$ rpki-client -vvf rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft File: 7eL0zENHKMeciTkUFPbuA_tBaIw.mft (raw, json) Hash identifier: KEmnTuostsrcj7dSzdT2bzvoquKAvuQ52TSo8DHOJjA= Subject key identifier: 43:28:7D:61:B8:A1:48:53:EF:A0:02:A7:A1:6A:DE:A7:C1:6C:5F:BB Authority key identifier: ED:E2:F4:CC:43:47:28:C7:9C:89:39:14:14:F6:EE:03:FB:41:68:8C Certificate issuer: /CN=A912294F/serialNumber=EDE2F4CC434728C79C89391414F6EE03FB41688C Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft Manifest number: 0126 Signing time: Sat 05 Apr 2025 04:03:26 +0000 Manifest this update: Sat 05 Apr 2025 04:03:26 +0000 Manifest next update: Sat 12 Apr 2025 04:03:26 +0000 Files and hashes: 1: 7eL0zENHKMeciTkUFPbuA_tBaIw.crl (hash: 8Z8q1nzg6ym5n0hi+XlgvmWWgg7m7e1DLOT7SSIbMik=) 2: 099FC48C854911EF8C3F5275C4F9AE02.roa (hash: 1Y1b/QsKKP8Hjc1I0M3GlUj53Sw/Eb4ibtuIxI0mlJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.crl rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912294F Validity Not Before: Apr 5 04:03:26 2025 GMT Not After : Apr 12 04:03:26 2025 GMT Subject: CN=67f0ab8e-8b4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a4:8c:32:1c:bd:27:d7:ab:6d:c0:d4:31:fe: ee:03:e4:54:30:30:77:75:3c:35:2f:88:e6:2c:8b: c7:ef:79:f1:23:43:e1:d5:9c:00:cb:64:02:88:40: c0:9d:c1:3a:ae:33:2c:f3:a7:af:cc:a8:18:58:dd: a1:43:cf:bc:ee:be:24:23:07:91:2d:9b:35:af:3f: 29:06:7a:1f:ff:a5:7a:59:a7:51:3b:fc:7d:fc:61: 38:57:08:1a:cf:a1:bb:f9:b2:ee:33:f4:b2:bd:22: 5b:90:db:3a:20:86:df:8c:62:b7:c8:ac:3f:ca:0b: 5e:a4:64:0e:6d:b5:46:27:64:72:1b:20:2c:1e:85: 77:de:3d:e0:6c:ca:81:da:2b:53:cb:7d:6b:c8:63: b7:eb:62:25:8c:83:d5:a3:2e:5f:68:ae:c4:6c:c2: 09:70:b2:57:96:95:79:39:33:5d:63:ec:ed:b3:42: 86:9d:5e:05:b9:32:16:11:70:a5:67:00:84:0d:a7: 67:e8:b6:3f:d1:cb:02:7f:a8:eb:c7:14:54:43:82: f7:c0:14:a7:cc:03:6a:a0:9d:ac:42:35:62:69:07: 9d:d7:d8:2a:55:22:77:00:fe:23:87:d0:76:08:3a: 79:83:2a:ed:5c:ba:8b:b9:60:c5:b8:9e:c7:2c:d3: 35:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:28:7D:61:B8:A1:48:53:EF:A0:02:A7:A1:6A:DE:A7:C1:6C:5F:BB X509v3 Authority Key Identifier: keyid:ED:E2:F4:CC:43:47:28:C7:9C:89:39:14:14:F6:EE:03:FB:41:68:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:a0:c1:6e:6f:ad:4c:f3:24:5d:4b:5a:6e:69:53:79:92:af: d4:41:6b:78:ad:dc:31:ea:dd:3a:54:16:b7:a2:11:2f:21:29: 72:c7:d0:00:d2:62:89:63:c1:45:aa:78:bc:9c:1e:83:f0:6b: 0d:fe:76:19:6b:99:b3:09:77:fe:a3:35:2e:98:b5:e1:39:4f: f6:81:c8:32:8d:a3:ab:f3:33:08:a3:0f:55:4a:e3:10:3a:4e: c6:ff:95:d5:98:97:91:83:32:a6:94:e5:df:93:a3:89:ae:46: 7c:85:42:45:f4:04:dc:fc:c4:00:cd:19:1a:f4:08:b0:ff:4d: a2:47:cc:35:18:fd:03:a4:33:4d:bd:4b:52:74:aa:73:d8:2f: 94:a0:f8:a2:40:41:c7:68:2e:5e:69:d1:6b:91:9f:ff:56:b1: cf:50:6b:7c:27:21:94:05:f7:6f:35:40:e2:10:6b:1c:dc:44: 3c:51:9a:84:a6:3e:2b:60:a8:98:4a:92:be:13:a6:39:58:81: 72:8b:c1:cf:18:a1:c2:78:39:99:22:1b:2a:ed:9b:52:0a:16: 8a:1c:4d:9c:9f:11:48:e7:f8:22:df:98:ad:e9:b6:46:26:05: 0c:11:df:c4:68:81:3e:78:67:95:c8:11:df:38:12:0d:9f:21: dd:8a:45:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI5NEYxMTAvBgNVBAUTKEVERTJGNENDNDM0NzI4Qzc5Qzg5MzkxNDE0RjZFRTAz RkI0MTY4OEMwHhcNMjUwNDA1MDQwMzI2WhcNMjUwNDEyMDQwMzI2WjAYMRYwFAYD VQQDEw02N2YwYWI4ZS04YjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqSMMhy9J9erbcDUMf7uA+RUMDB3dTw1L4jmLIvH73nxI0Ph1ZwAy2QCiEDA ncE6rjMs86evzKgYWN2hQ8+87r4kIweRLZs1rz8pBnof/6V6WadRO/x9/GE4Vwga z6G7+bLuM/SyvSJbkNs6IIbfjGK3yKw/ygtepGQObbVGJ2RyGyAsHoV33j3gbMqB 2itTy31ryGO362IljIPVoy5faK7EbMIJcLJXlpV5OTNdY+zts0KGnV4FuTIWEXCl ZwCEDadn6LY/0csCf6jrxxRUQ4L3wBSnzANqoJ2sQjViaQed19gqVSJ3AP4jh9B2 CDp5gyrtXLqLuWDFuJ7HLNM1VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMofWG4 oUhT76ACp6Fq3qfBbF+7MB8GA1UdIwQYMBaAFO3i9MxDRyjHnIk5FBT27gP7QWiM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjk0Ri9DOTg5MDY3MjU3 QkExMUVFQTU5RDVBODRDNEY5QUUwMi83ZUwwekVOSEtNZWNpVGtVRlBidUFfdEJh SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdlTDB6RU5IS01lY2lUa1VGUGJ1QV90QmFJdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Mjk0Ri9DOTg5MDY3MjU3QkExMUVFQTU5RDVBODRDNEY5QUUwMi83ZUwwekVOSEtN ZWNpVGtVRlBidUFfdEJhSXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAioMFub61M8yRdS1puaVN5kq/UQWt4rdwx6t06VBa3ohEvISlyx9AA 0mKJY8FFqni8nB6D8GsN/nYZa5mzCXf+ozUumLXhOU/2gcgyjaOr8zMIow9VSuMQ Ok7G/5XVmJeRgzKmlOXfk6OJrkZ8hUJF9ATc/MQAzRka9Aiw/02iR8w1GP0DpDNN vUtSdKpz2C+UoPiiQEHHaC5eadFrkZ//VrHPUGt8JyGUBfdvNUDiEGsc3EQ8UZqE pj4rYKiYSpK+E6Y5WIFyi8HPGKHCeDmZIhsq7ZtSChaKHE2cnxFI5/gi35it6bZG JgUMEd/EaIE+eGeVyBHfOBINnyHdikUI -----END CERTIFICATE-----Generated at Sun Apr 6 10:16:23 2025 by rpki-client