$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft File: 7CxkBsqh85689Fh1MVANVrlTYsA.mft (raw, json) Hash identifier: oTDfyJnA9yn+QoBXClTyQPcxnCGl1GqUjtFMhIZrlvI= Subject key identifier: 16:10:65:14:DB:36:C0:F0:17:96:AF:AD:28:E8:9C:1D:17:68:EF:C2 Authority key identifier: EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0 Certificate issuer: /CN=A9174880/serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0 Certificate serial: 34A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft Manifest number: 347A Signing time: Wed 12 Mar 2025 14:16:45 +0000 Manifest this update: Wed 12 Mar 2025 14:16:44 +0000 Manifest next update: Wed 19 Mar 2025 14:16:44 +0000 Files and hashes: 1: 7CxkBsqh85689Fh1MVANVrlTYsA.crl (hash: mi6mJxp0ePTpe9ryOQwCUVaiUIIJGcmdUmDVQ54mI+o=) 2: 3768DFB41C6011EEAF58FB61C4F9AE02.roa (hash: Un+gRmwEe7RmL1YJ6V7sBXAGRc3bNfxPT16yGupUBnU=) 3: 316EEFD4AAE511E68EBE4D52C4F9AE02.roa (hash: JRg1LZXcFPzNHPCZgdhpiNiCJWsLCkY/WCIHJGUF1Yc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 14:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13472 (0x34a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880 Validity Not Before: Mar 12 14:16:44 2025 GMT Not After : Mar 19 14:16:44 2025 GMT Subject: CN=67d1974d-5766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:59:b3:92:bc:86:c8:28:3b:1d:66:d3:dd:b5: 5e:6d:19:b3:b3:74:b3:c0:76:ff:6e:11:a5:6a:13: 84:d9:77:e4:52:50:a1:12:0a:05:ca:71:e1:75:19: cb:da:d8:87:45:d9:ce:fb:f3:9a:4a:c9:35:0f:5a: c9:4f:dc:a3:a3:2c:01:0e:7a:58:ed:da:f1:6f:7c: 47:7b:ac:9d:c6:8d:cd:f0:f3:b3:eb:ff:4f:2e:02: ec:fe:39:33:a7:c2:d1:8a:da:13:7f:33:5f:3c:b0: 3a:da:37:78:7a:67:75:14:61:8f:cf:e4:98:fb:7f: a3:3f:3a:96:73:9a:18:72:70:4d:42:2d:fc:f6:46: 92:c1:40:54:7b:fe:5e:13:49:a6:c9:40:1b:65:52: 62:7c:36:0e:3b:e2:70:00:8d:fb:93:b9:d5:11:13: 2e:cd:b3:4e:4c:98:30:7f:03:21:ab:31:7f:27:57: 02:ed:3d:fd:02:6c:73:54:96:c3:4c:35:fd:86:0b: bc:3a:48:ee:25:65:d8:a3:dd:cd:e2:d1:2d:30:93: f7:39:85:b4:98:20:55:52:61:85:c6:d3:ef:30:16: 0c:d6:ba:7a:99:b8:e2:e5:3e:69:97:c6:be:f8:bf: 0e:33:2a:44:9e:28:04:3d:8f:54:2d:89:7b:3b:64: 18:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:10:65:14:DB:36:C0:F0:17:96:AF:AD:28:E8:9C:1D:17:68:EF:C2 X509v3 Authority Key Identifier: keyid:EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:62:48:70:d2:2c:8c:77:66:6f:e2:5a:e9:0d:6f:ee:48:54: a4:a6:d9:1d:1b:27:f4:18:02:2d:37:d9:a4:fc:0b:cd:33:d1: 27:1b:0d:28:03:ea:bf:a5:18:a3:01:45:72:34:b3:74:25:f6: c9:e8:98:05:23:52:a9:e7:71:59:0c:20:33:54:05:f2:c4:5b: 41:11:aa:6d:19:ac:9c:72:3e:dc:c5:1d:8b:fb:64:ea:f4:68: 70:99:9d:1a:d7:2e:72:2d:d6:5f:12:12:68:22:fc:2e:fa:79: f0:8d:0c:33:af:2f:35:b0:7a:79:08:84:75:d8:a9:8e:4d:94: 34:2f:c5:f9:b0:89:6b:e1:cc:a2:02:a5:8e:54:f6:a0:b4:2c: c8:79:3c:a4:82:61:70:09:5c:01:10:7b:05:d5:13:61:fb:0c: 6b:c2:9b:7f:4e:83:ec:b4:ad:9a:bd:c1:7e:b7:94:63:f7:57: 41:c3:10:8c:04:77:54:fa:10:10:f5:3f:a3:9f:7f:70:1f:98: c3:ce:98:47:73:75:b4:40:a0:be:85:ae:88:6b:aa:14:74:e7: f6:f4:1a:ea:50:8e:9f:6a:fa:71:b3:d7:8a:c3:a0:a5:49:bf: a3:af:ef:83:e6:46:28:15:af:16:85:6a:1e:a6:d0:93:e4:f2: d3:c8:9d:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKEVDMkM2NDA2Q0FBMUYzOUVCQ0Y0NTg3NTMxNTAwRDU2 Qjk1MzYyQzAwHhcNMjUwMzEyMTQxNjQ0WhcNMjUwMzE5MTQxNjQ0WjAYMRYwFAYD VQQDEw02N2QxOTc0ZC01NzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1mzkryGyCg7HWbT3bVebRmzs3SzwHb/bhGlahOE2XfkUlChEgoFynHhdRnL 2tiHRdnO+/OaSsk1D1rJT9yjoywBDnpY7drxb3xHe6ydxo3N8POz6/9PLgLs/jkz p8LRitoTfzNfPLA62jd4emd1FGGPz+SY+3+jPzqWc5oYcnBNQi389kaSwUBUe/5e E0mmyUAbZVJifDYOO+JwAI37k7nVERMuzbNOTJgwfwMhqzF/J1cC7T39AmxzVJbD TDX9hgu8OkjuJWXYo93N4tEtMJP3OYW0mCBVUmGFxtPvMBYM1rp6mbji5T5pl8a+ +L8OMypEnigEPY9ULYl7O2QY4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBYQZRTb NsDwF5avrSjonB0XaO/CMB8GA1UdIwQYMBaAFOwsZAbKofOevPRYdTFQDVa5U2LA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC80RTg2NDUwQzFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1Njg5RmgxTVZBTlZybFRZ c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdDeGtCc3FoODU2ODlGaDFNVkFOVnJsVFlzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC80RTg2NDUwQzFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1 Njg5RmgxTVZBTlZybFRZc0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaYkhw0iyMd2Zv4lrpDW/uSFSkptkdGyf0GAItN9mk/AvNM9EnGw0o A+q/pRijAUVyNLN0JfbJ6JgFI1Kp53FZDCAzVAXyxFtBEaptGayccj7cxR2L+2Tq 9GhwmZ0a1y5yLdZfEhJoIvwu+nnwjQwzry81sHp5CIR12KmOTZQ0L8X5sIlr4cyi AqWOVPagtCzIeTykgmFwCVwBEHsF1RNh+wxrwpt/ToPstK2avcF+t5Rj91dBwxCM BHdU+hAQ9T+jn39wH5jDzphHc3W0QKC+ha6Ia6oUdOf29BrqUI6favpxs9eKw6Cl Sb+jr++D5kYoFa8WhWoeptCT5PLTyJ02 -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:51 2025 by rpki-client