$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft File: CNP7qN3CGMuzA5wDdh5qtwduT6I.mft (raw, json) Hash identifier: vr9f8x4WBEwVE4F9lJmZAfu8Uqkrh4vK9oRXjO2/tDQ= Subject key identifier: 90:05:89:ED:59:54:6B:82:CF:B7:AB:F8:8B:28:37:27:05:33:A8:A5 Authority key identifier: 08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2 Certificate issuer: /CN=A914C10B/serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2 Certificate serial: 05D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft Manifest number: 05D3 Signing time: Fri 28 Mar 2025 23:17:48 +0000 Manifest this update: Fri 28 Mar 2025 23:17:47 +0000 Manifest next update: Fri 04 Apr 2025 23:17:47 +0000 Files and hashes: 1: CNP7qN3CGMuzA5wDdh5qtwduT6I.crl (hash: lOW9uq6yHUxNOqCElhPJMtzhTCt4hU7qUwC4D0YzWNA=) 2: CA16E952AF6411EB95CDDD18C4F9AE02.roa (hash: 2zuRRC9X9QGiy5zsxYozQv/RNV6iHA3e11RJdVWl2NQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1497 (0x5d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C10B Validity Not Before: Mar 28 23:17:47 2025 GMT Not After : Apr 4 23:17:47 2025 GMT Subject: CN=67e72e1c-be1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:47:19:54:9f:b5:55:5d:83:5e:d7:7d:77:cf: cf:cf:4a:8f:07:2e:63:b8:82:81:de:24:20:fd:59: 9c:aa:5a:7f:45:c8:d5:50:8d:b8:9e:65:48:f0:e4: d5:d5:41:1d:37:99:e9:4f:b0:1b:ec:95:ec:68:13: 3a:d4:43:97:ef:e4:ec:1b:42:cd:89:dd:0d:ce:d3: 80:2c:0c:b9:91:da:cb:4e:45:04:34:3e:23:e3:58: 43:0f:b0:87:60:49:f4:c4:ea:23:21:fa:e1:51:cc: 50:3f:bd:3f:55:5c:3f:ad:4d:06:ff:c2:77:9e:8c: b3:2e:dd:0d:28:e1:09:ec:90:1f:5e:4a:4d:1b:94: dd:5a:2b:ff:c9:37:6e:ad:92:18:9a:03:c2:08:b7: 56:5a:22:7d:5d:51:5f:bc:15:5c:37:ab:18:c0:75: 45:ca:76:de:b4:d9:7d:3c:c0:43:81:0b:30:34:92: f3:4f:5e:48:ab:9b:aa:de:78:1a:58:e4:ed:bf:1b: c0:2b:1a:31:de:bc:07:cc:b1:26:b8:2b:8a:9a:0a: 08:ae:7d:12:37:65:da:e8:8f:4e:ef:b2:60:bc:a0: 01:24:2a:91:3e:47:d8:6c:16:69:06:6f:99:af:e8: ef:fa:cc:81:f1:6a:c0:54:bc:0c:8c:91:0c:48:b6: 05:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:05:89:ED:59:54:6B:82:CF:B7:AB:F8:8B:28:37:27:05:33:A8:A5 X509v3 Authority Key Identifier: keyid:08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:23:ba:e1:c9:48:c4:b1:d3:11:04:c5:e4:a9:3e:fa:83:51: 8e:7c:70:32:54:f3:f0:fb:e8:36:50:20:c7:94:1b:13:ce:89: 19:8c:f9:9a:46:9a:e7:cd:1b:13:df:c3:0a:b3:a8:4e:27:7b: 6b:f4:1a:b7:69:91:c9:0c:88:5e:a8:61:b5:83:15:e4:af:2e: 8d:e2:08:66:d5:98:ee:f8:db:c6:7b:7e:46:f5:fc:9c:1e:de: b3:66:94:6c:6d:d5:7a:77:1a:96:e6:f2:63:5a:69:c0:5b:aa: 26:fc:e2:46:ab:16:9c:10:0d:f5:2e:77:4e:1d:d7:99:d3:aa: 49:d8:74:bc:d4:14:3c:15:55:64:2b:e0:60:98:ef:fd:0d:ea: 7e:51:cf:f9:b3:41:01:a0:5a:31:5a:4d:5f:5d:94:9b:05:e6: ff:69:f9:1f:73:78:a4:f2:01:d0:b0:55:63:07:d0:68:02:ea: 77:ed:74:4e:d2:9f:b5:4f:fd:23:4b:85:0d:04:4d:15:3b:f9: 68:ca:7f:aa:d9:5f:91:3d:21:ba:b7:15:f8:9a:7b:e7:0d:ad: bc:1a:31:89:ff:41:98:d9:d4:df:94:f2:1b:9e:09:39:cf:18: 71:ab:be:63:7d:3b:e6:fd:78:da:19:a0:4e:63:99:0c:ef:18: 06:36:21:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMxMEIxMTAvBgNVBAUTKDA4RDNGQkE4RERDMjE4Q0JCMzAzOUMwMzc2MUU2QUI3 MDc2RTRGQTIwHhcNMjUwMzI4MjMxNzQ3WhcNMjUwNDA0MjMxNzQ3WjAYMRYwFAYD VQQDEw02N2U3MmUxYy1iZTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmUcZVJ+1VV2DXtd9d8/Pz0qPBy5juIKB3iQg/Vmcqlp/RcjVUI24nmVI8OTV 1UEdN5npT7Ab7JXsaBM61EOX7+TsG0LNid0NztOALAy5kdrLTkUEND4j41hDD7CH YEn0xOojIfrhUcxQP70/VVw/rU0G/8J3noyzLt0NKOEJ7JAfXkpNG5TdWiv/yTdu rZIYmgPCCLdWWiJ9XVFfvBVcN6sYwHVFynbetNl9PMBDgQswNJLzT15Iq5uq3nga WOTtvxvAKxox3rwHzLEmuCuKmgoIrn0SN2Xa6I9O77JgvKABJCqRPkfYbBZpBm+Z r+jv+syB8WrAVLwMjJEMSLYF+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJAFie1Z VGuCz7er+IsoNycFM6ilMB8GA1UdIwQYMBaAFAjT+6jdwhjLswOcA3YearcHbk+i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzEwQi83QjZDQTEyMkFG NjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9DTlA3cU4zQ0dNdXpBNXdEZGg1cXR3ZHVU NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOUDdxTjNDR011ekE1d0RkaDVxdHdkdVQ2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzEwQi83QjZDQTEyMkFGNjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9DTlA3cU4zQ0dN dXpBNXdEZGg1cXR3ZHVUNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqI7rhyUjEsdMRBMXkqT76g1GOfHAyVPPw++g2UCDHlBsTzokZjPma RprnzRsT38MKs6hOJ3tr9Bq3aZHJDIheqGG1gxXkry6N4ghm1Zju+NvGe35G9fyc Ht6zZpRsbdV6dxqW5vJjWmnAW6om/OJGqxacEA31LndOHdeZ06pJ2HS81BQ8FVVk K+BgmO/9Dep+Uc/5s0EBoFoxWk1fXZSbBeb/afkfc3ik8gHQsFVjB9BoAup37XRO 0p+1T/0jS4UNBE0VO/loyn+q2V+RPSG6txX4mnvnDa28GjGJ/0GY2dTflPIbngk5 zxhxq75jfTvm/XjaGaBOY5kM7xgGNiFK -----END CERTIFICATE-----Generated at Fri Apr 4 22:04:32 2025 by rpki-client