$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft File: L7B78TYUrVoZNQr8da-wVMhrr60.mft (raw, json) Hash identifier: +nXwDSkyPCR2OrbDg7lNFqlyQF1eOrBj/JtENZO/RlE= Subject key identifier: FC:E4:A1:49:94:BB:D4:11:95:B4:81:4C:97:0F:A0:91:D0:D6:78:4C Authority key identifier: 2F:B0:7B:F1:36:14:AD:5A:19:35:0A:FC:75:AF:B0:54:C8:6B:AF:AD Certificate issuer: /CN=A919EF6A/serialNumber=2FB07BF13614AD5A19350AFC75AFB054C86BAFAD Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft Manifest number: 01B4 Signing time: Fri 25 Apr 2025 02:19:14 +0000 Manifest this update: Fri 25 Apr 2025 02:19:13 +0000 Manifest next update: Fri 02 May 2025 02:19:13 +0000 Files and hashes: 1: L7B78TYUrVoZNQr8da-wVMhrr60.crl (hash: n8TQiMWtfia0pAxQlpHWAOHDXQvqlaAnbOp1S4dgjcA=) 2: 3A9B909286BE11ED93DB0765C4F9AE02.roa (hash: XahtR2T510aEKb9I/6EITKzZRawtEl9xMR6MDMSwo6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.crl rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:19:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EF6A, serialNumber=2FB07BF13614AD5A19350AFC75AFB054C86BAFAD Validity Not Before: Apr 25 02:19:13 2025 GMT Not After : May 2 02:19:13 2025 GMT Subject: CN=680af122-bc15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3b:a1:8c:cc:ff:ad:06:f2:3c:52:50:ba:94: 7d:fd:0d:bd:b0:07:1d:a0:87:b4:33:7d:a8:1a:67: a2:cb:e1:c3:0e:33:1c:e0:a1:48:f8:29:ff:63:61: 24:9c:7a:ab:65:9b:b7:92:18:25:14:cb:bf:4a:20: 74:dd:dd:13:e7:7a:0b:ee:3b:74:60:ed:39:06:63: 88:56:53:2e:fe:75:8b:29:2a:18:0f:d7:bb:83:f6: b6:dd:0d:24:d6:f6:14:5a:7b:ee:3c:5d:39:64:cc: 11:e0:6c:80:78:42:dc:4d:17:f3:c4:07:08:92:1c: 7c:07:8f:54:e7:c4:12:97:29:d6:18:03:20:61:56: 5f:58:2f:68:d8:9f:6f:46:a4:03:77:d3:37:5e:d8: e6:14:c2:3b:9e:e1:39:4b:17:58:9e:bc:f9:a1:c5: 1d:18:d3:97:a1:e8:75:3d:32:53:e9:08:d8:1f:3a: f5:c6:5f:4f:27:78:d9:48:f0:b9:89:8f:d5:54:e5: b9:91:5f:0f:02:d5:25:38:a0:ba:7a:cb:02:fc:73: cb:14:43:28:2d:c4:91:dd:7e:1d:30:11:c6:5c:3c: a1:06:52:a4:d3:30:ed:f8:df:1c:e4:ae:cd:2c:65: 9f:a5:ce:18:1b:d1:b9:4a:68:e9:25:77:f1:70:f7: ce:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E4:A1:49:94:BB:D4:11:95:B4:81:4C:97:0F:A0:91:D0:D6:78:4C X509v3 Authority Key Identifier: keyid:2F:B0:7B:F1:36:14:AD:5A:19:35:0A:FC:75:AF:B0:54:C8:6B:AF:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:54:d5:86:8b:ee:c6:6c:77:c0:c4:66:2b:a2:4d:63:cb:f7: 97:2c:65:fb:e5:41:af:16:7b:7b:24:ee:7a:33:7d:3d:5b:7f: 43:cb:11:42:39:ca:e0:e8:48:68:50:e9:29:98:d3:fc:d3:73: 4c:90:a8:15:22:bd:de:65:bd:4b:af:e3:4e:3f:1b:9d:53:9c: c0:fa:49:32:a5:9a:b3:f5:59:9b:12:84:b1:2b:0a:c0:9b:03: 41:c4:54:3a:e5:8d:f7:bd:84:48:09:96:2e:96:f5:cb:20:a0: 59:73:2f:b4:9c:29:14:cc:ad:13:0e:b7:ec:76:76:bd:3f:26: 16:69:72:1d:4b:f8:d8:d4:da:ab:e2:fc:3e:ed:8e:39:05:02: e7:26:d9:4a:91:af:1e:8e:e9:c6:f1:23:09:81:4e:c0:57:b2: 92:87:d3:24:5f:0a:e7:51:cc:89:83:4b:bd:2a:fd:c8:f4:5f: 15:0c:9d:32:58:24:30:9a:51:d2:98:e4:f9:68:e3:5a:da:aa: bb:00:ed:d6:ef:a3:aa:42:e4:62:40:d5:30:b5:0d:5e:d3:67: c5:c0:28:44:b9:53:4e:09:42:56:bd:b2:8d:f0:a0:77:2c:05: 12:1b:32:e2:eb:01:a2:16:9e:22:f9:4b:4d:38:b2:1d:c4:e2: 1a:18:0d:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGNkExMTAvBgNVBAUTKDJGQjA3QkYxMzYxNEFENUExOTM1MEFGQzc1QUZCMDU0 Qzg2QkFGQUQwHhcNMjUwNDI1MDIxOTEzWhcNMjUwNTAyMDIxOTEzWjAYMRYwFAYD VQQDEw02ODBhZjEyMi1iYzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4zuhjMz/rQbyPFJQupR9/Q29sAcdoIe0M32oGmeiy+HDDjMc4KFI+Cn/Y2Ek nHqrZZu3khglFMu/SiB03d0T53oL7jt0YO05BmOIVlMu/nWLKSoYD9e7g/a23Q0k 1vYUWnvuPF05ZMwR4GyAeELcTRfzxAcIkhx8B49U58QSlynWGAMgYVZfWC9o2J9v RqQDd9M3XtjmFMI7nuE5SxdYnrz5ocUdGNOXoeh1PTJT6QjYHzr1xl9PJ3jZSPC5 iY/VVOW5kV8PAtUlOKC6essC/HPLFEMoLcSR3X4dMBHGXDyhBlKk0zDt+N8c5K7N LGWfpc4YG9G5SmjpJXfxcPfOUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPzkoUmU u9QRlbSBTJcPoJHQ1nhMMB8GA1UdIwQYMBaAFC+we/E2FK1aGTUK/HWvsFTIa6+t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY2QS82NUFCNDFGMDg2 QkExMUVEOTIyMDRBNTZDNEY5QUUwMi9MN0I3OFRZVXJWb1pOUXI4ZGEtd1ZNaHJy NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w3Qjc4VFlVclZvWk5RcjhkYS13Vk1ocnI2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUY2QS82NUFCNDFGMDg2QkExMUVEOTIyMDRBNTZDNEY5QUUwMi9MN0I3OFRZVXJW b1pOUXI4ZGEtd1ZNaHJyNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/VNWGi+7GbHfAxGYrok1jy/eXLGX75UGvFnt7JO56M309W39DyxFC Ocrg6EhoUOkpmNP803NMkKgVIr3eZb1Lr+NOPxudU5zA+kkypZqz9VmbEoSxKwrA mwNBxFQ65Y33vYRICZYulvXLIKBZcy+0nCkUzK0TDrfsdna9PyYWaXIdS/jY1Nqr 4vw+7Y45BQLnJtlKka8ejunG8SMJgU7AV7KSh9MkXwrnUcyJg0u9Kv3I9F8VDJ0y WCQwmlHSmOT5aONa2qq7AO3W76OqQuRiQNUwtQ1e02fFwChEuVNOCUJWvbKN8KB3 LAUSGzLi6wGiFp4i+UtNOLIdxOIaGA10 -----END CERTIFICATE-----Generated at Sat Apr 26 12:34:39 2025 by rpki-client