$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft File: 7CxkBsqh85689Fh1MVANVrlTYsA.mft (raw, json) Hash identifier: NFu4qp0Dh4wK9tzOClTAyRvs71G6T4DheEheV7Wt0g8= Subject key identifier: F3:83:96:1F:79:6A:A4:45:C8:2C:A8:4C:47:89:A8:29:10:5E:C5:51 Authority key identifier: EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0 Certificate issuer: /CN=A9174880/serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0 Certificate serial: 34B5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft Manifest number: 348F Signing time: Tue 22 Apr 2025 14:16:53 +0000 Manifest this update: Tue 22 Apr 2025 14:16:53 +0000 Manifest next update: Tue 29 Apr 2025 14:16:53 +0000 Files and hashes: 1: 7CxkBsqh85689Fh1MVANVrlTYsA.crl (hash: NcXazt1RHXs4pqtoLlwKw7e83h0KqVAjvdiO0W5/k2M=) 2: 3768DFB41C6011EEAF58FB61C4F9AE02.roa (hash: Un+gRmwEe7RmL1YJ6V7sBXAGRc3bNfxPT16yGupUBnU=) 3: 316EEFD4AAE511E68EBE4D52C4F9AE02.roa (hash: JRg1LZXcFPzNHPCZgdhpiNiCJWsLCkY/WCIHJGUF1Yc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 14:16:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13493 (0x34b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880, serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0 Validity Not Before: Apr 22 14:16:53 2025 GMT Not After : Apr 29 14:16:53 2025 GMT Subject: CN=6807a4d5-9b79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:bf:2c:d7:71:ae:e9:01:b6:c7:d7:22:71:40: 5c:3f:b7:9f:c3:ab:93:2d:53:90:2a:64:3d:27:62: 05:6c:a4:fe:bf:0f:1e:ca:fa:d3:91:9c:e4:ee:f1: f4:aa:85:c1:6e:27:0a:98:20:dc:95:0d:f1:fb:d2: 30:64:cb:5c:b5:96:72:8e:e8:2c:bb:7d:38:ed:dc: 37:be:20:1c:54:8a:f9:b9:53:40:08:66:70:65:fb: 33:d7:a9:3f:31:76:a0:5d:99:5d:8b:bf:8c:86:4b: 3e:5b:95:5c:34:34:15:e5:43:c6:af:89:72:17:8c: 2e:26:b4:32:06:01:2d:71:1c:71:ec:4b:31:ca:b5: 9a:bf:5c:23:9a:ef:35:d1:d4:50:d6:2d:94:db:a7: fe:0d:6a:14:e9:43:a6:67:53:fa:1a:21:9c:90:45: 93:88:84:29:26:2b:64:e4:c5:57:13:d9:38:7b:26: 5c:1b:e7:94:dd:cb:76:f7:94:39:a8:01:ee:71:1b: e7:6f:d7:65:cf:5b:ab:63:0a:6a:39:8f:95:27:31: b9:8a:30:eb:66:94:b6:3d:72:09:0c:b5:13:3a:b9: a7:1c:89:ee:8b:c6:7f:63:11:16:54:1d:41:b1:ec: 97:f5:c9:7a:58:b1:16:25:d8:fb:a3:6f:da:27:f2: 2b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:83:96:1F:79:6A:A4:45:C8:2C:A8:4C:47:89:A8:29:10:5E:C5:51 X509v3 Authority Key Identifier: keyid:EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:7a:fa:41:5a:5b:0b:cd:de:9f:0a:83:42:b1:0d:33:f4:53: f4:57:c4:d4:e8:eb:13:68:95:90:4d:de:a2:84:82:20:27:eb: 92:0a:14:7f:8e:18:e3:c9:11:5a:5a:ba:b7:ac:28:4a:b9:83: 51:ab:a7:16:a2:cf:e5:bb:23:38:97:dc:08:c3:3a:be:38:7d: f9:57:df:60:40:61:19:47:da:1d:09:5c:5d:05:48:7c:f0:f2: 3d:85:c4:68:44:95:75:4b:4b:f1:e9:cc:ce:2d:f1:82:4c:78: 1f:76:b2:53:1d:dd:34:98:10:ff:1b:4f:10:a9:89:69:f4:53: 9c:ab:52:1a:a2:97:c9:2f:ac:d5:ae:c3:62:19:a0:73:ea:1e: ff:01:d6:3f:bb:02:c3:de:86:7c:e2:45:96:79:ad:f5:d8:cd: 1b:40:ba:98:b1:a4:77:d4:08:b1:67:9d:ed:e3:16:32:00:a3: 57:91:13:51:fb:7b:f5:65:ca:ff:4a:a1:a6:1e:c1:a0:6b:2a: 59:a9:8b:29:14:63:2c:9c:0c:12:b3:81:52:9b:c1:82:82:2e: 12:54:44:d0:d3:a3:e5:a6:96:10:83:d6:67:05:cc:31:0b:c4: b6:42:5c:36:f3:c7:0e:33:e9:40:56:97:83:fc:d0:cc:90:bd: 46:4f:cb:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKEVDMkM2NDA2Q0FBMUYzOUVCQ0Y0NTg3NTMxNTAwRDU2 Qjk1MzYyQzAwHhcNMjUwNDIyMTQxNjUzWhcNMjUwNDI5MTQxNjUzWjAYMRYwFAYD VQQDEw02ODA3YTRkNS05Yjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8r8s13Gu6QG2x9cicUBcP7efw6uTLVOQKmQ9J2IFbKT+vw8eyvrTkZzk7vH0 qoXBbicKmCDclQ3x+9IwZMtctZZyjugsu3047dw3viAcVIr5uVNACGZwZfsz16k/ MXagXZldi7+Mhks+W5VcNDQV5UPGr4lyF4wuJrQyBgEtcRxx7EsxyrWav1wjmu81 0dRQ1i2U26f+DWoU6UOmZ1P6GiGckEWTiIQpJitk5MVXE9k4eyZcG+eU3ct295Q5 qAHucRvnb9dlz1urYwpqOY+VJzG5ijDrZpS2PXIJDLUTOrmnHInui8Z/YxEWVB1B seyX9cl6WLEWJdj7o2/aJ/Ir6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPODlh95 aqRFyCyoTEeJqCkQXsVRMB8GA1UdIwQYMBaAFOwsZAbKofOevPRYdTFQDVa5U2LA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC80RTg2NDUwQzFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1Njg5RmgxTVZBTlZybFRZ c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdDeGtCc3FoODU2ODlGaDFNVkFOVnJsVFlzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC80RTg2NDUwQzFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1 Njg5RmgxTVZBTlZybFRZc0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLevpBWlsLzd6fCoNCsQ0z9FP0V8TU6OsTaJWQTd6ihIIgJ+uSChR/ jhjjyRFaWrq3rChKuYNRq6cWos/luyM4l9wIwzq+OH35V99gQGEZR9odCVxdBUh8 8PI9hcRoRJV1S0vx6czOLfGCTHgfdrJTHd00mBD/G08QqYlp9FOcq1IaopfJL6zV rsNiGaBz6h7/AdY/uwLD3oZ84kWWea312M0bQLqYsaR31AixZ53t4xYyAKNXkRNR +3v1Zcr/SqGmHsGgaypZqYspFGMsnAwSs4FSm8GCgi4SVETQ06PlppYQg9ZnBcwx C8S2Qlw288cOM+lAVpeD/NDMkL1GT8tX -----END CERTIFICATE-----Generated at Tue Apr 22 23:18:27 2025 by rpki-client