$ rpki-client -vvf rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft File: cRYXAC2fDJ62W07dYfehyR_NuD4.mft (raw, json) Hash identifier: OBG39KVIghcEiFR1njnyT3fLZARXHcbJQU+K1SUOm6g= Subject key identifier: 9C:BF:0E:40:ED:90:81:E7:EC:28:0A:5F:46:A0:4A:77:D8:28:E0:5F Authority key identifier: 71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E Certificate issuer: /CN=A919C6E7/serialNumber=711617002D9F0C9EB65B4EDD61F7A1C91FCDB83E Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft Manifest number: 73 Signing time: Sat 29 Mar 2025 06:06:54 +0000 Manifest this update: Sat 29 Mar 2025 06:06:54 +0000 Manifest next update: Sat 05 Apr 2025 06:06:54 +0000 Files and hashes: 1: cRYXAC2fDJ62W07dYfehyR_NuD4.crl (hash: DKtBeWLt4TUJ8BNBgYVcdpt1AVII4fHSYKyP7p0USec=) 2: 73EF25545DDE11EFBCDB7463C4F9AE02.roa (hash: JrlJ2EvGFrH8+I8VUWwxgID9iYwpW3LVV5yISMkbZ08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.crl rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C6E7 Validity Not Before: Mar 29 06:06:54 2025 GMT Not After : Apr 5 06:06:54 2025 GMT Subject: CN=67e78dfe-2efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fb:77:fc:34:1a:6d:e3:4a:0c:c6:16:66:06: cd:83:92:87:bb:e9:87:5b:76:16:a0:1b:c8:28:58: 47:a3:f5:b2:62:41:37:6f:2b:36:fc:06:6a:a8:4d: 99:b2:b5:fb:45:da:6e:0d:80:26:e0:04:c9:cd:08: 44:dd:31:88:78:1e:4e:ab:d9:72:de:94:d8:31:03: 6a:b8:f7:16:4d:7f:1c:44:59:9b:1b:39:5c:56:47: 80:a1:e7:11:1f:7a:e3:62:14:ab:b5:c5:52:12:31: b4:f6:69:9c:0f:e2:97:b0:07:50:1a:ea:a1:33:03: 22:6a:d3:10:92:55:f5:d2:7e:23:48:73:e3:72:20: 1c:2d:c5:a5:45:f1:b7:55:a0:c5:1d:42:22:4f:99: 6b:23:10:83:9e:06:3c:d4:17:99:42:05:bc:17:ac: 35:c8:56:ee:5c:63:9d:53:95:53:db:23:53:ce:a8: f3:8c:96:0c:f8:9b:b9:1e:e8:d9:ff:e0:50:a7:d3: 0e:88:5c:68:fd:03:bb:e1:73:fb:32:65:4f:f0:a5: e3:a8:d3:8a:49:1c:86:9a:56:38:d7:4a:f5:b2:34: 2d:7a:2a:62:75:fd:a7:dd:d6:f8:a3:6d:67:fe:49: a3:f1:c2:c1:ea:f9:2a:c3:48:d8:24:16:9c:36:1a: 4f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:BF:0E:40:ED:90:81:E7:EC:28:0A:5F:46:A0:4A:77:D8:28:E0:5F X509v3 Authority Key Identifier: keyid:71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:95:4d:c9:9d:1a:a6:85:f9:ae:97:15:fb:b9:a3:81:65:0e: 09:c5:af:c1:67:b0:d1:04:ca:29:25:4e:2c:02:96:4f:c4:b7: 72:96:c1:4a:e5:e5:df:f4:08:6e:10:d0:3d:16:76:63:59:a3: 4a:e8:40:d0:56:76:45:bc:72:1f:20:ad:04:f7:1b:c3:bf:23: 1e:88:08:4f:28:14:f8:25:5c:4b:59:2d:06:d8:1d:79:c3:79: dc:57:c7:c3:b9:05:10:ec:19:72:de:6b:98:48:94:08:e7:d1: 9f:eb:9e:b8:ae:fa:2f:39:42:5d:4d:56:1d:bb:ad:6c:d4:7a: 93:0a:1e:be:cd:31:0f:8c:b0:f1:9d:df:88:27:7a:23:c2:59: de:ec:5f:86:b7:ff:bb:62:b7:c0:b9:72:ac:b8:2f:e7:58:8c: 4f:55:ae:d5:43:ff:82:cd:2d:2a:18:38:91:65:ac:75:11:a3: 72:54:f1:2f:85:3c:52:2f:c2:be:1b:87:03:99:5e:48:14:ce: a3:58:f3:35:35:4b:fa:da:2b:7c:9f:2f:22:40:6f:63:16:5e: 7b:6a:37:d2:7a:e2:ab:53:28:07:00:90:1d:ed:22:46:af:6f: f0:d9:78:15:c7:70:50:ea:ed:02:ff:cf:89:1c:aa:4e:04:2d: ca:fc:dd:46 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QzZFNzExMC8GA1UEBRMoNzExNjE3MDAyRDlGMEM5RUI2NUI0RURENjFGN0ExQzkx RkNEQjgzRTAeFw0yNTAzMjkwNjA2NTRaFw0yNTA0MDUwNjA2NTRaMBgxFjAUBgNV BAMTDTY3ZTc4ZGZlLTJlZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCm+3f8NBpt40oMxhZmBs2Dkoe76YdbdhagG8goWEej9bJiQTdvKzb8BmqoTZmy tftF2m4NgCbgBMnNCETdMYh4Hk6r2XLelNgxA2q49xZNfxxEWZsbOVxWR4Ch5xEf euNiFKu1xVISMbT2aZwP4pewB1Aa6qEzAyJq0xCSVfXSfiNIc+NyIBwtxaVF8bdV oMUdQiJPmWsjEIOeBjzUF5lCBbwXrDXIVu5cY51TlVPbI1POqPOMlgz4m7ke6Nn/ 4FCn0w6IXGj9A7vhc/syZU/wpeOo04pJHIaaVjjXSvWyNC16KmJ1/afd1vijbWf+ SaPxwsHq+SrDSNgkFpw2Gk/RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnL8OQO2Q gefsKApfRqBKd9go4F8wHwYDVR0jBBgwFoAUcRYXAC2fDJ62W07dYfehyR/NuD4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlDNkU3L0U0QTBDQ0FFNURE RDExRUY4MzBERjU2MUM0RjlBRTAyL2NSWVhBQzJmREo2MlcwN2RZZmVoeVJfTnVE NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY1JZWEFDMmZESjYyVzA3ZFlmZWh5Ul9OdUQ0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlD NkU3L0U0QTBDQ0FFNURERDExRUY4MzBERjU2MUM0RjlBRTAyL2NSWVhBQzJmREo2 MlcwN2RZZmVoeVJfTnVENC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKiVTcmdGqaF+a6XFfu5o4FlDgnFr8FnsNEEyiklTiwClk/Et3KWwUrl 5d/0CG4Q0D0WdmNZo0roQNBWdkW8ch8grQT3G8O/Ix6ICE8oFPglXEtZLQbYHXnD edxXx8O5BRDsGXLea5hIlAjn0Z/rnriu+i85Ql1NVh27rWzUepMKHr7NMQ+MsPGd 34gneiPCWd7sX4a3/7tit8C5cqy4L+dYjE9VrtVD/4LNLSoYOJFlrHURo3JU8S+F PFIvwr4bhwOZXkgUzqNY8zU1S/raK3yfLyJAb2MWXntqN9J64qtTKAcAkB3tIkav b/DZeBXHcFDq7QL/z4kcqk4ELcr83UY= -----END CERTIFICATE-----Generated at Sat Apr 5 03:52:18 2025 by rpki-client