$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft File: 7ALNBrdHN4ssHMWiIebghmHagiU.mft (raw, json) Hash identifier: FFgULwzjIeDcKb+HcrlQMarU/nrjEe1hZEsrdceoXUw= Subject key identifier: 46:16:8E:CA:10:26:D3:60:76:57:19:92:B4:8A:E4:5B:60:77:3A:F6 Authority key identifier: EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25 Certificate issuer: /CN=A912142C/serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft Manifest number: 49 Signing time: Mon 12 May 2025 14:27:36 +0000 Manifest this update: Mon 12 May 2025 14:27:36 +0000 Manifest next update: Mon 19 May 2025 14:27:36 +0000 Files and hashes: 1: 7ALNBrdHN4ssHMWiIebghmHagiU.crl (hash: GErtK3U3gTARVR5yhFpkF4TzITSzjo7pIJNssmBW7gA=) 2: AE5D0E84EEBD11EFBA2D7586C4F9AE02.roa (hash: aHRMsUiiCZcaoYDZ7FKWAlCPT4264RLq5QWpPmMZea0=) 3: 4F5B2B86EEBE11EF846DA10BC4F9AE02.roa (hash: GDTBPp4WE9Ezmla7awNs0CkIUNNSTnoRfm7f06nojtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:27:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912142C, serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225 Validity Not Before: May 12 14:27:36 2025 GMT Not After : May 19 14:27:36 2025 GMT Subject: CN=68220558-8ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:34:83:1f:38:79:98:e5:85:85:b5:6b:42:6e: fa:fe:b6:01:f4:d3:a0:ae:61:84:5e:bc:92:5f:d0: 80:ba:47:d1:f1:d4:a3:b8:2c:f2:26:2d:9e:56:8b: 86:1c:bd:fc:8c:5d:eb:ce:45:a8:d1:ce:8e:d8:5b: 96:ed:81:30:89:07:97:19:16:8f:4a:b3:46:1e:93: f9:2f:96:3f:e8:dd:37:58:3c:12:92:b9:f6:22:58: 51:48:9c:59:61:3d:1c:5e:b9:2d:fe:b6:0c:d8:56: 3f:00:9d:5f:bd:43:44:85:f1:76:91:1e:ae:05:1e: 52:c2:30:53:4c:b3:e1:71:c9:97:59:99:6a:24:03: 09:18:c9:93:d0:5c:9c:d4:64:fa:d3:2c:b1:70:f6: 28:6a:a2:3e:5c:bb:bf:16:ba:c6:21:af:f5:f6:55: 72:e6:d3:76:42:de:ef:2b:5e:e1:2f:d1:82:00:4a: 1d:e7:4c:ab:09:d3:87:26:9f:5d:a8:8a:e9:3e:e3: a4:c3:c3:45:9d:2b:29:31:f9:cd:1a:c7:c2:e8:52: 32:f3:c3:f0:39:ca:65:68:a5:22:26:b6:10:65:3c: b8:5e:09:47:87:e4:d5:6d:3e:8a:f3:09:63:e9:b9: 81:dc:c8:8e:d7:dc:cf:01:cd:c2:07:7c:20:dd:24: a7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:16:8E:CA:10:26:D3:60:76:57:19:92:B4:8A:E4:5B:60:77:3A:F6 X509v3 Authority Key Identifier: keyid:EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:14:5e:28:9a:d8:31:1e:81:9f:d4:83:1a:1c:74:29:c9:ac: 1d:7a:a2:56:ae:f0:6e:20:54:74:dc:f3:e6:ce:56:ad:2d:57: ab:fe:74:a6:6e:01:6d:97:bb:1c:b6:17:aa:5e:fc:af:bb:ef: d5:24:27:7a:d2:ce:a0:4c:92:51:e2:68:17:f7:66:01:e6:c4: de:54:1d:7c:65:f9:2e:29:77:3d:fe:12:6b:98:c7:6e:d0:b4: 19:43:e0:0a:76:cc:40:32:44:c6:09:7b:cd:82:e3:fe:cc:50: d9:43:86:f7:03:7d:b7:97:6d:ae:49:5e:df:2c:79:d0:b1:ce: b9:22:73:f4:aa:2d:42:15:12:50:bb:5f:6a:16:fa:e2:af:71: b2:a2:cf:c1:38:ce:4f:e5:e4:a5:31:75:30:75:c9:40:65:3f: 00:ae:b7:eb:2d:0f:ce:fb:ba:c5:b7:a7:12:79:8a:47:49:ad: ad:bb:5f:88:47:a3:97:6b:64:45:7d:58:33:e8:4b:38:60:e7: c8:33:89:51:49:52:72:d3:db:cc:7a:7a:fe:47:a4:ca:be:52: 0b:6e:69:40:a6:ad:34:07:48:dd:43:f2:8c:9a:cf:62:6e:6d: 8a:9b:e6:98:50:31:ec:83:dd:ee:b5:e8:6b:15:29:78:b0:2e: 3c:22:b5:2a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MTQyQzExMC8GA1UEBRMoRUMwMkNEMDZCNzQ3Mzc4QjJDMUNDNUEyMjFFNkUwODY2 MURBODIyNTAeFw0yNTA1MTIxNDI3MzZaFw0yNTA1MTkxNDI3MzZaMBgxFjAUBgNV BAMTDTY4MjIwNTU4LThmZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCNIMfOHmY5YWFtWtCbvr+tgH006CuYYRevJJf0IC6R9Hx1KO4LPImLZ5Wi4Yc vfyMXevORajRzo7YW5btgTCJB5cZFo9Ks0Yek/kvlj/o3TdYPBKSufYiWFFInFlh PRxeuS3+tgzYVj8AnV+9Q0SF8XaRHq4FHlLCMFNMs+FxyZdZmWokAwkYyZPQXJzU ZPrTLLFw9ihqoj5cu78WusYhr/X2VXLm03ZC3u8rXuEv0YIASh3nTKsJ04cmn12o iuk+46TDw0WdKykx+c0ax8LoUjLzw/A5ymVopSImthBlPLheCUeH5NVtPorzCWPp uYHcyI7X3M8BzcIHfCDdJKcpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURhaOyhAm 02B2VxmStIrkW2B3OvYwHwYDVR0jBBgwFoAU7ALNBrdHN4ssHMWiIebghmHagiUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIxNDJDLzJDMkY2RTUwQ0VF OTExRUZCREZEM0E2N0M0RjlBRTAyLzdBTE5CcmRITjRzc0hNV2lJZWJnaG1IYWdp VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvN0FMTkJyZEhONHNzSE1XaUllYmdobUhhZ2lVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIx NDJDLzJDMkY2RTUwQ0VFOTExRUZCREZEM0E2N0M0RjlBRTAyLzdBTE5CcmRITjRz c0hNV2lJZWJnaG1IYWdpVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMsUXiia2DEegZ/UgxocdCnJrB16olau8G4gVHTc8+bOVq0tV6v+dKZu AW2Xuxy2F6pe/K+779UkJ3rSzqBMklHiaBf3ZgHmxN5UHXxl+S4pdz3+EmuYx27Q tBlD4Ap2zEAyRMYJe82C4/7MUNlDhvcDfbeXba5JXt8sedCxzrkic/SqLUIVElC7 X2oW+uKvcbKiz8E4zk/l5KUxdTB1yUBlPwCut+stD877usW3pxJ5ikdJra27X4hH o5drZEV9WDPoSzhg58gziVFJUnLT28x6ev5HpMq+UgtuaUCmrTQHSN1D8oyaz2Ju bYqb5phQMeyD3e616GsVKXiwLjwitSo= -----END CERTIFICATE-----Generated at Tue May 13 02:31:39 2025 by rpki-client