$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft File: 7ALNBrdHN4ssHMWiIebghmHagiU.mft (raw, json) Hash identifier: rhvQwfdsFH/l9E3GxYNNfuWLJIc47hAJdxVNMydpwqs= Subject key identifier: D7:47:44:04:3E:F4:C2:F9:F9:A1:47:B2:2E:33:06:20:0B:F8:50:E9 Authority key identifier: EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25 Certificate issuer: /CN=A912142C/serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft Manifest number: 3E Signing time: Sun 20 Apr 2025 14:28:09 +0000 Manifest this update: Sun 20 Apr 2025 14:28:08 +0000 Manifest next update: Sun 27 Apr 2025 14:28:08 +0000 Files and hashes: 1: 7ALNBrdHN4ssHMWiIebghmHagiU.crl (hash: OVdsjWQWVGZIJ6O0KH/p48wCN1OSwSPrSKKNh22gpP0=) 2: AE5D0E84EEBD11EFBA2D7586C4F9AE02.roa (hash: aHRMsUiiCZcaoYDZ7FKWAlCPT4264RLq5QWpPmMZea0=) 3: 4F5B2B86EEBE11EF846DA10BC4F9AE02.roa (hash: GDTBPp4WE9Ezmla7awNs0CkIUNNSTnoRfm7f06nojtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 14:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912142C, serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225 Validity Not Before: Apr 20 14:28:08 2025 GMT Not After : Apr 27 14:28:08 2025 GMT Subject: CN=68050478-847e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:75:ff:28:19:f0:dd:5a:7f:fb:b7:eb:70:f2: e7:c3:ba:18:7a:60:87:b9:54:7a:94:b4:ed:97:4f: fb:95:58:5c:2e:82:ce:3c:42:21:c3:19:26:b0:85: 7c:21:2c:b1:b6:39:6f:e3:6b:b0:42:e7:73:79:02: 7d:57:1e:c7:b7:e5:5a:ef:32:c9:34:a7:31:9a:4f: 95:08:47:55:c9:95:b1:ed:da:72:cd:d2:77:71:f7: d5:30:cd:a4:c3:bd:55:03:3d:18:7c:78:5b:bb:0c: 58:6c:2d:72:07:97:95:32:6a:f7:ea:63:db:93:0f: 40:3a:71:0c:13:bc:a4:3b:67:1e:aa:2e:e2:25:7a: f5:a3:ac:c8:40:99:05:42:cf:41:fd:f4:e2:ac:03: 9c:34:6e:bc:95:16:d7:31:62:32:f7:0b:4f:c3:6f: e0:1b:31:cc:3f:4a:90:38:e5:5e:59:3c:68:6b:c5: 4a:20:cc:bc:69:a7:06:ba:2b:67:72:e4:12:8f:e1: 63:1f:ba:17:2a:2f:a7:b4:ff:aa:a2:8e:1d:60:8f: df:f5:0d:da:bd:7f:49:47:4a:f3:d8:ce:44:5e:f3: 78:7b:f5:fe:fd:15:5b:a4:b0:57:47:08:e6:a7:4c: ee:41:b2:10:6c:31:02:08:a0:7b:d0:4e:17:76:0c: 07:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:47:44:04:3E:F4:C2:F9:F9:A1:47:B2:2E:33:06:20:0B:F8:50:E9 X509v3 Authority Key Identifier: keyid:EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:14:5e:4c:92:86:16:4b:f8:fe:03:1c:4e:6c:5b:36:a8:43: ea:28:18:44:54:72:6a:85:ec:6e:69:9f:4d:d5:c3:b1:ed:5a: 35:d2:55:f4:da:9c:f8:e1:ca:91:ed:33:97:1b:75:38:34:6d: 49:db:67:86:69:fc:c5:e1:75:61:1a:51:d3:8f:51:e7:29:09: e3:f1:1e:ff:a0:12:fa:9c:87:a2:d6:cf:da:79:ac:52:e5:ee: 64:0a:5c:f0:f3:8f:1a:0b:eb:88:e4:cb:fe:29:6c:27:1c:a7: fb:e9:b3:76:c3:0f:d4:15:e0:2d:0f:41:c2:50:fa:7f:f5:7a: 16:12:df:d5:c6:12:0e:ff:3c:70:9e:84:65:10:a2:ab:3c:08: 07:ad:41:9d:33:b7:5b:e3:fd:5c:4c:e6:b8:44:44:31:62:d9: 31:45:48:de:9e:a7:1e:f4:e2:d7:bc:a5:3f:65:cd:86:98:46: b4:00:5f:35:05:d8:8f:b3:11:1a:7a:de:81:5a:d3:f1:05:1b: 5f:f4:b4:13:4d:39:2a:ad:dd:e3:4e:c2:75:10:e0:50:e9:fb: ff:74:9f:49:55:59:36:d7:a5:9f:24:3f:e4:35:da:55:8e:54: 5c:ba:17:d4:d4:22:39:e9:ed:ff:45:00:ef:a3:0b:91:ce:9f: 64:34:65:91 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MTQyQzExMC8GA1UEBRMoRUMwMkNEMDZCNzQ3Mzc4QjJDMUNDNUEyMjFFNkUwODY2 MURBODIyNTAeFw0yNTA0MjAxNDI4MDhaFw0yNTA0MjcxNDI4MDhaMBgxFjAUBgNV BAMTDTY4MDUwNDc4LTg0N2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMdf8oGfDdWn/7t+tw8ufDuhh6YIe5VHqUtO2XT/uVWFwugs48QiHDGSawhXwh LLG2OW/ja7BC53N5An1XHse35VrvMsk0pzGaT5UIR1XJlbHt2nLN0ndx99UwzaTD vVUDPRh8eFu7DFhsLXIHl5UyavfqY9uTD0A6cQwTvKQ7Zx6qLuIlevWjrMhAmQVC z0H99OKsA5w0bryVFtcxYjL3C0/Db+AbMcw/SpA45V5ZPGhrxUogzLxppwa6K2dy 5BKP4WMfuhcqL6e0/6qijh1gj9/1Ddq9f0lHSvPYzkRe83h79f79FVuksFdHCOan TO5BshBsMQIIoHvQThd2DAfjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU10dEBD70 wvn5oUeyLjMGIAv4UOkwHwYDVR0jBBgwFoAU7ALNBrdHN4ssHMWiIebghmHagiUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIxNDJDLzJDMkY2RTUwQ0VF OTExRUZCREZEM0E2N0M0RjlBRTAyLzdBTE5CcmRITjRzc0hNV2lJZWJnaG1IYWdp VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvN0FMTkJyZEhONHNzSE1XaUllYmdobUhhZ2lVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIx NDJDLzJDMkY2RTUwQ0VFOTExRUZCREZEM0E2N0M0RjlBRTAyLzdBTE5CcmRITjRz c0hNV2lJZWJnaG1IYWdpVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALgUXkyShhZL+P4DHE5sWzaoQ+ooGERUcmqF7G5pn03Vw7HtWjXSVfTa nPjhypHtM5cbdTg0bUnbZ4Zp/MXhdWEaUdOPUecpCePxHv+gEvqch6LWz9p5rFLl 7mQKXPDzjxoL64jky/4pbCccp/vps3bDD9QV4C0PQcJQ+n/1ehYS39XGEg7/PHCe hGUQoqs8CAetQZ0zt1vj/VxM5rhERDFi2TFFSN6epx704te8pT9lzYaYRrQAXzUF 2I+zERp63oFa0/EFG1/0tBNNOSqt3eNOwnUQ4FDp+/90n0lVWTbXpZ8kP+Q12lWO VFy6F9TUIjnp7f9FAO+jC5HOn2Q0ZZE= -----END CERTIFICATE-----Generated at Mon Apr 21 17:18:24 2025 by rpki-client