$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft File: 7TaUIY3LHq89GvXGq8Axptt-bOU.mft (raw, json) Hash identifier: bb9XF+RSTOy1aH15xbqYdyv3JRjzZf+DpyPaU424FHY= Subject key identifier: E3:1C:CD:97:95:78:3B:2B:90:25:6F:17:67:A6:EF:25:5E:9B:F8:A1 Authority key identifier: ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5 Certificate issuer: /CN=A919EAF3/serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5 Certificate serial: 197D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft Manifest number: 1971 Signing time: Thu 24 Apr 2025 16:24:37 +0000 Manifest this update: Thu 24 Apr 2025 16:24:36 +0000 Manifest next update: Thu 01 May 2025 16:24:36 +0000 Files and hashes: 1: 7TaUIY3LHq89GvXGq8Axptt-bOU.crl (hash: xd77CyWdT9YYZWDTNoci13zJ7sJoZ6E5+n3UQxtvqmQ=) 2: 2958A208394011EF8BFF2329C4F9AE02.roa (hash: Rgcy8bLfZuMZaK0O0JgH1tVB2CHU0nZokr3ybevC1XM=) 3: 545743246D1911E7A4448D81C4F9AE02.roa (hash: 1AEdA1dYtxSEeV6/iG9fPyT5XqCCH+yVS2KSQ0ngLNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6525 (0x197d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAF3, serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5 Validity Not Before: Apr 24 16:24:36 2025 GMT Not After : May 1 16:24:36 2025 GMT Subject: CN=680a65c4-b3ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8c:1e:34:bc:15:c8:d8:a1:5a:4b:a6:cc:54: 06:dc:e2:fd:4b:10:fd:19:9c:ea:4b:90:d4:d1:ef: 48:0e:0f:bf:f3:3a:89:16:87:56:61:bc:83:1c:10: c7:a7:c5:7f:81:e7:d9:48:98:35:c5:ad:89:a9:ab: 71:3e:f3:b5:4c:88:ca:41:ef:d3:8c:be:4d:37:28: 6e:ec:e1:b3:b8:e4:cc:e6:16:e4:75:f7:48:33:d9: 90:fa:8a:55:63:d7:8e:82:8d:d8:c9:41:e9:79:02: 0f:29:4b:2c:40:31:79:f2:95:e4:c6:23:4d:25:ee: bc:af:45:d0:82:77:62:e6:32:98:8c:71:b0:f2:50: cb:40:d7:31:08:a3:72:0b:ff:3f:7e:6c:04:a0:6b: 4c:37:93:dc:6c:bc:c7:00:2b:ac:8d:57:a1:22:6e: b4:ff:2a:7d:46:24:6f:84:98:20:4e:e4:b6:e5:80: 14:f4:44:6d:4f:41:fe:00:ce:b1:b5:27:be:c7:a1: fe:9a:78:49:84:64:ba:4f:eb:26:e9:e9:9c:2b:7d: 0f:6e:79:52:e5:c7:6d:2e:d9:22:01:71:68:91:9a: be:b8:c9:31:be:b4:1f:6e:3b:2e:6b:15:47:aa:80: 0b:5b:9b:55:72:42:c4:e6:c8:42:ab:bf:eb:af:3b: aa:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1C:CD:97:95:78:3B:2B:90:25:6F:17:67:A6:EF:25:5E:9B:F8:A1 X509v3 Authority Key Identifier: keyid:ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:7c:8b:bd:aa:9b:24:60:a7:ba:72:d6:37:c6:a2:d2:6a:a1: a3:c6:d1:a2:c2:e2:90:68:58:bc:8f:67:22:0c:15:6f:d0:46: e4:87:2a:36:cc:1b:f0:93:52:4c:fe:ba:14:85:e7:a4:c4:4e: e6:39:02:3d:17:3c:53:5d:db:eb:19:4f:1a:66:8c:a8:88:6d: e1:a6:b2:4a:3a:68:4d:34:85:73:89:8d:0f:0d:7e:d7:7b:ba: 63:65:3a:fc:20:83:a9:78:96:8c:26:81:97:6d:49:7a:5a:44: c7:d7:c7:8b:e4:84:0e:cb:64:f7:1c:45:fc:02:de:4f:2f:68: 96:d5:f3:39:e0:dc:4d:88:79:d3:3e:a5:3b:35:a5:46:55:1c: 77:ec:99:b9:40:20:62:13:1c:35:c9:4a:f3:e8:6e:23:95:66: 0a:78:91:2c:dc:46:16:bf:77:25:c4:f3:4e:2c:79:ed:5e:43: 87:dc:7f:c0:af:31:62:c6:eb:a2:82:a3:be:61:98:e2:b9:5e: 3a:79:0f:9a:47:dc:ac:70:01:0f:e8:3f:bd:d1:18:79:aa:bd: 20:38:55:2c:e5:2f:7b:10:fc:e8:45:92:f0:89:c1:24:76:7a: b1:3f:2b:54:c5:e5:2c:7c:49:70:6e:1b:84:c4:cd:40:ba:49: 2f:07:c6:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBRjMxMTAvBgNVBAUTKEVEMzY5NDIxOERDQjFFQUYzRDFBRjVDNkFCQzAzMUE2 REI3RTZDRTUwHhcNMjUwNDI0MTYyNDM2WhcNMjUwNTAxMTYyNDM2WjAYMRYwFAYD VQQDEw02ODBhNjVjNC1iM2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24weNLwVyNihWkumzFQG3OL9SxD9GZzqS5DU0e9IDg+/8zqJFodWYbyDHBDH p8V/gefZSJg1xa2JqatxPvO1TIjKQe/TjL5NNyhu7OGzuOTM5hbkdfdIM9mQ+opV Y9eOgo3YyUHpeQIPKUssQDF58pXkxiNNJe68r0XQgndi5jKYjHGw8lDLQNcxCKNy C/8/fmwEoGtMN5PcbLzHACusjVehIm60/yp9RiRvhJggTuS25YAU9ERtT0H+AM6x tSe+x6H+mnhJhGS6T+sm6emcK30PbnlS5cdtLtkiAXFokZq+uMkxvrQfbjsuaxVH qoALW5tVckLE5shCq7/rrzuqKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMczZeV eDsrkCVvF2em7yVem/ihMB8GA1UdIwQYMBaAFO02lCGNyx6vPRr1xqvAMabbfmzl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFGMy85RDIwMERCQzZE MTgxMUU3QTgxNURBODBDNEY5QUUwMi83VGFVSVkzTEhxODlHdlhHcThBeHB0dC1i T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdUYVVJWTNMSHE4OUd2WEdxOEF4cHR0LWJPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUFGMy85RDIwMERCQzZEMTgxMUU3QTgxNURBODBDNEY5QUUwMi83VGFVSVkzTEhx ODlHdlhHcThBeHB0dC1iT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5fIu9qpskYKe6ctY3xqLSaqGjxtGiwuKQaFi8j2ciDBVv0Ebkhyo2 zBvwk1JM/roUheekxE7mOQI9FzxTXdvrGU8aZoyoiG3hprJKOmhNNIVziY0PDX7X e7pjZTr8IIOpeJaMJoGXbUl6WkTH18eL5IQOy2T3HEX8At5PL2iW1fM54NxNiHnT PqU7NaVGVRx37Jm5QCBiExw1yUrz6G4jlWYKeJEs3EYWv3clxPNOLHntXkOH3H/A rzFixuuigqO+YZjiuV46eQ+aR9yscAEP6D+90Rh5qr0gOFUs5S97EPzoRZLwicEk dnqxPytUxeUsfElwbhuExM1AukkvB8aY -----END CERTIFICATE-----Generated at Sat Apr 26 03:56:36 2025 by rpki-client