$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft File: aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft (raw, json) Hash identifier: B6x7RwbkE+SfVgnySL0jZ4aqWVtANIARdF2bT5Qslcg= Subject key identifier: C7:AB:7C:52:64:8B:0C:CF:D2:AB:79:D3:F0:E2:7A:15:4F:3C:6D:37 Authority key identifier: 68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3 Certificate issuer: /CN=A9114D4F/serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3 Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft Manifest number: 7A Signing time: Thu 03 Apr 2025 05:58:32 +0000 Manifest this update: Thu 03 Apr 2025 05:58:31 +0000 Manifest next update: Thu 10 Apr 2025 05:58:31 +0000 Files and hashes: 1: aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl (hash: RmIoz0F7rSoz7kgmmRYqkuSgUCasTkVaX/TiZyyX3Ys=) 2: 444375E25B9C11EFA181A044C4F9AE02.roa (hash: Yhh6V+gIv+Ld1DK0VM67Fxc3c5mvFHS895j33+/A8nE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:58:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D4F Validity Not Before: Apr 3 05:58:31 2025 GMT Not After : Apr 10 05:58:31 2025 GMT Subject: CN=67ee2388-027e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bb:2d:c1:fe:e3:db:db:a5:24:f8:05:a3:32: d1:2e:34:e9:ec:44:58:00:8b:a0:c1:32:df:0a:22: 1b:15:52:6e:0f:1e:41:4d:86:72:d5:d0:05:aa:11: 0f:ea:10:f3:8e:ff:8b:23:85:28:fd:c3:0a:7a:43: 76:0a:99:ae:df:cd:c6:a7:59:b5:44:c0:16:5d:0b: b2:20:4b:54:f3:00:22:e6:75:83:0b:74:50:df:59: d6:e8:a7:65:d0:5a:a6:9a:0e:7e:bb:08:1c:d9:29: 7e:8e:76:59:bc:a2:e8:91:26:be:0c:9b:b0:58:52: af:9d:3d:8a:21:3b:ed:c2:9c:a2:4c:5a:e9:d2:48: aa:50:29:0d:74:ee:d7:12:fb:95:2a:ca:6d:ce:77: 21:77:4d:7b:14:66:9d:82:45:d3:d2:71:fa:81:d4: 82:57:f7:ce:f1:22:6b:df:9c:03:f5:52:dc:ba:0e: 24:a2:af:2c:a3:09:45:85:b0:91:d0:24:d6:02:cb: 63:62:d8:eb:00:96:7a:9f:85:5c:53:bc:3b:be:89: 55:ec:c8:2e:10:f5:2a:7c:45:29:16:3d:f8:6f:78: 98:03:98:c6:c4:9e:1b:3d:9b:03:6d:b2:e9:92:f6: ef:57:27:42:96:49:0e:9b:dd:51:53:ce:5e:e3:41: 29:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:AB:7C:52:64:8B:0C:CF:D2:AB:79:D3:F0:E2:7A:15:4F:3C:6D:37 X509v3 Authority Key Identifier: keyid:68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:23:a1:77:c5:1f:00:ec:14:c2:d8:bd:d0:cb:ec:54:3d:fa: 21:39:49:ac:42:00:ec:be:8b:f3:54:5e:ba:4e:53:b8:55:ce: 16:3b:5e:17:ed:c1:ae:06:ea:2f:3d:3b:c8:36:22:65:93:39: d0:56:3f:26:26:62:23:88:fc:9e:ea:b9:58:d4:f3:ab:68:e1: 75:01:57:4f:fc:f8:5e:0c:94:4c:03:47:12:43:a4:ac:e3:b2: 84:7a:8c:90:56:38:c8:33:6b:22:18:05:9e:36:b5:9f:e8:b2: c1:ee:01:9c:aa:ed:7f:9f:06:2b:1e:f7:4c:81:79:15:58:b5: b0:fe:da:33:d9:96:52:c4:6c:55:43:ec:d7:d6:09:06:df:a5: 2d:d7:75:bb:f3:b6:50:dc:79:f6:19:12:b9:f6:9b:2c:00:e9: 59:1a:f8:e5:19:1d:d7:50:0b:e1:04:b6:de:2d:0b:f5:79:85: 05:2b:d0:8d:f3:df:9a:66:e8:df:35:54:66:a9:da:4d:8a:fd: 98:6f:27:0b:2f:63:22:cb:64:65:34:00:b7:ae:1b:cc:cc:78: 6b:7c:f9:cf:2b:d0:92:83:0c:c4:7c:c9:08:6b:05:78:9d:bc: 12:aa:f0:ca:99:da:0f:e9:32:37:dc:34:20:8f:f4:e2:9f:3c: a2:01:6b:75 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NEQ0RjExMC8GA1UEBRMoNjg3NzQxREUxNUNEODgzQzEwRERCQzRGQzNBMkRDRjU0 ODVFN0RGMzAeFw0yNTA0MDMwNTU4MzFaFw0yNTA0MTAwNTU4MzFaMBgxFjAUBgNV BAMTDTY3ZWUyMzg4LTAyN2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9uy3B/uPb26Uk+AWjMtEuNOnsRFgAi6DBMt8KIhsVUm4PHkFNhnLV0AWqEQ/q EPOO/4sjhSj9wwp6Q3YKma7fzcanWbVEwBZdC7IgS1TzACLmdYMLdFDfWdbop2XQ WqaaDn67CBzZKX6Odlm8ouiRJr4Mm7BYUq+dPYohO+3CnKJMWunSSKpQKQ107tcS +5Uqym3OdyF3TXsUZp2CRdPScfqB1IJX987xImvfnAP1Uty6DiSiryyjCUWFsJHQ JNYCy2Ni2OsAlnqfhVxTvDu+iVXsyC4Q9Sp8RSkWPfhveJgDmMbEnhs9mwNtsumS 9u9XJ0KWSQ6b3VFTzl7jQSn3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUx6t8UmSL DM/Sq3nT8OJ6FU88bTcwHwYDVR0jBBgwFoAUaHdB3hXNiDwQ3bxPw6Lc9UheffMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0RDRGLzBFM0FDQ0ZDNUI5 QzExRUY5QjE1NDk0NEM0RjlBRTAyL2FIZEIzaFhOaUR3UTNieFB3NkxjOVVoZWZm TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYUhkQjNoWE5pRHdRM2J4UHc2TGM5VWhlZmZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0 RDRGLzBFM0FDQ0ZDNUI5QzExRUY5QjE1NDk0NEM0RjlBRTAyL2FIZEIzaFhOaUR3 UTNieFB3NkxjOVVoZWZmTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAkjoXfFHwDsFMLYvdDL7FQ9+iE5SaxCAOy+i/NUXrpOU7hVzhY7Xhft wa4G6i89O8g2ImWTOdBWPyYmYiOI/J7quVjU86to4XUBV0/8+F4MlEwDRxJDpKzj soR6jJBWOMgzayIYBZ42tZ/ossHuAZyq7X+fBise90yBeRVYtbD+2jPZllLEbFVD 7NfWCQbfpS3XdbvztlDcefYZErn2mywA6Vka+OUZHddQC+EEtt4tC/V5hQUr0I3z 35pm6N81VGap2k2K/ZhvJwsvYyLLZGU0ALeuG8zMeGt8+c8r0JKDDMR8yQhrBXid vBKq8MqZ2g/pMjfcNCCP9OKfPKIBa3U= -----END CERTIFICATE-----Generated at Fri Apr 4 22:15:07 2025 by rpki-client