$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft File: L7B78TYUrVoZNQr8da-wVMhrr60.mft (raw, json) Hash identifier: ZFgq0o7aV5QEPgJpiTKG6TIKt1boraWRaNdGasF+3no= Subject key identifier: C2:B5:FB:5C:BB:58:06:9D:B3:33:C2:CD:52:4D:96:0B:0C:EC:91:27 Authority key identifier: 2F:B0:7B:F1:36:14:AD:5A:19:35:0A:FC:75:AF:B0:54:C8:6B:AF:AD Certificate issuer: /CN=A919EF6A/serialNumber=2FB07BF13614AD5A19350AFC75AFB054C86BAFAD Certificate serial: 01AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft Manifest number: 01A9 Signing time: Thu 03 Apr 2025 02:35:25 +0000 Manifest this update: Thu 03 Apr 2025 02:35:24 +0000 Manifest next update: Thu 10 Apr 2025 02:35:24 +0000 Files and hashes: 1: L7B78TYUrVoZNQr8da-wVMhrr60.crl (hash: CrfP50q+PIjJU+Uc33t3dSz3vt4+MqJWuS8uZypDLeE=) 2: 3A9B909286BE11ED93DB0765C4F9AE02.roa (hash: XahtR2T510aEKb9I/6EITKzZRawtEl9xMR6MDMSwo6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.crl rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:35:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EF6A Validity Not Before: Apr 3 02:35:24 2025 GMT Not After : Apr 10 02:35:24 2025 GMT Subject: CN=67edf3ec-459d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4b:5e:1b:ae:38:ff:52:b8:1c:69:ff:c4:e6: d4:16:c9:84:6e:e9:ad:cc:67:d7:70:36:f2:97:9f: 4e:91:03:3b:ba:a0:9f:b9:69:e3:18:d6:09:9a:88: 80:00:63:cc:36:08:b6:9c:b7:3d:67:24:c0:6a:9c: 86:9e:be:c9:f3:be:8d:c4:24:b6:fc:02:ed:84:d4: 6f:fd:6c:f3:97:f1:fe:ab:55:87:9c:bc:b0:c4:28: e8:f6:2f:06:96:ee:46:85:ac:96:44:79:11:60:d7: 76:e1:3e:45:ab:71:d0:5d:b2:15:52:b9:16:0c:e4: 42:ae:96:e6:4a:86:4a:90:47:90:ae:20:57:62:0d: 9b:5b:fd:43:4a:d5:fc:db:10:00:f6:2f:51:96:a8: c7:86:fd:58:2b:3a:fb:c1:1e:7a:9e:3d:34:b6:eb: 95:36:dc:1d:d4:f4:b0:31:5a:5e:84:a8:00:84:c8: c3:8e:0e:e7:08:c8:6c:b7:7a:db:91:e0:c7:60:12: 19:12:19:76:ae:f1:ed:a9:20:9a:e8:b8:36:60:28: db:2b:23:18:25:52:7c:66:0b:be:87:da:16:ac:5c: 10:8b:4a:e0:6f:41:f6:9d:3b:68:0d:31:38:44:36: 3e:b3:4c:7d:0f:1e:a8:dc:fc:54:8c:14:61:86:5b: 45:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B5:FB:5C:BB:58:06:9D:B3:33:C2:CD:52:4D:96:0B:0C:EC:91:27 X509v3 Authority Key Identifier: keyid:2F:B0:7B:F1:36:14:AD:5A:19:35:0A:FC:75:AF:B0:54:C8:6B:AF:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:7d:ad:1d:4a:c2:f7:d4:52:49:9a:d1:8b:cd:e1:4c:f7:ac: 19:13:48:c5:69:e8:ae:e0:a6:cf:5c:66:e1:83:01:01:5c:ef: 1a:89:7f:a7:14:43:23:b4:21:45:5b:bc:e7:72:1d:50:ab:60: 34:3d:98:7c:0f:25:38:86:fd:a3:99:e0:fb:b5:74:9d:d4:4f: 30:b6:6d:05:ab:2e:d2:92:b7:d4:b1:ca:aa:22:02:dc:50:a1: 59:49:50:57:80:f0:83:9f:20:49:3c:ed:79:49:96:3c:cf:6c: 0a:15:dc:3f:ac:2c:28:78:7d:59:06:31:f4:67:a9:93:c2:52: 74:26:38:94:b9:a1:b1:65:3c:b7:82:5b:0f:3b:80:5b:f5:2e: d7:ce:dd:40:cc:d6:30:41:4b:e1:58:0e:51:56:83:80:71:7e: 81:20:0a:2b:be:9a:b7:44:40:a3:61:c2:61:57:46:ca:d0:fa: b9:62:6f:8a:1a:0b:26:01:ae:26:65:11:b9:7a:e0:b3:37:e4: f5:ea:46:f7:f7:43:ec:f9:5e:18:30:90:8c:a4:a3:b6:9f:a4: 12:42:d8:44:35:7e:ce:7c:6e:dd:18:63:3c:d0:d5:cf:20:b0: c8:1d:ac:46:8e:5b:ae:db:56:f9:6d:14:91:8c:0b:3e:e3:6e: 17:07:cc:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGNkExMTAvBgNVBAUTKDJGQjA3QkYxMzYxNEFENUExOTM1MEFGQzc1QUZCMDU0 Qzg2QkFGQUQwHhcNMjUwNDAzMDIzNTI0WhcNMjUwNDEwMDIzNTI0WjAYMRYwFAYD VQQDEw02N2VkZjNlYy00NTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0teG644/1K4HGn/xObUFsmEbumtzGfXcDbyl59OkQM7uqCfuWnjGNYJmoiA AGPMNgi2nLc9ZyTAapyGnr7J876NxCS2/ALthNRv/Wzzl/H+q1WHnLywxCjo9i8G lu5GhayWRHkRYNd24T5Fq3HQXbIVUrkWDORCrpbmSoZKkEeQriBXYg2bW/1DStX8 2xAA9i9RlqjHhv1YKzr7wR56nj00tuuVNtwd1PSwMVpehKgAhMjDjg7nCMhst3rb keDHYBIZEhl2rvHtqSCa6Lg2YCjbKyMYJVJ8Zgu+h9oWrFwQi0rgb0H2nTtoDTE4 RDY+s0x9Dx6o3PxUjBRhhltF9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMK1+1y7 WAadszPCzVJNlgsM7JEnMB8GA1UdIwQYMBaAFC+we/E2FK1aGTUK/HWvsFTIa6+t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY2QS82NUFCNDFGMDg2 QkExMUVEOTIyMDRBNTZDNEY5QUUwMi9MN0I3OFRZVXJWb1pOUXI4ZGEtd1ZNaHJy NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w3Qjc4VFlVclZvWk5RcjhkYS13Vk1ocnI2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUY2QS82NUFCNDFGMDg2QkExMUVEOTIyMDRBNTZDNEY5QUUwMi9MN0I3OFRZVXJW b1pOUXI4ZGEtd1ZNaHJyNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJfa0dSsL31FJJmtGLzeFM96wZE0jFaeiu4KbPXGbhgwEBXO8aiX+n FEMjtCFFW7znch1Qq2A0PZh8DyU4hv2jmeD7tXSd1E8wtm0Fqy7SkrfUscqqIgLc UKFZSVBXgPCDnyBJPO15SZY8z2wKFdw/rCwoeH1ZBjH0Z6mTwlJ0JjiUuaGxZTy3 glsPO4Bb9S7Xzt1AzNYwQUvhWA5RVoOAcX6BIAorvpq3RECjYcJhV0bK0Pq5Ym+K GgsmAa4mZRG5euCzN+T16kb390Ps+V4YMJCMpKO2n6QSQthENX7OfG7dGGM80NXP ILDIHaxGjluu21b5bRSRjAs+424XB8wo -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:53 2025 by rpki-client