$ rpki-client -vvf rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft File: -r7TJg0sVSvpFdAj4YnWEopkX0s.mft (raw, json) Hash identifier: XOgClCA/3x0gg2uCUvWkXfNXyn9dizVE9VsGxjnPia0= Subject key identifier: 36:F5:1A:E3:3F:FF:99:99:DB:7A:92:04:CA:BB:E6:65:50:8C:97:BF Authority key identifier: FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B Certificate issuer: /CN=A919FF79/serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B Certificate serial: 126F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft Manifest number: 1265 Signing time: Fri 04 Apr 2025 17:11:50 +0000 Manifest this update: Fri 04 Apr 2025 17:11:50 +0000 Manifest next update: Fri 11 Apr 2025 17:11:50 +0000 Files and hashes: 1: -r7TJg0sVSvpFdAj4YnWEopkX0s.crl (hash: LEke5Gua5gdN20KFfftmhWo0SP/UlqpZ+e3rdP3dwJ4=) 2: A87EED5A7AF111EB86DC9F6CC4F9AE02.roa (hash: n5O4+xpqurpdXo1l2y1SKOgBDTyWDYNQaGaHjqKBMU8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4719 (0x126f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FF79 Validity Not Before: Apr 4 17:11:50 2025 GMT Not After : Apr 11 17:11:50 2025 GMT Subject: CN=67f012d6-8317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:73:c5:64:f9:60:cc:b4:da:d2:51:04:24:43: 2b:c2:51:ef:cc:1f:97:71:2d:c1:68:2c:49:3e:aa: 0d:4a:b1:b4:46:e1:8c:64:92:ce:6d:8e:a6:b1:6f: da:37:a7:59:e9:d2:fe:21:34:85:e9:e6:5d:89:a4: 8c:6c:f6:21:c1:09:fa:fb:1e:e4:81:2d:ec:0b:e9: f8:81:81:40:fb:2b:98:c7:6e:37:a2:44:d5:28:8c: 12:ef:5e:d4:9f:39:23:9a:2f:f5:04:0f:b8:7b:a4: 23:95:f2:09:64:75:54:da:d8:1f:56:2e:6f:ad:59: 6e:fc:55:ff:2c:00:ef:c7:07:ee:5c:37:b3:31:8d: 0d:ab:0e:b0:e7:65:4e:af:ed:1d:25:43:46:ac:b1: 10:15:85:5b:e0:9c:27:42:d6:9b:98:77:be:22:ff: 9c:55:ea:b5:20:92:2f:22:77:5c:76:78:c3:73:95: 28:46:7a:38:6b:c1:b4:fc:1a:14:8a:02:c0:7e:17: 3a:a9:44:87:90:8f:09:57:cc:92:35:81:38:6e:d4: f3:34:11:84:3e:b6:3e:1f:ac:30:fe:92:14:ba:54: f9:65:32:25:76:6e:40:de:76:23:c0:c2:0e:b1:b1: 37:44:cc:bf:e3:b5:23:1e:5b:fd:2e:65:2f:bf:f5: 43:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F5:1A:E3:3F:FF:99:99:DB:7A:92:04:CA:BB:E6:65:50:8C:97:BF X509v3 Authority Key Identifier: keyid:FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:16:5d:ab:68:05:40:9a:df:91:73:04:1b:34:ab:16:d2:a7: 5e:b1:c5:e4:a7:a6:29:01:b0:be:86:f5:51:fd:0c:72:51:63: 57:39:df:ec:02:d9:94:20:05:a6:bd:6d:72:3f:af:3f:a4:ef: 0f:0f:05:1b:29:7d:62:e9:c8:8d:bb:4d:5a:24:ce:8e:c2:f9: 96:82:54:66:4b:a5:b1:95:0a:53:c5:68:d0:95:21:4c:56:08: 57:bb:d4:e4:55:3f:a4:82:18:86:a7:87:03:95:05:b3:93:f3: 8a:5e:b2:71:5f:9e:f4:46:8d:dc:02:af:53:5d:b8:ae:b3:33: 83:b2:dd:6f:69:ee:29:e5:85:cd:de:28:a4:33:35:22:f9:64: 56:bc:92:28:05:05:49:8a:57:27:e1:62:37:59:2b:b5:1c:2e: b7:ec:27:f7:86:53:7d:26:57:ac:2b:1c:f7:85:1a:0a:03:da: 8d:db:49:02:d5:40:78:c4:e0:33:26:aa:54:2b:c9:83:a1:08: 0c:21:3b:fc:69:e5:74:1e:f0:ed:16:e5:a2:59:fa:98:5e:ec: 77:f5:8b:c9:48:11:6e:af:71:90:ec:87:7d:cc:8e:a9:2d:6a: 32:80:c5:80:32:1c:82:90:c1:9a:e2:08:f2:09:ee:2f:cf:57: 0a:38:a7:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZGNzkxMTAvBgNVBAUTKEZBQkVEMzI2MEQyQzU1MkJFOTE1RDAyM0UxODlENjEy OEE2NDVGNEIwHhcNMjUwNDA0MTcxMTUwWhcNMjUwNDExMTcxMTUwWjAYMRYwFAYD VQQDEw02N2YwMTJkNi04MzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9HPFZPlgzLTa0lEEJEMrwlHvzB+XcS3BaCxJPqoNSrG0RuGMZJLObY6msW/a N6dZ6dL+ITSF6eZdiaSMbPYhwQn6+x7kgS3sC+n4gYFA+yuYx243okTVKIwS717U nzkjmi/1BA+4e6QjlfIJZHVU2tgfVi5vrVlu/FX/LADvxwfuXDezMY0Nqw6w52VO r+0dJUNGrLEQFYVb4JwnQtabmHe+Iv+cVeq1IJIvIndcdnjDc5UoRno4a8G0/BoU igLAfhc6qUSHkI8JV8ySNYE4btTzNBGEPrY+H6ww/pIUulT5ZTIldm5A3nYjwMIO sbE3RMy/47UjHlv9LmUvv/VDMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDb1GuM/ /5mZ23qSBMq75mVQjJe/MB8GA1UdIwQYMBaAFPq+0yYNLFUr6RXQI+GJ1hKKZF9L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkY3OS9BM0MwOEEyRUNB OTcxMUU4QUFFODA3NUZDNEY5QUUwMi8tcjdUSmcwc1ZTdnBGZEFqNFluV0VvcGtY MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1yN1RKZzBzVlN2cEZkQWo0WW5XRW9wa1gwcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkY3OS9BM0MwOEEyRUNBOTcxMUU4QUFFODA3NUZDNEY5QUUwMi8tcjdUSmcwc1ZT dnBGZEFqNFluV0VvcGtYMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdFl2raAVAmt+RcwQbNKsW0qdescXkp6YpAbC+hvVR/QxyUWNXOd/s AtmUIAWmvW1yP68/pO8PDwUbKX1i6ciNu01aJM6OwvmWglRmS6WxlQpTxWjQlSFM VghXu9TkVT+kghiGp4cDlQWzk/OKXrJxX570Ro3cAq9TXbiuszODst1vae4p5YXN 3iikMzUi+WRWvJIoBQVJilcn4WI3WSu1HC637Cf3hlN9JlesKxz3hRoKA9qN20kC 1UB4xOAzJqpUK8mDoQgMITv8aeV0HvDtFuWiWfqYXux39YvJSBFur3GQ7Id9zI6p LWoygMWAMhyCkMGa4gjyCe4vz1cKOKcQ -----END CERTIFICATE-----Generated at Sat Apr 5 03:50:09 2025 by rpki-client