$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft File: e9TVxajvXN_HTFmgk2RZTl75-uc.mft (raw, json) Hash identifier: 4MvyDK/KJBwBeysaQMne1Qx4P++CzIZmVnN/9gEbV00= Subject key identifier: 1B:7B:29:7C:9E:54:45:2C:F6:4A:8B:25:4E:FA:8E:09:07:4D:C3:85 Authority key identifier: 7B:D4:D5:C5:A8:EF:5C:DF:C7:4C:59:A0:93:64:59:4E:5E:F9:FA:E7 Certificate issuer: /CN=A919FE07/serialNumber=7BD4D5C5A8EF5CDFC74C59A09364594E5EF9FAE7 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft Manifest number: 0B8E Signing time: Fri 04 Apr 2025 19:13:51 +0000 Manifest this update: Fri 04 Apr 2025 19:13:51 +0000 Manifest next update: Fri 11 Apr 2025 19:13:51 +0000 Files and hashes: 1: e9TVxajvXN_HTFmgk2RZTl75-uc.crl (hash: iJvts5xlp+kO+7rq8Nscpf7A6k5uO8jkUAJQWMINrmw=) 2: CF834404B27511EFA614D07EC4F9AE02.roa (hash: 25yQyo1UNKg5eSyiIIMMirEfRLria39lDAViqcBQ5E4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.crl rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:13:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FE07 Validity Not Before: Apr 4 19:13:51 2025 GMT Not After : Apr 11 19:13:51 2025 GMT Subject: CN=67f02f6f-6e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4d:fb:6f:f7:87:31:aa:03:18:dc:1f:4e:e1: 44:d9:6f:d5:00:16:e1:ae:66:c4:16:b8:fb:d5:ef: dd:c4:8c:ad:1b:85:fc:86:05:78:85:28:27:8e:32: a3:41:ff:20:64:8a:3f:18:6c:5b:06:ff:af:9e:5b: 75:e8:81:eb:b6:35:94:0a:ae:12:1c:c2:dc:4a:61: 15:ef:e2:18:a9:08:a0:db:95:ea:38:6a:6a:f5:a1: 0c:2d:52:3a:62:ac:91:6f:dd:63:ff:99:34:95:52: 31:23:21:d0:58:92:aa:a1:76:65:30:f1:e6:ae:75: 90:95:9d:c0:fa:33:73:74:c9:65:8b:bf:8e:b5:2c: 92:2e:63:41:73:19:57:d5:12:34:64:e2:f6:d6:f3: 41:17:b0:8a:80:1b:e1:76:d8:08:5e:ce:2a:c0:58: 95:5d:4f:06:62:b1:44:1c:e3:af:62:08:76:e0:da: d9:84:52:31:00:a5:70:09:78:63:04:f0:d0:bd:63: ea:e6:81:58:04:78:8f:ff:c5:02:aa:f6:f9:f8:10: 4b:a0:e9:c5:d5:dd:08:aa:e5:1c:8b:1b:4e:cb:7a: 8a:c3:8e:2a:a8:76:17:52:f3:13:e4:f7:a4:2d:f3: a9:59:2f:fe:28:f6:7e:da:49:3f:2b:d8:15:98:3e: 27:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7B:29:7C:9E:54:45:2C:F6:4A:8B:25:4E:FA:8E:09:07:4D:C3:85 X509v3 Authority Key Identifier: keyid:7B:D4:D5:C5:A8:EF:5C:DF:C7:4C:59:A0:93:64:59:4E:5E:F9:FA:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:53:f5:a3:3a:3a:28:c6:6c:b6:4e:0e:7d:0f:26:3d:0b:88: 2c:c6:3a:79:7a:c1:7a:11:5c:9b:33:32:51:59:d9:6a:e8:ae: b5:99:93:09:00:02:69:19:1f:b6:1e:0c:16:b8:7f:59:54:f2: 51:89:1e:77:6f:63:13:2b:a0:60:7a:8f:60:b2:29:78:d5:a0: 3f:7a:29:ed:92:92:ed:b4:1a:3a:8d:9b:a5:da:1a:e9:53:49: 0d:f5:a2:04:bc:10:f6:02:b3:74:87:68:27:e9:de:cf:1e:b6: c6:97:52:c2:0a:cb:9b:cc:19:99:37:e8:16:50:4f:dd:e4:c9: 1e:cc:e6:3c:06:f4:9f:07:dc:66:df:ce:95:97:80:c4:75:28: 2d:06:74:e8:5c:6b:ba:a9:16:e6:be:85:8b:96:53:2a:9f:46: 3d:35:5c:bc:7b:82:b8:04:d8:db:f1:9a:3a:70:c8:2e:b3:b3: 2c:43:4c:ff:04:b5:2c:33:c3:6a:25:8c:76:af:1d:f9:8f:aa: 9e:d1:da:07:97:a8:35:ba:40:76:38:e9:80:a3:c2:0e:69:6c: 8e:be:5f:97:70:c8:99:27:3b:d4:ef:5e:28:a8:23:2c:5e:d5: 5d:54:38:89:8e:0c:51:f8:3f:20:49:79:9d:31:4a:58:b2:12: ae:76:30:8c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RkUwNzExMC8GA1UEBRMoN0JENEQ1QzVBOEVGNUNERkM3NEM1OUEwOTM2NDU5NEU1 RUY5RkFFNzAeFw0yNTA0MDQxOTEzNTFaFw0yNTA0MTExOTEzNTFaMBgxFjAUBgNV BAMTDTY3ZjAyZjZmLTZlMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGTftv94cxqgMY3B9O4UTZb9UAFuGuZsQWuPvV793EjK0bhfyGBXiFKCeOMqNB /yBkij8YbFsG/6+eW3Xogeu2NZQKrhIcwtxKYRXv4hipCKDbleo4amr1oQwtUjpi rJFv3WP/mTSVUjEjIdBYkqqhdmUw8eaudZCVncD6M3N0yWWLv461LJIuY0FzGVfV EjRk4vbW80EXsIqAG+F22AhezirAWJVdTwZisUQc469iCHbg2tmEUjEApXAJeGME 8NC9Y+rmgVgEeI//xQKq9vn4EEug6cXV3Qiq5RyLG07LeorDjiqodhdS8xPk96Qt 86lZL/4o9n7aST8r2BWYPic1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUG3spfJ5U RSz2SoslTvqOCQdNw4UwHwYDVR0jBBgwFoAUe9TVxajvXN/HTFmgk2RZTl75+ucw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGRTA3L0ExNkE4OERBMzA2 QTExRUE5OThDOEYzMEM0RjlBRTAyL2U5VFZ4YWp2WE5fSFRGbWdrMlJaVGw3NS11 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZTlUVnhhanZYTl9IVEZtZ2syUlpUbDc1LXVjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG RTA3L0ExNkE4OERBMzA2QTExRUE5OThDOEYzMEM0RjlBRTAyL2U5VFZ4YWp2WE5f SFRGbWdrMlJaVGw3NS11Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB5T9aM6OijGbLZODn0PJj0LiCzGOnl6wXoRXJszMlFZ2WrorrWZkwkA AmkZH7YeDBa4f1lU8lGJHndvYxMroGB6j2CyKXjVoD96Ke2Sku20GjqNm6XaGulT SQ31ogS8EPYCs3SHaCfp3s8etsaXUsIKy5vMGZk36BZQT93kyR7M5jwG9J8H3Gbf zpWXgMR1KC0GdOhca7qpFua+hYuWUyqfRj01XLx7grgE2NvxmjpwyC6zsyxDTP8E tSwzw2oljHavHfmPqp7R2geXqDW6QHY46YCjwg5pbI6+X5dwyJknO9TvXiioIyxe 1V1UOImODFH4PyBJeZ0xSliyEq52MIw= -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:38 2025 by rpki-client