$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft File: f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft (raw, json) Hash identifier: BoGedo6wy0YXh5BsbXRhPIYe/cofHNbtDSgw4TSQOro= Subject key identifier: 78:73:5A:71:F2:DA:1E:D1:11:C4:F9:F3:92:08:F2:A4:40:06:85:52 Authority key identifier: 7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4 Certificate issuer: /CN=A912C738/serialNumber=7FB23916037E9332966376F2E075541224162AF4 Certificate serial: 05AB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft Manifest number: 05A1 Signing time: Fri 18 Apr 2025 23:13:19 +0000 Manifest this update: Fri 18 Apr 2025 23:13:18 +0000 Manifest next update: Fri 25 Apr 2025 23:13:18 +0000 Files and hashes: 1: f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl (hash: nLMnkNnkJYcX3IkJGatR7S6az2EVVKiBdMcDJ0qdA5c=) 2: C3623470CF4611EBBBA79165C4F9AE02.roa (hash: YFp3J2bTm7IKBT6KELum1J+LO46Vc2l/xmTiNrhkS6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 23:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1451 (0x5ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C738, serialNumber=7FB23916037E9332966376F2E075541224162AF4 Validity Not Before: Apr 18 23:13:18 2025 GMT Not After : Apr 25 23:13:18 2025 GMT Subject: CN=6802dc8f-0997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a8:58:12:59:24:15:54:f9:8b:23:e2:7d:59: be:9a:fb:d6:7b:d6:45:4e:17:b6:c0:be:85:8b:c2: 45:ce:8f:af:d5:65:b4:ce:70:01:54:10:72:3c:a9: 45:a6:69:04:39:21:f4:af:a3:da:22:76:89:df:8a: f9:92:23:79:a4:e3:8d:57:24:48:22:9f:eb:a4:99: 58:e7:43:21:41:16:77:d2:11:90:e5:f1:cd:51:8c: 1a:8d:ac:7a:31:71:a7:9a:c5:c0:60:02:74:60:29: 1f:1e:e1:6d:91:29:76:14:0d:32:74:30:a9:98:0e: 87:31:f4:26:c9:0f:0a:cc:d8:8b:d5:67:fb:a8:2b: ff:cc:5e:54:4e:1e:27:11:9c:3f:10:6f:a8:ab:7b: 51:fb:44:b4:cd:24:e8:38:46:dc:cb:98:c7:aa:91: ba:32:9f:b6:2c:d2:3d:5d:4e:63:b1:9b:15:78:45: 17:19:72:e7:20:87:5a:32:a6:b5:1b:c7:8c:fb:56: 63:2c:7b:97:41:e5:3f:ec:93:d7:ac:6e:11:30:24: 60:4a:0a:0d:2c:dc:eb:7f:7a:6c:10:1f:d7:0f:6d: a5:24:80:db:66:a0:d1:6c:6c:23:25:f9:a9:ad:54: b8:8d:50:35:05:2a:cd:72:78:1a:3f:32:19:5b:20: d3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:73:5A:71:F2:DA:1E:D1:11:C4:F9:F3:92:08:F2:A4:40:06:85:52 X509v3 Authority Key Identifier: keyid:7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:15:b0:8e:42:b6:4e:b1:e9:c3:d7:87:74:e2:c2:f7:13:18: 48:80:74:2a:68:81:7c:14:48:85:05:de:a4:b0:6f:dc:c5:73: d0:3c:6f:15:1d:3e:22:70:ad:a0:41:8e:c4:8a:bb:39:12:a5: ee:55:4e:91:7e:17:62:20:af:f7:74:14:6b:a6:74:dc:e4:db: d7:a2:d3:d8:a2:94:8a:f2:9f:99:d5:df:f0:f3:19:f0:bb:ea: ae:89:7d:10:82:f5:82:8d:ab:36:85:98:d4:55:f9:26:03:f4: 4c:a9:2c:39:bf:b9:91:de:6b:83:25:04:54:5e:a9:1b:2b:a8: 42:1e:fb:32:bc:37:3f:da:d7:90:9f:ae:1a:96:49:71:45:5c: f2:51:dd:cf:0f:dd:61:25:fd:1c:f0:aa:d8:2d:f5:40:5b:ac: 15:5c:ae:5a:df:c0:27:dc:67:ea:c7:28:9f:c8:8d:11:51:6d: aa:ba:4a:fa:a7:2f:df:ad:69:18:d8:c5:9a:c4:40:ae:31:7f: b4:d7:8e:88:7f:a9:b1:a3:d0:c8:87:ab:30:88:ca:9d:b0:01: ea:58:fb:ba:8a:1d:0a:17:ff:0a:c1:8c:dc:8a:4e:7e:4a:a9: 72:37:cd:17:6d:8b:7f:18:5f:bb:7d:28:d7:9e:97:3d:44:d5: 6e:14:4b:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3MzgxMTAvBgNVBAUTKDdGQjIzOTE2MDM3RTkzMzI5NjYzNzZGMkUwNzU1NDEy MjQxNjJBRjQwHhcNMjUwNDE4MjMxMzE4WhcNMjUwNDI1MjMxMzE4WjAYMRYwFAYD VQQDEw02ODAyZGM4Zi0wOTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyahYElkkFVT5iyPifVm+mvvWe9ZFThe2wL6Fi8JFzo+v1WW0znABVBByPKlF pmkEOSH0r6PaInaJ34r5kiN5pOONVyRIIp/rpJlY50MhQRZ30hGQ5fHNUYwajax6 MXGnmsXAYAJ0YCkfHuFtkSl2FA0ydDCpmA6HMfQmyQ8KzNiL1Wf7qCv/zF5UTh4n EZw/EG+oq3tR+0S0zSToOEbcy5jHqpG6Mp+2LNI9XU5jsZsVeEUXGXLnIIdaMqa1 G8eM+1ZjLHuXQeU/7JPXrG4RMCRgSgoNLNzrf3psEB/XD22lJIDbZqDRbGwjJfmp rVS4jVA1BSrNcngaPzIZWyDTzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhzWnHy 2h7REcT585II8qRABoVSMB8GA1UdIwQYMBaAFH+yORYDfpMylmN28uB1VBIkFir0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzczOC8zMjBDM0E5QUM5 RDExMUVCOERDNUQyMTBDNEY5QUUwMi9mN0k1RmdOLWt6S1dZM2J5NEhWVUVpUVdL dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2Y3STVGZ04ta3pLV1kzYnk0SFZVRWlRV0t2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzczOC8zMjBDM0E5QUM5RDExMUVCOERDNUQyMTBDNEY5QUUwMi9mN0k1RmdOLWt6 S1dZM2J5NEhWVUVpUVdLdlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiFbCOQrZOsenD14d04sL3ExhIgHQqaIF8FEiFBd6ksG/cxXPQPG8V HT4icK2gQY7Eirs5EqXuVU6RfhdiIK/3dBRrpnTc5NvXotPYopSK8p+Z1d/w8xnw u+quiX0QgvWCjas2hZjUVfkmA/RMqSw5v7mR3muDJQRUXqkbK6hCHvsyvDc/2teQ n64alklxRVzyUd3PD91hJf0c8KrYLfVAW6wVXK5a38An3GfqxyifyI0RUW2qukr6 py/frWkY2MWaxECuMX+0146If6mxo9DIh6swiMqdsAHqWPu6ih0KF/8KwYzcik5+ SqlyN80XbYt/GF+7fSjXnpc9RNVuFEtw -----END CERTIFICATE-----Generated at Sat Apr 19 08:32:15 2025 by rpki-client