$ rpki-client -vvf rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft File: F7t0v8FLOUo_7aIb2MhcQePFu_E.mft (raw, json) Hash identifier: QKY/W0bzbMh1zL2whpZBqK0xiDC8fRKCn0UFeHAUHEw= Subject key identifier: D0:A2:31:23:CE:91:82:45:B7:67:26:70:C4:54:B9:19:15:C7:0A:16 Authority key identifier: 17:BB:74:BF:C1:4B:39:4A:3F:ED:A2:1B:D8:C8:5C:41:E3:C5:BB:F1 Certificate issuer: /CN=A912BFC5/serialNumber=17BB74BFC14B394A3FEDA21BD8C85C41E3C5BBF1 Certificate serial: 347D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft Manifest number: 347D Signing time: Sat 10 May 2025 14:16:31 +0000 Manifest this update: Sat 10 May 2025 14:16:30 +0000 Manifest next update: Sat 17 May 2025 14:16:30 +0000 Files and hashes: 1: F7t0v8FLOUo_7aIb2MhcQePFu_E.crl (hash: GZDrGHW6Jm1vdfLBQPfZk8Pd2msNNdMY4Pctqpz5D98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.crl rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:16:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13437 (0x347d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BFC5, serialNumber=17BB74BFC14B394A3FEDA21BD8C85C41E3C5BBF1 Validity Not Before: May 10 14:16:30 2025 GMT Not After : May 17 14:16:30 2025 GMT Subject: CN=681f5fbf-d606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:31:cf:0c:0e:05:a3:87:79:58:21:9c:af:b6: 4d:e2:35:a1:6f:30:01:23:8d:d0:a8:c6:1f:a8:23: 0d:8b:43:66:77:34:29:b2:15:2e:ae:3d:d6:9e:e1: 67:72:d5:7f:4a:8e:d0:ba:b1:0e:5c:00:fc:93:10: ef:f0:08:0d:9c:92:8a:42:9c:f7:c3:00:ab:4e:03: ed:85:89:c2:d0:df:af:21:79:a6:5b:80:8a:03:a9: 13:8e:e0:51:d6:1c:d5:f5:01:ae:30:6c:fd:32:fc: 91:f5:58:f9:4b:d9:9b:13:fd:5a:e4:fc:98:29:5a: 08:18:77:69:82:1f:48:af:6e:77:df:ef:ae:57:b1: ae:56:0a:38:42:bf:71:6a:06:d3:cf:02:9e:dc:a5: 48:a1:e1:bb:26:dd:cc:10:e5:0b:de:7a:4f:15:dd: cc:c6:fc:e5:5b:e8:e7:e3:4d:aa:45:d9:1f:60:02: fc:13:82:ce:b0:25:6a:3e:03:ac:cc:75:d5:6a:66: 1f:8d:f5:2f:5c:54:b1:91:1b:fe:0e:9d:6d:84:86: 01:83:5d:a1:44:c7:67:3c:b5:24:cd:8a:bb:87:05: 1a:ab:93:51:aa:b0:9f:d8:ec:43:cb:96:31:8e:c6: 40:3a:cf:01:5e:2a:9a:22:06:e4:a3:20:0b:5b:da: 7e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A2:31:23:CE:91:82:45:B7:67:26:70:C4:54:B9:19:15:C7:0A:16 X509v3 Authority Key Identifier: keyid:17:BB:74:BF:C1:4B:39:4A:3F:ED:A2:1B:D8:C8:5C:41:E3:C5:BB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:f8:a5:f2:3b:9e:17:e2:5e:f1:ff:a2:b7:d5:97:0e:6d:b6: cc:fa:6a:b5:70:aa:26:66:eb:e1:c0:fa:25:f8:6a:2d:d7:3f: 16:65:8b:11:e3:ce:24:29:c0:38:73:68:7a:48:13:24:a7:6d: d1:f1:a3:e3:75:6b:67:6f:65:28:92:3d:49:a0:ea:f5:66:39: 78:a3:14:b4:0a:b1:04:40:09:b9:bf:2c:f7:dc:d6:b9:ca:60: 0b:ef:40:11:3a:b6:c5:9b:24:bc:69:c8:6a:9e:b2:67:b8:27: 19:82:83:86:03:61:d3:54:57:56:90:a0:ed:59:66:54:4c:ae: 2a:ae:63:00:41:00:7a:61:15:45:25:4f:36:2e:92:74:20:56: 25:f3:3f:9f:ee:93:f2:46:dd:e0:ba:5b:75:dd:eb:d9:20:a6: d0:0f:f1:f1:71:de:9b:88:5d:20:f9:09:9c:87:0b:18:66:94: 35:6d:58:69:5d:8a:86:97:7e:92:eb:9e:0c:7a:f3:34:69:50: f9:b4:9a:13:11:1b:0f:03:b6:6a:6e:bb:37:9c:cf:4b:2b:76: 82:e0:c8:fa:33:22:c6:ef:3a:a2:d1:46:b7:26:86:87:f2:60: 0b:6d:60:88:c6:1b:2b:8f:b0:58:3d:3d:b5:c9:0d:68:eb:a1: db:02:c1:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJGQzUxMTAvBgNVBAUTKDE3QkI3NEJGQzE0QjM5NEEzRkVEQTIxQkQ4Qzg1QzQx RTNDNUJCRjEwHhcNMjUwNTEwMTQxNjMwWhcNMjUwNTE3MTQxNjMwWjAYMRYwFAYD VQQDEw02ODFmNWZiZi1kNjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4DHPDA4Fo4d5WCGcr7ZN4jWhbzABI43QqMYfqCMNi0NmdzQpshUurj3WnuFn ctV/So7QurEOXAD8kxDv8AgNnJKKQpz3wwCrTgPthYnC0N+vIXmmW4CKA6kTjuBR 1hzV9QGuMGz9MvyR9Vj5S9mbE/1a5PyYKVoIGHdpgh9Ir2533++uV7GuVgo4Qr9x agbTzwKe3KVIoeG7Jt3MEOUL3npPFd3MxvzlW+jn402qRdkfYAL8E4LOsCVqPgOs zHXVamYfjfUvXFSxkRv+Dp1thIYBg12hRMdnPLUkzYq7hwUaq5NRqrCf2OxDy5Yx jsZAOs8BXiqaIgbkoyALW9p+TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNCiMSPO kYJFt2cmcMRUuRkVxwoWMB8GA1UdIwQYMBaAFBe7dL/BSzlKP+2iG9jIXEHjxbvx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkZDNS8wRDVDNzk0ODFE NkExMUUyQkIyMUIyQTcwOEIwMkNEMi9GN3QwdjhGTE9Vb183YUliMk1oY1FlUEZ1 X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y3dDB2OEZMT1VvXzdhSWIyTWhjUWVQRnVfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkZDNS8wRDVDNzk0ODFENkExMUUyQkIyMUIyQTcwOEIwMkNEMi9GN3QwdjhGTE9V b183YUliMk1oY1FlUEZ1X0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3+KXyO54X4l7x/6K31ZcObbbM+mq1cKomZuvhwPol+Got1z8WZYsR 484kKcA4c2h6SBMkp23R8aPjdWtnb2Uokj1JoOr1Zjl4oxS0CrEEQAm5vyz33Na5 ymAL70AROrbFmyS8achqnrJnuCcZgoOGA2HTVFdWkKDtWWZUTK4qrmMAQQB6YRVF JU82LpJ0IFYl8z+f7pPyRt3gult13evZIKbQD/Hxcd6biF0g+QmchwsYZpQ1bVhp XYqGl36S654MevM0aVD5tJoTERsPA7Zqbrs3nM9LK3aC4Mj6MyLG7zqi0Ua3JoaH 8mALbWCIxhsrj7BYPT21yQ1o66HbAsEb -----END CERTIFICATE-----Generated at Mon May 12 04:34:18 2025 by rpki-client