$ rpki-client -vvf rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft File: u7hAsFOTTV4f7dQN0CPvevQouuA.mft (raw, json) Hash identifier: uDEvHlDOkds0DcNLE6rUJiig0BxTfRKnTIF5K2MKXTI= Subject key identifier: E4:51:75:B0:4E:08:24:C9:52:AA:7C:26:AE:37:53:A5:DE:29:1F:6F Authority key identifier: BB:B8:40:B0:53:93:4D:5E:1F:ED:D4:0D:D0:23:EF:7A:F4:28:BA:E0 Certificate issuer: /CN=A912AD2E/serialNumber=BBB840B053934D5E1FEDD40DD023EF7AF428BAE0 Certificate serial: 17B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft Manifest number: 17AD Signing time: Sun 04 May 2025 16:28:58 +0000 Manifest this update: Sun 04 May 2025 16:28:57 +0000 Manifest next update: Sun 11 May 2025 16:28:57 +0000 Files and hashes: 1: u7hAsFOTTV4f7dQN0CPvevQouuA.crl (hash: 4R/UBOCeV+2vYn9hAY7cEeoydriOcZz1EK0cqrGdwrM=) 2: E3D5A6F4422411E8804DBC3AC4F9AE02.roa (hash: MtUOG8te7vvd8OgcyO+YgqB1a0uCeqPJKDSTrguzMzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.crl rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 16:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6072 (0x17b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AD2E, serialNumber=BBB840B053934D5E1FEDD40DD023EF7AF428BAE0 Validity Not Before: May 4 16:28:57 2025 GMT Not After : May 11 16:28:57 2025 GMT Subject: CN=681795c9-98f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:23:a4:1b:0d:6e:d3:ce:a1:c9:54:31:6b:95: 6a:ba:04:db:63:5c:ef:ca:15:15:95:fc:0e:67:f1: 67:91:30:04:dc:c8:4b:91:d8:70:ca:1d:c8:46:4f: e1:31:55:f4:da:be:3b:1b:e5:b7:4a:e0:61:98:9b: a4:f1:4b:0b:db:74:3a:d2:b2:45:09:bb:99:50:11: 44:0a:d4:de:cf:f2:d5:1a:db:6b:b9:b0:c0:51:8b: fd:78:0a:63:06:c9:ec:3a:f2:c4:20:d9:d7:83:91: fb:99:f6:0b:5b:8d:a0:e5:c2:44:39:6b:fa:e8:68: f8:f8:9b:1b:4c:e9:36:5b:32:6d:ec:4a:d7:df:7b: 5e:c3:4d:21:cd:92:10:c5:8d:78:c9:0b:be:00:30: ab:e5:e1:6c:b3:1a:93:98:46:4d:b4:1f:ab:99:5d: 26:b9:59:1f:ac:9f:00:5d:26:69:be:45:15:7e:98: da:9e:5e:98:84:6c:b9:1f:27:68:07:83:31:ca:2e: 59:ec:37:06:ad:7d:3f:8f:e5:b0:3a:c6:ee:f5:73: 58:42:43:a9:64:fc:de:37:ad:c3:97:62:b4:68:ca: 6f:99:86:56:2b:7a:6d:1e:7c:b8:a2:06:3f:5d:da: 20:8b:72:52:17:64:24:79:a9:a2:4e:69:cb:d8:1e: fc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:51:75:B0:4E:08:24:C9:52:AA:7C:26:AE:37:53:A5:DE:29:1F:6F X509v3 Authority Key Identifier: keyid:BB:B8:40:B0:53:93:4D:5E:1F:ED:D4:0D:D0:23:EF:7A:F4:28:BA:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:a4:e1:ee:67:d9:a2:bc:07:38:b8:a8:22:6c:d4:61:5d:9b: 1b:8b:56:66:6d:e7:50:5c:f4:30:b4:94:e0:ff:5c:81:d8:30: 60:d8:e4:cd:3d:28:3a:21:10:bc:29:cd:6e:18:ad:7a:8c:a3: 9e:a6:2f:2e:fa:d0:aa:11:f2:ae:e1:8b:3f:89:54:e5:e6:bf: dc:32:1e:46:c2:15:51:a9:3c:df:37:31:02:26:5a:44:97:1b: 29:42:af:2f:c1:d8:54:ca:e6:7b:a7:ac:83:78:87:6c:b8:ad: 51:83:35:0c:77:f5:45:ef:b7:a3:13:d2:7f:82:bb:5b:d7:df: eb:d6:36:2c:08:d9:25:4e:09:82:19:e2:48:18:47:50:bc:7d: bc:10:bb:fe:51:51:c6:ab:63:b5:02:07:3d:68:2a:1e:e3:26: a8:ce:3d:c6:8a:46:52:c4:60:24:5f:4f:93:55:16:db:bc:1d: 47:49:79:ea:3a:b3:08:07:39:7e:f2:c5:00:19:d7:9e:86:5d: 3b:b7:4d:cf:db:47:69:02:7f:66:a5:cf:74:27:50:9d:8e:62: a2:98:aa:8e:04:df:8e:80:e8:c0:6d:5e:eb:da:c7:69:38:5f: 7f:bd:f7:30:9c:60:52:4e:12:81:e9:3a:c5:b2:47:68:69:ff: c3:a6:42:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFEMkUxMTAvBgNVBAUTKEJCQjg0MEIwNTM5MzRENUUxRkVERDQwREQwMjNFRjdB RjQyOEJBRTAwHhcNMjUwNTA0MTYyODU3WhcNMjUwNTExMTYyODU3WjAYMRYwFAYD VQQDEw02ODE3OTVjOS05OGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArSOkGw1u086hyVQxa5VqugTbY1zvyhUVlfwOZ/FnkTAE3MhLkdhwyh3IRk/h MVX02r47G+W3SuBhmJuk8UsL23Q60rJFCbuZUBFECtTez/LVGttrubDAUYv9eApj BsnsOvLEINnXg5H7mfYLW42g5cJEOWv66Gj4+JsbTOk2WzJt7ErX33tew00hzZIQ xY14yQu+ADCr5eFssxqTmEZNtB+rmV0muVkfrJ8AXSZpvkUVfpjanl6YhGy5Hydo B4Mxyi5Z7DcGrX0/j+WwOsbu9XNYQkOpZPzeN63Dl2K0aMpvmYZWK3ptHny4ogY/ Xdogi3JSF2QkeamiTmnL2B78EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORRdbBO CCTJUqp8Jq43U6XeKR9vMB8GA1UdIwQYMBaAFLu4QLBTk01eH+3UDdAj73r0KLrg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUQyRS8wNzhDNjJBQUM1 MzMxMUU3QTExREJCNEFDNEY5QUUwMi91N2hBc0ZPVFRWNGY3ZFFOMENQdmV2UW91 dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U3aEFzRk9UVFY0ZjdkUU4wQ1B2ZXZRb3V1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUQyRS8wNzhDNjJBQUM1MzMxMUU3QTExREJCNEFDNEY5QUUwMi91N2hBc0ZPVFRW NGY3ZFFOMENQdmV2UW91dUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3pOHuZ9mivAc4uKgibNRhXZsbi1ZmbedQXPQwtJTg/1yB2DBg2OTN PSg6IRC8Kc1uGK16jKOepi8u+tCqEfKu4Ys/iVTl5r/cMh5GwhVRqTzfNzECJlpE lxspQq8vwdhUyuZ7p6yDeIdsuK1RgzUMd/VF77ejE9J/grtb19/r1jYsCNklTgmC GeJIGEdQvH28ELv+UVHGq2O1Agc9aCoe4yaozj3GikZSxGAkX0+TVRbbvB1HSXnq OrMIBzl+8sUAGdeehl07t03P20dpAn9mpc90J1CdjmKimKqOBN+OgOjAbV7r2sdp OF9/vfcwnGBSThKB6TrFskdoaf/DpkJC -----END CERTIFICATE-----Generated at Tue May 6 03:04:26 2025 by rpki-client