$ rpki-client -vvf rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft File: f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft (raw, json) Hash identifier: ejqBcCQsudH3Gr/pIYPrzbU7gPZoxZj0ZVoh6sD889o= Subject key identifier: 84:5D:E2:52:66:21:8A:D4:7E:7A:67:02:13:89:DA:F0:C3:F1:0F:E7 Authority key identifier: 7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF Certificate issuer: /CN=A9190992/serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF Certificate serial: 0442 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft Manifest number: 0436 Signing time: Fri 25 Apr 2025 00:06:44 +0000 Manifest this update: Fri 25 Apr 2025 00:06:43 +0000 Manifest next update: Fri 02 May 2025 00:06:43 +0000 Files and hashes: 1: f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl (hash: ADgcn2YH5V+QiiA+Z7ulW7d1GW/YAKJNQhv/uM+WVDE=) 2: 5B24C51A60ED11EC874B903BC4F9AE02.roa (hash: y1lAMNBHmo8LOCH2UbQd6lp4y3+4hOTNpmp++HIjEDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1090 (0x442) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190992, serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF Validity Not Before: Apr 25 00:06:43 2025 GMT Not After : May 2 00:06:43 2025 GMT Subject: CN=680ad214-47a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7f:b9:89:7e:50:98:a7:2b:8e:72:c3:76:e0: 91:f0:16:aa:da:88:2d:e6:b6:1e:52:9b:9e:02:4d: d2:bb:e5:45:0c:aa:44:ac:00:1d:65:6e:30:59:57: 6f:22:af:92:51:19:f3:8d:1d:4e:81:8c:cf:ec:89: 5a:cc:31:f4:fe:b3:85:36:15:f8:01:c0:ec:e2:96: b8:2c:01:42:73:22:43:ff:f8:c7:ee:ec:87:9b:4d: f6:95:5f:5f:6c:d0:63:16:64:7b:52:a9:07:78:2b: c6:60:70:18:61:cc:49:bb:b1:c4:95:f5:74:8f:af: 3c:e7:14:d5:bb:ad:77:97:97:2d:50:60:d9:05:02: 8d:75:26:b8:c3:91:3c:ca:33:db:85:79:3a:5d:7d: 85:11:f7:cb:b8:e3:9f:6e:a2:93:18:ef:d2:42:eb: 28:d9:66:26:46:ec:d8:ab:f2:30:43:76:c1:9d:4b: a9:d3:5a:aa:b4:d2:85:0c:c2:17:45:84:d2:96:e9: 16:aa:f3:2a:18:3b:28:7e:a9:0d:03:84:4b:7c:c2: 02:3c:ec:3e:b7:0d:b2:97:96:a5:08:99:a0:8a:ef: 19:aa:5e:66:98:89:f6:b0:ca:d6:06:ed:14:72:b7: e2:e4:70:c8:b1:2a:fa:21:6e:f0:38:62:53:ce:8c: cb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:5D:E2:52:66:21:8A:D4:7E:7A:67:02:13:89:DA:F0:C3:F1:0F:E7 X509v3 Authority Key Identifier: keyid:7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:a7:18:4a:e5:ff:ed:34:4a:93:3d:45:49:cd:ad:7c:31:7d: b1:11:35:5b:8d:e7:64:49:e8:f7:59:09:d9:44:b6:77:41:38: ce:ff:a2:4f:3c:7a:6c:f4:e1:4f:49:34:57:c9:7a:42:dc:9a: b0:ff:96:b3:93:97:3e:0f:26:40:88:e4:fa:0f:b7:33:54:13: 9b:0c:84:cc:45:f8:cf:7d:f3:0f:ec:98:d1:37:40:62:8a:92: f1:8d:cf:37:8c:f3:e5:18:5c:67:16:32:21:48:db:d9:d7:5f: cf:67:69:d7:ea:ab:74:90:6d:7f:98:fc:e3:ab:3d:78:bb:93: 3b:7b:d6:0c:99:f1:8d:21:6b:ca:73:c2:6e:e9:87:e2:b5:78: 87:01:b4:aa:df:f4:d0:82:ec:e0:48:a7:f6:fe:88:08:84:95: 41:9d:da:a3:aa:2e:90:d1:f6:f2:ac:77:68:8e:68:45:ed:94: 1a:23:1a:41:92:e4:a8:70:f3:42:b4:20:1a:6e:ea:fb:8a:7c: a1:b6:46:3b:78:81:33:da:15:a8:51:e4:fb:12:4e:ea:64:df: b1:9a:84:81:67:24:c2:16:e7:73:d7:d4:b5:f3:e7:d3:c6:fc: 5d:db:80:c7:91:3a:74:61:4c:22:cf:03:54:20:29:2a:13:15: 19:92:f7:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5OTIxMTAvBgNVBAUTKDdGNjVDMTEwRTJBMTdFNDFENzcwRkMyREZBNDAzRDE2 QTMzRTVDQUYwHhcNMjUwNDI1MDAwNjQzWhcNMjUwNTAyMDAwNjQzWjAYMRYwFAYD VQQDEw02ODBhZDIxNC00N2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzn+5iX5QmKcrjnLDduCR8Baq2ogt5rYeUpueAk3Su+VFDKpErAAdZW4wWVdv Iq+SURnzjR1OgYzP7IlazDH0/rOFNhX4AcDs4pa4LAFCcyJD//jH7uyHm032lV9f bNBjFmR7UqkHeCvGYHAYYcxJu7HElfV0j6885xTVu613l5ctUGDZBQKNdSa4w5E8 yjPbhXk6XX2FEffLuOOfbqKTGO/SQuso2WYmRuzYq/IwQ3bBnUup01qqtNKFDMIX RYTSlukWqvMqGDsofqkNA4RLfMICPOw+tw2yl5alCJmgiu8Zql5mmIn2sMrWBu0U crfi5HDIsSr6IW7wOGJTzozLawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRd4lJm IYrUfnpnAhOJ2vDD8Q/nMB8GA1UdIwQYMBaAFH9lwRDioX5B13D8LfpAPRajPlyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDk5Mi81QjNEMDgwMjVD MEUxMUVDOTc2MDM2MTdDNEY5QUUwMi9mMlhCRU9LaGZrSFhjUHd0LWtBOUZxTS1Y SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YyWEJFT0toZmtIWGNQd3Qta0E5RnFNLVhLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDk5Mi81QjNEMDgwMjVDMEUxMUVDOTc2MDM2MTdDNEY5QUUwMi9mMlhCRU9LaGZr SFhjUHd0LWtBOUZxTS1YSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWpxhK5f/tNEqTPUVJza18MX2xETVbjedkSej3WQnZRLZ3QTjO/6JP PHps9OFPSTRXyXpC3Jqw/5azk5c+DyZAiOT6D7czVBObDITMRfjPffMP7JjRN0Bi ipLxjc83jPPlGFxnFjIhSNvZ11/PZ2nX6qt0kG1/mPzjqz14u5M7e9YMmfGNIWvK c8Ju6YfitXiHAbSq3/TQguzgSKf2/ogIhJVBndqjqi6Q0fbyrHdojmhF7ZQaIxpB kuSocPNCtCAabur7inyhtkY7eIEz2hWoUeT7Ek7qZN+xmoSBZyTCFudz19S18+fT xvxd24DHkTp0YUwizwNUICkqExUZkvfw -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:52 2025 by rpki-client