$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft File: 67t1Ysakn7ft5XQSvB_61I4a-0k.mft (raw, json) Hash identifier: yXETPswXk0hGmFdLiMaJDPYLxbiNTv8Ju8av77YMqd4= Subject key identifier: F3:14:28:2A:CD:39:F3:6A:DB:5D:E3:17:99:AC:76:F1:9C:2F:C2:AB Authority key identifier: EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49 Certificate issuer: /CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49 Certificate serial: 0442 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft Manifest number: 043B Signing time: Tue 13 May 2025 00:06:45 +0000 Manifest this update: Tue 13 May 2025 00:06:45 +0000 Manifest next update: Tue 20 May 2025 00:06:45 +0000 Files and hashes: 1: 67t1Ysakn7ft5XQSvB_61I4a-0k.crl (hash: dX6B5wY6c/NpqXcXIqN2tX3KafSZT0DKi8TIH5Njc9k=) 2: 9F9CEB425CB911ECAEF7AE14C4F9AE02.roa (hash: 6uFvpip5xKUGRghNdeTpeBy3R93KivQ5uvgIzsfjzEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1090 (0x442) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FE87, serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49 Validity Not Before: May 13 00:06:45 2025 GMT Not After : May 20 00:06:45 2025 GMT Subject: CN=68228d15-8c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:88:78:38:ab:09:d7:a9:dc:dd:8f:ad:02:8e: d1:ce:4b:a2:d0:b8:0f:0b:8f:bf:b5:7e:dd:97:3b: 76:c4:1e:e9:ea:95:15:11:4c:26:f0:ae:e8:b2:34: 9b:64:6d:0f:06:95:a1:90:86:1c:41:4d:72:ff:a8: 36:8a:3b:0d:c7:c9:ba:f7:08:7a:21:b4:27:54:c4: 8d:20:4e:ab:62:7e:59:57:db:a3:aa:1d:7a:7f:7c: e1:00:54:0e:15:b2:d5:14:c0:37:9a:32:b3:3d:cd: d2:1d:a4:9a:fe:62:94:37:14:51:80:46:9e:ad:22: 0d:9f:80:19:e3:d7:ce:2d:d6:4b:76:e0:cf:0b:2b: c4:f7:08:1e:98:72:d3:c5:b1:23:4b:89:5c:2f:55: b4:23:c0:02:82:ae:76:38:7a:52:7a:02:28:ca:b2: 85:b0:35:74:c9:8b:2c:8f:09:2f:53:dd:f8:65:c7: 81:04:af:48:92:45:29:45:e4:66:c2:1b:33:9e:1d: 47:97:b0:e1:62:fb:c3:ef:57:5b:eb:c2:12:13:e8: b8:f9:32:57:6d:d5:2f:e1:5c:b4:26:ff:d2:3e:07: 53:2d:9a:bd:d7:e4:27:ba:e1:97:2d:fe:57:1c:1f: da:bc:af:b5:e9:e3:49:95:7b:db:d7:93:70:d2:97: fe:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:14:28:2A:CD:39:F3:6A:DB:5D:E3:17:99:AC:76:F1:9C:2F:C2:AB X509v3 Authority Key Identifier: keyid:EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:f3:3b:29:1c:e0:da:53:d8:61:c2:d6:24:e3:ca:ff:7f:21: 9f:ab:ed:8e:5f:29:d1:55:be:91:7d:42:25:a9:2a:d6:7b:ca: 30:96:2f:ca:9d:0c:63:dd:aa:0b:ef:09:c9:6b:4b:25:2a:3a: f7:9e:46:42:b2:2c:d9:f4:08:ce:9a:3f:2d:21:60:17:bd:59: a8:b9:7f:9e:d4:6d:04:d9:82:55:dc:a4:c3:26:7c:b4:f1:73: f5:fe:31:c8:cd:a3:4b:ee:9a:d1:ff:e0:a1:29:00:70:0c:b0: c1:2f:84:be:f5:82:3a:dc:78:a7:8f:55:8d:0a:5f:4a:10:46: a1:a9:d8:76:04:28:74:f8:b1:90:35:70:61:0c:06:0a:90:29: 9f:06:04:df:46:9e:c2:9b:17:e3:97:c0:dc:84:3d:e9:fe:28: b4:59:f0:f9:6b:4a:2f:bb:75:d2:f1:22:fe:3e:14:c3:83:ea: 54:2e:d7:41:b8:f4:f6:d2:c4:35:69:ae:62:92:43:f9:89:7d: a8:9a:a3:9d:da:ab:71:1f:aa:3f:67:c6:e9:16:8e:fd:e3:23: 9e:57:ba:36:d4:6f:ad:e2:ae:cc:54:5e:81:1c:0f:eb:6c:d8: 1c:be:03:95:1f:7f:8b:8a:76:c7:73:49:23:cc:8e:8c:d0:f4: 15:b4:68:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZFODcxMTAvBgNVBAUTKEVCQkI3NTYyQzZBNDlGQjdFREU1NzQxMkJDMUZGQUQ0 OEUxQUZCNDkwHhcNMjUwNTEzMDAwNjQ1WhcNMjUwNTIwMDAwNjQ1WjAYMRYwFAYD VQQDEw02ODIyOGQxNS04YzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIh4OKsJ16nc3Y+tAo7Rzkui0LgPC4+/tX7dlzt2xB7p6pUVEUwm8K7osjSb ZG0PBpWhkIYcQU1y/6g2ijsNx8m69wh6IbQnVMSNIE6rYn5ZV9ujqh16f3zhAFQO FbLVFMA3mjKzPc3SHaSa/mKUNxRRgEaerSINn4AZ49fOLdZLduDPCyvE9wgemHLT xbEjS4lcL1W0I8ACgq52OHpSegIoyrKFsDV0yYssjwkvU934ZceBBK9IkkUpReRm whsznh1Hl7DhYvvD71db68ISE+i4+TJXbdUv4Vy0Jv/SPgdTLZq91+QnuuGXLf5X HB/avK+16eNJlXvb15Nw0pf+8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMUKCrN OfNq213jF5msdvGcL8KrMB8GA1UdIwQYMBaAFOu7dWLGpJ+37eV0Erwf+tSOGvtJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkU4Ny80RTE0MDFFNjVD QjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243ZnQ1WFFTdkJfNjFJNGEt MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3dDFZc2FrbjdmdDVYUVN2Ql82MUk0YS0way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkU4Ny80RTE0MDFFNjVDQjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243 ZnQ1WFFTdkJfNjFJNGEtMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb8zspHODaU9hhwtYk48r/fyGfq+2OXynRVb6RfUIlqSrWe8owli/K nQxj3aoL7wnJa0slKjr3nkZCsizZ9AjOmj8tIWAXvVmouX+e1G0E2YJV3KTDJny0 8XP1/jHIzaNL7prR/+ChKQBwDLDBL4S+9YI63Hinj1WNCl9KEEahqdh2BCh0+LGQ NXBhDAYKkCmfBgTfRp7Cmxfjl8DchD3p/ii0WfD5a0ovu3XS8SL+PhTDg+pULtdB uPT20sQ1aa5ikkP5iX2omqOd2qtxH6o/Z8bpFo794yOeV7o21G+t4q7MVF6BHA/r bNgcvgOVH3+LinbHc0kjzI6M0PQVtGiO -----END CERTIFICATE-----Generated at Wed May 14 23:26:29 2025 by rpki-client