$ rpki-client -vvf rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft File: -r7TJg0sVSvpFdAj4YnWEopkX0s.mft (raw, json) Hash identifier: XO3r+BGtrkyRloiTFs8l2emmZxibvYuUhLjsVB3zPYE= Subject key identifier: E4:9E:A4:39:A5:BD:F3:5F:6F:9D:57:C2:AA:5D:4E:44:E6:83:3E:E0 Authority key identifier: FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B Certificate issuer: /CN=A919FF79/serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B Certificate serial: 1279 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft Manifest number: 126F Signing time: Thu 24 Apr 2025 17:07:17 +0000 Manifest this update: Thu 24 Apr 2025 17:07:16 +0000 Manifest next update: Thu 01 May 2025 17:07:16 +0000 Files and hashes: 1: -r7TJg0sVSvpFdAj4YnWEopkX0s.crl (hash: NFvdqJRuC8iQCUfTIusGOF2rllEjhYOVouyyHbLA0+Y=) 2: A87EED5A7AF111EB86DC9F6CC4F9AE02.roa (hash: n5O4+xpqurpdXo1l2y1SKOgBDTyWDYNQaGaHjqKBMU8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4729 (0x1279) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FF79, serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B Validity Not Before: Apr 24 17:07:16 2025 GMT Not After : May 1 17:07:16 2025 GMT Subject: CN=680a6fc5-d891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:78:9c:b6:b9:37:6a:52:88:37:25:59:d4:6c: 93:6b:5a:0f:c7:ce:d4:4a:03:1c:fb:80:4b:5b:38: 75:1f:19:07:4a:66:45:f7:ff:cf:70:1b:b0:3b:bc: 0f:8d:ed:f2:4f:ab:96:4c:50:7c:26:1f:2e:9b:5d: 5e:17:d7:07:e2:51:6c:26:de:2b:12:1c:af:de:59: 53:28:db:12:f1:79:6b:10:b4:ad:9b:4b:67:a5:2e: ab:93:90:9d:2e:6c:14:42:5e:0e:d3:66:e1:d3:66: 89:af:e0:6f:67:f7:e8:23:d0:15:6d:20:33:fe:8e: 4c:0d:d4:23:fd:e4:34:2a:9a:2f:c8:44:c8:dc:c8: f2:bd:15:74:07:94:e6:67:90:4d:ae:ed:4c:42:6b: dd:17:39:68:8a:d3:02:11:01:6c:c9:06:56:c8:cd: 01:d5:73:9f:f4:a6:83:27:38:d5:d4:8f:14:54:8b: c9:36:06:cb:dc:09:17:05:71:b1:71:da:15:4d:a4: 4c:e2:35:6c:58:3f:99:c5:69:98:b8:e8:03:3e:8a: f6:de:da:72:d0:12:f3:2e:d2:93:41:17:b1:97:2f: 1b:d2:2c:56:71:21:2c:8d:b0:67:a6:42:4a:40:7a: 81:2e:a1:06:65:48:af:33:10:b6:29:62:a5:2e:3c: 69:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:9E:A4:39:A5:BD:F3:5F:6F:9D:57:C2:AA:5D:4E:44:E6:83:3E:E0 X509v3 Authority Key Identifier: keyid:FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:29:14:59:f4:62:e7:17:60:df:50:f8:9e:56:72:ad:7b:0e: 75:8c:7c:05:07:51:c1:84:4d:19:d1:11:df:cd:12:20:6c:4b: 7f:a1:13:b5:52:09:fa:e2:c5:c7:c5:bc:1c:d5:cb:b8:a0:86: 69:3e:b9:e5:23:a4:7c:03:bb:d4:69:c5:67:28:35:45:ea:97: 7b:df:f1:b3:5f:53:6e:11:03:7f:c7:95:67:da:b4:06:4f:63: 8a:b9:c4:5b:75:03:50:5f:15:4f:84:d9:f2:30:5b:db:5d:4c: 6b:e3:ff:35:56:7b:36:3f:57:f3:cf:2f:73:1c:34:f9:24:5b: a1:13:d6:9e:ec:a2:3c:9d:36:56:72:2c:64:00:2d:f8:2b:6e: a6:9d:87:2b:cc:6b:80:93:af:c7:34:27:63:e4:74:84:eb:2c: 71:d6:4c:b8:5a:d7:e5:0e:08:ad:d4:bc:a9:62:5a:57:ce:d7: 8c:6f:02:30:46:88:dd:55:16:ea:06:60:41:ed:a2:56:e3:95: 85:80:55:83:2c:af:6c:df:4d:75:14:b3:8f:ec:64:71:63:e0: 0b:8e:aa:32:51:f2:df:44:30:09:72:b5:35:98:81:c0:06:77: a3:cf:f8:dd:a0:90:64:85:d4:46:4e:06:c1:5a:85:5f:d3:a1: 59:95:59:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZGNzkxMTAvBgNVBAUTKEZBQkVEMzI2MEQyQzU1MkJFOTE1RDAyM0UxODlENjEy OEE2NDVGNEIwHhcNMjUwNDI0MTcwNzE2WhcNMjUwNTAxMTcwNzE2WjAYMRYwFAYD VQQDEw02ODBhNmZjNS1kODkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHictrk3alKINyVZ1GyTa1oPx87USgMc+4BLWzh1HxkHSmZF9//PcBuwO7wP je3yT6uWTFB8Jh8um11eF9cH4lFsJt4rEhyv3llTKNsS8XlrELStm0tnpS6rk5Cd LmwUQl4O02bh02aJr+BvZ/foI9AVbSAz/o5MDdQj/eQ0KpovyETI3MjyvRV0B5Tm Z5BNru1MQmvdFzloitMCEQFsyQZWyM0B1XOf9KaDJzjV1I8UVIvJNgbL3AkXBXGx cdoVTaRM4jVsWD+ZxWmYuOgDPor23tpy0BLzLtKTQRexly8b0ixWcSEsjbBnpkJK QHqBLqEGZUivMxC2KWKlLjxpTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSepDml vfNfb51XwqpdTkTmgz7gMB8GA1UdIwQYMBaAFPq+0yYNLFUr6RXQI+GJ1hKKZF9L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkY3OS9BM0MwOEEyRUNB OTcxMUU4QUFFODA3NUZDNEY5QUUwMi8tcjdUSmcwc1ZTdnBGZEFqNFluV0VvcGtY MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1yN1RKZzBzVlN2cEZkQWo0WW5XRW9wa1gwcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkY3OS9BM0MwOEEyRUNBOTcxMUU4QUFFODA3NUZDNEY5QUUwMi8tcjdUSmcwc1ZT dnBGZEFqNFluV0VvcGtYMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcKRRZ9GLnF2DfUPieVnKtew51jHwFB1HBhE0Z0RHfzRIgbEt/oRO1 Ugn64sXHxbwc1cu4oIZpPrnlI6R8A7vUacVnKDVF6pd73/GzX1NuEQN/x5Vn2rQG T2OKucRbdQNQXxVPhNnyMFvbXUxr4/81Vns2P1fzzy9zHDT5JFuhE9ae7KI8nTZW cixkAC34K26mnYcrzGuAk6/HNCdj5HSE6yxx1ky4WtflDgit1LypYlpXzteMbwIw RojdVRbqBmBB7aJW45WFgFWDLK9s3011FLOP7GRxY+ALjqoyUfLfRDAJcrU1mIHA Bnejz/jdoJBkhdRGTgbBWoVf06FZlVm+ -----END CERTIFICATE-----Generated at Sat Apr 26 14:53:45 2025 by rpki-client