$ rpki-client -vvf rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft File: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft (raw, json) Hash identifier: yqxtovi2ibbpFtWuoF4iB/eBQ/dRUBQHUEyTah55EHw= Subject key identifier: 89:76:2A:9B:E0:D0:35:5C:6A:5C:BF:70:9B:4A:E8:C1:AC:09:9D:C6 Authority key identifier: 70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36 Certificate issuer: /CN=A91983E5/serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536 Certificate serial: 0C83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft Manifest number: 0C7D Signing time: Sat 12 Apr 2025 18:05:31 +0000 Manifest this update: Sat 12 Apr 2025 18:05:31 +0000 Manifest next update: Sat 19 Apr 2025 18:05:31 +0000 Files and hashes: 1: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl (hash: spHXGkTZlktSOYmlAsA05/Id8qyqspjjyVKYNzUUMsk=) 2: 430E6130F4B011E99BB3425CC4F9AE02.roa (hash: srN4MybkybSjP5c+l2pI3OXFvu05+GspG1m/SkxGd6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 17:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3203 (0xc83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983E5, serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536 Validity Not Before: Apr 12 18:05:31 2025 GMT Not After : Apr 19 18:05:31 2025 GMT Subject: CN=67faab6b-34d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e2:55:a4:81:3e:28:a9:f8:5b:89:90:91:8f: 9f:6a:0f:ac:62:27:88:5f:e9:4f:24:b7:60:8c:47: d6:7a:e9:33:07:07:e1:20:28:14:39:3d:d5:e0:96: 85:68:58:c1:d7:b9:c6:14:d3:3f:c9:bc:d7:4d:cf: 5d:db:72:0e:14:71:db:f5:1c:86:bf:88:b8:6c:02: bf:f1:5e:f8:2a:84:a4:9d:ff:6e:fc:f8:e9:df:67: 74:ff:4b:14:aa:61:0d:cd:92:75:fa:3a:bb:3d:e2: 60:44:cf:ca:4e:40:83:2e:2b:9c:0e:b8:08:cd:c7: 43:2a:08:b7:8b:d6:63:23:8e:67:8e:e9:3b:39:84: 6e:5c:5d:78:3b:c3:7e:7d:c5:ff:19:dc:46:af:86: 78:6b:4e:8f:a5:b6:fd:61:f5:2d:c6:c6:1a:41:ef: 65:db:09:a6:2e:8e:37:e9:71:7c:b0:85:fb:ff:00: 8f:c6:38:dc:63:93:4c:a5:b4:5d:9e:c0:53:fb:01: 21:d4:f8:e8:40:c7:9f:fc:a6:6d:ba:18:a5:0b:49: b3:24:ac:20:a1:e4:52:0f:88:91:06:80:2f:b4:be: 65:46:bb:a4:96:1f:43:1f:f7:16:15:d8:91:68:64: 06:d4:3b:7f:35:d8:05:27:cc:5a:b0:ae:e5:55:e7: 70:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:76:2A:9B:E0:D0:35:5C:6A:5C:BF:70:9B:4A:E8:C1:AC:09:9D:C6 X509v3 Authority Key Identifier: keyid:70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:7b:50:6b:9a:d6:5d:b4:a2:8c:fc:9e:c8:e5:c9:ba:d5:67: fa:3d:a4:b6:03:c2:c5:ca:7c:9f:51:f0:e4:7b:d3:42:34:54: 08:a3:8d:44:62:2d:00:2f:16:d3:b8:f6:5c:0a:1c:62:3d:19: 79:e8:9f:fa:be:08:af:50:33:3d:5e:af:2b:72:a3:4b:cf:cb: cb:2b:cd:e6:9f:0c:f0:d3:da:f5:df:35:06:82:0f:81:4f:26: fe:15:3b:ca:2d:99:23:20:8a:5f:65:90:40:d4:5a:d0:4d:46: 73:b7:be:0e:dd:c0:54:11:8c:da:28:e4:7b:da:1d:e0:e0:88: 95:cb:63:5c:41:f2:03:20:9f:af:91:81:52:01:61:67:38:b5: 31:f5:82:90:e4:86:0e:be:69:90:f8:f0:82:f3:d2:da:fd:ad: 3b:f3:ab:e2:96:63:e0:d2:f2:08:c5:f1:b2:11:d8:fa:ba:92: 01:e7:8f:68:25:29:30:53:1d:bb:6e:da:57:00:f3:56:2d:3f: 6f:2c:4e:97:36:31:b0:a1:c6:63:e1:d6:cd:f3:c6:c8:79:d2: fe:35:ec:28:00:2a:60:5f:39:97:ad:63:fa:8c:61:8a:7c:a0: 00:d8:a6:04:46:4a:0f:2e:5e:fe:83:a6:c0:90:77:1c:a5:7d: 99:15:e6:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzRTUxMTAvBgNVBAUTKDcwNTNGRjgxRkVDRjA1OUEzRThCRDcwRjg1RDY0OTQz RDExNEU1MzYwHhcNMjUwNDEyMTgwNTMxWhcNMjUwNDE5MTgwNTMxWjAYMRYwFAYD VQQDEw02N2ZhYWI2Yi0zNGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAveJVpIE+KKn4W4mQkY+fag+sYieIX+lPJLdgjEfWeukzBwfhICgUOT3V4JaF aFjB17nGFNM/ybzXTc9d23IOFHHb9RyGv4i4bAK/8V74KoSknf9u/Pjp32d0/0sU qmENzZJ1+jq7PeJgRM/KTkCDLiucDrgIzcdDKgi3i9ZjI45njuk7OYRuXF14O8N+ fcX/GdxGr4Z4a06Ppbb9YfUtxsYaQe9l2wmmLo436XF8sIX7/wCPxjjcY5NMpbRd nsBT+wEh1PjoQMef/KZtuhilC0mzJKwgoeRSD4iRBoAvtL5lRruklh9DH/cWFdiR aGQG1Dt/NdgFJ8xasK7lVedw1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIl2Kpvg 0DVcaly/cJtK6MGsCZ3GMB8GA1UdIwQYMBaAFHBT/4H+zwWaPovXD4XWSUPRFOU2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNFNS83MDM4Mzg2Q0Y0 QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJaby1pOWNQaGRaSlE5RVU1 VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGUF9nZjdQQlpvLWk5Y1BoZFpKUTlFVTVUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNFNS83MDM4Mzg2Q0Y0QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJa by1pOWNQaGRaSlE5RVU1VFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0e1BrmtZdtKKM/J7I5cm61Wf6PaS2A8LFynyfUfDke9NCNFQIo41E Yi0ALxbTuPZcChxiPRl56J/6vgivUDM9Xq8rcqNLz8vLK83mnwzw09r13zUGgg+B Tyb+FTvKLZkjIIpfZZBA1FrQTUZzt74O3cBUEYzaKOR72h3g4IiVy2NcQfIDIJ+v kYFSAWFnOLUx9YKQ5IYOvmmQ+PCC89La/a0786vilmPg0vIIxfGyEdj6upIB549o JSkwUx27btpXAPNWLT9vLE6XNjGwocZj4dbN88bIedL+NewoACpgXzmXrWP6jGGK fKAA2KYERkoPLl7+g6bAkHccpX2ZFeYC -----END CERTIFICATE-----Generated at Sun Apr 13 01:43:43 2025 by rpki-client