$ rpki-client -vvf rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft File: Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft (raw, json) Hash identifier: 3W/uIsHD1tuvHyfaBTsg/kTimvqjSHpE0W+BGR30dto= Subject key identifier: 23:2E:2E:A0:4C:43:51:17:4B:34:3E:6A:8E:89:76:CE:7E:66:4E:08 Authority key identifier: 17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C Certificate issuer: /CN=A9186363/serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft Manifest number: 4C Signing time: Fri 25 Apr 2025 06:19:09 +0000 Manifest this update: Fri 25 Apr 2025 06:19:08 +0000 Manifest next update: Fri 02 May 2025 06:19:08 +0000 Files and hashes: 1: Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl (hash: Njo2BvsABMQ5kBNdZwYafw011mP0U6zi4gCQWMe272c=) 2: 0FFCC5E8AFAE11EFAC818674C4F9AE02.roa (hash: P+H7fb6sxOYzaDyJFH2WCrqrlvTjPog92898KvwjrwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186363, serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C Validity Not Before: Apr 25 06:19:08 2025 GMT Not After : May 2 06:19:08 2025 GMT Subject: CN=680b295d-c088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:08:e8:47:8b:ce:82:30:fb:b8:70:b1:2c:03: bc:b5:2f:3f:98:cd:5f:29:1a:ee:ba:a4:8a:fb:fe: ae:d1:cc:71:95:ca:4f:c3:8e:ff:51:89:fd:79:57: ae:9f:ab:b1:a2:a9:0a:a9:a6:5b:70:01:78:3b:8e: 95:da:52:d9:15:1f:bd:a8:97:40:09:23:85:5d:cd: 81:bf:93:e5:c4:b1:16:f4:8b:a2:75:f7:ea:15:e0: 9e:ed:23:0c:d4:dc:ae:61:33:4b:84:26:44:d2:39: 93:23:1b:b1:69:fd:12:ac:44:e5:73:c3:57:b8:cf: d0:08:7a:32:50:e7:0a:81:9b:25:09:a3:bb:03:2b: 99:86:b7:a4:cb:6f:e0:7a:3a:dd:a2:2f:58:73:cf: 85:95:e8:ed:21:c4:6c:22:06:c9:0b:14:1d:c2:15: d9:54:75:85:8d:5d:5a:be:d1:41:76:c7:ec:a7:95: df:c6:bc:e9:8e:46:27:93:ea:66:ea:54:b9:2b:0e: a9:fc:01:c5:f9:66:7f:7d:9b:85:cc:df:28:32:79: ba:6c:3b:e3:26:c9:20:6a:bc:b4:df:f8:78:2c:99: 0f:4c:c2:8f:b1:13:fa:87:8d:df:81:73:d9:07:50: 5a:d3:52:b6:2c:74:13:85:58:f9:2b:52:fb:1c:8d: 2b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2E:2E:A0:4C:43:51:17:4B:34:3E:6A:8E:89:76:CE:7E:66:4E:08 X509v3 Authority Key Identifier: keyid:17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:6e:74:df:9a:e3:82:e4:6e:e4:7e:48:cc:99:65:7c:b9:f8: 71:3d:b6:c7:63:f3:37:fc:d3:fc:e0:27:1e:f9:28:fd:90:a6: e2:4e:9a:e5:c5:f8:94:03:e1:8f:49:f6:c5:75:ad:1f:0e:27: 59:a0:2b:61:49:81:09:15:34:ad:7e:5a:a6:56:19:4d:3a:96: 32:36:f8:a0:c1:c9:2a:16:9a:98:2f:87:19:38:6c:a9:24:f5: d8:a2:1e:8a:60:c7:13:2f:e9:ba:6b:53:12:df:b7:df:a7:74: 70:15:52:c9:d0:7c:59:e3:32:55:1b:da:18:15:e8:f6:a5:61: 4f:4d:dc:9a:c5:83:de:bf:59:7e:08:0a:52:5b:ca:79:f8:4b: 61:76:cb:21:99:4e:07:ac:5b:57:86:91:0d:f7:80:79:a5:81: 8c:6f:7e:0b:94:a6:f8:d6:b1:c4:33:3c:af:aa:ff:0a:6d:09: 52:63:aa:02:82:d2:cd:12:3e:7d:f2:f6:1a:17:1e:44:36:91: 9e:ab:df:31:33:43:dd:b3:96:2c:95:62:2b:a0:56:ae:10:34: 83:fc:b0:c2:67:4a:72:8a:79:3b:cb:ac:d2:b6:8d:76:93:20: b9:d5:e7:a8:3f:6c:d2:8a:41:cb:8d:a5:5d:08:e0:73:ae:ae: 42:f7:b1:d5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NjM2MzExMC8GA1UEBRMoMTcxRUREM0Y3Nzg1RTBGNTM4NTU2RjlFRjI2QkVENzE2 NjlFOEQ4QzAeFw0yNTA0MjUwNjE5MDhaFw0yNTA1MDIwNjE5MDhaMBgxFjAUBgNV BAMTDTY4MGIyOTVkLWMwODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYCOhHi86CMPu4cLEsA7y1Lz+YzV8pGu66pIr7/q7RzHGVyk/Djv9Rif15V66f q7GiqQqppltwAXg7jpXaUtkVH72ol0AJI4VdzYG/k+XEsRb0i6J19+oV4J7tIwzU 3K5hM0uEJkTSOZMjG7Fp/RKsROVzw1e4z9AIejJQ5wqBmyUJo7sDK5mGt6TLb+B6 Ot2iL1hzz4WV6O0hxGwiBskLFB3CFdlUdYWNXVq+0UF2x+ynld/GvOmORieT6mbq VLkrDqn8AcX5Zn99m4XM3ygyebpsO+MmySBqvLTf+HgsmQ9Mwo+xE/qHjd+Bc9kH UFrTUrYsdBOFWPkrUvscjSvtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIy4uoExD URdLND5qjol2zn5mTggwHwYDVR0jBBgwFoAUFx7dP3eF4PU4VW+e8mvtcWaejYww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2MzYzL0I1NjAwQUVDQUZB QzExRUZCODg2RDY1MUM0RjlBRTAyL0Z4N2RQM2VGNFBVNFZXLWU4bXZ0Y1dhZWpZ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRng3ZFAzZUY0UFU0VlctZThtdnRjV2Flall3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2 MzYzL0I1NjAwQUVDQUZBQzExRUZCODg2RDY1MUM0RjlBRTAyL0Z4N2RQM2VGNFBV NFZXLWU4bXZ0Y1dhZWpZdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEVudN+a44LkbuR+SMyZZXy5+HE9tsdj8zf80/zgJx75KP2QpuJOmuXF +JQD4Y9J9sV1rR8OJ1mgK2FJgQkVNK1+WqZWGU06ljI2+KDBySoWmpgvhxk4bKkk 9diiHopgxxMv6bprUxLft9+ndHAVUsnQfFnjMlUb2hgV6PalYU9N3JrFg96/WX4I ClJbynn4S2F2yyGZTgesW1eGkQ33gHmlgYxvfguUpvjWscQzPK+q/wptCVJjqgKC 0s0SPn3y9hoXHkQ2kZ6r3zEzQ92zliyVYiugVq4QNIP8sMJnSnKKeTvLrNK2jXaT ILnV56g/bNKKQcuNpV0I4HOurkL3sdU= -----END CERTIFICATE-----Generated at Sat Apr 26 12:36:47 2025 by rpki-client