$ rpki-client -vvf rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft File: 7C-kN5G65saorcWjDpmoUrYSj68.mft (raw, json) Hash identifier: lhcHa69wupmrR5u3WdaN0JlAhv70SoDoxkBE6p2ZeZU= Subject key identifier: 4B:BF:1A:F1:74:0F:B7:90:19:DA:6C:EE:DA:DD:BA:AA:1B:E1:AA:1D Authority key identifier: EC:2F:A4:37:91:BA:E6:C6:A8:AD:C5:A3:0E:99:A8:52:B6:12:8F:AF Certificate issuer: /CN=A915A813/serialNumber=EC2FA43791BAE6C6A8ADC5A30E99A852B6128FAF Certificate serial: 3479 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft Manifest number: 3479 Signing time: Sat 10 May 2025 14:30:45 +0000 Manifest this update: Sat 10 May 2025 14:30:45 +0000 Manifest next update: Sat 17 May 2025 14:30:45 +0000 Files and hashes: 1: 7C-kN5G65saorcWjDpmoUrYSj68.crl (hash: VckziALQDj/XzLI9+VPtjtpLdMZQPoQF4QPwIX4Gs48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.crl rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13433 (0x3479) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A813, serialNumber=EC2FA43791BAE6C6A8ADC5A30E99A852B6128FAF Validity Not Before: May 10 14:30:45 2025 GMT Not After : May 17 14:30:45 2025 GMT Subject: CN=681f6315-841c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:53:4a:ce:a6:88:e5:b8:40:72:83:10:36:be: c7:f2:c2:d1:da:8c:da:e5:12:8e:2b:03:b9:cb:72: 16:4d:0e:3f:fd:17:f1:27:6a:18:6d:a4:bc:eb:bd: 1c:ce:60:3f:bc:c7:08:59:7b:85:40:0c:10:aa:d9: 6f:29:2e:3d:6e:d5:87:c8:6d:32:f3:6d:8c:25:9b: 3f:3a:ec:2c:42:b2:95:60:09:a9:ce:e7:3a:a2:7c: 9c:0d:70:97:14:77:dd:63:b3:f1:87:7f:d0:91:3e: 3a:d5:fb:c1:33:2c:84:28:56:6f:34:f3:e2:eb:3a: 8d:bc:9c:23:fb:1b:62:70:d4:bd:fc:f7:66:18:e0: 70:18:71:c9:5e:ec:09:84:4a:83:a4:8a:4a:44:7d: 00:42:67:1c:2a:e9:99:44:57:87:39:03:de:46:7e: 06:05:91:61:39:05:34:db:a7:0e:0f:c4:1f:b3:12: 01:b9:8c:e1:52:83:61:b9:a8:db:c6:7d:4e:73:67: 50:b8:18:db:30:13:c7:68:55:60:58:ca:1d:0e:80: 4a:0a:86:ae:13:7e:35:c9:fb:9e:f1:19:81:0c:b1: ee:37:aa:b8:9a:dd:9e:74:33:f0:3d:7f:3f:15:73: 2c:41:8a:42:fd:5a:c1:f5:85:62:bd:2b:25:b9:d7: 65:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:BF:1A:F1:74:0F:B7:90:19:DA:6C:EE:DA:DD:BA:AA:1B:E1:AA:1D X509v3 Authority Key Identifier: keyid:EC:2F:A4:37:91:BA:E6:C6:A8:AD:C5:A3:0E:99:A8:52:B6:12:8F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:44:2b:ab:46:49:97:b6:7f:07:61:c8:73:fc:41:6f:7c:93: 6b:25:f3:03:79:fa:42:61:b1:8e:3d:f8:ad:a9:14:2b:5c:f8: 58:02:e7:f0:c6:99:51:03:1d:d1:83:8c:d1:94:f7:f1:8e:ea: 88:73:8f:96:8f:78:56:76:b5:7b:45:29:93:00:8c:e6:35:54: 4e:86:05:37:97:99:3e:a0:93:5c:a3:d4:a4:ed:87:ea:87:d1: 49:75:f6:e9:2e:ba:05:8a:60:7d:e7:27:a4:0b:28:eb:39:39: 50:fa:bb:8f:fd:f9:8d:97:87:22:52:45:7c:a8:90:8e:8e:1e: ff:d6:b1:74:98:76:ba:68:52:de:1b:c4:94:4b:d9:05:d4:fb: b7:96:30:20:13:75:d1:77:e3:d6:a0:68:5c:da:4f:71:10:91: 75:e8:f8:d2:d9:23:dc:a6:27:1b:b8:a3:3a:4e:e1:b0:3b:ca: 33:0f:f8:03:56:d7:fb:7f:3b:c1:ab:24:62:95:04:66:10:5b: 96:11:34:29:0a:7d:b6:f7:d6:35:35:73:13:1f:82:cc:69:19: a9:60:a7:d9:66:05:ec:28:d1:07:6f:2a:e3:73:16:76:85:c5: 37:3a:66:48:7b:25:dd:71:84:68:ff:8b:bb:76:5a:21:81:85: 94:c6:0a:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE4MTMxMTAvBgNVBAUTKEVDMkZBNDM3OTFCQUU2QzZBOEFEQzVBMzBFOTlBODUy QjYxMjhGQUYwHhcNMjUwNTEwMTQzMDQ1WhcNMjUwNTE3MTQzMDQ1WjAYMRYwFAYD VQQDEw02ODFmNjMxNS04NDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlNKzqaI5bhAcoMQNr7H8sLR2oza5RKOKwO5y3IWTQ4//RfxJ2oYbaS8670c zmA/vMcIWXuFQAwQqtlvKS49btWHyG0y822MJZs/OuwsQrKVYAmpzuc6onycDXCX FHfdY7Pxh3/QkT461fvBMyyEKFZvNPPi6zqNvJwj+xticNS9/PdmGOBwGHHJXuwJ hEqDpIpKRH0AQmccKumZRFeHOQPeRn4GBZFhOQU026cOD8QfsxIBuYzhUoNhuajb xn1Oc2dQuBjbMBPHaFVgWModDoBKCoauE341yfue8RmBDLHuN6q4mt2edDPwPX8/ FXMsQYpC/VrB9YVivSsluddlcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEu/GvF0 D7eQGdps7trduqob4aodMB8GA1UdIwQYMBaAFOwvpDeRuubGqK3Fow6ZqFK2Eo+v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTgxMy81QjREN0Y1MjFE ODkxMUUyQTQyMDg4RTIwOEIwMkNEMi83Qy1rTjVHNjVzYW9yY1dqRHBtb1VyWVNq NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdDLWtONUc2NXNhb3JjV2pEcG1vVXJZU2o2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTgxMy81QjREN0Y1MjFEODkxMUUyQTQyMDg4RTIwOEIwMkNEMi83Qy1rTjVHNjVz YW9yY1dqRHBtb1VyWVNqNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIRCurRkmXtn8HYchz/EFvfJNrJfMDefpCYbGOPfitqRQrXPhYAufw xplRAx3Rg4zRlPfxjuqIc4+Wj3hWdrV7RSmTAIzmNVROhgU3l5k+oJNco9Sk7Yfq h9FJdfbpLroFimB95yekCyjrOTlQ+ruP/fmNl4ciUkV8qJCOjh7/1rF0mHa6aFLe G8SUS9kF1Pu3ljAgE3XRd+PWoGhc2k9xEJF16PjS2SPcpicbuKM6TuGwO8ozD/gD Vtf7fzvBqyRilQRmEFuWETQpCn2299Y1NXMTH4LMaRmpYKfZZgXsKNEHbyrjcxZ2 hcU3OmZIeyXdcYRo/4u7dlohgYWUxgom -----END CERTIFICATE-----Generated at Sun May 11 12:48:57 2025 by rpki-client