$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft File: 7tgLGUJsDUqCvG8LULm7El4f04o.mft (raw, json) Hash identifier: cGOpdp1Kvkvqe+B5ZfmIoDz8qkv4bFWYi4oq2N/wJyw= Subject key identifier: D4:AB:B7:32:B2:6B:6A:71:3B:9F:A2:99:09:60:5E:C0:D5:E0:C0:5A Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A Certificate issuer: /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A Certificate serial: 04C3 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft Manifest number: 04C3 Signing time: Thu 24 Apr 2025 15:24:15 +0000 Manifest this update: Thu 24 Apr 2025 15:24:15 +0000 Manifest next update: Thu 01 May 2025 15:24:15 +0000 Files and hashes: 1: 7tgLGUJsDUqCvG8LULm7El4f04o.crl (hash: R+lIYPB8H5zI+Xe5ZR15lnPhaVJ5kWqhsVKRh7qF/Gs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1219 (0x4c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A Validity Not Before: Apr 24 15:24:15 2025 GMT Not After : May 1 15:24:15 2025 GMT Subject: CN=680a579f-429b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b2:3d:b2:2e:8d:b6:4b:0b:07:d5:31:03:89: 03:44:8a:79:5f:03:30:41:09:36:52:d9:49:ef:8b: 52:7f:80:c0:d1:14:4c:11:43:ee:e7:a9:65:52:34: a3:12:91:f4:1e:ef:3d:30:a4:08:b5:7e:8d:69:6e: cb:b1:dc:74:e9:cf:e0:b7:77:1e:4d:ad:91:d9:a9: 08:4b:4c:0a:07:e7:24:9d:4f:13:7d:ff:06:95:79: df:57:f0:6b:d8:b6:fe:ad:b7:3b:37:0b:fb:e8:55: 7e:36:74:cc:49:bb:aa:95:22:e3:b2:c6:7c:32:1a: 4c:3d:91:68:dd:c4:ae:fc:56:2f:ea:cf:bb:2a:1a: 86:94:47:28:80:2c:71:d0:cf:2c:3b:4f:3e:b3:e0: 3d:64:c1:92:e6:1d:96:9a:b6:1e:69:f6:be:1c:a2: 7f:63:96:d4:8d:ca:dc:5f:ba:5b:0b:6c:1b:88:f6: 5b:de:fb:2f:c4:fe:dc:47:04:9f:8c:2e:cb:8e:9d: 20:dc:fa:f9:8e:29:15:11:f0:18:77:c5:6e:0c:16: e3:a1:3f:28:bb:0b:ad:99:28:15:3e:10:66:f2:2f: 6c:07:4c:cf:c9:13:00:bb:4d:a2:aa:65:d5:92:1e: 44:26:fb:50:c2:4c:4e:5b:6f:a9:ee:b0:92:55:2d: 79:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:AB:B7:32:B2:6B:6A:71:3B:9F:A2:99:09:60:5E:C0:D5:E0:C0:5A X509v3 Authority Key Identifier: keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:0f:54:f4:ee:6a:20:27:69:07:ea:d5:2f:70:2e:a7:b9:a7: 67:16:3e:f1:1c:e1:8a:41:76:3b:ed:3a:a0:1c:09:17:ff:10: 16:9e:ec:4e:37:1e:48:4b:bd:9e:c2:b4:c6:ac:f5:05:13:d2: e4:7d:b9:a5:d8:61:15:c8:80:66:f7:f4:d3:55:07:58:46:f6: aa:66:57:ab:cf:58:1d:65:d8:50:1b:f3:36:b1:bd:20:1b:77: db:40:de:7a:02:7f:59:a9:ef:05:33:49:b4:a3:7b:ca:d0:22: a8:78:17:da:4e:34:4e:08:54:f1:f6:f2:59:5f:e8:ee:54:ae: e5:98:27:dd:bf:80:61:30:fa:56:b3:8b:3c:f6:f5:93:3d:fa: a1:41:60:86:b1:64:be:3c:90:b0:8b:47:a9:66:bb:05:b2:9f: b7:89:20:c1:8f:3a:4e:76:9e:cb:b1:15:18:1c:77:d3:54:c2: a3:26:5e:39:fe:46:ae:8a:8b:99:a5:29:12:43:5c:2f:22:c9: 46:a7:55:85:11:fe:ff:80:97:66:87:3c:5c:72:70:e2:e3:9d: 10:64:6a:5f:d4:cc:07:7b:69:11:59:39:b0:32:15:5a:8a:19: 74:33:70:ca:fa:d9:cd:d1:91:35:3e:7e:b0:97:bf:aa:03:75: 72:85:d3:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEVFRDgwQjE5NDI2QzBENEE4MkJDNkYwQjUwQjlCQjEy NUUxRkQzOEEwHhcNMjUwNDI0MTUyNDE1WhcNMjUwNTAxMTUyNDE1WjAYMRYwFAYD VQQDEw02ODBhNTc5Zi00MjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6bI9si6NtksLB9UxA4kDRIp5XwMwQQk2UtlJ74tSf4DA0RRMEUPu56llUjSj EpH0Hu89MKQItX6NaW7Lsdx06c/gt3ceTa2R2akIS0wKB+cknU8Tff8GlXnfV/Br 2Lb+rbc7Nwv76FV+NnTMSbuqlSLjssZ8MhpMPZFo3cSu/FYv6s+7KhqGlEcogCxx 0M8sO08+s+A9ZMGS5h2WmrYeafa+HKJ/Y5bUjcrcX7pbC2wbiPZb3vsvxP7cRwSf jC7Ljp0g3Pr5jikVEfAYd8VuDBbjoT8ouwutmSgVPhBm8i9sB0zPyRMAu02iqmXV kh5EJvtQwkxOW2+p7rCSVS15TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSrtzKy a2pxO5+imQlgXsDV4MBaMB8GA1UdIwQYMBaAFO7YCxlCbA1KgrxvC1C5uxJeH9OK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi81NDdDODU4NjQx REExMUVDOTA1RTMyNTJDNEY5QUUwMi83dGdMR1VKc0RVcUN2RzhMVUxtN0VsNGYw NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzd0Z0xHVUpzRFVxQ3ZHOExVTG03RWw0ZjA0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RURCMi81NDdDODU4NjQxREExMUVDOTA1RTMyNTJDNEY5QUUwMi83dGdMR1VKc0RV cUN2RzhMVUxtN0VsNGYwNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuD1T07mogJ2kH6tUvcC6nuadnFj7xHOGKQXY77TqgHAkX/xAWnuxO Nx5IS72ewrTGrPUFE9Lkfbml2GEVyIBm9/TTVQdYRvaqZlerz1gdZdhQG/M2sb0g G3fbQN56An9Zqe8FM0m0o3vK0CKoeBfaTjROCFTx9vJZX+juVK7lmCfdv4BhMPpW s4s89vWTPfqhQWCGsWS+PJCwi0epZrsFsp+3iSDBjzpOdp7LsRUYHHfTVMKjJl45 /kauiouZpSkSQ1wvIslGp1WFEf7/gJdmhzxccnDi450QZGpf1MwHe2kRWTmwMhVa ihl0M3DK+tnN0ZE1Pn6wl7+qA3VyhdMf -----END CERTIFICATE-----Generated at Sat Apr 26 12:21:59 2025 by rpki-client