$ rpki-client -vvf rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft File: B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft (raw, json) Hash identifier: 64M3viA/y34I2bUWrc4aax1qF7cJeh2NjB3/N4I0v4k= Subject key identifier: C3:D3:00:DD:59:61:29:CC:73:EC:9E:82:92:97:BD:B6:19:84:65:73 Authority key identifier: 07:8B:4A:80:D1:DF:E6:C0:52:53:3A:AD:B1:95:34:AC:59:A3:95:4B Certificate issuer: /CN=A917C5E0/serialNumber=078B4A80D1DFE6C052533AADB19534AC59A3954B Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft Manifest number: 7B Signing time: Thu 03 Apr 2025 05:55:38 +0000 Manifest this update: Thu 03 Apr 2025 05:55:37 +0000 Manifest next update: Thu 10 Apr 2025 05:55:37 +0000 Files and hashes: 1: B4tKgNHf5sBSUzqtsZU0rFmjlUs.crl (hash: B7X6iercFvPkboKDoM/ry+EeT0ENAUD5deZTJTcUKSM=) 2: 335E880A5A1811EFB08E4F38C4F9AE02.roa (hash: uB7Em80PKGY4uO2oMYJtskRF61M8oMXLAmFb1PjEp7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.crl rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C5E0 Validity Not Before: Apr 3 05:55:37 2025 GMT Not After : Apr 10 05:55:37 2025 GMT Subject: CN=67ee22d9-2a49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c8:13:0a:5b:32:2e:c2:fd:ab:bb:5b:6a:a5: 29:27:cf:00:c9:b3:fc:e8:0a:40:6c:02:f8:53:db: 16:94:51:b7:39:22:e4:df:4a:36:e8:a6:f4:a7:e7: b3:40:3a:5b:d7:f9:ab:a4:21:ff:a9:8e:fd:b0:a6: 7a:e9:f6:7b:83:58:a2:ea:48:14:12:37:3a:e9:41: 3f:95:f9:ba:d6:aa:c3:e0:db:e6:5e:33:88:0f:ea: 30:12:a6:33:84:ed:30:86:d5:30:56:f2:31:88:d4: c2:fa:26:20:f5:fa:d5:4e:e0:ff:ae:2a:5e:1f:31: 8e:09:82:29:a6:a9:20:91:6e:cf:9e:00:a5:0f:0d: 05:eb:77:bb:c2:21:09:7b:0d:a5:8f:77:26:3c:77: 1b:5e:4f:74:74:8d:8d:83:17:e8:d1:42:05:40:d7: bd:f4:20:54:d5:61:61:3b:35:08:a0:eb:97:71:d2: ce:88:f3:1a:4d:31:31:42:10:d2:23:2d:7e:96:9e: 51:73:f1:5d:e3:db:44:97:d0:c9:0b:e8:a8:16:84: 69:ba:1b:52:2b:d3:05:ab:9a:b8:a5:57:5c:91:a9: 9a:12:d1:0e:b8:e8:56:48:05:00:14:4b:27:89:cb: d1:5b:30:a5:f9:bb:4c:2c:90:a4:53:e5:6a:d5:16: fb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D3:00:DD:59:61:29:CC:73:EC:9E:82:92:97:BD:B6:19:84:65:73 X509v3 Authority Key Identifier: keyid:07:8B:4A:80:D1:DF:E6:C0:52:53:3A:AD:B1:95:34:AC:59:A3:95:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:9d:ea:d9:ab:0a:16:3e:39:95:fa:97:5b:cf:c3:12:cc:99: ab:29:1a:e2:0e:f9:8f:3c:f8:ca:e6:63:b8:33:b2:e8:ff:f3: 93:37:b2:3a:9c:a8:9e:1a:f8:6f:7e:cf:de:09:8f:73:05:08: 92:79:b7:c1:4e:df:d6:31:20:e1:58:20:c5:02:cd:8e:5b:56: 34:c7:34:6a:d6:b4:b1:c3:da:a8:aa:1b:8f:fb:5d:3c:4a:fc: 85:3b:52:62:60:49:43:2c:a0:93:ca:be:bb:f8:05:56:68:e8: 5a:26:66:ba:3b:49:88:9a:2e:8b:02:de:d4:55:54:c5:15:ab: b0:83:e8:c5:f0:6f:37:3b:20:c8:06:b2:71:d7:b1:20:44:e7: 5f:29:bc:98:57:c1:d5:c6:43:6d:06:ea:e9:c7:1d:3f:c1:be: 70:7b:b7:6e:78:cf:d3:eb:24:4d:27:fe:de:79:94:f2:fa:51: b4:b7:42:e0:8d:0c:a2:06:17:2e:5d:8f:1b:ca:aa:e0:12:7e: ab:39:c6:9b:bd:2b:b6:66:3a:b9:85:09:8b:fb:10:8a:59:7c: ab:aa:5f:9f:2c:f6:89:99:4e:53:29:61:24:01:9f:0b:94:6a: 82:9f:d9:0c:b4:0c:dd:db:bc:07:e2:67:e2:01:88:da:d6:52: 8c:3f:08:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzVFMDExMC8GA1UEBRMoMDc4QjRBODBEMURGRTZDMDUyNTMzQUFEQjE5NTM0QUM1 OUEzOTU0QjAeFw0yNTA0MDMwNTU1MzdaFw0yNTA0MTAwNTU1MzdaMBgxFjAUBgNV BAMTDTY3ZWUyMmQ5LTJhNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLyBMKWzIuwv2ru1tqpSknzwDJs/zoCkBsAvhT2xaUUbc5IuTfSjbopvSn57NA OlvX+aukIf+pjv2wpnrp9nuDWKLqSBQSNzrpQT+V+brWqsPg2+ZeM4gP6jASpjOE 7TCG1TBW8jGI1ML6JiD1+tVO4P+uKl4fMY4JgimmqSCRbs+eAKUPDQXrd7vCIQl7 DaWPdyY8dxteT3R0jY2DF+jRQgVA1730IFTVYWE7NQig65dx0s6I8xpNMTFCENIj LX6WnlFz8V3j20SX0MkL6KgWhGm6G1Ir0wWrmrilV1yRqZoS0Q646FZIBQAUSyeJ y9FbMKX5u0wskKRT5WrVFvtBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUw9MA3Vlh Kcxz7J6Ckpe9thmEZXMwHwYDVR0jBBgwFoAUB4tKgNHf5sBSUzqtsZU0rFmjlUsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDNUUwLzg3MjBBQjE4NUEx NzExRUZBQTIyQTcyOUM0RjlBRTAyL0I0dEtnTkhmNXNCU1V6cXRzWlUwckZtamxV cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQjR0S2dOSGY1c0JTVXpxdHNaVTByRm1qbFVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD NUUwLzg3MjBBQjE4NUExNzExRUZBQTIyQTcyOUM0RjlBRTAyL0I0dEtnTkhmNXNC U1V6cXRzWlUwckZtamxVcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGWd6tmrChY+OZX6l1vPwxLMmaspGuIO+Y88+MrmY7gzsuj/85M3sjqc qJ4a+G9+z94Jj3MFCJJ5t8FO39YxIOFYIMUCzY5bVjTHNGrWtLHD2qiqG4/7XTxK /IU7UmJgSUMsoJPKvrv4BVZo6FomZro7SYiaLosC3tRVVMUVq7CD6MXwbzc7IMgG snHXsSBE518pvJhXwdXGQ20G6unHHT/BvnB7t254z9PrJE0n/t55lPL6UbS3QuCN DKIGFy5djxvKquASfqs5xpu9K7ZmOrmFCYv7EIpZfKuqX58s9omZTlMpYSQBnwuU aoKf2Qy0DN3bvAfiZ+IBiNrWUow/CGw= -----END CERTIFICATE-----Generated at Fri Apr 4 22:37:00 2025 by rpki-client