$ rpki-client -vvf rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft File: Se4JeG9u2kI1x1dcppbboJnVR8w.mft (raw, json) Hash identifier: 7r0vGfA8iMRJzduykMqhQGjBozLDC059rldSr4LB6xw= Subject key identifier: A5:D9:06:C5:59:FC:19:74:A3:35:06:DA:EB:D7:C2:64:97:0F:5E:BA Authority key identifier: 49:EE:09:78:6F:6E:DA:42:35:C7:57:5C:A6:96:DB:A0:99:D5:47:CC Certificate issuer: /CN=A9189E7C/serialNumber=49EE09786F6EDA4235C7575CA696DBA099D547CC Certificate serial: 07FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft Manifest number: 07F9 Signing time: Thu 24 Apr 2025 20:45:07 +0000 Manifest this update: Thu 24 Apr 2025 20:45:06 +0000 Manifest next update: Thu 01 May 2025 20:45:06 +0000 Files and hashes: 1: Se4JeG9u2kI1x1dcppbboJnVR8w.crl (hash: g1UzxniiQNFnDkQwiB3Q9O58qsfF67cS/0+HB7DzTlI=) 2: 2EC0C96ADBAB11EABFC1AC7DC4F9AE02.roa (hash: DJGSwkZ0gnAwFVuSpr1DGFnHa6D3l7xSjCohDEJeEIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.crl rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:45:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2047 (0x7ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189E7C, serialNumber=49EE09786F6EDA4235C7575CA696DBA099D547CC Validity Not Before: Apr 24 20:45:06 2025 GMT Not After : May 1 20:45:06 2025 GMT Subject: CN=680aa2d2-0c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f5:a1:d0:6c:34:82:25:40:44:f6:70:8e:eb: a7:b4:fa:93:12:b6:fe:12:92:ef:7a:62:56:32:f5: 79:29:84:e3:d8:4e:c8:76:87:a6:96:60:9f:d8:90: 30:ae:be:a2:13:31:6c:24:78:da:96:70:f3:10:47: 17:ff:57:f5:bb:02:cb:c3:96:4a:9d:24:91:72:48: e3:0e:4f:6a:7b:35:e1:08:4f:99:fd:9e:15:9c:c3: ae:1a:50:e0:f1:56:f0:e8:16:05:40:72:ce:26:28: b5:cf:ec:7b:7b:e9:d6:55:4e:d9:ac:40:7b:65:c6: 17:13:b2:59:ed:be:8e:c7:ee:73:3e:55:35:be:59: 4f:a7:9b:65:4e:85:79:09:67:24:e4:01:0d:a1:19: ab:2a:d5:51:c7:20:00:87:a6:62:55:ee:ff:d9:a1: 11:b0:8f:b8:51:c9:63:c8:ba:14:b6:ca:84:21:87: 46:75:76:6c:1b:11:f6:c8:1a:f6:ef:d8:68:62:5d: 70:f6:20:7e:83:e8:d9:d5:95:10:f9:52:7a:b6:aa: d4:ca:e0:28:62:ed:05:ac:62:31:80:e9:29:d6:34: e0:77:e1:55:67:4f:df:87:24:d9:d3:e8:3d:af:39: d7:25:d9:24:38:9f:a0:c3:ea:12:12:bc:fd:ed:32: 38:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D9:06:C5:59:FC:19:74:A3:35:06:DA:EB:D7:C2:64:97:0F:5E:BA X509v3 Authority Key Identifier: keyid:49:EE:09:78:6F:6E:DA:42:35:C7:57:5C:A6:96:DB:A0:99:D5:47:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:fa:f0:a0:bf:15:4a:25:0f:08:72:1c:7a:63:f3:ae:80:39: 12:fa:9d:6c:61:7e:e5:d5:d6:ac:8f:a6:c0:23:42:08:40:c5: 09:21:60:a5:e1:94:93:b2:f0:1e:92:70:62:50:a7:d9:37:1c: 4e:86:1a:01:64:57:a6:76:78:e5:24:13:b6:b2:3e:9b:85:ae: 1e:5a:13:cf:b4:50:85:7b:39:74:36:37:f6:b5:b4:e2:ff:2e: bf:78:31:b5:88:ba:a7:98:98:04:7d:7e:e5:93:68:b4:49:ff: 3c:ca:f7:de:e6:97:d3:b4:fc:08:7b:46:8b:16:2b:9b:31:94: f8:0c:58:4c:6a:39:73:85:6d:05:9c:a6:21:0c:e1:bd:13:19: d4:14:87:3b:cf:45:25:4e:fc:1c:60:ec:ec:2e:9c:18:1c:01: 23:5a:0a:80:74:47:54:bd:bf:e0:46:70:0e:91:81:87:40:43: cd:b9:87:b9:88:23:93:81:c0:b1:b9:0d:fd:04:72:b4:a4:71: 01:2f:6d:ed:f3:ab:45:04:78:56:77:7e:9e:41:0e:b0:7b:b0: 1a:ab:e6:94:ef:42:cc:48:f2:4d:f3:31:38:70:51:7b:59:35: bf:d6:64:d0:ff:fb:c2:32:37:f8:ef:63:c8:c2:99:64:0c:7b: 71:4f:af:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlFN0MxMTAvBgNVBAUTKDQ5RUUwOTc4NkY2RURBNDIzNUM3NTc1Q0E2OTZEQkEw OTlENTQ3Q0MwHhcNMjUwNDI0MjA0NTA2WhcNMjUwNTAxMjA0NTA2WjAYMRYwFAYD VQQDEw02ODBhYTJkMi0wYzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0PWh0Gw0giVARPZwjuuntPqTErb+EpLvemJWMvV5KYTj2E7IdoemlmCf2JAw rr6iEzFsJHjalnDzEEcX/1f1uwLLw5ZKnSSRckjjDk9qezXhCE+Z/Z4VnMOuGlDg 8Vbw6BYFQHLOJii1z+x7e+nWVU7ZrEB7ZcYXE7JZ7b6Ox+5zPlU1vllPp5tlToV5 CWck5AENoRmrKtVRxyAAh6ZiVe7/2aERsI+4UcljyLoUtsqEIYdGdXZsGxH2yBr2 79hoYl1w9iB+g+jZ1ZUQ+VJ6tqrUyuAoYu0FrGIxgOkp1jTgd+FVZ0/fhyTZ0+g9 rznXJdkkOJ+gw+oSErz97TI4ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXZBsVZ /Bl0ozUG2uvXwmSXD166MB8GA1UdIwQYMBaAFEnuCXhvbtpCNcdXXKaW26CZ1UfM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUU3Qy9GQzFFQjcwQ0RC QTkxMUVBOEEwMTcwN0RDNEY5QUUwMi9TZTRKZUc5dTJrSTF4MWRjcHBiYm9KblZS OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NlNEplRzl1MmtJMXgxZGNwcGJib0puVlI4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUU3Qy9GQzFFQjcwQ0RCQTkxMUVBOEEwMTcwN0RDNEY5QUUwMi9TZTRKZUc5dTJr STF4MWRjcHBiYm9KblZSOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM+vCgvxVKJQ8Ichx6Y/OugDkS+p1sYX7l1dasj6bAI0IIQMUJIWCl 4ZSTsvAeknBiUKfZNxxOhhoBZFemdnjlJBO2sj6bha4eWhPPtFCFezl0Njf2tbTi /y6/eDG1iLqnmJgEfX7lk2i0Sf88yvfe5pfTtPwIe0aLFiubMZT4DFhMajlzhW0F nKYhDOG9ExnUFIc7z0UlTvwcYOzsLpwYHAEjWgqAdEdUvb/gRnAOkYGHQEPNuYe5 iCOTgcCxuQ39BHK0pHEBL23t86tFBHhWd36eQQ6we7Aaq+aU70LMSPJN8zE4cFF7 WTW/1mTQ//vCMjf472PIwplkDHtxT69C -----END CERTIFICATE-----Generated at Sat Apr 26 12:57:45 2025 by rpki-client