$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft File: 7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft (raw, json) Hash identifier: KZcCob64dk/169m74VQbsZim3cUcBArgNRgvv7xK6XA= Subject key identifier: F1:55:BA:AA:01:DD:6A:B0:FB:98:21:16:41:97:51:6A:9C:F1:ED:D6 Authority key identifier: EC:84:D6:0F:79:6B:F4:16:F8:F8:1D:18:BA:DA:2F:FF:87:C1:5F:26 Certificate issuer: /CN=A917ACF1/serialNumber=EC84D60F796BF416F8F81D18BADA2FFF87C15F26 Certificate serial: 0383 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft Manifest number: 037C Signing time: Sat 19 Apr 2025 00:52:17 +0000 Manifest this update: Sat 19 Apr 2025 00:52:16 +0000 Manifest next update: Sat 26 Apr 2025 00:52:16 +0000 Files and hashes: 1: 7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl (hash: xj7mgLhcfYszKskytXrH6E+NCdkSpDEUwcEgd7BDE9I=) 2: 5895821AB62611ECB410C81DC4F9AE02.roa (hash: hC/jX3h+m4kRJTL+3r4qE/OapWO5r8a4N2e8hzVBff0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 00:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 899 (0x383) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ACF1, serialNumber=EC84D60F796BF416F8F81D18BADA2FFF87C15F26 Validity Not Before: Apr 19 00:52:16 2025 GMT Not After : Apr 26 00:52:16 2025 GMT Subject: CN=6802f3c1-79b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a4:7d:d1:84:9a:85:44:ae:2c:3a:e6:7d:59: b6:38:f2:8c:fe:5e:8d:66:50:21:79:7f:d1:47:8c: e0:34:3b:a7:29:77:4d:da:d6:6a:a6:ca:46:b4:95: 91:af:ac:a5:2b:c5:f7:bc:34:71:3a:b3:c6:38:05: 0f:d2:9f:2b:ee:32:5d:07:9f:5b:ae:c6:1e:1b:cd: fb:a6:b2:8d:5d:44:ff:4f:77:cd:f7:ea:50:3a:9e: 8a:ba:89:3b:39:7d:94:d3:ea:a1:17:31:12:3e:d6: ae:7e:cb:79:5d:4d:cd:a4:84:eb:c3:57:fd:e3:72: b9:05:1b:b9:a7:5e:a5:60:34:2c:49:bf:f3:34:2d: e3:90:ff:c0:f5:e8:7b:08:b5:ab:62:ac:d9:4a:f8: 7c:0f:a7:d4:f9:ba:86:a6:af:51:6a:e5:d0:32:ca: fc:16:12:2b:0d:08:91:23:de:64:d8:dc:e6:3b:1e: e6:99:85:06:4f:1a:86:d7:84:65:02:ed:77:5f:c7: 09:e6:9a:11:ce:71:91:01:9b:99:57:8b:d3:64:42: 7c:50:d3:64:27:d2:78:39:3a:eb:76:4a:85:60:83: 6d:1f:3d:f9:9a:8d:17:19:1f:4a:12:d2:8e:b1:f4: aa:38:eb:85:dc:53:a6:0e:e1:5b:ff:53:d0:39:d6: 59:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:55:BA:AA:01:DD:6A:B0:FB:98:21:16:41:97:51:6A:9C:F1:ED:D6 X509v3 Authority Key Identifier: keyid:EC:84:D6:0F:79:6B:F4:16:F8:F8:1D:18:BA:DA:2F:FF:87:C1:5F:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:5b:84:51:6d:f8:4f:f1:1a:b2:3e:de:e9:88:47:e0:63:cc: 67:f4:1a:89:21:62:54:a3:c9:1d:10:17:ae:11:e8:5b:31:4b: c8:6e:f3:11:63:c5:f3:cf:ee:3f:b0:8d:55:81:04:2c:1e:97: 2b:6c:e3:8b:97:74:e3:87:ba:99:1d:25:da:6f:b7:2b:1d:4e: 3a:a1:c2:59:e6:4c:f3:9e:a1:07:51:95:d7:2d:b3:01:2e:75: 9d:2d:27:f9:ba:f6:a4:cd:b1:4d:ce:36:86:b7:1f:7c:9b:b1: c8:59:64:e8:26:c3:b2:9e:36:6a:7b:62:df:e7:7e:55:da:28: b2:cc:10:a5:0b:20:a5:62:9d:66:3c:02:d6:67:ac:04:75:50: ae:9f:16:b7:0a:a4:38:02:01:99:25:bd:c4:f2:44:62:43:a5: 63:2d:9d:e4:5e:0d:cc:15:4d:dd:50:3d:81:06:27:80:5a:56: c3:e2:4e:24:15:85:ae:94:d1:4e:d4:45:da:3d:cc:13:15:7a: a2:3a:90:a1:df:5f:94:da:8d:5a:9d:95:39:6a:f9:d5:3e:08: 96:22:05:c8:9b:87:0e:14:74:4a:5e:9a:a2:07:d6:2c:54:b8: c6:2d:83:cd:30:e6:64:bd:e2:cc:27:cb:6d:47:96:62:34:07: b8:9c:1c:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDRjExMTAvBgNVBAUTKEVDODRENjBGNzk2QkY0MTZGOEY4MUQxOEJBREEyRkZG ODdDMTVGMjYwHhcNMjUwNDE5MDA1MjE2WhcNMjUwNDI2MDA1MjE2WjAYMRYwFAYD VQQDEw02ODAyZjNjMS03OWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4KR90YSahUSuLDrmfVm2OPKM/l6NZlAheX/RR4zgNDunKXdN2tZqpspGtJWR r6ylK8X3vDRxOrPGOAUP0p8r7jJdB59brsYeG837prKNXUT/T3fN9+pQOp6Kuok7 OX2U0+qhFzESPtaufst5XU3NpITrw1f943K5BRu5p16lYDQsSb/zNC3jkP/A9eh7 CLWrYqzZSvh8D6fU+bqGpq9RauXQMsr8FhIrDQiRI95k2NzmOx7mmYUGTxqG14Rl Au13X8cJ5poRznGRAZuZV4vTZEJ8UNNkJ9J4OTrrdkqFYINtHz35mo0XGR9KEtKO sfSqOOuF3FOmDuFb/1PQOdZZ7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFVuqoB 3Wqw+5ghFkGXUWqc8e3WMB8GA1UdIwQYMBaAFOyE1g95a/QW+PgdGLraL/+HwV8m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUNGMS84NjgzNTUwNkEw MzkxMUVDOEExRjFDMjNDNEY5QUUwMi83SVRXRDNscjlCYjQtQjBZdXRvdl80ZkJY eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdJVFdEM2xyOUJiNC1CMFl1dG92XzRmQlh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUNGMS84NjgzNTUwNkEwMzkxMUVDOEExRjFDMjNDNEY5QUUwMi83SVRXRDNscjlC YjQtQjBZdXRvdl80ZkJYeVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGW4RRbfhP8RqyPt7piEfgY8xn9BqJIWJUo8kdEBeuEehbMUvIbvMR Y8Xzz+4/sI1VgQQsHpcrbOOLl3Tjh7qZHSXab7crHU46ocJZ5kzznqEHUZXXLbMB LnWdLSf5uvakzbFNzjaGtx98m7HIWWToJsOynjZqe2Lf535V2iiyzBClCyClYp1m PALWZ6wEdVCunxa3CqQ4AgGZJb3E8kRiQ6VjLZ3kXg3MFU3dUD2BBieAWlbD4k4k FYWulNFO1EXaPcwTFXqiOpCh31+U2o1anZU5avnVPgiWIgXIm4cOFHRKXpqiB9Ys VLjGLYPNMOZkveLMJ8ttR5ZiNAe4nBwP -----END CERTIFICATE-----Generated at Sat Apr 19 10:09:52 2025 by rpki-client