$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft File: 7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft (raw, json) Hash identifier: +3achR7RSjKShIcF8f4poaqq3CnaB6LHqFYl1D17oBs= Subject key identifier: 3B:37:35:B2:CE:32:E0:4C:35:79:51:6B:A4:04:55:29:93:18:CE:82 Authority key identifier: EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37 Certificate issuer: /CN=A918D7D0/serialNumber=EC3B90C34886FD0928E3125461FBB4152BE99137 Certificate serial: 0C46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft Manifest number: 142D Signing time: Sun 04 May 2025 18:13:22 +0000 Manifest this update: Sun 04 May 2025 18:13:21 +0000 Manifest next update: Sun 11 May 2025 18:13:21 +0000 Files and hashes: 1: 7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl (hash: dY+ELTYv5ZDW4UWr4LW5wlGoDAs//ZqDukzR8uDb2ss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 18:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3142 (0xc46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D7D0, serialNumber=EC3B90C34886FD0928E3125461FBB4152BE99137 Validity Not Before: May 4 18:13:21 2025 GMT Not After : May 11 18:13:21 2025 GMT Subject: CN=6817ae41-cca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:65:63:c2:2b:d2:55:1d:c2:91:76:1b:d0:cb: a2:e0:1a:87:4b:b8:d1:44:4d:e9:16:18:8e:07:ef: ae:96:b5:ab:5f:90:29:f7:69:5d:00:ce:90:3c:00: b1:9c:64:7e:99:35:9f:d7:46:d0:3e:d7:bc:dc:34: 16:7d:e7:4e:14:43:ec:32:d3:4e:ab:7d:22:59:96: 89:b3:16:a3:1f:10:2c:9a:16:cb:75:8a:6e:e3:34: 01:c6:f3:91:42:de:f0:b9:8a:e8:08:bc:32:e8:be: 6f:a2:3c:41:17:e9:a5:8a:3d:dd:30:fd:94:99:d1: 6f:e9:13:36:f2:d7:34:0a:e7:da:37:4e:1c:26:ac: bd:ba:0b:24:6a:eb:49:a8:bd:29:16:76:36:fd:e4: e1:17:d2:0d:68:8a:0a:1a:e2:35:30:97:61:7b:42: 68:d4:0f:a1:59:bc:89:1b:0a:bd:d6:f9:3e:dd:46: ea:32:9d:e6:28:79:ce:07:d4:69:a6:ab:40:5e:33: 20:02:ab:01:52:23:3e:53:87:12:8c:0f:d8:ee:b7: 5e:58:6c:66:c5:33:4d:f2:3a:f8:70:9c:63:97:1d: 3b:94:82:e1:f9:df:97:ff:15:f4:1d:13:29:47:d5: 36:44:65:45:fc:74:4e:09:3c:af:44:b4:c1:33:51: b9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:37:35:B2:CE:32:E0:4C:35:79:51:6B:A4:04:55:29:93:18:CE:82 X509v3 Authority Key Identifier: keyid:EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:5d:da:7c:15:be:9e:e2:57:98:f0:a6:09:b6:75:1a:ac:8f: 89:7f:1a:d7:90:48:78:e6:0e:36:36:a0:c2:dd:0d:21:6f:61: 5c:1b:fd:e6:af:d7:22:55:56:d2:3d:a4:e2:b3:66:aa:1b:0c: 08:f0:24:d2:28:4f:51:72:a7:93:b0:ab:c4:5e:a4:4b:ab:d1: af:50:db:21:e1:89:e9:d1:0a:b9:ee:34:69:22:ee:06:c9:cc: 2d:06:45:44:81:f2:25:1c:61:e3:bf:45:11:c0:e8:75:db:35: 34:34:fb:4d:2a:77:0d:05:8b:53:b1:51:3d:e7:f5:02:d1:14: 4e:5c:cd:71:2f:78:6d:b3:f7:c0:cd:b0:c3:f5:b0:e7:ff:a9: 63:90:36:fd:92:cc:bc:07:83:dd:83:fd:99:1e:97:09:a0:88: 16:86:25:60:04:79:50:61:18:b7:0a:5d:40:e9:21:26:3d:5b: bb:2c:ee:c2:8a:ab:ed:6c:1f:3c:8d:d0:79:93:74:24:80:44: a4:1d:0a:64:8c:de:c8:28:96:87:f8:62:cf:de:30:52:ee:e8: 2a:40:f1:38:26:af:a6:44:c9:58:19:e9:0b:af:5a:30:f7:ec: 56:94:9f:66:5a:d6:8f:59:b9:09:9b:3e:b6:85:c7:e8:50:e3: 25:e4:f0:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3RDAxMTAvBgNVBAUTKEVDM0I5MEMzNDg4NkZEMDkyOEUzMTI1NDYxRkJCNDE1 MkJFOTkxMzcwHhcNMjUwNTA0MTgxMzIxWhcNMjUwNTExMTgxMzIxWjAYMRYwFAYD VQQDEw02ODE3YWU0MS1jY2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmVjwivSVR3CkXYb0Mui4BqHS7jRRE3pFhiOB++ulrWrX5Ap92ldAM6QPACx nGR+mTWf10bQPte83DQWfedOFEPsMtNOq30iWZaJsxajHxAsmhbLdYpu4zQBxvOR Qt7wuYroCLwy6L5vojxBF+mlij3dMP2UmdFv6RM28tc0CufaN04cJqy9ugskautJ qL0pFnY2/eThF9INaIoKGuI1MJdhe0Jo1A+hWbyJGwq91vk+3UbqMp3mKHnOB9Rp pqtAXjMgAqsBUiM+U4cSjA/Y7rdeWGxmxTNN8jr4cJxjlx07lILh+d+X/xX0HRMp R9U2RGVF/HROCTyvRLTBM1G5jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDs3NbLO MuBMNXlRa6QEVSmTGM6CMB8GA1UdIwQYMBaAFOw7kMNIhv0JKOMSVGH7tBUr6ZE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDdEMC85ODJCMkQ1QTAw ODIxMUVBQjcxRjRBMkJDNEY5QUUwMi83RHVRdzBpR19Ra280eEpVWWZ1MEZTdnBr VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEdVF3MGlHX1FrbzR4SlVZZnUwRlN2cGtUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDdEMC85ODJCMkQ1QTAwODIxMUVBQjcxRjRBMkJDNEY5QUUwMi83RHVRdzBpR19R a280eEpVWWZ1MEZTdnBrVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNXdp8Fb6e4leY8KYJtnUarI+JfxrXkEh45g42NqDC3Q0hb2FcG/3m r9ciVVbSPaTis2aqGwwI8CTSKE9RcqeTsKvEXqRLq9GvUNsh4Ynp0Qq57jRpIu4G ycwtBkVEgfIlHGHjv0URwOh12zU0NPtNKncNBYtTsVE95/UC0RROXM1xL3hts/fA zbDD9bDn/6ljkDb9ksy8B4Pdg/2ZHpcJoIgWhiVgBHlQYRi3Cl1A6SEmPVu7LO7C iqvtbB88jdB5k3QkgESkHQpkjN7IKJaH+GLP3jBS7ugqQPE4Jq+mRMlYGekLr1ow 9+xWlJ9mWtaPWbkJmz62hcfoUOMl5PDT -----END CERTIFICATE-----Generated at Tue May 6 13:32:33 2025 by rpki-client