$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft File: c7ohvjbd39WGkBFtbux73H7--yg.mft (raw, json) Hash identifier: Y0lsaVbZEpYNko64547ieUSjN5X/8bR8p6ReQdnyswg= Subject key identifier: EF:BB:57:D1:94:21:EF:27:9F:9E:88:9F:6B:27:A6:D7:DD:94:CE:0C Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Certificate serial: 037B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft Manifest number: 035A Signing time: Thu 03 Apr 2025 01:06:43 +0000 Manifest this update: Thu 03 Apr 2025 01:06:43 +0000 Manifest next update: Thu 10 Apr 2025 01:06:43 +0000 Files and hashes: 1: c7ohvjbd39WGkBFtbux73H7--yg.crl (hash: 1UKScqXPK4ddhhpJ1FxH2PEbwJsqGlKl950gg9eLUA4=) 2: 3143DEC26C8811EEBAB7F227C4F9AE02.roa (hash: p2XvCNFD6d4VIAif72MiFgokcw+e7+Qk3biI5UhdJ/g=) 3: AA730ACCBCFA11EDAD328D3AC4F9AE02.roa (hash: WToU+UpRxbQJKSr2QGut5hwA296t8z/pXjsZxqDqyvg=) 4: 63F359F0620711EE8BBCFF68C4F9AE02.roa (hash: oDrhzyW7lkRnV2JdbCV+XPs93kiucplQyCNzYwjrpJw=) 5: 1ABD64C4FC4B11EC9E374483C4F9AE02.roa (hash: K97XOnrCVU0606+V1FtEZLw0f6bE1IzyADp5nbB58XM=) 6: AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa (hash: vOZZW9Fz+Ew432aoBZJQA6i/cbgp+fKwlVmKDZ1QXVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 891 (0x37b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127FC2 Validity Not Before: Apr 3 01:06:43 2025 GMT Not After : Apr 10 01:06:43 2025 GMT Subject: CN=67eddf23-bf11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:89:56:22:b9:e5:30:89:e0:3e:18:a1:50:29: 2f:d4:3a:66:00:75:96:73:f7:5a:6d:3a:07:45:ce: e8:76:1a:fb:e4:83:2e:58:0f:1c:f4:3f:dc:11:4a: 53:15:12:39:07:7f:8b:e4:ae:c6:99:68:1a:da:90: ce:fd:39:63:7a:81:f3:42:8f:ef:09:fc:b8:5d:fa: cf:8d:42:58:df:15:59:48:6b:d1:4c:d7:e8:c9:47: ed:1a:c2:ae:45:3c:38:19:d1:1c:a0:b9:43:46:9a: 26:1e:7c:78:d2:95:89:b2:bd:02:d4:ad:a6:48:3f: 10:c5:e3:04:ed:27:4f:f5:1c:c8:aa:07:10:af:65: 09:1f:85:84:d7:49:f5:44:58:15:67:b1:57:35:0c: f4:f9:80:a2:84:93:7b:49:83:60:10:aa:bc:83:f2: 59:35:45:1e:31:70:50:78:5b:8f:45:27:05:a7:5f: 3b:2a:d8:d1:04:b9:9b:2f:ef:eb:67:19:4d:30:8f: f5:e7:11:49:08:e7:a3:da:74:cf:d8:61:0e:a2:a9: 4b:80:be:b3:ed:c3:83:fc:e4:e0:5a:11:7a:cc:b4: fc:37:8c:09:75:7b:12:2d:60:d8:3b:51:a2:9d:61: 78:de:2c:11:f0:b1:52:90:55:e0:14:17:13:af:88: 43:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:BB:57:D1:94:21:EF:27:9F:9E:88:9F:6B:27:A6:D7:DD:94:CE:0C X509v3 Authority Key Identifier: keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:87:0a:3a:91:27:84:22:be:fd:35:82:4d:e4:06:5a:50:50: a8:71:c5:73:fc:55:da:70:db:ed:75:fa:89:4d:dd:d3:ac:0a: 9c:13:d9:33:65:2c:21:b1:25:a7:dc:59:92:98:a5:97:df:25: 35:c6:f2:29:12:ad:79:e4:ee:9b:8d:81:c8:04:23:cf:1a:f1: ae:8b:e3:f7:34:18:53:05:b0:dc:bd:79:f3:0f:39:6d:b1:d9: 2f:6c:b1:eb:bd:87:70:e7:19:e4:6a:13:12:43:5f:51:86:18: 66:f7:78:56:66:bc:aa:29:c9:4f:26:32:2f:1f:fe:4c:cc:bc: 7d:d8:24:eb:db:d4:fd:21:3f:c8:d1:c5:63:41:82:8d:fc:90: 7a:0d:7d:30:50:bb:09:c2:81:46:bc:8d:4e:ca:af:19:9a:9c: ab:f0:50:d7:82:39:d4:dd:e8:1e:dc:a5:5f:0f:18:51:7f:17: 49:69:29:35:01:32:c1:ba:35:99:5c:82:8c:24:f0:cc:ed:25: dc:1d:f2:ec:27:75:68:fb:75:09:17:ea:ff:49:db:e3:58:50: a1:ed:62:8b:66:1c:3e:76:42:90:05:9e:d1:7f:75:eb:f0:63: af:87:75:2f:62:f9:af:44:fe:97:75:6e:f2:a4:90:52:3b:38: 52:10:36:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdGQzIxMTAvBgNVBAUTKDczQkEyMUJFMzZERERGRDU4NjkwMTE2RDZFRUM3QkRD N0VGRUZCMjgwHhcNMjUwNDAzMDEwNjQzWhcNMjUwNDEwMDEwNjQzWjAYMRYwFAYD VQQDEw02N2VkZGYyMy1iZjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIlWIrnlMIngPhihUCkv1DpmAHWWc/dabToHRc7odhr75IMuWA8c9D/cEUpT FRI5B3+L5K7GmWga2pDO/TljeoHzQo/vCfy4XfrPjUJY3xVZSGvRTNfoyUftGsKu RTw4GdEcoLlDRpomHnx40pWJsr0C1K2mSD8QxeME7SdP9RzIqgcQr2UJH4WE10n1 RFgVZ7FXNQz0+YCihJN7SYNgEKq8g/JZNUUeMXBQeFuPRScFp187KtjRBLmbL+/r ZxlNMI/15xFJCOej2nTP2GEOoqlLgL6z7cOD/OTgWhF6zLT8N4wJdXsSLWDYO1Gi nWF43iwR8LFSkFXgFBcTr4hDhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+7V9GU Ie8nn56In2snptfdlM4MMB8GA1UdIwQYMBaAFHO6Ib423d/VhpARbW7se9x+/vso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0ZDMi81RTMwQkY3MEJC QTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5V0drQkZ0YnV4NzNINy0t eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3b2h2amJkMzlXR2tCRnRidXg3M0g3LS15Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0ZDMi81RTMwQkY3MEJCQTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5 V0drQkZ0YnV4NzNINy0teWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBahwo6kSeEIr79NYJN5AZaUFCoccVz/FXacNvtdfqJTd3TrAqcE9kz ZSwhsSWn3FmSmKWX3yU1xvIpEq155O6bjYHIBCPPGvGui+P3NBhTBbDcvXnzDzlt sdkvbLHrvYdw5xnkahMSQ19Rhhhm93hWZryqKclPJjIvH/5MzLx92CTr29T9IT/I 0cVjQYKN/JB6DX0wULsJwoFGvI1Oyq8Zmpyr8FDXgjnU3ege3KVfDxhRfxdJaSk1 ATLBujWZXIKMJPDM7SXcHfLsJ3Vo+3UJF+r/SdvjWFCh7WKLZhw+dkKQBZ7Rf3Xr 8GOvh3UvYvmvRP6XdW7ypJBSOzhSEDYu -----END CERTIFICATE-----Generated at Fri Apr 4 22:01:40 2025 by rpki-client