$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft File: 788TGtZIDR3QTx1EduNZVFL_RBw.mft (raw, json) Hash identifier: ZsPB1W0nD0mx1nkE5srUM0xXGWJLoPAj3tBbeiItdg0= Subject key identifier: E5:3F:47:A7:FE:77:01:13:73:12:0E:F3:33:7E:8C:6F:93:3A:A3:98 Authority key identifier: EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C Certificate issuer: /CN=A9140D20/serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C Certificate serial: 0812 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft Manifest number: 0809 Signing time: Mon 12 May 2025 20:42:16 +0000 Manifest this update: Mon 12 May 2025 20:42:16 +0000 Manifest next update: Mon 19 May 2025 20:42:16 +0000 Files and hashes: 1: 788TGtZIDR3QTx1EduNZVFL_RBw.crl (hash: yaP9bQxyvGO3VnVddhYSomMBwoVr3nhP1zOpvqk+Xp4=) 2: 01E652108F4F11EEA2E9CA7DC4F9AE02.roa (hash: pjchJ6cFRSOrYYA+BU/yT4PSr0ftFhi06QMViMdoOGo=) 3: 5E4A01CA941111EE84D37717C4F9AE02.roa (hash: QHVhADIvelk+RcB2dDEApwkg1zDr9XWT50JUlNL3d6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:42:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2066 (0x812) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D20, serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C Validity Not Before: May 12 20:42:16 2025 GMT Not After : May 19 20:42:16 2025 GMT Subject: CN=68225d28-d225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:89:7b:1b:12:b0:8c:3e:a8:fe:14:dc:41:9a: 4b:e0:2a:2c:9d:5d:3f:4d:df:7e:43:f6:ba:a8:ed: e8:75:2c:d3:c8:be:1a:56:a6:86:51:57:b0:cf:d6: 58:1c:6f:b0:28:4a:a8:92:25:6b:a7:9f:ba:a3:c9: db:d1:98:d4:3d:6a:0b:a2:e0:d7:03:33:53:76:fc: 87:80:a2:be:2f:5e:07:c7:10:c5:f4:b6:3c:b1:14: ea:49:a3:6e:d0:1a:60:94:ed:1d:d2:64:05:c9:22: 71:8b:32:b3:07:04:1e:1d:5e:ec:8e:32:d7:e8:6e: 59:10:45:4b:f0:9d:5d:61:b9:90:be:0d:11:3d:ae: a0:76:f1:3f:7c:6d:32:15:ba:ea:1c:6b:c7:7f:56: 6e:42:86:17:43:f4:c9:fa:ef:8e:67:57:6c:ad:78: ef:a6:65:4d:ce:16:00:06:15:0b:02:ae:80:e5:b6: f9:ad:98:14:63:de:b4:f6:e1:51:00:20:48:77:8b: 92:40:c8:ba:fa:6a:e6:8c:8b:be:99:78:17:12:d2: ba:a5:40:4e:8d:f3:25:94:23:73:0d:aa:9f:c2:f3: 7c:18:41:df:40:dd:43:43:fb:11:d9:22:df:11:e8: 4f:2f:9b:a5:64:f2:68:96:b6:3e:c1:43:dd:12:d0: e7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:3F:47:A7:FE:77:01:13:73:12:0E:F3:33:7E:8C:6F:93:3A:A3:98 X509v3 Authority Key Identifier: keyid:EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:02:1c:fd:e1:e2:c3:58:f8:bb:68:a7:c8:a0:5a:bd:18:1d: 73:87:7b:7a:ba:51:ca:78:ce:7e:7c:30:4a:68:a1:6d:65:8e: 4c:be:6e:ff:55:48:0e:27:b5:a7:7e:60:2c:07:61:96:f0:17: ae:ff:3f:a4:92:23:ab:b4:6e:a4:c2:1a:e7:a5:d6:00:7c:dc: 54:91:d3:c8:5a:8b:bc:58:ac:9d:6e:cd:e5:42:c9:cc:d9:11: d1:ce:d4:7a:8f:95:ae:fb:71:2b:bd:fa:ff:30:0f:37:ec:b3: a6:6f:1c:c6:af:84:5b:7e:ac:c9:97:d3:78:52:1b:6a:af:29: c0:a5:14:66:52:92:c1:bd:20:57:d9:62:2c:98:79:7c:16:c3: e7:41:05:47:bb:57:bf:cb:88:23:9e:1b:4c:86:ec:49:5f:a8: c4:ee:ca:3b:9d:4e:a4:f0:15:ef:db:64:0c:34:19:06:63:8c: 97:0f:21:9f:9e:06:38:aa:98:8e:bd:cd:68:33:c6:10:18:68: e5:22:a0:63:4c:14:ca:13:31:74:58:7a:98:eb:5b:bd:54:88: e0:25:11:b2:44:e2:e9:a9:6f:42:94:6e:f1:f9:40:8c:2f:01: 5a:67:46:07:f2:3d:6e:80:f5:59:e5:61:87:f8:00:63:0f:b0: 09:b5:d1:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBEMjAxMTAvBgNVBAUTKEVGQ0YxMzFBRDY0ODBEMUREMDRGMUQ0NDc2RTM1OTU0 NTJGRjQ0MUMwHhcNMjUwNTEyMjA0MjE2WhcNMjUwNTE5MjA0MjE2WjAYMRYwFAYD VQQDEw02ODIyNWQyOC1kMjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4l7GxKwjD6o/hTcQZpL4CosnV0/Td9+Q/a6qO3odSzTyL4aVqaGUVewz9ZY HG+wKEqokiVrp5+6o8nb0ZjUPWoLouDXAzNTdvyHgKK+L14HxxDF9LY8sRTqSaNu 0BpglO0d0mQFySJxizKzBwQeHV7sjjLX6G5ZEEVL8J1dYbmQvg0RPa6gdvE/fG0y FbrqHGvHf1ZuQoYXQ/TJ+u+OZ1dsrXjvpmVNzhYABhULAq6A5bb5rZgUY9609uFR ACBId4uSQMi6+mrmjIu+mXgXEtK6pUBOjfMllCNzDaqfwvN8GEHfQN1DQ/sR2SLf EehPL5ulZPJolrY+wUPdEtDnjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOU/R6f+ dwETcxIO8zN+jG+TOqOYMB8GA1UdIwQYMBaAFO/PExrWSA0d0E8dRHbjWVRS/0Qc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQyMC9EOTQzQTQ1QURC REExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3RaSURSM1FUeDFFZHVOWlZGTF9S QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc4OFRHdFpJRFIzUVR4MUVkdU5aVkZMX1JCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQyMC9EOTQzQTQ1QURCREExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3RaSURS M1FUeDFFZHVOWlZGTF9SQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxAhz94eLDWPi7aKfIoFq9GB1zh3t6ulHKeM5+fDBKaKFtZY5Mvm7/ VUgOJ7WnfmAsB2GW8Beu/z+kkiOrtG6kwhrnpdYAfNxUkdPIWou8WKydbs3lQsnM 2RHRztR6j5Wu+3Ervfr/MA837LOmbxzGr4RbfqzJl9N4UhtqrynApRRmUpLBvSBX 2WIsmHl8FsPnQQVHu1e/y4gjnhtMhuxJX6jE7so7nU6k8BXv22QMNBkGY4yXDyGf ngY4qpiOvc1oM8YQGGjlIqBjTBTKEzF0WHqY61u9VIjgJRGyROLpqW9ClG7x+UCM LwFaZ0YH8j1ugPVZ5WGH+ABjD7AJtdFl -----END CERTIFICATE-----Generated at Tue May 13 15:08:54 2025 by rpki-client