$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft File: 7CxkBsqh85689Fh1MVANVrlTYsA.mft (raw, json) Hash identifier: Td95y82eXUAz+RcgPFdyvlcr++RuHPNkH29w0dnjh1I= Subject key identifier: 7D:47:92:CB:36:BC:A8:E2:0C:40:95:16:4B:ED:B0:36:91:45:4F:72 Authority key identifier: EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0 Certificate issuer: /CN=A9174880/serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0 Certificate serial: 3493 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft Manifest number: 346D Signing time: Fri 14 Feb 2025 14:17:01 +0000 Manifest this update: Fri 14 Feb 2025 14:17:00 +0000 Manifest next update: Fri 21 Feb 2025 14:17:00 +0000 Files and hashes: 1: 7CxkBsqh85689Fh1MVANVrlTYsA.crl (hash: lcmdrPy6rdXC6EikAyi7i5oJmVffGRlb8piB4XlpJQQ=) 2: 3768DFB41C6011EEAF58FB61C4F9AE02.roa (hash: Un+gRmwEe7RmL1YJ6V7sBXAGRc3bNfxPT16yGupUBnU=) 3: 316EEFD4AAE511E68EBE4D52C4F9AE02.roa (hash: JRg1LZXcFPzNHPCZgdhpiNiCJWsLCkY/WCIHJGUF1Yc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13459 (0x3493) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880 Validity Not Before: Feb 14 14:17:00 2025 GMT Not After : Feb 21 14:17:00 2025 GMT Subject: CN=67af505c-c357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d8:f5:02:7f:62:e8:e4:7a:2a:3b:c6:eb:e8: 16:61:ee:c3:8f:19:0c:02:44:0d:88:f0:10:36:29: 96:d0:33:b7:10:75:dc:29:cf:ad:04:6c:51:da:58: 46:3d:dd:3b:b6:79:2f:c1:96:8f:43:b1:d7:f5:a5: 31:78:16:c6:b9:34:f0:bc:4a:b1:f1:09:13:cd:2d: 24:ef:20:68:e3:f9:59:54:61:5b:a3:d8:7a:6a:66: eb:42:96:f1:70:28:1d:c3:72:c6:47:49:7d:a8:30: 04:1c:45:50:06:ea:2c:48:89:ad:4e:18:d0:5c:af: ee:39:f9:79:0d:a6:9a:d3:1e:19:26:67:b4:31:13: 79:ad:89:bf:30:2b:ec:b9:ea:fc:5a:c6:ce:54:bd: 0a:24:d6:aa:71:bd:0c:26:15:07:7e:23:41:c2:3d: 73:30:e8:25:e0:0f:5d:fc:9a:30:ff:04:ba:11:f4: b7:03:bc:85:a2:41:34:53:29:08:f2:6d:6d:ed:13: ee:ef:96:e0:0e:70:a8:e1:29:b8:89:ca:45:58:6d: b9:7d:43:46:74:79:ed:b2:02:47:be:58:27:9a:c1: 6f:39:7d:2e:4b:51:e5:ec:66:bf:c4:fd:3d:54:62: 0d:05:93:4e:ed:f6:72:33:16:66:0a:c4:a4:ec:bf: 99:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:47:92:CB:36:BC:A8:E2:0C:40:95:16:4B:ED:B0:36:91:45:4F:72 X509v3 Authority Key Identifier: keyid:EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:1b:b2:00:35:a5:06:d7:da:e7:d0:46:73:4b:5a:e6:27:14: 2a:c8:02:22:c1:e0:e0:31:3e:21:d6:30:f2:e4:3f:c0:d5:cb: 18:67:ee:e8:54:5f:89:be:1c:3f:34:3a:a4:cd:92:b8:52:04: a3:f4:44:b6:17:d4:cb:5e:38:66:bb:30:80:aa:c6:5d:50:e1: 6c:bc:bb:7b:2b:a2:ec:8c:d1:f6:36:3e:09:3c:f5:e4:7f:1e: 0c:07:48:7f:8f:0f:0f:21:b3:68:53:f6:1b:1e:38:b7:39:1a: f4:3d:13:f4:99:49:e8:fa:7e:48:3e:47:e1:3b:fd:8e:79:88: c3:06:8c:76:0f:8a:68:cf:0c:13:01:23:05:d5:ad:03:35:b2: bc:16:f8:97:94:b9:cf:f6:62:6b:6b:d0:f6:39:89:83:10:b3: 69:68:58:9e:08:8b:f8:1f:36:80:d5:da:cd:71:20:71:ec:79: b5:16:52:52:a1:f4:c4:c8:81:c1:e2:b4:0f:84:04:51:4a:0e: 0b:c3:1b:8d:2a:61:20:d9:dd:9b:21:4b:0d:53:fa:e2:4d:a4: 53:01:f9:68:79:77:fe:20:b1:f3:8b:2a:ea:4e:f6:e6:c5:90: ea:29:9f:c5:e9:b3:59:db:f4:7b:4e:78:be:48:2c:7b:8f:fb: 38:f2:9e:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKEVDMkM2NDA2Q0FBMUYzOUVCQ0Y0NTg3NTMxNTAwRDU2 Qjk1MzYyQzAwHhcNMjUwMjE0MTQxNzAwWhcNMjUwMjIxMTQxNzAwWjAYMRYwFAYD VQQDEw02N2FmNTA1Yy1jMzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Nj1An9i6OR6KjvG6+gWYe7DjxkMAkQNiPAQNimW0DO3EHXcKc+tBGxR2lhG Pd07tnkvwZaPQ7HX9aUxeBbGuTTwvEqx8QkTzS0k7yBo4/lZVGFbo9h6ambrQpbx cCgdw3LGR0l9qDAEHEVQBuosSImtThjQXK/uOfl5Daaa0x4ZJme0MRN5rYm/MCvs uer8WsbOVL0KJNaqcb0MJhUHfiNBwj1zMOgl4A9d/Jow/wS6EfS3A7yFokE0UykI 8m1t7RPu75bgDnCo4Sm4icpFWG25fUNGdHntsgJHvlgnmsFvOX0uS1Hl7Ga/xP09 VGINBZNO7fZyMxZmCsSk7L+ZFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1Hkss2 vKjiDECVFkvtsDaRRU9yMB8GA1UdIwQYMBaAFOwsZAbKofOevPRYdTFQDVa5U2LA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC80RTg2NDUwQzFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1Njg5RmgxTVZBTlZybFRZ c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdDeGtCc3FoODU2ODlGaDFNVkFOVnJsVFlzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC80RTg2NDUwQzFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1 Njg5RmgxTVZBTlZybFRZc0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcG7IANaUG19rn0EZzS1rmJxQqyAIiweDgMT4h1jDy5D/A1csYZ+7o VF+Jvhw/NDqkzZK4UgSj9ES2F9TLXjhmuzCAqsZdUOFsvLt7K6LsjNH2Nj4JPPXk fx4MB0h/jw8PIbNoU/YbHji3ORr0PRP0mUno+n5IPkfhO/2OeYjDBox2D4pozwwT ASMF1a0DNbK8FviXlLnP9mJra9D2OYmDELNpaFieCIv4HzaA1drNcSBx7Hm1FlJS ofTEyIHB4rQPhARRSg4LwxuNKmEg2d2bIUsNU/riTaRTAfloeXf+ILHziyrqTvbm xZDqKZ/F6bNZ2/R7Tni+SCx7j/s48p5t -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:47 2025 by rpki-client