$ rpki-client -vvf rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft File: f30yDyoH5DPdvf4oV_XTGTVFF7k.mft (raw, json) Hash identifier: GTIQQ/Zj6Kpy+zWjNZeNKpCj19b0i18+kUxLSMJXmzo= Subject key identifier: F8:37:62:4E:AE:F0:F3:71:BE:A7:34:3E:AA:C3:0D:68:86:89:9D:84 Authority key identifier: 7F:7D:32:0F:2A:07:E4:33:DD:BD:FE:28:57:F5:D3:19:35:45:17:B9 Certificate issuer: /CN=A914877B/serialNumber=7F7D320F2A07E433DDBDFE2857F5D319354517B9 Certificate serial: 0BCB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft Manifest number: 0BC4 Signing time: Wed 14 May 2025 18:59:33 +0000 Manifest this update: Wed 14 May 2025 18:59:33 +0000 Manifest next update: Wed 21 May 2025 18:59:33 +0000 Files and hashes: 1: f30yDyoH5DPdvf4oV_XTGTVFF7k.crl (hash: JRGT4PiJx9I7XpifBK+1NIke6im3iEsU1xmtn8nmUnc=) 2: 800676321BD311EAA341A62DC4F9AE02.roa (hash: RHZCYYPvQQbME4QEcXK5NVornLFSgAMnD5MRoiwlBuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.crl rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:59:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3019 (0xbcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914877B, serialNumber=7F7D320F2A07E433DDBDFE2857F5D319354517B9 Validity Not Before: May 14 18:59:33 2025 GMT Not After : May 21 18:59:33 2025 GMT Subject: CN=6824e815-f4a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:be:8b:dd:34:08:88:e2:35:93:3e:c4:57:b3: 1b:2f:6b:c8:a0:d5:36:1e:c2:2f:55:d0:8f:d6:c1: dc:ba:8e:ce:97:4e:19:02:a4:55:df:18:af:22:a6: 05:ec:98:5f:59:79:5f:b7:18:48:10:a1:a2:13:af: 3b:36:32:6a:78:5f:4f:56:55:e8:1f:7c:92:4e:c3: 42:f6:d1:9c:a0:86:f0:dd:82:b0:34:b4:2c:cb:65: 1d:bf:14:3e:ad:3e:c3:d7:a1:07:8e:08:5f:74:30: f7:0d:94:6a:5e:4d:a6:c6:73:0a:8a:84:4b:9c:5c: 09:3e:bb:c4:a6:9a:ff:03:29:76:5d:d2:e4:07:39: 17:62:d6:a3:44:82:5c:99:5f:a2:3b:8a:e6:50:fa: df:be:6e:6e:e3:35:b1:62:21:40:01:a1:4b:10:85: 7b:ad:27:db:4e:80:cc:75:99:06:0d:63:7a:58:b0: da:ac:35:f1:19:79:ab:06:20:8d:b4:3a:8d:7b:39: 02:ba:44:9d:6a:00:a0:52:24:2c:11:f3:98:65:de: 18:6e:c9:1c:d7:5f:5e:da:01:cc:44:1a:64:18:e1: fe:60:66:99:fa:e8:43:2f:9c:77:ad:24:29:e6:a4: c4:91:2d:88:e8:22:63:24:37:0d:ad:dd:d6:c4:8a: 50:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:37:62:4E:AE:F0:F3:71:BE:A7:34:3E:AA:C3:0D:68:86:89:9D:84 X509v3 Authority Key Identifier: keyid:7F:7D:32:0F:2A:07:E4:33:DD:BD:FE:28:57:F5:D3:19:35:45:17:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:7d:1a:a5:a1:cb:65:29:06:51:39:83:06:13:ef:e3:92:aa: 15:74:47:10:91:df:71:d7:5e:b8:d0:25:9b:82:22:8c:cb:c7: 5a:b4:6d:f0:cc:f1:78:15:46:af:6b:25:31:aa:2c:49:8d:51: 72:ad:36:35:bc:24:24:f2:cf:02:8c:97:cc:f7:25:f5:b5:2e: c8:f5:6d:9a:e4:10:7f:bf:d7:72:e7:9a:61:3c:88:72:a2:e0: ce:c4:a8:54:6f:3b:57:20:16:57:b1:10:bf:9a:17:29:87:e3: 5a:64:24:a7:2a:da:c5:17:74:4d:56:ce:36:ec:ef:38:8f:1b: e0:9e:b0:da:c3:2c:8c:b2:6d:fb:a7:02:27:f9:3f:11:23:63: 95:53:79:70:f0:64:c0:49:89:d3:a0:8c:ed:98:2e:f5:4e:33: 0a:3d:33:62:e8:97:df:28:34:e6:d6:67:c8:30:fd:da:11:ac: b3:08:6b:30:8a:71:76:40:e0:f1:b5:4c:9a:36:ab:a7:fd:2c: bd:2c:38:b7:df:73:ed:6c:b5:da:62:f8:a4:c1:90:c6:ef:48: 47:19:49:d1:1b:b5:ed:ea:61:3b:3b:f1:97:e2:59:ca:d0:58: 37:bd:57:9f:5b:b6:5d:79:35:03:9c:6a:3d:e2:65:ff:28:51: e5:13:52:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg3N0IxMTAvBgNVBAUTKDdGN0QzMjBGMkEwN0U0MzNEREJERkUyODU3RjVEMzE5 MzU0NTE3QjkwHhcNMjUwNTE0MTg1OTMzWhcNMjUwNTIxMTg1OTMzWjAYMRYwFAYD VQQDEw02ODI0ZTgxNS1mNGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzL6L3TQIiOI1kz7EV7MbL2vIoNU2HsIvVdCP1sHcuo7Ol04ZAqRV3xivIqYF 7JhfWXlftxhIEKGiE687NjJqeF9PVlXoH3ySTsNC9tGcoIbw3YKwNLQsy2UdvxQ+ rT7D16EHjghfdDD3DZRqXk2mxnMKioRLnFwJPrvEppr/Ayl2XdLkBzkXYtajRIJc mV+iO4rmUPrfvm5u4zWxYiFAAaFLEIV7rSfbToDMdZkGDWN6WLDarDXxGXmrBiCN tDqNezkCukSdagCgUiQsEfOYZd4Ybskc119e2gHMRBpkGOH+YGaZ+uhDL5x3rSQp 5qTEkS2I6CJjJDcNrd3WxIpQmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPg3Yk6u 8PNxvqc0PqrDDWiGiZ2EMB8GA1UdIwQYMBaAFH99Mg8qB+Qz3b3+KFf10xk1RRe5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODc3Qi8yNTkxMDExRTFC RDIxMUVBQUJEMEVFMkFDNEY5QUUwMi9mMzB5RHlvSDVEUGR2ZjRvVl9YVEdUVkZG N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YzMHlEeW9INURQZHZmNG9WX1hUR1RWRkY3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODc3Qi8yNTkxMDExRTFCRDIxMUVBQUJEMEVFMkFDNEY5QUUwMi9mMzB5RHlvSDVE UGR2ZjRvVl9YVEdUVkZGN2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZfRqloctlKQZROYMGE+/jkqoVdEcQkd9x11640CWbgiKMy8datG3w zPF4FUavayUxqixJjVFyrTY1vCQk8s8CjJfM9yX1tS7I9W2a5BB/v9dy55phPIhy ouDOxKhUbztXIBZXsRC/mhcph+NaZCSnKtrFF3RNVs427O84jxvgnrDawyyMsm37 pwIn+T8RI2OVU3lw8GTASYnToIztmC71TjMKPTNi6JffKDTm1mfIMP3aEayzCGsw inF2QODxtUyaNqun/Sy9LDi333PtbLXaYvikwZDG70hHGUnRG7Xt6mE7O/GX4lnK 0Fg3vVefW7ZdeTUDnGo94mX/KFHlE1Lx -----END CERTIFICATE-----Generated at Fri May 16 08:20:32 2025 by rpki-client