$ rpki-client -vvf rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft File: n7qfr8GmfUUaL1m57iMkLqndRXI.mft (raw, json) Hash identifier: pHfVEhsUO4DQmjiR/VZu5rRvZLDtyUMIu9KDJmJmdKQ= Subject key identifier: 38:FB:C3:A0:39:84:7E:22:2B:48:DE:7A:7B:3F:11:B6:E2:B5:49:2D Authority key identifier: 9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72 Certificate issuer: /CN=A91895D8/serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572 Certificate serial: 103B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft Manifest number: 1033 Signing time: Thu 24 Apr 2025 17:24:56 +0000 Manifest this update: Thu 24 Apr 2025 17:24:55 +0000 Manifest next update: Thu 01 May 2025 17:24:55 +0000 Files and hashes: 1: n7qfr8GmfUUaL1m57iMkLqndRXI.crl (hash: 6noYOznJ9arQ1Bp9TC4L++itoLfCmReMzQl/iQuONbQ=) 2: 566988C8717411E9AF629E4BC4F9AE02.roa (hash: XI/7jfg+GeSHUA3qICjMcaW/9XUB7SlPIfPTYeMPDXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4155 (0x103b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91895D8, serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572 Validity Not Before: Apr 24 17:24:55 2025 GMT Not After : May 1 17:24:55 2025 GMT Subject: CN=680a73e8-7940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:46:76:1a:19:32:fc:92:b1:54:fc:61:7a:52: 84:b5:4b:b3:73:5f:4e:6e:54:2b:92:7e:c6:f8:99: 00:d6:ba:18:c1:62:b7:ef:26:20:bc:2e:ef:f0:ea: e1:c3:d3:7f:39:0d:44:17:98:8d:e9:98:60:e6:76: 56:14:50:ac:0b:31:e8:25:b8:c8:ce:3f:58:44:e0: 18:f2:5e:71:0c:e4:fe:21:90:22:8c:a9:61:4d:43: 87:87:05:62:fb:df:2b:83:c3:54:08:f6:a4:f4:de: 0f:b8:ab:f8:af:e1:00:df:74:4b:42:08:e5:56:50: 8a:32:3e:98:51:ba:15:44:0f:5b:ca:d0:82:37:54: 30:22:f4:17:b1:6d:48:9f:c1:31:57:00:95:26:46: d6:e9:ea:aa:e1:46:6d:30:52:50:45:2c:46:62:52: f7:5a:17:ae:66:46:f3:f2:63:69:28:24:da:19:c7: 45:f4:2e:c2:5a:8b:e9:04:32:50:a7:a0:86:ba:41: 44:ef:68:ab:6c:f1:f6:53:ae:ef:1c:ba:2d:23:16: d8:4c:97:6a:44:ab:cc:26:be:36:51:61:b8:fb:0c: 41:fa:93:1d:4e:36:0b:68:18:48:6d:56:39:95:19: 9a:69:86:4a:31:ee:8e:da:62:9a:1d:d3:b4:66:d8: c3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:FB:C3:A0:39:84:7E:22:2B:48:DE:7A:7B:3F:11:B6:E2:B5:49:2D X509v3 Authority Key Identifier: keyid:9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:b6:2e:14:46:c8:6d:ca:ab:a8:1d:9c:c3:82:44:fa:aa:15: b2:9d:d5:23:a6:db:ab:6b:ca:e2:d4:ec:ea:01:d4:43:17:4b: 48:92:29:9b:de:22:71:47:62:f2:d8:13:50:d4:e5:a5:70:4e: ed:7e:81:42:95:60:d9:f2:5b:d0:e3:36:3b:d8:73:f9:19:00: b2:16:c9:4c:d7:f3:4a:27:7b:bb:ea:d0:72:bc:34:02:35:ea: c7:72:8b:8e:68:54:cb:0d:4a:2d:33:62:ef:13:4f:5f:4c:6f: 6d:b9:17:c1:45:70:f9:d6:1e:80:a7:67:a1:4d:67:00:5b:1e: 90:dd:89:8c:2d:a4:86:7f:9c:55:0d:4c:12:aa:c6:de:b1:c3: 09:78:77:82:cf:16:bc:1a:5e:db:12:79:19:00:e6:57:c3:16: 09:5c:60:94:f5:eb:2f:4a:ac:c8:d6:e9:25:26:c9:6d:68:39: ee:1b:88:73:98:1f:13:c5:d6:6e:ee:c7:0c:fa:72:04:e2:d1: b8:68:83:36:89:8d:98:d4:1f:21:76:88:02:2d:93:fa:d6:17: 4a:ae:e3:86:18:df:74:ae:f6:4b:80:aa:4d:d0:cc:f9:ba:af: 57:55:06:09:2b:63:8f:d9:c8:f1:fd:a5:7a:0c:49:91:fd:b1: e7:d6:a5:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1RDgxMTAvBgNVBAUTKDlGQkE5RkFGQzFBNjdENDUxQTJGNTlCOUVFMjMyNDJF QTlERDQ1NzIwHhcNMjUwNDI0MTcyNDU1WhcNMjUwNTAxMTcyNDU1WjAYMRYwFAYD VQQDEw02ODBhNzNlOC03OTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0Z2Ghky/JKxVPxhelKEtUuzc19OblQrkn7G+JkA1roYwWK37yYgvC7v8Orh w9N/OQ1EF5iN6Zhg5nZWFFCsCzHoJbjIzj9YROAY8l5xDOT+IZAijKlhTUOHhwVi +98rg8NUCPak9N4PuKv4r+EA33RLQgjlVlCKMj6YUboVRA9bytCCN1QwIvQXsW1I n8ExVwCVJkbW6eqq4UZtMFJQRSxGYlL3WheuZkbz8mNpKCTaGcdF9C7CWovpBDJQ p6CGukFE72irbPH2U67vHLotIxbYTJdqRKvMJr42UWG4+wxB+pMdTjYLaBhIbVY5 lRmaaYZKMe6O2mKaHdO0ZtjDjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDj7w6A5 hH4iK0jeens/EbbitUktMB8GA1UdIwQYMBaAFJ+6n6/Bpn1FGi9Zue4jJC6p3UVy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTVEOC80RjMxNEM0MDNB REMxMUU5QjFEMzBDMTJDNEY5QUUwMi9uN3FmcjhHbWZVVWFMMW01N2lNa0xxbmRS WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL243cWZyOEdtZlVVYUwxbTU3aU1rTHFuZFJYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTVEOC80RjMxNEM0MDNBREMxMUU5QjFEMzBDMTJDNEY5QUUwMi9uN3FmcjhHbWZV VWFMMW01N2lNa0xxbmRSWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtti4URshtyquoHZzDgkT6qhWyndUjptura8ri1OzqAdRDF0tIkimb 3iJxR2Ly2BNQ1OWlcE7tfoFClWDZ8lvQ4zY72HP5GQCyFslM1/NKJ3u76tByvDQC NerHcouOaFTLDUotM2LvE09fTG9tuRfBRXD51h6Ap2ehTWcAWx6Q3YmMLaSGf5xV DUwSqsbescMJeHeCzxa8Gl7bEnkZAOZXwxYJXGCU9esvSqzI1uklJsltaDnuG4hz mB8TxdZu7scM+nIE4tG4aIM2iY2Y1B8hdogCLZP61hdKruOGGN90rvZLgKpN0Mz5 uq9XVQYJK2OP2cjx/aV6DEmR/bHn1qV0 -----END CERTIFICATE-----Generated at Sat Apr 26 13:09:46 2025 by rpki-client