$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft File: 7CxkBsqh85689Fh1MVANVrlTYsA.mft (raw, json) Hash identifier: 3Ax1s1q7RyEZzLtWIC5E+h7i89vL507Y3UjEluM9DVQ= Subject key identifier: 40:F8:FC:F1:96:73:03:10:EC:8F:31:7A:F6:D8:5F:3D:30:16:B0:11 Authority key identifier: EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0 Certificate issuer: /CN=A9174880/serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0 Certificate serial: 34C1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft Manifest number: 349B Signing time: Fri 16 May 2025 14:16:43 +0000 Manifest this update: Fri 16 May 2025 14:16:43 +0000 Manifest next update: Fri 23 May 2025 14:16:43 +0000 Files and hashes: 1: 7CxkBsqh85689Fh1MVANVrlTYsA.crl (hash: FOdf0TI6N5rCxUAK/PA8LGnGSKVf3o1Q7S3nYdfM6N0=) 2: 3768DFB41C6011EEAF58FB61C4F9AE02.roa (hash: Un+gRmwEe7RmL1YJ6V7sBXAGRc3bNfxPT16yGupUBnU=) 3: 316EEFD4AAE511E68EBE4D52C4F9AE02.roa (hash: JRg1LZXcFPzNHPCZgdhpiNiCJWsLCkY/WCIHJGUF1Yc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 14:16:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13505 (0x34c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880, serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0 Validity Not Before: May 16 14:16:43 2025 GMT Not After : May 23 14:16:43 2025 GMT Subject: CN=682748cb-50bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:df:86:62:78:fe:6a:16:f3:34:69:3a:84:23: 8c:d4:a5:26:2b:2d:fe:5d:ea:a9:57:44:d8:ae:53: dc:77:ea:fe:5b:f0:41:3d:65:64:03:ec:46:6f:14: b9:22:53:cf:d6:55:50:2e:ba:27:d6:a3:02:67:62: 71:7b:64:68:d7:a5:50:15:cf:e8:d8:53:a1:af:2d: e0:45:42:04:59:69:41:70:ee:9e:fd:24:6a:1e:4f: 83:a1:07:0d:2c:02:0e:a1:b6:15:d5:9f:59:69:a4: 65:2e:fe:fd:91:a8:de:9c:7e:22:73:3d:6e:05:34: 04:85:9f:ff:05:69:24:e1:1b:87:14:be:df:4c:96: 3a:33:3a:23:c2:08:cd:6a:bd:6c:15:26:5d:76:33: 7f:a6:5a:17:c3:ea:02:07:d4:fe:7b:3c:ab:10:82: 60:a0:f1:66:fe:03:4e:f6:1d:10:c5:ce:c8:37:53: 5a:4b:fd:a8:e8:13:03:ac:a0:a0:2f:cd:eb:e6:f8: 05:30:55:b9:d7:2c:91:77:d4:c0:8f:3c:4f:48:f2: ad:7c:a0:81:2c:e1:04:59:ee:a2:6c:1c:1b:98:99: 2c:b2:12:68:40:7e:45:09:6d:28:d1:71:c0:cb:26: 0a:9f:48:15:29:48:df:f9:84:3f:ce:09:50:3e:df: 9c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F8:FC:F1:96:73:03:10:EC:8F:31:7A:F6:D8:5F:3D:30:16:B0:11 X509v3 Authority Key Identifier: keyid:EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:57:26:18:0b:08:26:8d:5f:2d:74:5d:8b:80:14:d2:66:ec: 46:1d:c6:8b:2f:9b:f1:17:1d:7a:d2:18:d5:29:a5:39:00:3a: 93:de:ac:ff:5a:12:0a:45:53:d3:b5:a0:fb:dd:6a:09:e4:06: b9:6b:5a:50:e1:05:b4:62:6f:a1:2d:45:b1:8e:37:9a:c9:66: 99:52:0e:95:48:be:1d:51:ff:49:ad:ff:a7:75:b2:31:39:18: 06:5e:f8:b2:47:3b:08:89:ea:2f:43:49:50:25:3d:71:50:e1: a7:58:14:b7:36:83:12:b0:10:8a:de:05:25:9d:e8:4e:7d:19: df:45:61:03:a6:4d:a0:ef:7e:28:99:96:4c:fa:a9:11:66:1f: f7:70:25:64:fc:50:84:22:b7:af:04:8f:07:a9:1f:4f:44:92: b5:48:56:3c:30:8d:1a:e6:b5:cd:fa:03:74:ab:20:a6:9a:00: 06:5a:99:22:5a:9d:f7:de:fd:f2:f4:39:ac:69:50:1c:4b:68: 2b:b0:b9:2b:e4:07:e7:49:71:be:56:67:7c:67:3e:d5:33:41: d1:59:a3:42:94:e2:f0:c0:7d:4e:17:c3:59:64:ac:c6:cc:5e: ea:7c:c3:be:2f:3b:58:22:03:c4:e4:d2:80:5f:bb:e1:1f:b7: 9d:8a:f4:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKEVDMkM2NDA2Q0FBMUYzOUVCQ0Y0NTg3NTMxNTAwRDU2 Qjk1MzYyQzAwHhcNMjUwNTE2MTQxNjQzWhcNMjUwNTIzMTQxNjQzWjAYMRYwFAYD VQQDEw02ODI3NDhjYi01MGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtd+GYnj+ahbzNGk6hCOM1KUmKy3+XeqpV0TYrlPcd+r+W/BBPWVkA+xGbxS5 IlPP1lVQLron1qMCZ2Jxe2Ro16VQFc/o2FOhry3gRUIEWWlBcO6e/SRqHk+DoQcN LAIOobYV1Z9ZaaRlLv79kajenH4icz1uBTQEhZ//BWkk4RuHFL7fTJY6MzojwgjN ar1sFSZddjN/ploXw+oCB9T+ezyrEIJgoPFm/gNO9h0Qxc7IN1NaS/2o6BMDrKCg L83r5vgFMFW51yyRd9TAjzxPSPKtfKCBLOEEWe6ibBwbmJksshJoQH5FCW0o0XHA yyYKn0gVKUjf+YQ/zglQPt+cMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFED4/PGW cwMQ7I8xevbYXz0wFrARMB8GA1UdIwQYMBaAFOwsZAbKofOevPRYdTFQDVa5U2LA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC80RTg2NDUwQzFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1Njg5RmgxTVZBTlZybFRZ c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdDeGtCc3FoODU2ODlGaDFNVkFOVnJsVFlzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC80RTg2NDUwQzFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1 Njg5RmgxTVZBTlZybFRZc0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+VyYYCwgmjV8tdF2LgBTSZuxGHcaLL5vxFx160hjVKaU5ADqT3qz/ WhIKRVPTtaD73WoJ5Aa5a1pQ4QW0Ym+hLUWxjjeayWaZUg6VSL4dUf9Jrf+ndbIx ORgGXviyRzsIieovQ0lQJT1xUOGnWBS3NoMSsBCK3gUlnehOfRnfRWEDpk2g734o mZZM+qkRZh/3cCVk/FCEIrevBI8HqR9PRJK1SFY8MI0a5rXN+gN0qyCmmgAGWpki Wp333v3y9DmsaVAcS2grsLkr5AfnSXG+Vmd8Zz7VM0HRWaNClOLwwH1OF8NZZKzG zF7qfMO+LztYIgPE5NKAX7vhH7edivSX -----END CERTIFICATE-----Generated at Sat May 17 01:29:58 2025 by rpki-client