$ rpki-client -vvf rpki.apnic.net/member_repository/A9127AE0/DD6587AC0F4C11EAA014267BC4F9AE02/7VXfoOxp2WS4W4bXi0AFHeoSlnM.mft File: 7VXfoOxp2WS4W4bXi0AFHeoSlnM.mft (raw, json) Hash identifier: mWnIfRYXWVGc/IuU0/RWmmyrqipQp8LDBaySPEzfkfg= Subject key identifier: 2D:7B:B8:50:76:41:3A:40:6F:42:B9:56:35:B9:E0:0B:89:A0:C5:16 Authority key identifier: ED:55:DF:A0:EC:69:D9:64:B8:5B:86:D7:8B:40:05:1D:EA:12:96:73 Certificate issuer: /CN=A9127AE0/serialNumber=ED55DFA0EC69D964B85B86D78B40051DEA129673 Certificate serial: 0BFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VXfoOxp2WS4W4bXi0AFHeoSlnM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127AE0/DD6587AC0F4C11EAA014267BC4F9AE02/7VXfoOxp2WS4W4bXi0AFHeoSlnM.mft Manifest number: 0BF6 Signing time: Tue 08 Apr 2025 18:38:49 +0000 Manifest this update: Tue 08 Apr 2025 18:38:49 +0000 Manifest next update: Tue 15 Apr 2025 18:38:49 +0000 Files and hashes: 1: 7VXfoOxp2WS4W4bXi0AFHeoSlnM.crl (hash: t5fHNMJ1rFPhvXj9BV6y/6HbvQ7CsjIdN4TtFh2eMVM=) 2: 6DB16BB40F4D11EAA6E7A17BC4F9AE02.roa (hash: OAnDbpXpqj53nUK26ywgZEPTuuA4/o8QEENllBabbSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127AE0/DD6587AC0F4C11EAA014267BC4F9AE02/7VXfoOxp2WS4W4bXi0AFHeoSlnM.crl rsync://rpki.apnic.net/member_repository/A9127AE0/DD6587AC0F4C11EAA014267BC4F9AE02/7VXfoOxp2WS4W4bXi0AFHeoSlnM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VXfoOxp2WS4W4bXi0AFHeoSlnM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 18:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3070 (0xbfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127AE0 Validity Not Before: Apr 8 18:38:49 2025 GMT Not After : Apr 15 18:38:49 2025 GMT Subject: CN=67f56d39-efb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ed:5b:1c:ce:82:de:2a:0a:34:59:9a:48:4c: ca:25:18:31:95:f5:7a:46:1d:98:8a:79:82:4f:7f: 9e:4f:66:44:f3:b1:99:20:8d:3c:bd:21:1a:0b:8c: bd:f2:f8:79:d8:6f:f4:1d:5a:71:f4:dd:55:4a:ed: 85:99:33:ab:96:dd:36:19:77:cc:05:5a:f9:14:bc: f9:9b:48:d8:7a:c5:2f:c0:2a:d5:3a:88:51:01:7b: 9f:8b:a6:6c:3e:8b:1b:9f:25:9d:0c:d6:e3:e8:eb: 76:fd:53:c8:91:8a:25:a6:2a:05:9c:fc:83:7c:a0: 60:36:70:eb:af:64:ec:f8:16:a5:bc:d7:ac:3f:84: 30:75:19:a3:90:fa:09:df:9e:14:04:03:fd:40:ed: 4c:c6:71:7e:2e:6a:3d:f2:dc:47:bd:26:83:3b:29: 55:de:ad:12:c7:cd:fc:46:09:29:6b:7f:bd:ff:42: f9:51:47:8a:9d:04:cb:6e:4e:ea:56:ac:3e:b2:32: e9:c3:c0:ed:84:c9:b6:51:11:fd:ac:78:47:e3:71: 8a:69:3b:7f:f7:40:fa:71:0c:e1:58:a5:0e:ca:2d: 23:84:d7:24:17:83:d3:e7:19:ff:69:e2:2e:39:48: 6d:50:a1:a0:df:2e:13:47:f3:00:cf:70:0d:ba:41: 0e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:7B:B8:50:76:41:3A:40:6F:42:B9:56:35:B9:E0:0B:89:A0:C5:16 X509v3 Authority Key Identifier: keyid:ED:55:DF:A0:EC:69:D9:64:B8:5B:86:D7:8B:40:05:1D:EA:12:96:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127AE0/DD6587AC0F4C11EAA014267BC4F9AE02/7VXfoOxp2WS4W4bXi0AFHeoSlnM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VXfoOxp2WS4W4bXi0AFHeoSlnM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127AE0/DD6587AC0F4C11EAA014267BC4F9AE02/7VXfoOxp2WS4W4bXi0AFHeoSlnM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:63:f0:5f:a7:4e:8d:28:1a:05:34:d3:32:8d:c1:e5:40:05: 0f:2d:4e:39:cc:97:4f:9f:09:ad:98:a4:a6:ca:dc:9e:c3:ea: 06:25:dc:43:de:fe:28:3e:85:b1:2b:05:7e:5e:06:88:01:93: 9c:2e:2e:95:a2:cf:03:1b:07:44:b8:a0:1f:d2:cc:07:b7:69: 8d:e9:1d:28:c7:3f:ac:87:da:a1:ec:fc:4b:1e:d7:d5:f1:ae: c4:fe:a5:50:80:13:ac:a6:f3:54:ce:61:99:5e:18:be:89:8e: f1:5b:b9:99:9c:03:c5:c3:5d:b8:ac:6b:6c:71:2c:2e:2f:ee: a5:97:f8:0a:c7:46:11:6e:6b:9a:a2:58:d1:d7:39:a3:5d:da: f3:cf:23:dd:27:f9:ed:48:57:e3:fe:9c:c1:57:1b:a5:8a:89: 84:04:cf:b5:f7:86:aa:77:3c:8a:72:00:1b:cb:ea:52:cb:ed: 0e:cf:33:01:31:ec:ae:8e:a7:54:9b:79:c7:df:29:b0:74:9e: 04:bf:d0:8a:4a:b6:95:63:23:5b:0e:e7:ef:1c:4c:c1:e5:03: 1e:d9:d5:4f:0d:a6:7f:4a:d3:05:2f:cd:28:82:0b:35:c2:d3: 51:54:c9:b7:fb:ab:ab:b7:6e:ab:dd:1b:3d:18:7a:db:05:1e: 7e:1d:e0:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdBRTAxMTAvBgNVBAUTKEVENTVERkEwRUM2OUQ5NjRCODVCODZENzhCNDAwNTFE RUExMjk2NzMwHhcNMjUwNDA4MTgzODQ5WhcNMjUwNDE1MTgzODQ5WjAYMRYwFAYD VQQDEw02N2Y1NmQzOS1lZmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1e1bHM6C3ioKNFmaSEzKJRgxlfV6Rh2YinmCT3+eT2ZE87GZII08vSEaC4y9 8vh52G/0HVpx9N1VSu2FmTOrlt02GXfMBVr5FLz5m0jYesUvwCrVOohRAXufi6Zs PosbnyWdDNbj6Ot2/VPIkYolpioFnPyDfKBgNnDrr2Ts+BalvNesP4QwdRmjkPoJ 354UBAP9QO1MxnF+Lmo98txHvSaDOylV3q0Sx838Rgkpa3+9/0L5UUeKnQTLbk7q Vqw+sjLpw8DthMm2URH9rHhH43GKaTt/90D6cQzhWKUOyi0jhNckF4PT5xn/aeIu OUhtUKGg3y4TR/MAz3ANukEOHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC17uFB2 QTpAb0K5VjW54AuJoMUWMB8GA1UdIwQYMBaAFO1V36DsadlkuFuG14tABR3qEpZz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0FFMC9ERDY1ODdBQzBG NEMxMUVBQTAxNDI2N0JDNEY5QUUwMi83Vlhmb094cDJXUzRXNGJYaTBBRkhlb1Ns bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdWWGZvT3hwMldTNFc0YlhpMEFGSGVvU2xuTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0FFMC9ERDY1ODdBQzBGNEMxMUVBQTAxNDI2N0JDNEY5QUUwMi83Vlhmb094cDJX UzRXNGJYaTBBRkhlb1Nsbk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARY/Bfp06NKBoFNNMyjcHlQAUPLU45zJdPnwmtmKSmytyew+oGJdxD 3v4oPoWxKwV+XgaIAZOcLi6Vos8DGwdEuKAf0swHt2mN6R0oxz+sh9qh7PxLHtfV 8a7E/qVQgBOspvNUzmGZXhi+iY7xW7mZnAPFw124rGtscSwuL+6ll/gKx0YRbmua oljR1zmjXdrzzyPdJ/ntSFfj/pzBVxuliomEBM+194aqdzyKcgAby+pSy+0OzzMB MeyujqdUm3nH3ymwdJ4Ev9CKSraVYyNbDufvHEzB5QMe2dVPDaZ/StMFL80oggs1 wtNRVMm3+6urt26r3Rs9GHrbBR5+HeDf -----END CERTIFICATE-----Generated at Thu Apr 10 16:57:47 2025 by rpki-client