$ rpki-client -vvf rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.mft File: 62LfxzSiW8FU02epjPJ-0W9B6tA.mft (raw, json) Hash identifier: N6bx8eR2LWdAhKgzYMYh18K9Og11sNfX0TYwD5TbHsA= Subject key identifier: 2F:E9:6C:28:CA:E5:DC:B8:0A:38:F2:FC:6B:F4:14:54:57:C1:B5:02 Authority key identifier: EB:62:DF:C7:34:A2:5B:C1:54:D3:67:A9:8C:F2:7E:D1:6F:41:EA:D0 Certificate issuer: /CN=A919D209/serialNumber=EB62DFC734A25BC154D367A98CF27ED16F41EAD0 Certificate serial: 072A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62LfxzSiW8FU02epjPJ-0W9B6tA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.mft Manifest number: 071B Signing time: Thu 24 Apr 2025 21:40:36 +0000 Manifest this update: Thu 24 Apr 2025 21:40:35 +0000 Manifest next update: Thu 01 May 2025 21:40:35 +0000 Files and hashes: 1: 62LfxzSiW8FU02epjPJ-0W9B6tA.crl (hash: ZQDyEa9cl17jZCPMVJxGQrUD9Yu20W25QOOZlxzYMdA=) 2: 1C64580A4F6111ED9365FC4AC4F9AE02.roa (hash: AMa7aYE2pQQRL34zPWU4u6hxNFQLAiVfzm0sTa2yekY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.crl rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62LfxzSiW8FU02epjPJ-0W9B6tA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:40:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1834 (0x72a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D209, serialNumber=EB62DFC734A25BC154D367A98CF27ED16F41EAD0 Validity Not Before: Apr 24 21:40:35 2025 GMT Not After : May 1 21:40:35 2025 GMT Subject: CN=680aafd4-c822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:58:1f:25:df:a6:d6:1c:61:13:2c:07:32:6c: e1:cb:32:87:f6:77:da:69:ef:70:8f:59:45:8a:43: ea:a0:0d:55:55:cc:03:60:d5:6d:04:0a:81:02:4d: ba:69:f6:26:5c:f1:7e:60:05:68:03:10:7c:f0:20: 3c:69:cf:6d:23:c1:0b:54:94:a0:f1:22:10:84:47: 8b:1c:20:80:4d:ef:52:2c:80:a4:b7:f0:fd:9f:76: 71:1c:55:b5:69:85:51:cc:b4:3b:73:09:24:6b:bf: 49:ca:cd:43:d5:e7:a0:75:d1:de:c7:2b:c2:a3:9b: 8a:fc:ff:4e:ae:f6:70:37:30:09:ab:77:cd:a3:22: a3:21:f3:43:3a:cc:92:2b:ab:d6:03:fe:2b:ca:95: f4:9c:c2:8f:54:56:41:a8:da:4d:5b:ef:1d:05:61: 3b:c8:29:2a:db:4b:a4:ee:16:f6:3a:2e:b3:f2:ec: 61:c2:3d:4f:d3:fa:1d:76:a9:1a:c7:69:ca:40:02: 1c:44:e1:a8:df:c5:0e:7c:c0:fc:d6:aa:99:3b:8e: 27:b5:1b:5f:dc:b9:58:82:e2:81:72:cb:41:c3:bc: c0:d6:34:2c:8d:64:cd:0e:65:d3:a4:26:5b:63:c0: 68:fc:59:a6:d1:23:ee:eb:9f:fb:59:09:0a:8e:32: d4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E9:6C:28:CA:E5:DC:B8:0A:38:F2:FC:6B:F4:14:54:57:C1:B5:02 X509v3 Authority Key Identifier: keyid:EB:62:DF:C7:34:A2:5B:C1:54:D3:67:A9:8C:F2:7E:D1:6F:41:EA:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62LfxzSiW8FU02epjPJ-0W9B6tA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:f5:3b:3e:20:6d:a0:f1:2d:fb:ff:a2:4a:57:cc:51:b8:fe: b7:c4:00:d3:41:35:ca:85:16:8d:ab:73:af:2a:15:b0:77:72: 9c:6e:98:ea:a4:82:92:4d:d1:ce:d9:ba:5a:f6:80:84:b9:2c: 44:e6:2f:6b:ff:b4:7b:39:f0:6a:18:46:56:c4:f7:3f:c3:a9: a7:11:10:70:e8:5c:68:3a:d6:9a:42:33:52:52:ec:b0:d1:2a: 74:de:66:39:7e:e4:38:07:46:80:99:8d:30:12:67:1f:e6:1c: 1a:01:0d:6c:24:5f:54:23:97:0f:31:28:7b:f1:cd:4f:6f:8e: a3:bc:5a:81:84:d3:93:5c:71:8d:f6:b6:c4:5e:2e:57:53:42: 6f:1f:b5:78:ca:3a:71:55:ff:7f:d3:40:ba:72:1d:c9:b7:12: dc:16:e1:ab:fa:a1:ed:97:1c:55:4e:d8:a7:d0:af:e8:6d:34: f9:87:ab:e3:0e:e6:14:8d:1b:53:28:3d:0f:ae:ff:0f:4f:8a: 91:de:e5:93:e5:58:84:e8:35:4d:3c:6f:ec:38:bb:2d:97:1c: 0b:d7:a5:a9:40:a8:8c:e2:75:39:aa:53:c7:bf:df:1a:44:b9: 39:cc:53:68:a0:5e:b2:02:3d:11:3d:47:00:26:78:a3:9c:f7: 66:cf:57:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQyMDkxMTAvBgNVBAUTKEVCNjJERkM3MzRBMjVCQzE1NEQzNjdBOThDRjI3RUQx NkY0MUVBRDAwHhcNMjUwNDI0MjE0MDM1WhcNMjUwNTAxMjE0MDM1WjAYMRYwFAYD VQQDEw02ODBhYWZkNC1jODIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFgfJd+m1hxhEywHMmzhyzKH9nfaae9wj1lFikPqoA1VVcwDYNVtBAqBAk26 afYmXPF+YAVoAxB88CA8ac9tI8ELVJSg8SIQhEeLHCCATe9SLICkt/D9n3ZxHFW1 aYVRzLQ7cwkka79Jys1D1eegddHexyvCo5uK/P9OrvZwNzAJq3fNoyKjIfNDOsyS K6vWA/4rypX0nMKPVFZBqNpNW+8dBWE7yCkq20uk7hb2Oi6z8uxhwj1P0/oddqka x2nKQAIcROGo38UOfMD81qqZO44ntRtf3LlYguKBcstBw7zA1jQsjWTNDmXTpCZb Y8Bo/Fmm0SPu65/7WQkKjjLUrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/pbCjK 5dy4Cjjy/Gv0FFRXwbUCMB8GA1UdIwQYMBaAFOti38c0olvBVNNnqYzyftFvQerQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDIwOS9CMzM5N0I0QTM1 M0ExMUVCQjdFQjZCMThDNEY5QUUwMi82MkxmeHpTaVc4RlUwMmVwalBKLTBXOUI2 dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYyTGZ4elNpVzhGVTAyZXBqUEotMFc5QjZ0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDIwOS9CMzM5N0I0QTM1M0ExMUVCQjdFQjZCMThDNEY5QUUwMi82MkxmeHpTaVc4 RlUwMmVwalBKLTBXOUI2dEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDD9Ts+IG2g8S37/6JKV8xRuP63xADTQTXKhRaNq3OvKhWwd3Kcbpjq pIKSTdHO2bpa9oCEuSxE5i9r/7R7OfBqGEZWxPc/w6mnERBw6FxoOtaaQjNSUuyw 0Sp03mY5fuQ4B0aAmY0wEmcf5hwaAQ1sJF9UI5cPMSh78c1Pb46jvFqBhNOTXHGN 9rbEXi5XU0JvH7V4yjpxVf9/00C6ch3JtxLcFuGr+qHtlxxVTtin0K/obTT5h6vj DuYUjRtTKD0Prv8PT4qR3uWT5ViE6DVNPG/sOLstlxwL16WpQKiM4nU5qlPHv98a RLk5zFNooF6yAj0RPUcAJnijnPdmz1en -----END CERTIFICATE-----Generated at Sat Apr 26 15:01:12 2025 by rpki-client