$ rpki-client -vvf rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft File: f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft (raw, json) Hash identifier: QiyUlST9xwcpTQbLPCRAL+huYIDzUhig0K1Z6+meB+A= Subject key identifier: FB:BF:7A:B6:CD:DF:69:58:8A:A0:69:58:EA:BA:88:8B:6B:91:35:4E Authority key identifier: 7F:82:45:BB:D4:D4:59:72:1B:41:D4:FF:2B:BF:B4:25:FF:11:89:53 Certificate issuer: /CN=A914E600/serialNumber=7F8245BBD4D459721B41D4FF2BBFB425FF118953 Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft Manifest number: 80 Signing time: Tue 13 May 2025 05:54:57 +0000 Manifest this update: Tue 13 May 2025 05:54:57 +0000 Manifest next update: Tue 20 May 2025 05:54:57 +0000 Files and hashes: 1: f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl (hash: q68MQONjH/B7/TEmYxeMovYzf6KBi5JZauXXyXELZmQ=) 2: B47102FE77F211EFBA1E9F7EC4F9AE02.roa (hash: SEeajkndfK9XKBY3HRdlq0CgTt3jAkAhBVklDZv6c2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:54:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E600, serialNumber=7F8245BBD4D459721B41D4FF2BBFB425FF118953 Validity Not Before: May 13 05:54:57 2025 GMT Not After : May 20 05:54:57 2025 GMT Subject: CN=6822deb1-8bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:29:c2:a1:95:ef:0b:9f:89:07:ed:46:a1:d1: d8:d9:a5:4d:7b:8b:af:21:29:ff:51:38:13:b8:45: 35:ea:ef:f2:4c:40:8c:54:b9:59:a1:07:c3:2e:52: ca:24:5a:25:65:d0:59:ff:c3:59:2e:01:dd:72:ee: 1c:39:7b:88:2d:a3:1c:9d:a6:77:73:96:f9:8c:0e: 34:15:ee:86:26:18:3e:2f:a6:fc:8e:4e:a3:df:96: b3:ba:15:e8:6b:23:91:67:14:66:cd:da:5f:60:32: fa:49:5d:08:31:22:ab:7b:88:a0:4a:0f:58:4b:5e: 6e:58:17:30:fd:08:77:28:cf:99:e8:d0:91:50:03: 83:d7:7b:f4:44:9c:12:73:d0:44:a2:7d:58:53:5d: 03:a2:b1:7e:2d:c6:77:9c:5f:d0:c0:d0:5c:86:df: e1:3f:cf:ce:55:ee:26:8c:47:98:cc:57:ac:66:e4: 93:b5:7a:15:3c:9e:4b:14:41:34:3b:14:d4:6a:dc: ef:89:1f:32:d1:bc:42:13:46:3c:c9:b7:78:c0:97: 50:1c:8e:75:46:10:36:b8:66:f7:41:63:76:b4:cb: 71:ba:d6:4a:b1:72:3b:0b:cf:18:6d:c0:2d:15:5f: 33:52:5a:21:cc:1a:38:48:fa:36:5c:8e:ca:cc:ec: 19:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:BF:7A:B6:CD:DF:69:58:8A:A0:69:58:EA:BA:88:8B:6B:91:35:4E X509v3 Authority Key Identifier: keyid:7F:82:45:BB:D4:D4:59:72:1B:41:D4:FF:2B:BF:B4:25:FF:11:89:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:da:81:b5:fc:83:af:84:01:96:81:22:69:aa:c8:09:5c:50: 3c:39:47:90:12:1e:da:35:e4:5b:53:b8:f8:69:5d:7e:fe:eb: 9d:36:a7:3e:8c:94:73:23:12:fa:48:a9:8a:6a:37:4a:6d:d4: 9c:45:2e:0c:4c:6b:04:c1:6d:7e:bb:54:ef:1f:0a:a8:d3:9b: 47:06:3a:57:ac:5b:e7:fe:19:f4:5d:d0:06:0d:a3:45:53:0f: a5:5c:69:64:64:9b:cd:0d:0a:f5:41:06:42:71:2a:05:3e:67: b9:57:68:2a:5d:28:52:5a:9e:49:db:51:f6:af:53:01:3b:f5: 85:dc:65:a6:a8:63:57:32:5e:c7:d2:30:06:e0:23:11:75:a3: 5b:5c:74:76:d9:83:ba:a3:35:8e:ce:6c:1b:16:78:d8:36:aa: 79:35:87:93:2b:9e:63:f8:30:2d:fc:eb:5d:cb:fe:2f:8c:d4: 7c:74:a3:f7:9b:90:69:9c:01:48:dd:09:6c:89:ee:16:d9:04: bd:d6:ca:22:3d:b2:61:0a:e5:52:e8:13:02:3c:0e:2e:56:2a: fd:63:5c:79:da:e5:07:3b:5e:20:24:90:93:a6:20:c4:48:39: a2:e3:13:5f:21:4c:45:13:2d:43:40:8f:ef:93:67:7e:b7:6e: 22:a8:b4:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2MDAxMTAvBgNVBAUTKDdGODI0NUJCRDRENDU5NzIxQjQxRDRGRjJCQkZCNDI1 RkYxMTg5NTMwHhcNMjUwNTEzMDU1NDU3WhcNMjUwNTIwMDU1NDU3WjAYMRYwFAYD VQQDEw02ODIyZGViMS04YmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyinCoZXvC5+JB+1GodHY2aVNe4uvISn/UTgTuEU16u/yTECMVLlZoQfDLlLK JFolZdBZ/8NZLgHdcu4cOXuILaMcnaZ3c5b5jA40Fe6GJhg+L6b8jk6j35azuhXo ayORZxRmzdpfYDL6SV0IMSKre4igSg9YS15uWBcw/Qh3KM+Z6NCRUAOD13v0RJwS c9BEon1YU10DorF+LcZ3nF/QwNBcht/hP8/OVe4mjEeYzFesZuSTtXoVPJ5LFEE0 OxTUatzviR8y0bxCE0Y8ybd4wJdQHI51RhA2uGb3QWN2tMtxutZKsXI7C88YbcAt FV8zUlohzBo4SPo2XI7KzOwZRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPu/erbN 32lYiqBpWOq6iItrkTVOMB8GA1UdIwQYMBaAFH+CRbvU1FlyG0HU/yu/tCX/EYlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTYwMC8yQUE3RDQ1RTc3 RjExMUVGQUMxMTI5NDJDNEY5QUUwMi9mNEpGdTlUVVdYSWJRZFRfSzctMEpmOFJp Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y0SkZ1OVRVV1hJYlFkVF9LNy0wSmY4UmlWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTYwMC8yQUE3RDQ1RTc3RjExMUVGQUMxMTI5NDJDNEY5QUUwMi9mNEpGdTlUVVdY SWJRZFRfSzctMEpmOFJpVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBs2oG1/IOvhAGWgSJpqsgJXFA8OUeQEh7aNeRbU7j4aV1+/uudNqc+ jJRzIxL6SKmKajdKbdScRS4MTGsEwW1+u1TvHwqo05tHBjpXrFvn/hn0XdAGDaNF Uw+lXGlkZJvNDQr1QQZCcSoFPme5V2gqXShSWp5J21H2r1MBO/WF3GWmqGNXMl7H 0jAG4CMRdaNbXHR22YO6ozWOzmwbFnjYNqp5NYeTK55j+DAt/Otdy/4vjNR8dKP3 m5BpnAFI3Qlsie4W2QS91soiPbJhCuVS6BMCPA4uVir9Y1x52uUHO14gJJCTpiDE SDmi4xNfIUxFEy1DQI/vk2d+t24iqLQI -----END CERTIFICATE-----Generated at Tue May 13 11:44:50 2025 by rpki-client