$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft File: l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft (raw, json) Hash identifier: oEZ/YUkWr4Kit8xczpPgJyHKvqO0Wuhq0TZimcVOeVE= Subject key identifier: 2C:6B:3D:DD:3D:DC:A4:02:BF:94:58:05:C2:E1:9D:24:72:26:85:B1 Authority key identifier: 97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44 Certificate issuer: /CN=A9126A3C/serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft Manifest number: 4A Signing time: Thu 15 May 2025 06:38:55 +0000 Manifest this update: Thu 15 May 2025 06:38:55 +0000 Manifest next update: Thu 22 May 2025 06:38:55 +0000 Files and hashes: 1: l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl (hash: SEqjq93AtMhnx1BY9vr9bVVU+zLPBgU2b0HfYQCFeM8=) 2: F120EB84C6D911EFA447E849C4F9AE02.roa (hash: mo70D3RkkFpkqu5IGLksT/J6Tz0OUu7ujkEgshBAI8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:38:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126A3C, serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944 Validity Not Before: May 15 06:38:55 2025 GMT Not After : May 22 06:38:55 2025 GMT Subject: CN=68258bff-0c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:41:2d:6d:cb:38:a6:72:a1:17:d7:dc:b6:3b: bf:df:c1:3d:79:3d:86:5e:10:ac:39:45:1a:ec:ae: 90:18:64:bb:bd:f5:55:02:9c:50:32:30:89:72:e1: 4f:b8:10:2b:b8:c1:2b:21:e2:dc:14:2f:0e:b8:6d: 15:6a:e2:9e:7a:e3:64:d6:ae:c3:ca:de:a0:c6:94: 27:e0:28:a1:6b:ad:2f:10:43:d1:55:ee:37:48:a3: 08:0d:86:61:11:45:4b:f3:94:09:2b:cd:23:b7:4e: 7e:48:34:c5:3f:f9:3b:dc:4c:a4:f2:fc:02:16:63: ba:9a:f6:54:15:2b:20:72:63:28:61:b0:ac:b0:87: 67:cc:c0:b7:0c:90:39:b3:62:7c:95:6c:cd:8f:53: 10:a5:4b:b6:c6:d1:27:52:4d:51:da:74:88:2f:d4: 23:96:94:b8:25:08:bb:18:b8:20:b8:07:54:61:6a: aa:8b:83:ae:50:00:03:31:75:9b:17:ef:a8:3c:1f: b9:33:c3:ba:22:a9:f2:5d:72:c9:bc:85:c7:45:56: 10:ff:17:b8:51:c1:b2:c2:4b:fb:9d:4f:64:21:88: ec:2c:22:aa:5e:dd:47:86:44:79:fe:b5:d1:92:98: 02:00:0d:4e:65:02:69:f6:fb:e7:e8:57:00:78:c6: 73:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:6B:3D:DD:3D:DC:A4:02:BF:94:58:05:C2:E1:9D:24:72:26:85:B1 X509v3 Authority Key Identifier: keyid:97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:fe:b4:d8:ee:46:aa:88:c2:87:f5:4f:8d:7b:44:73:fd:9c: 04:99:d4:b4:be:97:f6:df:50:57:69:10:53:42:28:6b:cb:61: a9:9e:3e:f1:bb:79:ab:cb:af:4f:4c:15:b9:e3:7e:5b:b7:09: fc:74:0e:f9:ab:66:f8:33:e0:c4:c1:2e:f1:14:f6:47:83:d4: ae:90:09:c9:d7:c5:72:00:eb:82:c6:80:7f:31:78:79:eb:f8: f1:cc:58:0d:a3:52:9e:b7:b0:d7:57:0f:e0:e2:2e:73:93:d6: 25:b8:8f:c1:98:26:f5:6e:e5:f5:ba:8f:da:77:21:35:c8:5e: 09:e5:d9:ee:20:28:37:92:27:8f:d7:b6:6f:1f:2e:ea:13:c0: 95:39:ac:a3:4c:ee:42:12:05:82:b1:f1:78:e1:ef:3d:bc:b4: 4b:53:7d:ee:34:f3:5a:b4:35:2a:f4:47:d3:9f:3d:3e:26:57: da:01:23:b3:c2:7a:1e:cc:aa:5c:ba:26:7c:aa:58:2a:81:60: 1b:a0:4f:67:16:ee:7a:66:aa:04:bb:e0:88:c6:83:08:8b:08: fd:46:da:ea:17:10:36:7f:74:e4:be:e4:1f:cc:48:b9:db:a0: 04:59:6d:60:23:df:ce:50:d7:1e:7c:a9:2a:cc:b7:1a:7b:99: 7e:59:86:ba -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NkEzQzExMC8GA1UEBRMoOTdCMDNEQTJGQjQ1RjU2RTNGNTgyMTYzREY3QkQ5NTA2 OTM5OTk0NDAeFw0yNTA1MTUwNjM4NTVaFw0yNTA1MjIwNjM4NTVaMBgxFjAUBgNV BAMTDTY4MjU4YmZmLTBjMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcQS1tyzimcqEX19y2O7/fwT15PYZeEKw5RRrsrpAYZLu99VUCnFAyMIly4U+4 ECu4wSsh4twULw64bRVq4p5642TWrsPK3qDGlCfgKKFrrS8QQ9FV7jdIowgNhmER RUvzlAkrzSO3Tn5INMU/+TvcTKTy/AIWY7qa9lQVKyByYyhhsKywh2fMwLcMkDmz YnyVbM2PUxClS7bG0SdSTVHadIgv1COWlLglCLsYuCC4B1RhaqqLg65QAAMxdZsX 76g8H7kzw7oiqfJdcsm8hcdFVhD/F7hRwbLCS/udT2QhiOwsIqpe3UeGRHn+tdGS mAIADU5lAmn2++foVwB4xnNJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULGs93T3c pAK/lFgFwuGdJHImhbEwHwYDVR0jBBgwFoAUl7A9ovtF9W4/WCFj33vZUGk5mUQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2QTNDLzczOTBCMzRBQzZB MDExRUY5MjhCNzk2MEM0RjlBRTAyL2w3QTlvdnRGOVc0X1dDRmozM3ZaVUdrNW1V US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbDdBOW92dEY5VzRfV0NGajMzdlpVR2s1bVVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2 QTNDLzczOTBCMzRBQzZBMDExRUY5MjhCNzk2MEM0RjlBRTAyL2w3QTlvdnRGOVc0 X1dDRmozM3ZaVUdrNW1VUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFr+tNjuRqqIwof1T417RHP9nASZ1LS+l/bfUFdpEFNCKGvLYamePvG7 eavLr09MFbnjflu3Cfx0DvmrZvgz4MTBLvEU9keD1K6QCcnXxXIA64LGgH8xeHnr +PHMWA2jUp63sNdXD+DiLnOT1iW4j8GYJvVu5fW6j9p3ITXIXgnl2e4gKDeSJ4/X tm8fLuoTwJU5rKNM7kISBYKx8Xjh7z28tEtTfe4081q0NSr0R9OfPT4mV9oBI7PC eh7Mqly6JnyqWCqBYBugT2cW7npmqgS74IjGgwiLCP1G2uoXEDZ/dOS+5B/MSLnb oARZbWAj385Q1x58qSrMtxp7mX5Zhro= -----END CERTIFICATE-----Generated at Fri May 16 08:17:07 2025 by rpki-client