$ rpki-client -vvf rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.mft File: byO7S-gvNLDnRhJ5Ugxzl3qx0jw.mft (raw, json) Hash identifier: 6joZX90HVYLHp54kXM/6TzF9NgOspKK63yQ/yKkFQQg= Subject key identifier: BF:7C:A6:0B:30:A4:DF:7F:CD:8D:8C:E2:65:44:DB:59:C3:2C:5D:77 Authority key identifier: 6F:23:BB:4B:E8:2F:34:B0:E7:46:12:79:52:0C:73:97:7A:B1:D2:3C Certificate issuer: /CN=A9111926/serialNumber=6F23BB4BE82F34B0E7461279520C73977AB1D23C Certificate serial: 0BC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.mft Manifest number: 0BB2 Signing time: Tue 22 Apr 2025 18:57:43 +0000 Manifest this update: Tue 22 Apr 2025 18:57:43 +0000 Manifest next update: Tue 29 Apr 2025 18:57:42 +0000 Files and hashes: 1: byO7S-gvNLDnRhJ5Ugxzl3qx0jw.crl (hash: 0FIHbKv2ZwRo1VBD7bj6UH9SwOV9rwIDfHxkPnZTQPw=) 2: 54B32544D84711EF81BD1E0BC4F9AE02.roa (hash: n/Sc1HZXxr+QB2+UH8INg78Itmv5yzjeOuf4NXzLeAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.crl rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 18:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3014 (0xbc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111926, serialNumber=6F23BB4BE82F34B0E7461279520C73977AB1D23C Validity Not Before: Apr 22 18:57:43 2025 GMT Not After : Apr 29 18:57:42 2025 GMT Subject: CN=6807e6a7-0084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6e:a6:56:8c:be:21:33:a6:fe:10:05:04:fc: fc:11:db:ea:21:7f:06:c3:ae:02:60:21:fe:83:b5: 1f:98:1d:a0:fb:bb:d7:59:82:c4:85:2c:97:c5:bd: 3d:e4:4e:90:a0:35:80:79:99:8b:c9:9b:43:dd:c9: ab:b7:32:97:f6:22:9b:d0:f3:8e:ae:6b:5d:ec:16: d7:9f:40:4f:8e:20:15:36:ef:69:7e:88:1c:9a:d8: 21:a8:77:eb:d4:a1:42:73:f1:93:84:71:58:dc:3a: af:19:6e:a4:63:fd:c8:29:c8:fa:94:ae:ef:57:82: 95:ba:d0:75:56:75:44:ba:63:08:cb:92:f3:7b:c3: af:fc:32:6a:a6:dc:60:f9:e5:7d:20:de:51:c0:ba: cf:10:44:ec:3b:5a:77:d9:e8:09:ee:03:52:03:d1: 04:c8:3c:c6:c0:0c:b6:de:cb:5c:e8:59:a0:54:67: fe:02:39:57:24:85:4e:28:27:d3:22:4e:42:1c:66: 44:bf:a2:b1:47:75:e0:79:ab:ba:65:16:b3:69:f6: f5:ee:54:22:f7:a7:e7:9e:71:17:91:47:f6:97:64: 38:19:9d:13:6a:41:b3:a6:2a:66:ea:3d:8e:a3:4c: e1:7b:ef:2a:f2:65:5b:1b:e0:a9:18:2c:c0:a5:f6: a3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7C:A6:0B:30:A4:DF:7F:CD:8D:8C:E2:65:44:DB:59:C3:2C:5D:77 X509v3 Authority Key Identifier: keyid:6F:23:BB:4B:E8:2F:34:B0:E7:46:12:79:52:0C:73:97:7A:B1:D2:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:4f:a4:27:af:ab:4b:d9:d3:9d:08:06:c1:5a:a8:25:0d:44: 84:3c:90:e7:f6:9e:a3:9a:d9:2f:90:6e:c7:8b:0c:68:79:f6: 8c:89:f0:58:e2:46:65:95:cf:53:52:36:a0:02:69:c5:63:8d: cf:8f:53:72:0e:61:af:b0:95:a2:70:16:a7:15:86:72:b5:c8: 4a:ca:97:98:86:1a:24:52:30:44:34:56:3e:68:0c:ec:e5:ea: f9:d8:5c:56:c3:0b:99:47:03:84:9a:3e:4c:36:f1:4d:49:b5: d2:0d:7a:cd:a8:bd:ee:5a:8e:6f:9d:29:2c:38:e7:f8:37:48: d6:ea:17:1f:19:ae:81:da:6f:67:a9:41:d7:af:2b:1a:91:1f: f8:f6:9c:1c:ff:6a:4c:2c:af:33:68:20:53:36:48:7a:7f:d4: 10:e9:84:c8:71:71:ba:f5:4b:53:b1:28:2d:9c:cf:cc:84:cc: 4b:58:32:e6:a1:d2:bc:c2:c4:09:48:b4:54:11:74:54:53:0c: 26:53:f7:fd:0e:a1:6a:df:44:0e:74:1f:d0:a5:d8:bd:35:db: 51:00:2f:bf:ae:95:c8:cf:9d:f4:79:5b:f7:a9:a4:6e:77:7e: 6c:29:67:de:85:5b:a9:47:81:97:f3:8f:0a:1f:4d:bf:74:f5: be:f3:5d:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE5MjYxMTAvBgNVBAUTKDZGMjNCQjRCRTgyRjM0QjBFNzQ2MTI3OTUyMEM3Mzk3 N0FCMUQyM0MwHhcNMjUwNDIyMTg1NzQzWhcNMjUwNDI5MTg1NzQyWjAYMRYwFAYD VQQDEw02ODA3ZTZhNy0wMDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy26mVoy+ITOm/hAFBPz8EdvqIX8Gw64CYCH+g7UfmB2g+7vXWYLEhSyXxb09 5E6QoDWAeZmLyZtD3cmrtzKX9iKb0POOrmtd7BbXn0BPjiAVNu9pfogcmtghqHfr 1KFCc/GThHFY3DqvGW6kY/3IKcj6lK7vV4KVutB1VnVEumMIy5Lze8Ov/DJqptxg +eV9IN5RwLrPEETsO1p32egJ7gNSA9EEyDzGwAy23stc6FmgVGf+AjlXJIVOKCfT Ik5CHGZEv6KxR3Xgeau6ZRazafb17lQi96fnnnEXkUf2l2Q4GZ0TakGzpipm6j2O o0zhe+8q8mVbG+CpGCzApfajeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL98pgsw pN9/zY2M4mVE21nDLF13MB8GA1UdIwQYMBaAFG8ju0voLzSw50YSeVIMc5d6sdI8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTkyNi83QzZBMEU0NDIx RkYxMUVBQTcyMzJBM0RDNEY5QUUwMi9ieU83Uy1ndk5MRG5SaEo1VWd4emwzcXgw ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J5TzdTLWd2TkxEblJoSjVVZ3h6bDNxeDBqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTkyNi83QzZBMEU0NDIxRkYxMUVBQTcyMzJBM0RDNEY5QUUwMi9ieU83Uy1ndk5M RG5SaEo1VWd4emwzcXgwancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcT6Qnr6tL2dOdCAbBWqglDUSEPJDn9p6jmtkvkG7HiwxoefaMifBY 4kZllc9TUjagAmnFY43Pj1NyDmGvsJWicBanFYZytchKypeYhhokUjBENFY+aAzs 5er52FxWwwuZRwOEmj5MNvFNSbXSDXrNqL3uWo5vnSksOOf4N0jW6hcfGa6B2m9n qUHXrysakR/49pwc/2pMLK8zaCBTNkh6f9QQ6YTIcXG69UtTsSgtnM/MhMxLWDLm odK8wsQJSLRUEXRUUwwmU/f9DqFq30QOdB/Qpdi9NdtRAC+/rpXIz530eVv3qaRu d35sKWfehVupR4GX848KH02/dPW+810m -----END CERTIFICATE-----Generated at Tue Apr 22 23:22:28 2025 by rpki-client