$ rpki-client -vvf rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft File: F7t0v8FLOUo_7aIb2MhcQePFu_E.mft (raw, json) Hash identifier: 7Y5FzIwJWMzxinDa9oF5C/WOx48LJ1V4JaK4m+1Cmp0= Subject key identifier: 27:1E:91:71:3C:2A:AF:FF:0B:CE:4C:21:44:63:25:2B:1A:0C:4C:22 Authority key identifier: 17:BB:74:BF:C1:4B:39:4A:3F:ED:A2:1B:D8:C8:5C:41:E3:C5:BB:F1 Certificate issuer: /CN=A912BFC5/serialNumber=17BB74BFC14B394A3FEDA21BD8C85C41E3C5BBF1 Certificate serial: 3487 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft Manifest number: 3487 Signing time: Fri 30 May 2025 14:16:29 +0000 Manifest this update: Fri 30 May 2025 14:16:28 +0000 Manifest next update: Fri 06 Jun 2025 14:16:28 +0000 Files and hashes: 1: F7t0v8FLOUo_7aIb2MhcQePFu_E.crl (hash: TOIa5fsOPx7z+dIjKLV3POf568m1IeXjUeo8lM3Bg5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.crl rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 14:16:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13447 (0x3487) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BFC5, serialNumber=17BB74BFC14B394A3FEDA21BD8C85C41E3C5BBF1 Validity Not Before: May 30 14:16:28 2025 GMT Not After : Jun 6 14:16:28 2025 GMT Subject: CN=6839bdbc-6eab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2f:fe:50:78:29:e5:20:91:23:f8:34:b4:e4: c3:05:8d:f7:c3:33:8e:81:56:70:10:a9:ff:f8:f8: 37:73:07:b4:11:2a:cc:b8:2a:8e:54:dc:ef:02:06: 09:a3:1c:fc:f5:dd:48:75:18:97:38:0f:50:39:18: 94:47:87:f4:51:cb:a2:50:a7:09:88:01:6c:23:27: fa:b8:21:d2:0e:a7:c8:fd:47:a0:56:63:1e:84:d8: 17:03:58:38:a1:27:a5:a4:25:77:3a:f6:9d:9a:71: 85:02:f1:eb:d8:f2:b2:40:2d:9a:8a:c9:1e:65:d4: 64:40:ef:85:e1:47:2d:a6:b1:06:5e:bc:d8:78:89: ed:c3:b4:00:34:da:b4:f8:c5:a5:d7:06:a8:13:f1: 65:a2:29:a2:78:ed:0a:30:32:14:f1:eb:dd:30:a6: e0:45:b7:c8:79:ed:a9:a4:98:1b:03:df:a8:e3:bc: 9f:5f:ba:75:c2:9a:b6:bc:21:2b:29:98:e6:19:77: c6:6e:b2:b1:82:33:7f:6c:80:0a:26:a5:a0:d0:74: e0:b6:f4:6a:0e:44:ee:d5:db:4b:7b:19:aa:91:69: 3e:29:f5:a8:c7:3a:eb:a2:3f:01:53:9e:80:fe:67: c2:70:8e:0c:79:f6:4b:18:95:3f:28:3d:b4:d0:8f: 8f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1E:91:71:3C:2A:AF:FF:0B:CE:4C:21:44:63:25:2B:1A:0C:4C:22 X509v3 Authority Key Identifier: keyid:17:BB:74:BF:C1:4B:39:4A:3F:ED:A2:1B:D8:C8:5C:41:E3:C5:BB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:a5:06:3e:dd:59:02:d5:f0:71:94:b6:02:27:05:91:1b:83: c0:ca:fe:18:2e:9a:6f:7a:13:df:c2:d1:4c:6c:32:f9:9e:c0: 34:0c:b7:22:66:58:6d:df:6d:61:b3:7b:2f:ef:16:02:54:f1: 6b:f8:eb:4c:bd:b3:44:fa:f0:8e:fb:df:9d:4c:48:15:a7:7d: 73:87:ed:cf:43:08:31:4e:f4:e1:6a:29:80:2b:f1:4d:db:ab: 30:fe:21:12:3e:4d:ef:cd:01:d6:59:fe:aa:53:01:bb:d8:33: 0a:62:de:8d:8e:4e:64:ff:72:99:ab:55:a0:b4:d6:6d:20:0d: 65:7e:5a:55:aa:3f:77:6e:43:08:5b:43:c8:a2:4c:5c:be:b7: 45:4d:a7:c4:ac:f3:94:23:fe:98:a1:08:b0:19:8f:c6:b2:53: b1:ef:a5:37:ce:44:69:94:7c:5e:45:16:5e:ed:a1:f5:26:b5: 70:bc:3f:ca:60:34:05:5e:3d:70:f1:9b:e2:8f:00:ac:c3:db: c2:0b:77:8b:38:eb:6f:a4:5a:a3:9f:78:11:6e:a8:9a:bf:57: 77:c8:f7:8d:0e:d2:15:7c:3e:c9:97:4d:f7:08:f3:50:5c:de: ef:24:77:ea:7d:6f:67:66:7e:da:9e:f5:ce:48:ce:ae:7e:b0: 10:a7:b2:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJGQzUxMTAvBgNVBAUTKDE3QkI3NEJGQzE0QjM5NEEzRkVEQTIxQkQ4Qzg1QzQx RTNDNUJCRjEwHhcNMjUwNTMwMTQxNjI4WhcNMjUwNjA2MTQxNjI4WjAYMRYwFAYD VQQDEw02ODM5YmRiYy02ZWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAki/+UHgp5SCRI/g0tOTDBY33wzOOgVZwEKn/+Pg3cwe0ESrMuCqOVNzvAgYJ oxz89d1IdRiXOA9QORiUR4f0UcuiUKcJiAFsIyf6uCHSDqfI/UegVmMehNgXA1g4 oSelpCV3OvadmnGFAvHr2PKyQC2aiskeZdRkQO+F4UctprEGXrzYeIntw7QANNq0 +MWl1waoE/FloimieO0KMDIU8evdMKbgRbfIee2ppJgbA9+o47yfX7p1wpq2vCEr KZjmGXfGbrKxgjN/bIAKJqWg0HTgtvRqDkTu1dtLexmqkWk+KfWoxzrroj8BU56A /mfCcI4MefZLGJU/KD200I+PgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcekXE8 Kq//C85MIURjJSsaDEwiMB8GA1UdIwQYMBaAFBe7dL/BSzlKP+2iG9jIXEHjxbvx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkZDNS8wRDVDNzk0ODFE NkExMUUyQkIyMUIyQTcwOEIwMkNEMi9GN3QwdjhGTE9Vb183YUliMk1oY1FlUEZ1 X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y3dDB2OEZMT1VvXzdhSWIyTWhjUWVQRnVfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkZDNS8wRDVDNzk0ODFENkExMUUyQkIyMUIyQTcwOEIwMkNEMi9GN3QwdjhGTE9V b183YUliMk1oY1FlUEZ1X0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtpQY+3VkC1fBxlLYCJwWRG4PAyv4YLppvehPfwtFMbDL5nsA0DLci Zlht321hs3sv7xYCVPFr+OtMvbNE+vCO+9+dTEgVp31zh+3PQwgxTvThaimAK/FN 26sw/iESPk3vzQHWWf6qUwG72DMKYt6Njk5k/3KZq1WgtNZtIA1lflpVqj93bkMI W0PIokxcvrdFTafErPOUI/6YoQiwGY/GslOx76U3zkRplHxeRRZe7aH1JrVwvD/K YDQFXj1w8ZvijwCsw9vCC3eLOOtvpFqjn3gRbqiav1d3yPeNDtIVfD7Jl033CPNQ XN7vJHfqfW9nZn7anvXOSM6ufrAQp7J/ -----END CERTIFICATE-----Generated at Sat May 31 15:31:50 2025 by rpki-client