$ rpki-client -vvf rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft File: fjqkjWfrmWmcArgfcWlt9GWopuU.mft (raw, json) Hash identifier: TjCx/au4+N9vBQV1M0aC6F9+xWtf8EAElQR4ev10Oe8= Subject key identifier: A7:05:81:DB:B7:70:73:08:BB:C9:D9:4F:A0:34:36:9F:14:6C:EC:FF Authority key identifier: 7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5 Certificate issuer: /CN=A9142420/serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft Manifest number: 49 Signing time: Tue 15 Apr 2025 06:07:42 +0000 Manifest this update: Tue 15 Apr 2025 06:07:41 +0000 Manifest next update: Tue 22 Apr 2025 06:07:41 +0000 Files and hashes: 1: fjqkjWfrmWmcArgfcWlt9GWopuU.crl (hash: zEba+41jEH1uSe/w+tJQHMnKgwwEv/DyQbZQw581atI=) 2: E010D234AC8D11EF93B1CB46C4F9AE02.roa (hash: YpSnYb0YINnTM8lhx7+T2YYXN8o6CWyYil8vXxTtBGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 06:07:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142420, serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5 Validity Not Before: Apr 15 06:07:41 2025 GMT Not After : Apr 22 06:07:41 2025 GMT Subject: CN=67fdf7ae-d018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:16:18:55:4f:b4:af:e6:aa:d0:96:e0:10:da: 14:07:cc:dc:3e:3b:ee:73:a2:ef:5b:f5:7b:88:0a: b5:cb:81:2a:41:11:4e:6b:f9:1d:ab:d4:9a:17:2f: 9e:70:94:20:42:0a:80:04:b6:23:3e:62:02:d8:e3: cb:6c:84:db:7b:c7:10:0d:40:1e:92:34:6b:eb:98: e6:85:8e:82:dd:39:f9:83:f6:35:31:3e:25:33:d6: 6e:69:cf:91:28:b3:b4:2e:9d:09:59:34:c7:5c:7a: c3:4c:95:b1:88:c8:a1:dd:a9:aa:d3:7c:25:fd:d8: a8:92:67:38:5f:16:ce:c4:57:d5:b5:ce:29:5c:b2: 13:58:36:16:cf:e0:c5:58:6b:2e:fe:36:e9:0c:d4: c7:a5:3b:e1:0e:af:bf:49:73:34:e0:8c:1c:22:c3: 36:b6:5d:94:61:1f:49:d9:32:9f:d7:92:47:67:a0: 59:5a:aa:b1:e5:01:22:34:74:57:27:ab:0a:5d:d8: d1:b2:58:5b:b4:be:16:7b:a2:04:2d:62:83:6c:ae: 92:eb:2b:b6:c6:62:b3:85:08:04:8a:57:c7:df:31: ee:37:35:18:48:0a:d6:1f:a2:1f:f6:86:38:47:8b: d8:a2:23:db:79:e1:01:41:1f:dc:71:d9:73:69:57: 9a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:05:81:DB:B7:70:73:08:BB:C9:D9:4F:A0:34:36:9F:14:6C:EC:FF X509v3 Authority Key Identifier: keyid:7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:6d:a3:d8:49:71:46:ae:e8:25:d0:9f:f4:a6:f4:99:64:07: 55:6a:d4:70:0f:30:b5:2a:b2:eb:43:90:16:34:90:5d:31:e2: 52:91:6e:d2:06:b7:5a:42:07:65:7a:35:e3:7c:31:e5:26:22: 06:d9:56:66:77:58:6d:94:af:05:ea:58:09:ff:d3:e5:67:f1: 65:9b:85:f8:84:ac:5a:e1:3a:be:c1:94:e0:78:bd:f2:0f:d6: 89:88:4a:27:19:11:df:b6:c8:ea:a1:ff:3d:25:1a:ac:20:57: cb:9d:35:9e:ef:80:b5:2c:1c:16:49:c5:a6:55:12:94:77:dd: 4b:4d:5f:d0:86:55:09:81:50:13:5e:0d:df:93:c1:13:67:96: 83:5f:d1:6f:b2:92:57:4e:74:23:89:18:6d:bd:da:ab:d8:10: 57:20:d3:b0:82:f6:a5:8f:e4:41:9d:20:f8:24:d7:a2:3d:71: 81:dd:8d:d1:72:bf:fb:27:53:a2:9f:8a:30:48:a4:85:b0:78: c3:20:f5:98:37:11:49:47:3d:eb:40:0a:88:b5:14:ee:92:40: cc:99:3b:60:93:ac:ea:ce:de:91:10:f2:c9:be:59:b2:47:63: a9:20:c4:a3:36:b2:87:28:7c:c1:68:d9:0c:8b:5b:7e:cf:9d: 0d:88:cd:b2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjQyMDExMC8GA1UEBRMoN0UzQUE0OEQ2N0VCOTk2OTlDMDJCODFGNzE2OTZERjQ2 NUE4QTZFNTAeFw0yNTA0MTUwNjA3NDFaFw0yNTA0MjIwNjA3NDFaMBgxFjAUBgNV BAMTDTY3ZmRmN2FlLWQwMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJFhhVT7Sv5qrQluAQ2hQHzNw+O+5zou9b9XuICrXLgSpBEU5r+R2r1JoXL55w lCBCCoAEtiM+YgLY48tshNt7xxANQB6SNGvrmOaFjoLdOfmD9jUxPiUz1m5pz5Eo s7QunQlZNMdcesNMlbGIyKHdqarTfCX92KiSZzhfFs7EV9W1zilcshNYNhbP4MVY ay7+NukM1MelO+EOr79JczTgjBwiwza2XZRhH0nZMp/XkkdnoFlaqrHlASI0dFcn qwpd2NGyWFu0vhZ7ogQtYoNsrpLrK7bGYrOFCASKV8ffMe43NRhICtYfoh/2hjhH i9iiI9t54QFBH9xx2XNpV5qJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpwWB27dw cwi7ydlPoDQ2nxRs7P8wHwYDVR0jBBgwFoAUfjqkjWfrmWmcArgfcWlt9GWopuUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNDIwL0M0MkIzM0Q0QUM4 RDExRUY4ODYwQkUzNEM0RjlBRTAyL2ZqcWtqV2ZybVdtY0FyZ2ZjV2x0OUdXb3B1 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZmpxa2pXZnJtV21jQXJnZmNXbHQ5R1dvcHVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy NDIwL0M0MkIzM0Q0QUM4RDExRUY4ODYwQkUzNEM0RjlBRTAyL2ZqcWtqV2ZybVdt Y0FyZ2ZjV2x0OUdXb3B1VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE1to9hJcUau6CXQn/Sm9JlkB1Vq1HAPMLUqsutDkBY0kF0x4lKRbtIG t1pCB2V6NeN8MeUmIgbZVmZ3WG2UrwXqWAn/0+Vn8WWbhfiErFrhOr7BlOB4vfIP 1omISicZEd+2yOqh/z0lGqwgV8udNZ7vgLUsHBZJxaZVEpR33UtNX9CGVQmBUBNe Dd+TwRNnloNf0W+ykldOdCOJGG292qvYEFcg07CC9qWP5EGdIPgk16I9cYHdjdFy v/snU6KfijBIpIWweMMg9Zg3EUlHPetACoi1FO6SQMyZO2CTrOrO3pEQ8sm+WbJH Y6kgxKM2socofMFo2QyLW37PnQ2IzbI= -----END CERTIFICATE-----Generated at Wed Apr 16 17:15:37 2025 by rpki-client