$ rpki-client -vvf rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft File: -r7TJg0sVSvpFdAj4YnWEopkX0s.mft (raw, json) Hash identifier: UDj5s+rSG4bkAaI4v3TxyQKCgE3vCVhsxS4S4GNPAQs= Subject key identifier: 53:02:35:75:88:F1:81:CB:AC:BC:82:E1:40:9F:5C:01:16:3C:37:8F Authority key identifier: FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B Certificate issuer: /CN=A919FF79/serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B Certificate serial: 127E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft Manifest number: 1274 Signing time: Sun 04 May 2025 17:00:45 +0000 Manifest this update: Sun 04 May 2025 17:00:44 +0000 Manifest next update: Sun 11 May 2025 17:00:44 +0000 Files and hashes: 1: -r7TJg0sVSvpFdAj4YnWEopkX0s.crl (hash: +pPgu97sTpKwF4VDFmkUtLTDLimFPWfSLR/9pGYfqio=) 2: A87EED5A7AF111EB86DC9F6CC4F9AE02.roa (hash: n5O4+xpqurpdXo1l2y1SKOgBDTyWDYNQaGaHjqKBMU8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 17:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4734 (0x127e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FF79, serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B Validity Not Before: May 4 17:00:44 2025 GMT Not After : May 11 17:00:44 2025 GMT Subject: CN=68179d3c-92c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:95:b0:75:8e:a4:69:e3:ee:9c:fc:30:7a:95: 42:9b:5d:65:43:80:f4:34:21:d6:f5:20:43:22:b2: aa:18:bc:dc:4a:19:31:e2:21:f5:93:59:a9:89:4e: cd:4e:ce:a0:c1:7e:3b:8c:b6:f0:76:6a:b8:5a:3c: 56:5d:25:97:47:0d:eb:11:3e:19:bf:11:07:55:3c: ce:ae:73:80:67:2d:f7:70:7d:57:bc:23:31:f3:9c: 96:17:36:8e:dd:7e:fc:f1:f8:c4:3b:25:7b:6e:b6: 12:2e:d7:4d:82:d2:7f:f9:8d:0c:f0:5a:3e:b5:8f: a0:44:b5:21:5b:08:88:62:3a:dd:ba:92:5d:8b:c3: ca:d1:63:3d:e3:28:23:aa:6a:5f:1d:93:ea:92:e9: c8:0f:13:d2:22:c8:d4:13:23:64:76:72:f6:79:f9: 6b:47:f9:ac:d7:cc:29:0e:c7:17:6a:93:09:eb:9c: 95:a5:96:58:39:c7:c3:2b:28:4e:70:47:29:b1:60: a3:c9:33:9a:b6:a2:a0:9e:c5:00:87:b7:8d:a1:be: e1:33:f5:85:f7:14:d5:21:07:e8:e2:16:9d:df:0a: a7:0d:4a:84:27:33:85:ce:96:6c:8a:9e:49:28:eb: 40:5a:1d:9e:79:27:7f:e2:4d:97:9a:82:0d:59:ea: 09:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:02:35:75:88:F1:81:CB:AC:BC:82:E1:40:9F:5C:01:16:3C:37:8F X509v3 Authority Key Identifier: keyid:FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:79:59:4e:96:4b:72:b3:bb:33:21:8b:9d:2e:1a:e8:46:2f: 3d:b7:7e:53:86:47:9c:cd:51:14:46:78:67:b9:c9:49:5a:17: 12:6d:f5:eb:58:ff:1f:8d:42:c1:d9:42:e3:9b:1c:61:d8:31: ea:2f:bf:3c:f0:0c:fb:e7:89:ff:a8:11:5d:19:59:12:42:97: 72:0a:3d:fc:8b:eb:58:9f:f0:d3:95:34:bc:64:38:02:e3:48: 99:76:e0:24:9c:82:94:a2:21:d7:21:a9:9b:83:e2:c8:ff:5c: 08:97:5e:61:a2:47:f8:92:74:75:99:47:1f:7b:9b:fc:f6:92: 17:34:e7:a6:63:1f:b3:5d:d0:65:88:7d:f8:9a:92:a7:17:df: f5:b1:f0:38:84:7f:6d:cf:a0:43:42:fa:3d:bc:9d:cd:3c:07: 07:d4:35:d8:de:52:6c:fe:53:36:b7:30:8f:e9:5d:2f:47:1e: cb:95:26:47:b0:7e:c9:5b:53:7b:78:d3:82:fa:fc:c6:38:2c: b7:70:87:d9:08:de:9d:c2:d1:5c:1b:7d:9f:95:e3:87:9a:70: 38:fb:38:34:62:76:b9:f5:e5:21:58:40:bf:83:79:6a:38:1c: 14:e6:e4:31:e3:c0:d4:2b:21:3b:42:72:5b:03:bb:c1:27:0d: 41:91:f9:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZGNzkxMTAvBgNVBAUTKEZBQkVEMzI2MEQyQzU1MkJFOTE1RDAyM0UxODlENjEy OEE2NDVGNEIwHhcNMjUwNTA0MTcwMDQ0WhcNMjUwNTExMTcwMDQ0WjAYMRYwFAYD VQQDEw02ODE3OWQzYy05MmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05WwdY6kaePunPwwepVCm11lQ4D0NCHW9SBDIrKqGLzcShkx4iH1k1mpiU7N Ts6gwX47jLbwdmq4WjxWXSWXRw3rET4ZvxEHVTzOrnOAZy33cH1XvCMx85yWFzaO 3X788fjEOyV7brYSLtdNgtJ/+Y0M8Fo+tY+gRLUhWwiIYjrdupJdi8PK0WM94ygj qmpfHZPqkunIDxPSIsjUEyNkdnL2eflrR/ms18wpDscXapMJ65yVpZZYOcfDKyhO cEcpsWCjyTOatqKgnsUAh7eNob7hM/WF9xTVIQfo4had3wqnDUqEJzOFzpZsip5J KOtAWh2eeSd/4k2XmoINWeoJ8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMCNXWI 8YHLrLyC4UCfXAEWPDePMB8GA1UdIwQYMBaAFPq+0yYNLFUr6RXQI+GJ1hKKZF9L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkY3OS9BM0MwOEEyRUNB OTcxMUU4QUFFODA3NUZDNEY5QUUwMi8tcjdUSmcwc1ZTdnBGZEFqNFluV0VvcGtY MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1yN1RKZzBzVlN2cEZkQWo0WW5XRW9wa1gwcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkY3OS9BM0MwOEEyRUNBOTcxMUU4QUFFODA3NUZDNEY5QUUwMi8tcjdUSmcwc1ZT dnBGZEFqNFluV0VvcGtYMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGeVlOlktys7szIYudLhroRi89t35ThkeczVEURnhnuclJWhcSbfXr WP8fjULB2ULjmxxh2DHqL7888Az754n/qBFdGVkSQpdyCj38i+tYn/DTlTS8ZDgC 40iZduAknIKUoiHXIambg+LI/1wIl15hokf4knR1mUcfe5v89pIXNOemYx+zXdBl iH34mpKnF9/1sfA4hH9tz6BDQvo9vJ3NPAcH1DXY3lJs/lM2tzCP6V0vRx7LlSZH sH7JW1N7eNOC+vzGOCy3cIfZCN6dwtFcG32fleOHmnA4+zg0Yna59eUhWEC/g3lq OBwU5uQx48DUKyE7QnJbA7vBJw1Bkfl/ -----END CERTIFICATE-----Generated at Mon May 5 12:57:15 2025 by rpki-client