$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft File: f3dZIELjyHvlbu2B2cyw6XQCzdc.mft (raw, json) Hash identifier: US2yahpL80pp5s4uhLs1x936tNsDscnsvd5U9V5SM3E= Subject key identifier: EC:EC:28:E0:9A:79:9D:52:D6:50:D8:2A:CC:0B:43:44:BE:4E:87:5F Authority key identifier: 7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7 Certificate issuer: /CN=A9192A47/serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft Manifest number: 47 Signing time: Fri 25 Apr 2025 06:24:39 +0000 Manifest this update: Fri 25 Apr 2025 06:24:39 +0000 Manifest next update: Fri 02 May 2025 06:24:39 +0000 Files and hashes: 1: f3dZIELjyHvlbu2B2cyw6XQCzdc.crl (hash: z2smGs2uh6wiZKauoooLnyOTWKIqsrmpWbDZjGAH2XU=) 2: 43631816B82211EFB74FF56BC4F9AE02.roa (hash: +OL0LwWDdzCSmXdG5gDsUEjfzy5Uq5zJxTv17RF0xXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192A47, serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7 Validity Not Before: Apr 25 06:24:39 2025 GMT Not After : May 2 06:24:39 2025 GMT Subject: CN=680b2aa7-1298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:fa:34:11:7d:8f:6e:1b:fd:21:48:45:04:6e: 3a:a7:91:2e:66:fa:ae:e0:27:08:64:aa:02:95:77: 61:5f:c9:57:ce:56:ff:68:8c:5d:c9:ed:b1:00:56: c4:d0:bd:23:b0:0a:a6:69:8b:33:60:de:c8:19:18: 71:ea:f5:dd:a8:8d:c1:f4:82:92:bb:ed:0a:a3:29: df:fd:a2:7d:50:c3:f2:71:82:3d:cf:25:f8:7e:f3: f0:19:9c:5d:15:65:7f:cd:4e:22:42:fc:a6:7f:23: fa:97:dd:52:bd:57:33:c7:39:94:30:ae:71:4c:36: 64:1b:d9:00:21:77:a4:e5:2e:fc:ee:00:9b:e9:b2: 09:b1:f7:bc:90:cc:78:90:d1:70:ed:c3:ef:ea:5d: 07:e1:12:6c:8c:1e:a7:40:a8:fe:76:97:e3:97:05: ff:20:50:9f:87:c7:5a:04:c7:52:9b:31:42:23:3e: f0:62:48:77:12:3f:c2:96:b7:c5:13:fb:03:97:db: 46:66:97:58:f1:de:32:00:28:e7:f0:1f:d5:20:dc: 35:7c:69:17:dd:9b:02:3f:fc:83:0c:6b:44:f5:22: ca:cb:7a:1c:a3:97:0e:0c:cc:63:46:ce:8e:62:18: 6c:f9:e2:63:9d:86:e8:ec:d6:9d:93:1d:6b:16:52: 4f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:EC:28:E0:9A:79:9D:52:D6:50:D8:2A:CC:0B:43:44:BE:4E:87:5F X509v3 Authority Key Identifier: keyid:7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:0f:0e:49:ed:3e:c0:c1:b6:f0:79:ac:6b:27:34:7d:7a:6f: e7:a6:40:34:f5:ec:bd:07:00:53:c9:bd:2b:ae:c7:41:d2:76: 9b:bf:5e:e5:1c:b8:35:aa:41:d6:ca:5d:f8:17:d7:63:6a:57: 8f:b2:38:31:e2:9c:54:e9:6f:4c:d4:17:c7:35:c2:03:6f:f3: ba:0c:98:a4:68:05:ad:c2:09:63:93:a8:19:d5:83:c8:e1:85: 61:58:fe:c0:48:b2:00:29:ef:db:4d:bd:17:ad:6b:74:d4:a4: 13:30:04:62:80:64:21:57:de:40:62:61:8a:58:e3:d7:59:91: 27:f6:b1:eb:dd:d4:d8:e5:e5:85:36:1c:a2:4e:db:bb:1d:93: ec:61:f9:75:8b:69:3c:fc:43:43:0a:4b:bf:23:ea:f5:b7:78: 00:e3:9a:7f:50:30:6d:ba:19:1f:43:5e:9a:bd:64:f1:61:3f: 01:40:5a:85:f0:66:63:4f:43:90:58:ed:1a:9d:a0:3e:1b:43: 59:89:de:49:3c:cf:44:cf:d5:5b:0a:88:63:da:58:3a:1b:f8: b8:8d:ec:95:11:28:db:71:0c:ea:09:00:e3:8b:1c:f7:9b:92: 44:9e:cf:f8:a7:62:d7:01:3d:aa:74:b8:85:83:cc:60:31:00: 92:ae:a4:65 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MkE0NzExMC8GA1UEBRMoN0Y3NzU5MjA0MkUzQzg3QkU1NkVFRDgxRDlDQ0IwRTk3 NDAyQ0RENzAeFw0yNTA0MjUwNjI0MzlaFw0yNTA1MDIwNjI0MzlaMBgxFjAUBgNV BAMTDTY4MGIyYWE3LTEyOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDv+jQRfY9uG/0hSEUEbjqnkS5m+q7gJwhkqgKVd2FfyVfOVv9ojF3J7bEAVsTQ vSOwCqZpizNg3sgZGHHq9d2ojcH0gpK77QqjKd/9on1Qw/Jxgj3PJfh+8/AZnF0V ZX/NTiJC/KZ/I/qX3VK9VzPHOZQwrnFMNmQb2QAhd6TlLvzuAJvpsgmx97yQzHiQ 0XDtw+/qXQfhEmyMHqdAqP52l+OXBf8gUJ+Hx1oEx1KbMUIjPvBiSHcSP8KWt8UT +wOX20Zml1jx3jIAKOfwH9Ug3DV8aRfdmwI//IMMa0T1IsrLehyjlw4MzGNGzo5i GGz54mOdhujs1p2THWsWUk8bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7Owo4Jp5 nVLWUNgqzAtDRL5Oh18wHwYDVR0jBBgwFoAUf3dZIELjyHvlbu2B2cyw6XQCzdcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyQTQ3LzE1OTA3QzIyQjgy MTExRUZBQUU2RjU2N0M0RjlBRTAyL2YzZFpJRUxqeUh2bGJ1MkIyY3l3NlhRQ3pk Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvZjNkWklFTGp5SHZsYnUyQjJjeXc2WFFDemRjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky QTQ3LzE1OTA3QzIyQjgyMTExRUZBQUU2RjU2N0M0RjlBRTAyL2YzZFpJRUxqeUh2 bGJ1MkIyY3l3NlhRQ3pkYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI0PDkntPsDBtvB5rGsnNH16b+emQDT17L0HAFPJvSuux0HSdpu/XuUc uDWqQdbKXfgX12NqV4+yODHinFTpb0zUF8c1wgNv87oMmKRoBa3CCWOTqBnVg8jh hWFY/sBIsgAp79tNvReta3TUpBMwBGKAZCFX3kBiYYpY49dZkSf2sevd1Njl5YU2 HKJO27sdk+xh+XWLaTz8Q0MKS78j6vW3eADjmn9QMG26GR9DXpq9ZPFhPwFAWoXw ZmNPQ5BY7RqdoD4bQ1mJ3kk8z0TP1VsKiGPaWDob+LiN7JURKNtxDOoJAOOLHPeb kkSez/inYtcBPap0uIWDzGAxAJKupGU= -----END CERTIFICATE-----Generated at Sat Apr 26 13:07:29 2025 by rpki-client