$ rpki-client -vvf rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft File: f83sMfr6flJ9p6lwOTIED4RVgVk.mft (raw, json) Hash identifier: TqD896EYqM7LCOJYpMWGORPtnewS90dEgvOOkPDIf6o= Subject key identifier: 74:9C:DD:88:63:16:5F:38:88:08:A6:97:2E:80:A6:71:63:13:85:B1 Authority key identifier: 7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59 Certificate issuer: /CN=A9179BF7/serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159 Certificate serial: 02EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft Manifest number: 02CC Signing time: Thu 03 Apr 2025 01:31:35 +0000 Manifest this update: Thu 03 Apr 2025 01:31:34 +0000 Manifest next update: Thu 10 Apr 2025 01:31:34 +0000 Files and hashes: 1: f83sMfr6flJ9p6lwOTIED4RVgVk.crl (hash: 0ZC3GJXVcLrZRuxgoIrjIkZ1GkwVeiFNwNZLe/gkvTQ=) 2: 81EEF49E801711EF8566D481C4F9AE02.roa (hash: WMqw6puvAMI/KOIEmj7+KVGtQT9V3R2V9xclcYWsYsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 748 (0x2ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179BF7 Validity Not Before: Apr 3 01:31:34 2025 GMT Not After : Apr 10 01:31:34 2025 GMT Subject: CN=67ede4f7-02b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9d:47:ce:a1:92:53:4a:29:84:a4:37:5b:e2: 0c:77:c1:ec:10:32:4c:23:0a:61:bb:6b:c8:52:ad: b7:a7:4c:70:63:3c:05:80:f7:a3:f9:c5:d7:fb:f8: 3a:37:fc:b6:34:25:d2:84:d3:ce:9a:27:42:a7:e5: 85:db:a8:f4:a4:fc:69:30:5d:5a:c2:dd:fb:d5:60: 22:95:2f:f3:c4:2b:26:c2:30:5c:37:a2:f3:d8:00: 1e:ed:7f:61:84:31:17:7e:f0:a0:d6:d4:18:4c:5b: df:46:6d:39:9b:e4:a8:09:b2:36:81:45:9f:0e:a7: d8:44:f1:e1:7b:fc:17:ca:89:64:57:ef:e1:8a:c2: 1b:9d:6e:8e:76:3e:68:88:c3:82:75:96:59:06:e0: 4f:d1:5a:21:4c:92:99:fe:a1:f3:fa:ea:c4:37:d2: 18:7c:c2:d3:b8:8c:01:e6:54:87:f1:13:09:5f:85: 40:ba:9d:df:2b:57:7d:ef:d7:c5:d8:74:f5:7a:09: 47:10:ce:d6:cb:c1:43:5c:f2:eb:69:66:53:cf:68: 5e:c7:e9:b9:6a:fa:6a:16:45:27:da:eb:9e:b8:be: 58:54:ac:a3:8c:70:ef:2c:28:74:c2:33:03:57:f1: 1f:e9:55:0a:a7:f4:c7:cd:ea:7a:a0:ac:ee:2f:56: 18:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9C:DD:88:63:16:5F:38:88:08:A6:97:2E:80:A6:71:63:13:85:B1 X509v3 Authority Key Identifier: keyid:7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:ea:93:36:cb:73:40:c4:75:36:0e:5c:2b:3f:3e:e7:1c:b8: 72:b3:32:1f:a9:ee:d7:e2:17:4c:f2:78:c7:36:be:4d:03:ab: 0f:76:92:2d:4c:18:e6:e1:05:39:9c:a2:3d:31:74:f9:ee:f9: b7:c7:af:35:44:d7:fa:e2:3a:16:ba:3f:a4:14:78:c0:27:9b: 9e:5d:3e:11:06:71:9c:7f:88:06:10:3f:c9:fe:77:b5:1f:f5: fc:2e:0f:1f:96:08:3a:3b:8d:bc:b6:af:58:2d:ae:ec:0c:17: c6:09:a4:8d:e0:7b:85:c2:8e:e5:02:b7:28:70:c1:00:8f:7d: 58:93:72:46:9f:48:74:5a:75:fc:75:06:cd:05:14:87:a2:97: c3:89:c9:71:56:05:0c:18:b0:8c:1d:f6:28:e1:99:89:ad:d4: 01:cf:84:92:65:39:2e:12:01:1b:7c:25:37:e3:92:6e:97:29: 3f:3f:14:36:67:b6:0d:ae:45:7f:05:12:44:ce:a3:00:ba:a5: 36:df:08:ed:95:52:f9:88:55:86:69:f3:ae:80:47:f9:c2:21: a6:f8:82:51:56:f6:58:9c:2d:45:cf:b7:bf:41:0f:1d:3d:a9: bf:58:43:50:d1:36:a3:81:bd:c3:bc:18:1b:df:48:8f:37:58: bd:d9:88:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlCRjcxMTAvBgNVBAUTKDdGQ0RFQzMxRkFGQTdFNTI3REE3QTk3MDM5MzIwNDBG ODQ1NTgxNTkwHhcNMjUwNDAzMDEzMTM0WhcNMjUwNDEwMDEzMTM0WjAYMRYwFAYD VQQDEw02N2VkZTRmNy0wMmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvp1HzqGSU0ophKQ3W+IMd8HsEDJMIwphu2vIUq23p0xwYzwFgPej+cXX+/g6 N/y2NCXShNPOmidCp+WF26j0pPxpMF1awt371WAilS/zxCsmwjBcN6Lz2AAe7X9h hDEXfvCg1tQYTFvfRm05m+SoCbI2gUWfDqfYRPHhe/wXyolkV+/hisIbnW6Odj5o iMOCdZZZBuBP0VohTJKZ/qHz+urEN9IYfMLTuIwB5lSH8RMJX4VAup3fK1d979fF 2HT1eglHEM7Wy8FDXPLraWZTz2hex+m5avpqFkUn2uueuL5YVKyjjHDvLCh0wjMD V/Ef6VUKp/THzep6oKzuL1YYRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSc3Yhj Fl84iAimly6ApnFjE4WxMB8GA1UdIwQYMBaAFH/N7DH6+n5SfaepcDkyBA+EVYFZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUJGNy80QjY2RjEyQ0Yy QzcxMUVDOEI4MTk2ODdDNEY5QUUwMi9mODNzTWZyNmZsSjlwNmx3T1RJRUQ0UlZn VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4M3NNZnI2ZmxKOXA2bHdPVElFRDRSVmdWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUJGNy80QjY2RjEyQ0YyQzcxMUVDOEI4MTk2ODdDNEY5QUUwMi9mODNzTWZyNmZs SjlwNmx3T1RJRUQ0UlZnVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS6pM2y3NAxHU2DlwrPz7nHLhyszIfqe7X4hdM8njHNr5NA6sPdpIt TBjm4QU5nKI9MXT57vm3x681RNf64joWuj+kFHjAJ5ueXT4RBnGcf4gGED/J/ne1 H/X8Lg8flgg6O428tq9YLa7sDBfGCaSN4HuFwo7lArcocMEAj31Yk3JGn0h0WnX8 dQbNBRSHopfDiclxVgUMGLCMHfYo4ZmJrdQBz4SSZTkuEgEbfCU345Julyk/PxQ2 Z7YNrkV/BRJEzqMAuqU23wjtlVL5iFWGafOugEf5wiGm+IJRVvZYnC1Fz7e/QQ8d Pam/WENQ0Tajgb3DvBgb30iPN1i92Ygc -----END CERTIFICATE-----Generated at Fri Apr 4 22:32:14 2025 by rpki-client