$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft File: 67t1Ysakn7ft5XQSvB_61I4a-0k.mft (raw, json) Hash identifier: Er1JCsHmwORBjquodPlrnqxkiQh4WH2Zn9z8SU9moUU= Subject key identifier: A2:AA:66:9D:56:B7:6F:79:B4:DB:E8:53:2B:01:F8:4C:34:4E:1D:EF Authority key identifier: EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49 Certificate issuer: /CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49 Certificate serial: 0431 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft Manifest number: 042A Signing time: Wed 09 Apr 2025 00:04:48 +0000 Manifest this update: Wed 09 Apr 2025 00:04:48 +0000 Manifest next update: Wed 16 Apr 2025 00:04:48 +0000 Files and hashes: 1: 67t1Ysakn7ft5XQSvB_61I4a-0k.crl (hash: /PNtdWf5k4tSFYIznW/FaxyT2gsv/h6RaO/vhD9fCoQ=) 2: 9F9CEB425CB911ECAEF7AE14C4F9AE02.roa (hash: 6uFvpip5xKUGRghNdeTpeBy3R93KivQ5uvgIzsfjzEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 00:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1073 (0x431) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FE87 Validity Not Before: Apr 9 00:04:48 2025 GMT Not After : Apr 16 00:04:48 2025 GMT Subject: CN=67f5b9a0-c5b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:db:e2:9f:99:05:56:44:11:60:a5:b8:54:b2: 9d:14:ec:ae:6b:ac:97:9a:de:04:68:75:d4:41:e5: ae:44:c9:05:18:55:67:17:4a:c6:79:c2:46:2a:01: 1c:00:a8:73:84:80:fc:4f:c6:6d:c0:34:ac:80:df: 1d:d0:d3:76:27:44:9f:40:78:45:36:a4:db:35:ec: 77:77:4d:ba:88:d3:f5:69:f1:50:73:3d:a7:c9:18: b9:70:3f:48:6e:1e:40:5b:c3:2c:cc:29:09:70:31: ad:c7:a3:e3:04:60:fd:d8:42:a5:35:f6:69:5c:5c: 86:26:d1:c8:aa:57:4d:39:b3:5d:17:6c:f9:48:48: 8e:e9:68:8a:31:62:35:7d:eb:b2:7c:6d:ad:9d:20: 4b:bb:e7:98:54:d6:3b:60:b3:9a:d3:ff:e7:18:b5: 66:b6:0c:22:4a:13:82:dd:a0:c1:30:59:ef:4a:73: a5:a4:01:6a:9d:0c:48:ca:bf:bf:e4:d2:d9:8f:ae: b7:61:f4:28:d8:1f:de:6e:48:c0:e9:9e:d3:8c:52: 5f:8f:ec:6b:6e:5e:86:79:3e:ba:df:5c:98:2a:f9: 90:3c:90:ea:96:3f:5d:aa:3e:b7:e7:15:ee:56:6f: 18:bc:1e:48:f5:52:3c:01:f5:82:d3:36:eb:0b:61: 99:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AA:66:9D:56:B7:6F:79:B4:DB:E8:53:2B:01:F8:4C:34:4E:1D:EF X509v3 Authority Key Identifier: keyid:EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ca:9d:d2:81:f8:c9:66:20:dd:0b:30:36:ab:36:34:53:06: c1:d3:b0:04:73:8e:62:bb:1d:28:5f:82:93:52:ca:06:f2:66: 19:86:ae:1d:f2:97:56:47:f5:23:2e:91:02:25:55:1f:8b:48: 5f:8e:cc:65:b6:15:10:bf:f7:98:2a:b2:91:12:52:16:24:bd: 97:31:92:92:55:c3:60:6c:02:67:2c:75:62:51:fc:2a:a4:ed: 4e:44:d7:27:34:65:98:c5:00:78:4d:29:99:87:ac:9b:08:cf: 14:f6:56:b8:d6:07:ce:03:13:dc:cc:e1:3c:27:0a:98:81:46: d9:40:6e:d1:bb:33:26:15:d2:00:a0:5e:50:77:ac:e3:87:b6: 3c:a2:6b:4e:a0:07:f3:8e:ef:bf:55:c4:7e:e9:dd:7a:7b:55: 67:ce:91:38:d7:2f:f7:85:48:6f:f7:fc:19:d3:16:c8:b4:e4: a6:86:3b:1f:ed:aa:aa:00:16:8b:a6:92:52:a2:c4:8f:fc:3d: 66:e1:3b:d7:c4:95:41:7c:91:4a:cf:ea:82:d5:d5:0e:38:13: a5:90:8b:64:42:6d:c8:62:17:dc:3f:a9:09:10:47:87:f0:2b: d8:be:9d:45:a8:a0:1c:51:c2:a8:a2:7b:cb:d6:21:5a:69:8c: 32:4b:e7:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZFODcxMTAvBgNVBAUTKEVCQkI3NTYyQzZBNDlGQjdFREU1NzQxMkJDMUZGQUQ0 OEUxQUZCNDkwHhcNMjUwNDA5MDAwNDQ4WhcNMjUwNDE2MDAwNDQ4WjAYMRYwFAYD VQQDEw02N2Y1YjlhMC1jNWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9vin5kFVkQRYKW4VLKdFOyua6yXmt4EaHXUQeWuRMkFGFVnF0rGecJGKgEc AKhzhID8T8ZtwDSsgN8d0NN2J0SfQHhFNqTbNex3d026iNP1afFQcz2nyRi5cD9I bh5AW8MszCkJcDGtx6PjBGD92EKlNfZpXFyGJtHIqldNObNdF2z5SEiO6WiKMWI1 feuyfG2tnSBLu+eYVNY7YLOa0//nGLVmtgwiShOC3aDBMFnvSnOlpAFqnQxIyr+/ 5NLZj663YfQo2B/ebkjA6Z7TjFJfj+xrbl6GeT6631yYKvmQPJDqlj9dqj635xXu Vm8YvB5I9VI8AfWC0zbrC2GZLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKqZp1W t295tNvoUysB+Ew0Th3vMB8GA1UdIwQYMBaAFOu7dWLGpJ+37eV0Erwf+tSOGvtJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkU4Ny80RTE0MDFFNjVD QjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243ZnQ1WFFTdkJfNjFJNGEt MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3dDFZc2FrbjdmdDVYUVN2Ql82MUk0YS0way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkU4Ny80RTE0MDFFNjVDQjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243 ZnQ1WFFTdkJfNjFJNGEtMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/yp3SgfjJZiDdCzA2qzY0UwbB07AEc45iux0oX4KTUsoG8mYZhq4d 8pdWR/UjLpECJVUfi0hfjsxlthUQv/eYKrKRElIWJL2XMZKSVcNgbAJnLHViUfwq pO1ORNcnNGWYxQB4TSmZh6ybCM8U9la41gfOAxPczOE8JwqYgUbZQG7RuzMmFdIA oF5Qd6zjh7Y8omtOoAfzju+/VcR+6d16e1VnzpE41y/3hUhv9/wZ0xbItOSmhjsf 7aqqABaLppJSosSP/D1m4TvXxJVBfJFKz+qC1dUOOBOlkItkQm3IYhfcP6kJEEeH 8CvYvp1FqKAcUcKoonvL1iFaaYwyS+dC -----END CERTIFICATE-----Generated at Thu Apr 10 20:44:19 2025 by rpki-client