$ rpki-client -vvf rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft File: 7LIDs03q4KEdAVCjDvK0opkdepg.mft (raw, json) Hash identifier: 3VFXoQfC2gvcgPu79qINJtqK8BWVXbfGBC7wIgToE8o= Subject key identifier: 32:04:79:25:AE:D7:7F:3D:5A:ED:A5:0F:C0:54:1E:9D:BA:04:D0:58 Authority key identifier: EC:B2:03:B3:4D:EA:E0:A1:1D:01:50:A3:0E:F2:B4:A2:99:1D:7A:98 Certificate issuer: /CN=A9189529/serialNumber=ECB203B34DEAE0A11D0150A30EF2B4A2991D7A98 Certificate serial: 19B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LIDs03q4KEdAVCjDvK0opkdepg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft Manifest number: 19B5 Signing time: Thu 24 Apr 2025 16:24:05 +0000 Manifest this update: Thu 24 Apr 2025 16:24:05 +0000 Manifest next update: Thu 01 May 2025 16:24:05 +0000 Files and hashes: 1: 7LIDs03q4KEdAVCjDvK0opkdepg.crl (hash: h/zxlt5fS4CrevkbD9LrZVAOoRc4NTPEEExisKZDNGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.crl rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LIDs03q4KEdAVCjDvK0opkdepg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6581 (0x19b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189529, serialNumber=ECB203B34DEAE0A11D0150A30EF2B4A2991D7A98 Validity Not Before: Apr 24 16:24:05 2025 GMT Not After : May 1 16:24:05 2025 GMT Subject: CN=680a65a5-8ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dd:64:60:fb:75:97:99:b7:bc:ef:e9:63:16: b0:5c:f5:fa:43:de:71:13:55:a4:76:82:a0:2c:9f: 95:6c:39:ca:08:5d:57:79:f5:2a:1f:16:e7:32:c3: 8c:74:b4:69:39:e6:70:a8:01:2d:3b:83:2f:da:98: 9c:60:82:6e:d3:01:8c:bd:b8:e9:4c:a2:6a:d8:59: 71:79:88:97:a4:a5:eb:41:1d:3c:67:6e:15:83:40: c4:91:5b:69:47:a8:ef:0a:77:56:d9:1b:09:e1:44: 56:a6:ad:97:49:92:bf:b6:38:f5:da:39:5a:b2:4a: d6:5b:dd:ad:b8:a5:8f:1e:01:66:02:b8:80:ba:cd: 01:a6:6a:79:d3:09:83:b5:a4:09:15:55:55:35:fa: 82:57:25:d3:c5:cf:0f:b3:04:3b:0d:d6:3a:d4:11: de:58:c2:a0:ff:52:70:3d:b4:1d:db:99:37:ab:01: 9f:81:df:5e:e3:3c:71:dd:fc:78:2e:48:05:17:6f: 58:30:c7:fd:fb:7f:67:62:54:bf:6a:4e:89:b4:90: ae:6f:b1:96:d4:9b:85:6e:f1:d1:11:c0:5a:73:78: e9:fb:83:b0:52:65:73:89:47:de:8f:65:20:ec:4b: 72:c8:a0:9a:7d:d0:5b:c5:55:66:c3:78:5d:08:78: 6e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:04:79:25:AE:D7:7F:3D:5A:ED:A5:0F:C0:54:1E:9D:BA:04:D0:58 X509v3 Authority Key Identifier: keyid:EC:B2:03:B3:4D:EA:E0:A1:1D:01:50:A3:0E:F2:B4:A2:99:1D:7A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LIDs03q4KEdAVCjDvK0opkdepg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:7b:bf:05:e4:a3:fd:ac:ce:2a:f2:74:34:dc:4c:81:7b:66: ac:0c:d5:a8:69:6a:25:6f:a8:99:c9:0c:8c:a8:6e:e4:03:d0: 81:2b:7b:56:4a:76:b7:fb:80:c0:e4:0b:28:c7:9f:7a:16:ee: b0:71:38:63:d6:38:80:c2:b7:40:69:47:41:94:96:97:df:8c: 37:f4:da:27:3b:2e:c4:a8:e3:14:88:67:ee:39:de:b4:f2:be: 7c:5c:45:41:d8:fa:7d:36:0c:ba:f1:15:bc:c5:9b:83:de:37: ec:5a:64:db:84:ce:1d:02:ef:fd:3e:3c:fa:da:69:3e:a7:0a: 18:df:0e:bb:fe:d0:05:be:68:94:2e:83:9c:3a:58:e7:05:a8: aa:c4:5b:c1:5b:68:25:ac:56:e2:4e:7c:f1:cc:87:6d:17:2a: 77:50:c5:12:b7:27:95:d0:a2:09:3f:cd:8b:83:c9:37:44:f6: 28:aa:2b:e5:c7:3f:23:ca:1b:43:0e:9b:cc:b5:7c:f2:c9:2d: 87:a6:d5:03:84:80:f1:f8:df:30:21:45:0c:a0:0a:e7:6b:ac: 3d:b8:83:c4:b6:c4:5d:d9:1c:8b:b9:aa:47:30:c2:d7:68:62: 62:c1:ea:87:91:2a:c5:c2:49:20:25:c6:85:69:85:d7:1b:a8: de:75:23:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1MjkxMTAvBgNVBAUTKEVDQjIwM0IzNERFQUUwQTExRDAxNTBBMzBFRjJCNEEy OTkxRDdBOTgwHhcNMjUwNDI0MTYyNDA1WhcNMjUwNTAxMTYyNDA1WjAYMRYwFAYD VQQDEw02ODBhNjVhNS04ZWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxN1kYPt1l5m3vO/pYxawXPX6Q95xE1WkdoKgLJ+VbDnKCF1XefUqHxbnMsOM dLRpOeZwqAEtO4Mv2picYIJu0wGMvbjpTKJq2FlxeYiXpKXrQR08Z24Vg0DEkVtp R6jvCndW2RsJ4URWpq2XSZK/tjj12jlaskrWW92tuKWPHgFmAriAus0Bpmp50wmD taQJFVVVNfqCVyXTxc8PswQ7DdY61BHeWMKg/1JwPbQd25k3qwGfgd9e4zxx3fx4 LkgFF29YMMf9+39nYlS/ak6JtJCub7GW1JuFbvHREcBac3jp+4OwUmVziUfej2Ug 7EtyyKCafdBbxVVmw3hdCHhuEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDIEeSWu 1389Wu2lD8BUHp26BNBYMB8GA1UdIwQYMBaAFOyyA7NN6uChHQFQow7ytKKZHXqY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTUyOS82OTI5RjJDMjVC QkUxMUU3ODk3N0UwMjNDNEY5QUUwMi83TElEczAzcTRLRWRBVkNqRHZLMG9wa2Rl cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdMSURzMDNxNEtFZEFWQ2pEdkswb3BrZGVwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTUyOS82OTI5RjJDMjVCQkUxMUU3ODk3N0UwMjNDNEY5QUUwMi83TElEczAzcTRL RWRBVkNqRHZLMG9wa2RlcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAje78F5KP9rM4q8nQ03EyBe2asDNWoaWolb6iZyQyMqG7kA9CBK3tW Sna3+4DA5Asox596Fu6wcThj1jiAwrdAaUdBlJaX34w39NonOy7EqOMUiGfuOd60 8r58XEVB2Pp9Ngy68RW8xZuD3jfsWmTbhM4dAu/9Pjz62mk+pwoY3w67/tAFvmiU LoOcOljnBaiqxFvBW2glrFbiTnzxzIdtFyp3UMUStyeV0KIJP82Lg8k3RPYoqivl xz8jyhtDDpvMtXzyyS2HptUDhIDx+N8wIUUMoArna6w9uIPEtsRd2RyLuapHMMLX aGJiweqHkSrFwkkgJcaFaYXXG6jedSMI -----END CERTIFICATE-----Generated at Sat Apr 26 04:38:20 2025 by rpki-client