNEY5QUUwMi9mSXlmZXhiTW5z dEU4RElOeDR5NEZNMUNwNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiUDt55YRizoHof7bjbVd0+7i7VWW3TnYBLKg8FrJ836qZEVy6T8+q en+DsWSEdfUpojl4T1AozjoMh6gPQkEq+wQGGymCDK6p9kbRDcV/F0L0y6QR3lnB pVIjNtbEjQLVZ4+HWH6U3DEItAwO3sqabTNrrLGe5QzkK8WsIPZyQwZrcfPNzcya cOKoiG/7oqNj67Ds4Zz6ejuhkBKWWBlnzr3RXu/YvS5bYsDqY1bq6Ed/u9FfETtp +REdvhuWZnNvb97s0sa8jfpstd6ZL+qZjmZAPbCMM4N/Xbk6F0RAsr59sum9K1fE PaAF2Fec+KUc8KaBpc3bgMj1L7nAqOHQ -----END CERTIFICATE-----Generated at Sat Apr 26 14:18:28 2025 by rpki-client