$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/1/7A443962573EC01D5131651F90F46DA19AFC21D2.mft File: 7A443962573EC01D5131651F90F46DA19AFC21D2.mft (raw, json) Hash identifier: fvtR9BjsnKKBBdOjJwvJ4v9AVba05IlHd+bpP1cKs6M= Subject key identifier: 33:5A:79:49:BE:F0:F4:E3:E1:5B:20:F8:70:F6:AE:97:96:0B:1B:B7 Authority key identifier: 7A:44:39:62:57:3E:C0:1D:51:31:65:1F:90:F4:6D:A1:9A:FC:21:D2 Certificate issuer: /CN=A917447B0000/serialNumber=7A443962573EC01D5131651F90F46DA19AFC21D2 Certificate serial: 485D1AE5D299951C2E90BDE88259584FDBC95317 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ekQ5Ylc-wB1RMWUfkPRtoZr8IdI.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/7A443962573EC01D5131651F90F46DA19AFC21D2.mft Manifest number: 0110 Signing time: Tue 08 Apr 2025 01:21:07 +0000 Manifest this update: Tue 08 Apr 2025 01:16:07 +0000 Manifest next update: Wed 09 Apr 2025 03:59:07 +0000 Files and hashes: 1: 7A443962573EC01D5131651F90F46DA19AFC21D2.crl (hash: OuJ27GBkFi5Tb4SSCMxDIYtbUqIzJNmXN5HEyQPBsq0=) 2: 323030313a6466343a353134303a3a2f34342d3438203d3e20313533333436.roa (hash: vq1Dx7sG4WRtaFPZjc9wFRugfLv/UBgy5UEajCDuBjc=) 3: 323030313a6466343a353134393a3a2f34382d3438203d3e2039343936.roa (hash: pfnGKBjA45icftUJKtSzNqxMYBnHP4IFEX9St9ZFSbc=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/7A443962573EC01D5131651F90F46DA19AFC21D2.crl rsync://rpki.sub.apnic.net/repository/A917447B0000/1/7A443962573EC01D5131651F90F46DA19AFC21D2.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ekQ5Ylc-wB1RMWUfkPRtoZr8IdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 03:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:5d:1a:e5:d2:99:95:1c:2e:90:bd:e8:82:59:58:4f:db:c9:53:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917447B0000 Validity Not Before: Apr 8 01:16:07 2025 GMT Not After : Apr 9 03:59:07 2025 GMT Subject: CN=335A7949BEF0F4E3E15B20F870F6AE97960B1BB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e3:fa:d1:e5:ca:66:77:90:e0:59:59:7b:ce: 09:ba:e8:16:ec:14:1f:d1:c2:f5:b8:ab:c2:2b:0c: 34:47:1a:0a:2b:e0:77:84:3b:6d:f3:a2:dc:a5:fd: d6:8d:a7:3d:69:46:7d:e7:26:de:85:8a:4b:26:78: fa:f0:ed:69:1b:8e:ec:ab:31:0b:14:7c:2a:23:e7: ad:3b:ff:72:17:80:fb:7c:f9:56:12:29:2b:02:74: 62:5b:48:c3:96:e8:c9:30:b9:91:e8:4d:af:d4:1e: ed:4a:c5:e9:13:bd:7a:3e:8e:7d:8d:24:75:0a:e9: ae:a8:f6:a7:01:f0:f0:70:34:c1:8f:8e:33:c0:ee: 0e:fc:af:24:b7:8c:ee:14:d6:ad:e3:27:ec:73:be: 1b:a6:9f:05:bd:b0:22:fa:6b:fe:a7:8d:6f:cb:f9: 19:d6:ff:25:ab:b0:e1:0a:79:5a:41:d9:8f:63:dd: c2:09:70:72:b7:eb:a5:70:63:0c:53:00:30:0e:f0: bb:eb:21:2c:a1:c5:3f:2e:80:f9:8f:5d:5d:d8:9f: 07:3e:d7:45:26:b0:8a:6a:ab:76:78:b8:6a:e7:b8: 3b:b4:32:48:ef:0b:e0:90:d4:d1:90:2a:f6:65:37: 76:29:ce:dd:52:b6:4c:c3:f2:c6:ac:86:d0:0a:c0: 6b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5A:79:49:BE:F0:F4:E3:E1:5B:20:F8:70:F6:AE:97:96:0B:1B:B7 X509v3 Authority Key Identifier: keyid:7A:44:39:62:57:3E:C0:1D:51:31:65:1F:90:F4:6D:A1:9A:FC:21:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/7A443962573EC01D5131651F90F46DA19AFC21D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ekQ5Ylc-wB1RMWUfkPRtoZr8IdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/7A443962573EC01D5131651F90F46DA19AFC21D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:10:78:aa:8b:17:b9:9c:88:19:ed:f0:34:a0:29:7f:b8:c2: 01:a8:1c:ed:0c:42:a1:32:3b:e1:ff:07:be:a6:8f:21:8d:f5: e9:40:8d:48:84:ee:d5:ac:23:a7:79:79:0b:10:9d:6e:12:fb: 5d:94:c6:70:20:5c:a1:6e:5e:69:83:ac:05:9a:6b:79:f5:71: 49:70:df:44:d0:a0:ad:97:40:19:80:63:57:6d:7c:b9:ae:74: 41:8c:2a:c8:7e:7c:71:03:59:4d:c0:e1:46:0b:e1:ca:e2:20: 15:f6:a0:a3:35:aa:15:10:9a:47:10:8d:a6:b5:15:4b:30:ef: 79:52:e8:d3:65:1c:aa:ba:d7:fa:b6:bc:49:0f:ba:8f:51:4d: 0d:48:e1:a3:a6:f3:99:2c:fb:ca:11:f3:92:2a:89:59:20:91: 8f:45:e8:17:c9:37:ea:cf:56:36:23:bb:5e:bf:61:00:12:fe: 74:fb:e7:bf:c1:a9:81:f5:ac:6e:8d:b3:9e:8b:24:ce:3a:97: 02:0d:bf:3a:01:cb:2a:33:32:a7:5b:cf:87:e1:e6:91:99:77: 98:80:26:4f:ce:91:c0:de:c4:97:d3:1c:ea:74:d5:60:76:c1: 38:41:6c:31:64:b7:26:65:6f:bf:16:4a:be:a5:8f:bf:46:3a: 07:dd:e5:97 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUSF0a5dKZlRwukL3ogllYT9vJUxcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNzQ0N0IwMDAwMTEwLwYDVQQFEyg3QTQ0Mzk2MjU3 M0VDMDFENTEzMTY1MUY5MEY0NkRBMTlBRkMyMUQyMB4XDTI1MDQwODAxMTYwN1oX DTI1MDQwOTAzNTkwN1owMzExMC8GA1UEAxMoMzM1QTc5NDlCRUYwRjRFM0UxNUIy MEY4NzBGNkFFOTc5NjBCMUJCNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPHj+tHlymZ3kOBZWXvOCbroFuwUH9HC9birwisMNEcaCivgd4Q7bfOi3KX9 1o2nPWlGfecm3oWKSyZ4+vDtaRuO7KsxCxR8KiPnrTv/cheA+3z5VhIpKwJ0YltI w5boyTC5kehNr9Qe7UrF6RO9ej6OfY0kdQrprqj2pwHw8HA0wY+OM8DuDvyvJLeM 7hTWreMn7HO+G6afBb2wIvpr/qeNb8v5Gdb/Jauw4Qp5WkHZj2PdwglwcrfrpXBj DFMAMA7wu+shLKHFPy6A+Y9dXdifBz7XRSawimqrdni4aue4O7QySO8L4JDU0ZAq 9mU3dinO3VK2TMPyxqyG0ArAa5sCAwEAAaOCAhswggIXMB0GA1UdDgQWBBQzWnlJ vvD04+FbIPhw9q6XlgsbtzAfBgNVHSMEGDAWgBR6RDliVz7AHVExZR+Q9G2hmvwh 0jAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3QjAwMDAvMS83QTQ0Mzk2 MjU3M0VDMDFENTEzMTY1MUY5MEY0NkRBMTlBRkMyMUQyLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9la1E1WWxjLXdC MVJNV1Vma1BSdG9acjhJZEkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3 QjAwMDAvMS83QTQ0Mzk2MjU3M0VDMDFENTEzMTY1MUY5MEY0NkRBMTlBRkMyMUQy Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAgBB4qosXuZyIGe3wNKApf7jCAagc7QxCoTI74f8HvqaPIY31 6UCNSITu1awjp3l5CxCdbhL7XZTGcCBcoW5eaYOsBZprefVxSXDfRNCgrZdAGYBj V218ua50QYwqyH58cQNZTcDhRgvhyuIgFfagozWqFRCaRxCNprUVSzDveVLo02Uc qrrX+ra8SQ+6j1FNDUjho6bzmSz7yhHzkiqJWSCRj0XoF8k36s9WNiO7Xr9hABL+ dPvnv8GpgfWsbo2znoskzjqXAg2/OgHLKjMyp1vPh+HmkZl3mIAmT86RwN7El9Mc 6nTVYHbBOEFsMWS3JmVvvxZKvqWPv0Y6B93llw== -----END CERTIFICATE-----Generated at Tue Apr 8 21:21:14 2025 by rpki-client