$ rpki-client -vvf rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft File: 72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft (raw, json) Hash identifier: GsFgc8fl6y2evA1ev2VX2yJj/Idj5VkZ/V8kPHy78nE= Subject key identifier: 87:B2:63:4E:67:A7:5A:78:2E:21:12:D9:C1:CB:E7:9D:5F:CB:D1:A5 Authority key identifier: EF:6C:19:4B:B2:89:4D:33:E6:DE:06:42:23:2D:94:CE:4E:9E:F1:94 Certificate issuer: /CN=A919FEA1/serialNumber=EF6C194BB2894D33E6DE0642232D94CE4E9EF194 Certificate serial: 0E42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft Manifest number: 0E3A Signing time: Thu 24 Apr 2025 17:43:53 +0000 Manifest this update: Thu 24 Apr 2025 17:43:52 +0000 Manifest next update: Thu 01 May 2025 17:43:52 +0000 Files and hashes: 1: 72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl (hash: /IvttERq1FEXt5bLqje5yz+FhjGSOGjoRWzjMa5po2U=) 2: 0DFAD3529E1611E98059B049C4F9AE02.roa (hash: xrn7kqtWfpKDJ8ptvmKz6itXOdAPKg554aAbP2n2DQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:43:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3650 (0xe42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FEA1, serialNumber=EF6C194BB2894D33E6DE0642232D94CE4E9EF194 Validity Not Before: Apr 24 17:43:52 2025 GMT Not After : May 1 17:43:52 2025 GMT Subject: CN=680a7858-77f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:92:2c:f3:2b:2f:d7:ba:6d:3c:be:73:50:de: c9:4b:37:77:a4:12:07:cf:48:6c:93:e4:54:5e:b4: 22:38:88:c4:3e:11:45:11:13:14:4e:58:39:80:09: 7d:18:ca:09:63:07:97:c1:65:e3:66:44:5a:d1:fd: f8:22:4b:17:1e:79:ce:8f:2e:cb:73:c4:a2:a5:1e: 23:b5:d2:68:e0:9d:64:e9:c0:cc:bf:65:d5:cd:cf: 43:e6:34:89:2a:7b:de:c8:6e:fa:29:25:dd:23:93: d0:69:4f:53:53:34:31:c8:6a:ce:80:fe:06:1b:6f: 0b:d4:de:69:77:04:31:ad:c1:5e:4d:3d:71:d0:66: 6c:f6:83:6c:8a:8a:29:eb:cb:64:23:63:da:4f:c6: 09:a4:cd:b4:59:cc:32:ef:85:dc:96:17:92:9d:d4: f9:a5:69:f4:1a:c1:33:a2:22:46:74:21:ad:05:f0: 75:21:9b:59:cc:b6:08:2d:6f:9a:d6:d2:73:38:6d: 92:29:c9:c2:b0:f1:bf:0f:78:82:3e:4c:06:c4:62: 75:f5:05:fc:18:12:fd:34:fc:05:3b:f1:b4:72:4d: 88:58:32:63:97:73:f9:ea:08:70:0e:fd:65:d5:bf: 06:ed:17:9a:e2:00:2d:08:6f:97:e2:0b:fa:00:56: 2a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B2:63:4E:67:A7:5A:78:2E:21:12:D9:C1:CB:E7:9D:5F:CB:D1:A5 X509v3 Authority Key Identifier: keyid:EF:6C:19:4B:B2:89:4D:33:E6:DE:06:42:23:2D:94:CE:4E:9E:F1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:1f:40:6c:4d:36:02:64:f8:97:e1:41:59:65:07:94:53:1f: 34:e7:8d:00:de:de:df:a8:e6:d3:ac:f4:7c:aa:7c:c1:44:26: ec:b7:6d:27:54:b7:ac:35:3a:5d:e3:fe:3c:75:5e:04:a7:df: da:b7:1d:34:9d:2e:e9:39:c9:11:5b:b6:12:c0:71:de:6c:04: 0b:d3:40:ab:7b:86:f8:e3:16:e1:06:56:5c:4a:12:ce:93:37: af:e0:ce:f9:10:27:f2:11:fe:4c:a5:8e:c8:67:0a:65:8f:83: 07:a0:da:75:1b:6b:4e:2d:85:e9:55:5c:3c:8b:13:b2:f6:bb: 39:ee:d7:47:82:4e:30:36:e3:b7:6f:36:62:1b:78:14:d4:85: 24:35:35:82:ee:df:38:1c:5f:fe:07:80:38:77:50:9a:63:15: 78:e5:c2:42:e9:48:44:72:76:4b:94:c1:14:cc:44:c4:5a:79: c0:50:52:63:1d:23:0b:80:79:4a:33:04:44:a8:3e:22:89:9d: c3:d4:e2:ff:94:f1:c5:1b:40:08:22:80:4c:03:be:57:5b:05: eb:02:8a:04:be:56:b9:e7:1f:cf:86:17:60:91:7a:cd:b1:eb: 4d:f4:16:70:35:6a:60:73:65:55:b9:d9:1b:4a:f3:d3:3b:bb: df:0d:e7:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZFQTExMTAvBgNVBAUTKEVGNkMxOTRCQjI4OTREMzNFNkRFMDY0MjIzMkQ5NENF NEU5RUYxOTQwHhcNMjUwNDI0MTc0MzUyWhcNMjUwNTAxMTc0MzUyWjAYMRYwFAYD VQQDEw02ODBhNzg1OC03N2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5Is8ysv17ptPL5zUN7JSzd3pBIHz0hsk+RUXrQiOIjEPhFFERMUTlg5gAl9 GMoJYweXwWXjZkRa0f34IksXHnnOjy7Lc8SipR4jtdJo4J1k6cDMv2XVzc9D5jSJ KnveyG76KSXdI5PQaU9TUzQxyGrOgP4GG28L1N5pdwQxrcFeTT1x0GZs9oNsioop 68tkI2PaT8YJpM20Wcwy74XclheSndT5pWn0GsEzoiJGdCGtBfB1IZtZzLYILW+a 1tJzOG2SKcnCsPG/D3iCPkwGxGJ19QX8GBL9NPwFO/G0ck2IWDJjl3P56ghwDv1l 1b8G7Rea4gAtCG+X4gv6AFYq8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIeyY05n p1p4LiES2cHL551fy9GlMB8GA1UdIwQYMBaAFO9sGUuyiU0z5t4GQiMtlM5OnvGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkVBMS9CRkNCODVFQzlF MTQxMUU5QTJGNkY5NDZDNEY5QUUwMi83MndaUzdLSlRUUG0zZ1pDSXkyVXprNmU4 WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyd1pTN0tKVFRQbTNnWkNJeTJVems2ZThaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkVBMS9CRkNCODVFQzlFMTQxMUU5QTJGNkY5NDZDNEY5QUUwMi83MndaUzdLSlRU UG0zZ1pDSXkyVXprNmU4WlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2H0BsTTYCZPiX4UFZZQeUUx80540A3t7fqObTrPR8qnzBRCbst20n VLesNTpd4/48dV4Ep9/atx00nS7pOckRW7YSwHHebAQL00Cre4b44xbhBlZcShLO kzev4M75ECfyEf5MpY7IZwplj4MHoNp1G2tOLYXpVVw8ixOy9rs57tdHgk4wNuO3 bzZiG3gU1IUkNTWC7t84HF/+B4A4d1CaYxV45cJC6UhEcnZLlMEUzETEWnnAUFJj HSMLgHlKMwREqD4iiZ3D1OL/lPHFG0AIIoBMA75XWwXrAooEvla55x/PhhdgkXrN setN9BZwNWpgc2VVudkbSvPTO7vfDef9 -----END CERTIFICATE-----Generated at Sat Apr 26 12:59:38 2025 by rpki-client