$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft File: 7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft (raw, json) Hash identifier: 7jy0LBPnYQKigCrQOeRaJJ2VIKETvC56tKGn6mwLGYA= Subject key identifier: 8A:A7:11:74:63:D0:0D:65:71:DE:26:42:F8:9C:60:38:95:91:5A:A4 Authority key identifier: EC:84:D6:0F:79:6B:F4:16:F8:F8:1D:18:BA:DA:2F:FF:87:C1:5F:26 Certificate issuer: /CN=A917ACF1/serialNumber=EC84D60F796BF416F8F81D18BADA2FFF87C15F26 Certificate serial: 0386 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft Manifest number: 037F Signing time: Fri 25 Apr 2025 00:39:44 +0000 Manifest this update: Fri 25 Apr 2025 00:39:43 +0000 Manifest next update: Fri 02 May 2025 00:39:43 +0000 Files and hashes: 1: 7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl (hash: F1o0amsn4ZB/vSU5b026GauzNp/wBsANCn80ex2Np1o=) 2: 5895821AB62611ECB410C81DC4F9AE02.roa (hash: hC/jX3h+m4kRJTL+3r4qE/OapWO5r8a4N2e8hzVBff0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:39:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 902 (0x386) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ACF1, serialNumber=EC84D60F796BF416F8F81D18BADA2FFF87C15F26 Validity Not Before: Apr 25 00:39:43 2025 GMT Not After : May 2 00:39:43 2025 GMT Subject: CN=680ad9cf-df88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ad:90:2b:8e:4d:7c:01:ed:c1:2e:8e:34:22: 1e:09:0a:49:46:52:6b:a2:06:23:0f:a8:a7:ab:d5: 27:9f:02:2d:fc:88:23:41:5a:c6:f1:14:ec:5a:1b: 01:b9:f9:c8:6d:00:a7:c3:43:07:90:0f:ef:57:ab: c1:35:ab:60:58:89:4e:a5:4f:9e:74:18:d2:7c:76: a2:41:54:d7:8c:dc:57:5d:26:bc:c3:c0:58:cc:71: 22:8c:a3:b7:c7:00:fd:b4:91:b4:e1:dc:49:c8:94: 0f:81:cd:9a:1b:c7:f6:8d:74:b3:4f:0d:88:87:0c: 93:ca:58:0e:25:b5:e4:48:97:64:2b:b6:a2:8e:de: 97:32:e8:93:ac:4b:be:01:ae:7e:84:a3:d3:c8:a7: 99:77:be:e3:7d:7f:90:b6:66:8a:75:a3:2f:2d:7e: 20:af:5d:e7:fb:20:4d:04:1e:ff:5f:97:94:1e:29: 35:43:0d:6d:62:34:91:72:a0:85:6c:f1:82:ba:ea: 1f:08:49:53:f4:ef:5d:45:12:82:ad:08:f1:33:f4: 3c:1f:fd:99:76:59:fb:44:a5:2c:b9:8d:da:48:22: f3:86:6e:5e:03:87:21:f6:3a:11:2b:5e:d1:dc:46: d5:ab:7b:fd:75:30:35:15:d2:77:84:9a:3b:49:7f: 03:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A7:11:74:63:D0:0D:65:71:DE:26:42:F8:9C:60:38:95:91:5A:A4 X509v3 Authority Key Identifier: keyid:EC:84:D6:0F:79:6B:F4:16:F8:F8:1D:18:BA:DA:2F:FF:87:C1:5F:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:be:9a:32:7d:d2:38:01:ca:19:3c:58:e5:85:ed:61:f4:84: 50:49:21:88:3a:d9:2c:8f:f8:22:fa:d8:fa:d0:d8:d7:0b:45: 38:a3:1b:26:dc:0e:41:91:8e:32:fa:0b:b2:0a:f1:56:51:d5: 93:e6:53:f8:95:f2:3c:6d:04:e1:79:c5:0a:ea:20:6d:1d:99: 33:54:f4:dd:29:f7:f5:d2:75:bb:26:b8:4a:e3:11:07:b7:8b: 34:38:39:71:0b:0d:a1:f2:fb:f2:f0:a9:9f:2b:df:e4:ab:77: 18:e1:97:82:f4:89:76:f6:77:b2:26:bf:b8:c2:46:62:c6:6e: db:54:97:c1:5f:22:f8:4f:18:b5:cd:47:3e:bc:2f:e7:d5:5d: 4c:c2:34:8f:98:5c:21:e7:55:55:f9:88:0b:fb:82:fc:a0:6b: f5:47:51:16:02:24:df:3d:d5:39:18:04:34:cb:41:3c:b1:56: 76:23:40:b0:15:d1:5e:36:d5:27:de:cf:ea:2c:c1:1a:d8:32: 89:fd:8b:f9:4e:c8:94:bb:e6:e4:e7:ca:25:22:d5:7a:39:0d: 43:bd:c0:7f:9e:cd:05:c1:28:a7:29:62:67:d1:de:8f:53:d9: 86:0c:47:7c:65:2b:7e:4c:10:5a:7d:d5:65:79:51:7d:7e:59: 06:08:ef:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDRjExMTAvBgNVBAUTKEVDODRENjBGNzk2QkY0MTZGOEY4MUQxOEJBREEyRkZG ODdDMTVGMjYwHhcNMjUwNDI1MDAzOTQzWhcNMjUwNTAyMDAzOTQzWjAYMRYwFAYD VQQDEw02ODBhZDljZi1kZjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvq2QK45NfAHtwS6ONCIeCQpJRlJrogYjD6inq9UnnwIt/IgjQVrG8RTsWhsB ufnIbQCnw0MHkA/vV6vBNatgWIlOpU+edBjSfHaiQVTXjNxXXSa8w8BYzHEijKO3 xwD9tJG04dxJyJQPgc2aG8f2jXSzTw2IhwyTylgOJbXkSJdkK7aijt6XMuiTrEu+ Aa5+hKPTyKeZd77jfX+QtmaKdaMvLX4gr13n+yBNBB7/X5eUHik1Qw1tYjSRcqCF bPGCuuofCElT9O9dRRKCrQjxM/Q8H/2Zdln7RKUsuY3aSCLzhm5eA4ch9joRK17R 3EbVq3v9dTA1FdJ3hJo7SX8DvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqnEXRj 0A1lcd4mQvicYDiVkVqkMB8GA1UdIwQYMBaAFOyE1g95a/QW+PgdGLraL/+HwV8m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUNGMS84NjgzNTUwNkEw MzkxMUVDOEExRjFDMjNDNEY5QUUwMi83SVRXRDNscjlCYjQtQjBZdXRvdl80ZkJY eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdJVFdEM2xyOUJiNC1CMFl1dG92XzRmQlh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUNGMS84NjgzNTUwNkEwMzkxMUVDOEExRjFDMjNDNEY5QUUwMi83SVRXRDNscjlC YjQtQjBZdXRvdl80ZkJYeVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIvpoyfdI4AcoZPFjlhe1h9IRQSSGIOtksj/gi+tj60NjXC0U4oxsm 3A5BkY4y+guyCvFWUdWT5lP4lfI8bQThecUK6iBtHZkzVPTdKff10nW7JrhK4xEH t4s0ODlxCw2h8vvy8KmfK9/kq3cY4ZeC9Il29neyJr+4wkZixm7bVJfBXyL4Txi1 zUc+vC/n1V1MwjSPmFwh51VV+YgL+4L8oGv1R1EWAiTfPdU5GAQ0y0E8sVZ2I0Cw FdFeNtUn3s/qLMEa2DKJ/Yv5TsiUu+bk58olItV6OQ1DvcB/ns0FwSinKWJn0d6P U9mGDEd8ZSt+TBBafdVleVF9flkGCO/x -----END CERTIFICATE-----Generated at Sat Apr 26 13:04:37 2025 by rpki-client