$ rpki-client -vvf rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft File: r7pNwfpFiSSQIyMcb-7j96cdpA4.mft (raw, json) Hash identifier: 0RfPijFtIfi2rsuRjSGZv1Oq89NPB3UrocuVAiHa2pE= Subject key identifier: CC:9C:42:A7:4D:F2:25:C1:36:65:1F:EF:A1:56:67:61:E3:35:1E:62 Authority key identifier: AF:BA:4D:C1:FA:45:89:24:90:23:23:1C:6F:EE:E3:F7:A7:1D:A4:0E Certificate issuer: /CN=A919B663/serialNumber=AFBA4DC1FA4589249023231C6FEEE3F7A71DA40E Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7pNwfpFiSSQIyMcb-7j96cdpA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft Manifest number: 013D Signing time: Thu 03 Apr 2025 03:37:56 +0000 Manifest this update: Thu 03 Apr 2025 03:37:56 +0000 Manifest next update: Thu 10 Apr 2025 03:37:56 +0000 Files and hashes: 1: r7pNwfpFiSSQIyMcb-7j96cdpA4.crl (hash: tVocj6ofsDWLTx+F+l+1Qy6vkYmfhYXnFsDR83eOkYc=) 2: 91F274442F2B11EE928A2881C4F9AE02.roa (hash: lV+gUq5xDXipc7yhrjptbxh+gyQhmn5NZA76UN2qadQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.crl rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7pNwfpFiSSQIyMcb-7j96cdpA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:37:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B663 Validity Not Before: Apr 3 03:37:56 2025 GMT Not After : Apr 10 03:37:56 2025 GMT Subject: CN=67ee0294-efe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:99:ce:8f:99:4e:91:d6:52:77:5b:b5:03:b1: 5e:44:f1:27:15:fd:b3:e3:7c:54:9c:8a:48:c0:94: e1:70:67:77:fc:8f:cb:57:4e:cb:73:45:9f:26:7a: 63:3e:db:b1:e2:59:59:4a:dc:48:55:4a:20:88:7f: 6e:e1:1b:4a:b9:a6:95:e6:fe:45:e8:b2:1f:84:a7: eb:23:4a:9f:a3:2d:37:ba:90:26:62:9a:b7:07:dc: 74:17:0c:ef:00:15:20:4c:c4:8e:ef:5c:a5:b7:fa: c5:e6:94:9d:1e:a2:90:69:8b:01:79:9f:89:6f:40: 2e:d1:c9:1c:22:5c:a5:1b:33:cf:d4:fc:84:86:8a: 36:d9:0e:00:34:85:34:03:7a:38:38:20:8c:38:25: f0:03:1d:17:6b:fd:6b:ea:b4:53:f9:54:a2:16:f1: a6:da:ca:08:f1:c6:c2:99:43:4e:0e:af:7e:01:25: 95:78:95:b8:07:d4:55:fd:07:a4:94:18:67:d5:58: 8a:80:6a:76:9b:77:2e:d9:53:5e:bf:6b:a9:bc:48: 0c:6c:61:24:d7:61:1a:fa:2b:ad:f8:41:48:4d:b3: f7:10:27:42:d9:2d:34:7d:ea:56:90:7c:42:df:e4: 73:d6:a4:d8:6b:c1:10:0b:f6:64:81:f4:72:10:1f: fa:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:9C:42:A7:4D:F2:25:C1:36:65:1F:EF:A1:56:67:61:E3:35:1E:62 X509v3 Authority Key Identifier: keyid:AF:BA:4D:C1:FA:45:89:24:90:23:23:1C:6F:EE:E3:F7:A7:1D:A4:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7pNwfpFiSSQIyMcb-7j96cdpA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:af:b0:d3:db:cf:4b:82:4c:a7:90:bf:52:a7:7a:90:57:24: 71:04:33:aa:a6:0a:3b:f8:0f:55:80:b0:84:5c:5e:94:76:7e: 02:f0:9e:a8:f4:d6:47:91:39:16:60:e1:82:fe:4b:49:78:58: c7:ee:3d:4f:96:a3:fa:d4:d2:64:02:40:64:dc:cb:51:df:75: 06:38:80:3a:05:ee:88:6f:ea:2e:23:3c:25:07:51:9e:2d:a9: 54:e3:0a:de:f8:e5:12:b5:d1:27:fb:e4:fe:89:ff:e9:34:0c: 4b:43:7c:e6:de:1e:02:94:08:fb:b2:26:42:a9:ee:7d:85:ff: 02:b7:f2:17:9c:b8:35:e9:e9:ef:97:a1:64:78:22:1e:ec:be: 40:8d:e8:f8:f2:e8:1e:fd:e2:4a:63:c6:af:e1:18:3c:09:b4: 4a:e7:cd:2e:cd:a0:8a:17:5c:94:9a:a4:91:51:55:8a:d5:53: ca:9d:3c:72:4e:2c:9f:dc:95:60:c8:75:fa:fb:27:a6:93:85: 34:92:ab:72:7a:93:b4:d4:3d:24:29:26:d8:62:c0:9c:f8:82: 68:8c:92:cd:3b:ef:b6:a2:1e:f2:5c:ac:1c:f5:59:72:fa:4f: cf:63:a8:43:df:55:f5:5a:ef:1d:54:05:f3:3d:7b:b6:88:e8: a5:6c:53:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI2NjMxMTAvBgNVBAUTKEFGQkE0REMxRkE0NTg5MjQ5MDIzMjMxQzZGRUVFM0Y3 QTcxREE0MEUwHhcNMjUwNDAzMDMzNzU2WhcNMjUwNDEwMDMzNzU2WjAYMRYwFAYD VQQDEw02N2VlMDI5NC1lZmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA65nOj5lOkdZSd1u1A7FeRPEnFf2z43xUnIpIwJThcGd3/I/LV07Lc0WfJnpj Ptux4llZStxIVUogiH9u4RtKuaaV5v5F6LIfhKfrI0qfoy03upAmYpq3B9x0Fwzv ABUgTMSO71ylt/rF5pSdHqKQaYsBeZ+Jb0Au0ckcIlylGzPP1PyEhoo22Q4ANIU0 A3o4OCCMOCXwAx0Xa/1r6rRT+VSiFvGm2soI8cbCmUNODq9+ASWVeJW4B9RV/Qek lBhn1ViKgGp2m3cu2VNev2upvEgMbGEk12Ea+iut+EFITbP3ECdC2S00fepWkHxC 3+Rz1qTYa8EQC/ZkgfRyEB/6AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMycQqdN 8iXBNmUf76FWZ2HjNR5iMB8GA1UdIwQYMBaAFK+6TcH6RYkkkCMjHG/u4/enHaQO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjY2My80RUNGRUI5ODJD RTYxMUVFOTREN0M5MkRDNEY5QUUwMi9yN3BOd2ZwRmlTU1FJeU1jYi03ajk2Y2Rw QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3cE53ZnBGaVNTUUl5TWNiLTdqOTZjZHBBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjY2My80RUNGRUI5ODJDRTYxMUVFOTREN0M5MkRDNEY5QUUwMi9yN3BOd2ZwRmlT U1FJeU1jYi03ajk2Y2RwQTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBer7DT289LgkynkL9Sp3qQVyRxBDOqpgo7+A9VgLCEXF6Udn4C8J6o 9NZHkTkWYOGC/ktJeFjH7j1PlqP61NJkAkBk3MtR33UGOIA6Be6Ib+ouIzwlB1Ge LalU4wre+OUStdEn++T+if/pNAxLQ3zm3h4ClAj7siZCqe59hf8Ct/IXnLg16env l6FkeCIe7L5Ajej48uge/eJKY8av4Rg8CbRK580uzaCKF1yUmqSRUVWK1VPKnTxy Tiyf3JVgyHX6+yemk4U0kqtyepO01D0kKSbYYsCc+IJojJLNO++2oh7yXKwc9Vly +k/PY6hD31X1Wu8dVAXzPXu2iOilbFPF -----END CERTIFICATE-----Generated at Fri Apr 4 21:51:47 2025 by rpki-client