$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft File: A_TeA6HJhcNNxoJy-ddzWzP6at4.mft (raw, json) Hash identifier: Q9qi5nE6zHQgXZlGPUkaG3HCdCacqCExId7kxLQ42D4= Subject key identifier: 25:37:D3:2A:C0:7D:D4:6B:78:59:5D:8A:22:81:2B:78:4F:B2:1A:4B Authority key identifier: 03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE Certificate issuer: /CN=A911C7CD/serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft Manifest number: 7E Signing time: Thu 17 Apr 2025 05:29:31 +0000 Manifest this update: Thu 17 Apr 2025 05:29:31 +0000 Manifest next update: Thu 24 Apr 2025 05:29:31 +0000 Files and hashes: 1: A_TeA6HJhcNNxoJy-ddzWzP6at4.crl (hash: EGA0pI0/CKgsenF0sZfXxrAqq+qM38B7OXVkQZDQMXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 05:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C7CD, serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE Validity Not Before: Apr 17 05:29:31 2025 GMT Not After : Apr 24 05:29:31 2025 GMT Subject: CN=680091bb-3d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4e:ed:94:ed:ea:07:f6:39:f3:79:31:43:2a: dc:6d:88:6e:68:06:4e:63:64:67:a8:ff:d9:f7:b3: f4:85:2c:80:59:5e:33:3c:30:91:1b:99:30:7f:ee: 85:81:b7:22:c0:8e:c8:cf:97:80:1f:49:b2:7b:6b: 82:64:f5:f2:bf:b6:31:6d:22:18:1d:00:e8:aa:e1: fb:5f:37:8f:05:50:eb:50:f0:ba:38:ed:09:30:72: 78:47:a9:aa:1a:1c:d7:31:01:80:b8:6c:f5:e3:b0: fc:b9:45:dd:76:1a:04:71:36:17:06:7b:3d:d2:66: 9c:09:5d:e5:ba:5f:4a:78:aa:f1:4d:8f:82:3f:b8: 2e:c0:9f:9f:6f:37:ef:40:61:ec:7f:78:1a:40:f2: 3d:63:c5:8b:e2:f3:de:e4:67:8c:43:83:e8:12:40: da:a4:18:d6:a4:86:11:a1:8d:c8:96:2d:d1:b8:ae: 33:23:9a:1b:93:99:d0:ac:a4:b5:3d:37:9d:5f:ee: f9:3b:a7:fa:16:f2:9a:f6:ce:37:fb:ce:e5:2f:c6: 20:da:cf:cc:73:0a:69:1b:00:2f:21:15:de:0c:5e: 55:6e:e8:c2:c8:f0:4c:21:f8:a5:0b:a0:b5:e1:ee: f0:3f:2c:f6:aa:f0:22:8d:eb:36:53:33:21:e9:26: 9d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:37:D3:2A:C0:7D:D4:6B:78:59:5D:8A:22:81:2B:78:4F:B2:1A:4B X509v3 Authority Key Identifier: keyid:03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:0a:09:f4:53:f4:00:e2:61:cb:ee:28:ab:29:e6:76:46:31: 34:3c:65:f8:14:6a:44:69:31:b7:d9:c0:fd:af:6f:c9:0d:50: b7:c3:37:79:7d:86:44:e3:bf:a9:5a:de:0d:be:6f:37:32:1c: 28:cc:8b:67:30:bb:76:3c:2f:ff:5b:a6:44:f4:ef:b9:1f:0a: 20:98:f4:32:28:44:f3:89:77:ce:d6:fb:9d:f7:a2:20:34:94: ef:85:6a:c0:2b:98:ab:0f:0d:e0:0c:79:00:81:1f:ea:39:f5: 41:1b:c8:17:09:81:69:dd:a8:2e:80:59:80:72:27:81:bc:da: d4:dd:17:34:02:c8:67:72:c7:9a:87:c2:33:e6:3c:9c:4f:7f: 71:26:46:3a:34:5a:df:ee:39:52:e6:de:74:0b:c6:2c:8e:2d: 71:c0:fd:39:49:c8:dd:e7:e1:ca:53:b9:19:b8:90:b1:2d:bc: 43:12:b8:f3:ca:0e:f9:70:bd:0d:07:49:3c:d6:0d:4e:a9:11: 6f:20:7f:18:a3:0a:0b:35:57:90:ff:3a:16:90:ec:d9:b9:89: 01:36:d5:c2:11:4f:d3:89:f0:f7:a9:0d:9e:46:df:65:db:cb: 18:6d:9d:7a:e8:3d:a4:af:95:4b:2c:c9:12:15:1c:90:23:91: c5:2f:15:0a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QzdDRDExMC8GA1UEBRMoMDNGNERFMDNBMUM5ODVDMzREQzY4MjcyRjlENzczNUIz M0ZBNkFERTAeFw0yNTA0MTcwNTI5MzFaFw0yNTA0MjQwNTI5MzFaMBgxFjAUBgNV BAMTDTY4MDA5MWJiLTNkN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVTu2U7eoH9jnzeTFDKtxtiG5oBk5jZGeo/9n3s/SFLIBZXjM8MJEbmTB/7oWB tyLAjsjPl4AfSbJ7a4Jk9fK/tjFtIhgdAOiq4ftfN48FUOtQ8Lo47QkwcnhHqaoa HNcxAYC4bPXjsPy5Rd12GgRxNhcGez3SZpwJXeW6X0p4qvFNj4I/uC7An59vN+9A Yex/eBpA8j1jxYvi897kZ4xDg+gSQNqkGNakhhGhjciWLdG4rjMjmhuTmdCspLU9 N51f7vk7p/oW8pr2zjf7zuUvxiDaz8xzCmkbAC8hFd4MXlVu6MLI8Ewh+KULoLXh 7vA/LPaq8CKN6zZTMyHpJp3tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJTfTKsB9 1Gt4WV2KIoEreE+yGkswHwYDVR0jBBgwFoAUA/TeA6HJhcNNxoJy+ddzWzP6at4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDN0NEL0RGMEI2ODZBNUVB MjExRUZCMTY3NzI0M0M0RjlBRTAyL0FfVGVBNkhKaGNOTnhvSnktZGR6V3pQNmF0 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQV9UZUE2SEpoY05OeG9KeS1kZHpXelA2YXQ0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD N0NEL0RGMEI2ODZBNUVBMjExRUZCMTY3NzI0M0M0RjlBRTAyL0FfVGVBNkhKaGNO TnhvSnktZGR6V3pQNmF0NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAIKCfRT9ADiYcvuKKsp5nZGMTQ8ZfgUakRpMbfZwP2vb8kNULfDN3l9 hkTjv6la3g2+bzcyHCjMi2cwu3Y8L/9bpkT077kfCiCY9DIoRPOJd87W+533oiA0 lO+FasArmKsPDeAMeQCBH+o59UEbyBcJgWndqC6AWYByJ4G82tTdFzQCyGdyx5qH wjPmPJxPf3EmRjo0Wt/uOVLm3nQLxiyOLXHA/TlJyN3n4cpTuRm4kLEtvEMSuPPK DvlwvQ0HSTzWDU6pEW8gfxijCgs1V5D/OhaQ7Nm5iQE21cIRT9OJ8PepDZ5G32Xb yxhtnXroPaSvlUssyRIVHJAjkcUvFQo= -----END CERTIFICATE-----Generated at Fri Apr 18 20:36:34 2025 by rpki-client