$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft File: e9TVxajvXN_HTFmgk2RZTl75-uc.mft (raw, json) Hash identifier: C0loFw9bIQuDl2MFl6wWGwXyzY4kWJWvU7v/sWUqiiM= Subject key identifier: 80:57:0B:2E:66:B9:6C:72:6C:2D:6E:23:60:C7:6F:53:D2:AD:5F:EC Authority key identifier: 7B:D4:D5:C5:A8:EF:5C:DF:C7:4C:59:A0:93:64:59:4E:5E:F9:FA:E7 Certificate issuer: /CN=A919FE07/serialNumber=7BD4D5C5A8EF5CDFC74C59A09364594E5EF9FAE7 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft Manifest number: 0BA2 Signing time: Thu 24 Apr 2025 19:01:03 +0000 Manifest this update: Thu 24 Apr 2025 19:01:02 +0000 Manifest next update: Thu 01 May 2025 19:01:02 +0000 Files and hashes: 1: e9TVxajvXN_HTFmgk2RZTl75-uc.crl (hash: ztJvkjM071NzvzIUqF2L72Rd2CmntP0FqzzzRS2c3iE=) 2: CF834404B27511EFA614D07EC4F9AE02.roa (hash: 25yQyo1UNKg5eSyiIIMMirEfRLria39lDAViqcBQ5E4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.crl rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FE07, serialNumber=7BD4D5C5A8EF5CDFC74C59A09364594E5EF9FAE7 Validity Not Before: Apr 24 19:01:02 2025 GMT Not After : May 1 19:01:02 2025 GMT Subject: CN=680a8a6e-656c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:45:6c:3d:d8:d7:c7:56:b3:7f:e1:b5:b8:67: 4b:53:23:b6:95:b6:7c:3b:8a:33:89:db:43:1c:49: dd:f1:cd:98:1e:2b:5c:2e:d6:7d:3d:5f:1e:3f:8c: 9f:ab:fd:b6:c7:d7:4c:9f:6a:20:0f:62:70:77:d6: 59:71:00:67:39:eb:93:80:33:30:c6:5e:0f:3f:e4: b5:ca:f3:31:39:20:72:75:15:3b:c4:e5:1a:b0:a2: e7:3f:8f:3b:4d:10:f7:6a:1a:04:83:a9:8f:21:68: d3:a8:b2:04:ca:76:99:11:6b:8c:7a:b6:c5:34:4f: 4f:29:8c:a8:32:f0:52:1d:12:11:d4:ce:0e:70:f6: ca:72:62:20:12:68:2b:5a:8e:98:13:e8:7e:83:74: d9:e4:28:8c:7c:4b:09:09:62:1d:5e:94:75:4b:86: 12:73:fe:83:52:c4:cb:a4:b7:26:7f:3a:be:e8:81: ed:8c:96:b8:3e:30:95:c8:78:b9:39:06:c2:18:0c: 33:20:fb:e4:05:d6:0b:15:ff:86:50:42:e6:b1:09: 11:1c:b6:1b:35:ff:30:ff:22:c1:fd:73:f7:ee:3a: c5:22:77:f5:5e:b6:d1:89:b2:dd:2f:41:fc:1c:6f: bc:c7:f6:91:6a:5c:02:3a:66:f1:26:c7:d4:02:ef: 82:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:57:0B:2E:66:B9:6C:72:6C:2D:6E:23:60:C7:6F:53:D2:AD:5F:EC X509v3 Authority Key Identifier: keyid:7B:D4:D5:C5:A8:EF:5C:DF:C7:4C:59:A0:93:64:59:4E:5E:F9:FA:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a7:6d:f6:05:aa:96:68:1f:16:82:6f:4a:ba:b6:83:76:a5: e3:7f:a5:09:e6:14:8f:ce:03:42:ba:e3:ef:7e:32:2c:37:35: 6d:45:cb:db:99:bb:bf:b8:ee:db:c8:bd:14:37:2e:ef:34:66: f3:44:d4:a4:5d:64:ea:fa:f4:d7:ad:7a:1d:7c:9f:c4:47:ed: a6:0c:9f:c5:32:d2:3c:34:7e:21:72:8e:e5:25:55:0b:ca:6e: 21:d4:6d:9a:76:13:ab:33:6f:cd:77:81:0e:0c:93:80:de:68: b0:48:ee:08:32:19:31:e0:52:93:9d:d5:b0:d0:fc:8f:ee:6f: 9c:2d:79:97:28:7d:68:99:06:a8:ae:f2:56:53:9a:a0:f4:a3: d4:be:50:d6:c8:8e:c6:20:1d:c8:1f:21:0c:33:d6:4c:06:70: 79:a4:38:33:b3:fb:69:5e:69:0b:0f:c8:93:52:d6:d4:f5:12: 09:62:68:98:d4:dc:6f:03:df:43:a3:61:1b:99:2b:93:37:1c: 5f:46:93:2e:48:52:77:ee:33:36:d3:76:f1:1d:8d:ee:de:af: 85:78:d5:4c:7b:23:2b:fc:8a:07:8a:a0:4d:1a:fa:37:f7:c5: 67:18:f5:eb:42:a2:75:34:66:4f:d7:d8:05:ea:60:f6:33:0d: 5b:82:7d:27 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RkUwNzExMC8GA1UEBRMoN0JENEQ1QzVBOEVGNUNERkM3NEM1OUEwOTM2NDU5NEU1 RUY5RkFFNzAeFw0yNTA0MjQxOTAxMDJaFw0yNTA1MDExOTAxMDJaMBgxFjAUBgNV BAMTDTY4MGE4YTZlLTY1NmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDRWw92NfHVrN/4bW4Z0tTI7aVtnw7ijOJ20McSd3xzZgeK1wu1n09Xx4/jJ+r /bbH10yfaiAPYnB31llxAGc565OAMzDGXg8/5LXK8zE5IHJ1FTvE5Rqwouc/jztN EPdqGgSDqY8haNOosgTKdpkRa4x6tsU0T08pjKgy8FIdEhHUzg5w9spyYiASaCta jpgT6H6DdNnkKIx8SwkJYh1elHVLhhJz/oNSxMuktyZ/Or7oge2Mlrg+MJXIeLk5 BsIYDDMg++QF1gsV/4ZQQuaxCREcths1/zD/IsH9c/fuOsUid/VettGJst0vQfwc b7zH9pFqXAI6ZvEmx9QC74IpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgFcLLma5 bHJsLW4jYMdvU9KtX+wwHwYDVR0jBBgwFoAUe9TVxajvXN/HTFmgk2RZTl75+ucw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGRTA3L0ExNkE4OERBMzA2 QTExRUE5OThDOEYzMEM0RjlBRTAyL2U5VFZ4YWp2WE5fSFRGbWdrMlJaVGw3NS11 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZTlUVnhhanZYTl9IVEZtZ2syUlpUbDc1LXVjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG RTA3L0ExNkE4OERBMzA2QTExRUE5OThDOEYzMEM0RjlBRTAyL2U5VFZ4YWp2WE5f SFRGbWdrMlJaVGw3NS11Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACynbfYFqpZoHxaCb0q6toN2peN/pQnmFI/OA0K64+9+Miw3NW1Fy9uZ u7+47tvIvRQ3Lu80ZvNE1KRdZOr69Neteh18n8RH7aYMn8Uy0jw0fiFyjuUlVQvK biHUbZp2E6szb813gQ4Mk4DeaLBI7ggyGTHgUpOd1bDQ/I/ub5wteZcofWiZBqiu 8lZTmqD0o9S+UNbIjsYgHcgfIQwz1kwGcHmkODOz+2leaQsPyJNS1tT1EgliaJjU 3G8D30OjYRuZK5M3HF9Gky5IUnfuMzbTdvEdje7er4V41Ux7Iyv8igeKoE0a+jf3 xWcY9etConU0Zk/X2AXqYPYzDVuCfSc= -----END CERTIFICATE-----Generated at Sat Apr 26 05:56:35 2025 by rpki-client