$ rpki-client -vvf rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft File: 0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft (raw, json) Hash identifier: z24n8mCTX9faBTTxzxtJPMVSnD/Y5REQBTCECafvydI= Subject key identifier: C7:76:0B:98:B4:B0:EA:D6:3A:AA:59:5F:CA:AC:45:85:29:0A:11:82 Authority key identifier: D0:49:F1:5C:5B:00:41:98:3E:8B:35:C5:17:B6:51:71:F7:16:5C:DC Certificate issuer: /CN=A9128077/serialNumber=D049F15C5B0041983E8B35C517B65171F7165CDC Certificate serial: 070F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft Manifest number: 0703 Signing time: Wed 02 Apr 2025 21:56:52 +0000 Manifest this update: Wed 02 Apr 2025 21:56:52 +0000 Manifest next update: Wed 09 Apr 2025 21:56:52 +0000 Files and hashes: 1: 0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl (hash: XzAAGbkkhey24p0TOJsIMUkG6pt8159XaKbIlFMDHss=) 2: 7AD47B2234EE11EE927E9F6AC4F9AE02.roa (hash: Mt4tb4VC4mD0Nqt0BXFmGgw6RIVVzrPQVbsXvi8D500=) 3: 1D4A72B2350811EE96CD9F16C4F9AE02.roa (hash: aL7cUy872ECZEAqqjrWWrqFvQPWZOr2k97DKB+JwHf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:56:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1807 (0x70f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128077 Validity Not Before: Apr 2 21:56:52 2025 GMT Not After : Apr 9 21:56:52 2025 GMT Subject: CN=67edb2a4-0886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:01:80:cc:a4:67:62:ae:c6:45:af:49:4b:b9: ef:c3:3c:44:38:1a:62:89:ca:67:36:41:56:c8:63: ac:71:7c:8c:4a:41:61:59:74:e9:85:96:7c:8a:1e: b0:fc:f8:28:bd:3a:84:fa:d2:79:3e:76:3e:d5:a2: 09:10:04:b1:5a:13:4a:90:a0:3b:fa:a0:40:e1:ed: e1:8e:2c:16:07:14:13:33:fc:66:b6:46:80:db:91: 5b:d4:a3:74:97:a6:5c:ed:90:e8:af:6e:94:13:6d: 53:34:21:ae:96:74:de:57:f4:67:e3:ff:35:0c:32: db:e2:c8:82:04:90:06:33:ce:47:c4:7a:77:33:33: 4b:c9:71:f6:40:fe:ab:7b:04:60:de:ff:94:83:e1: 2b:e2:35:e6:a2:06:2d:45:11:ca:6e:e4:88:38:65: f6:7c:80:d2:7b:cf:d2:8f:b5:41:8d:3c:65:9b:15: f9:4d:d9:36:9f:83:75:f6:eb:74:85:4d:ca:b0:73: 7e:80:c4:06:99:21:77:eb:c3:23:56:84:12:00:49: 8e:1e:c3:45:31:8b:76:10:35:f2:2a:80:5a:bc:8b: 35:3e:b5:d5:2f:a7:be:8b:3c:c0:4d:7c:a5:02:cd: ab:31:37:dd:82:71:46:aa:fc:23:03:14:60:0d:c0: d3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:76:0B:98:B4:B0:EA:D6:3A:AA:59:5F:CA:AC:45:85:29:0A:11:82 X509v3 Authority Key Identifier: keyid:D0:49:F1:5C:5B:00:41:98:3E:8B:35:C5:17:B6:51:71:F7:16:5C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:32:97:eb:6d:b9:be:ef:b8:ec:12:fc:27:9c:6e:ea:aa:a0: 74:ce:5f:aa:e7:18:df:a9:c1:f4:38:b5:9e:4c:84:fa:7f:f9: 54:27:c2:9b:64:32:10:69:0d:b3:cf:b0:90:b0:00:5a:b3:18: 40:1f:29:4d:0e:8b:c7:b9:6d:59:79:d1:53:16:32:8b:16:b6: 69:a8:4d:23:e9:4c:19:cd:ff:69:38:c8:9f:e7:a7:e2:ce:d2: 6a:3d:a4:08:ee:49:a6:ab:5a:84:da:c1:6c:c9:ae:3d:be:cb: f0:28:bc:0c:16:63:64:44:70:70:fc:6f:5e:fb:1d:25:78:2c: df:fb:1f:37:65:93:9b:55:9f:30:34:9d:e7:6d:ba:64:99:96: ae:a3:66:ef:3c:b8:19:63:eb:c2:3c:ad:59:9e:53:0c:05:68: 14:fa:a1:f6:8e:fd:63:e1:0c:6a:d9:39:e8:b0:3f:85:b5:af: c7:d2:94:71:10:59:54:bf:5b:fd:f4:8c:d2:04:dd:3e:0f:57: 80:1a:e8:50:2b:ac:08:69:96:e2:41:b0:71:46:00:1d:8f:9c: bf:94:5b:19:4e:b1:89:b7:65:d6:82:49:b5:bc:5a:26:38:d4: f4:0f:86:66:d6:7f:39:16:a1:27:68:dc:67:6c:75:53:cc:87: 04:e1:46:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgwNzcxMTAvBgNVBAUTKEQwNDlGMTVDNUIwMDQxOTgzRThCMzVDNTE3QjY1MTcx RjcxNjVDREMwHhcNMjUwNDAyMjE1NjUyWhcNMjUwNDA5MjE1NjUyWjAYMRYwFAYD VQQDEw02N2VkYjJhNC0wODg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwAGAzKRnYq7GRa9JS7nvwzxEOBpiicpnNkFWyGOscXyMSkFhWXTphZZ8ih6w /PgovTqE+tJ5PnY+1aIJEASxWhNKkKA7+qBA4e3hjiwWBxQTM/xmtkaA25Fb1KN0 l6Zc7ZDor26UE21TNCGulnTeV/Rn4/81DDLb4siCBJAGM85HxHp3MzNLyXH2QP6r ewRg3v+Ug+Er4jXmogYtRRHKbuSIOGX2fIDSe8/Sj7VBjTxlmxX5Tdk2n4N19ut0 hU3KsHN+gMQGmSF368MjVoQSAEmOHsNFMYt2EDXyKoBavIs1PrXVL6e+izzATXyl As2rMTfdgnFGqvwjAxRgDcDTTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMd2C5i0 sOrWOqpZX8qsRYUpChGCMB8GA1UdIwQYMBaAFNBJ8VxbAEGYPos1xRe2UXH3Flzc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODA3Ny85ODBDQThGRTNB RDcxMUVCQTI5MjFBNEFDNEY5QUUwMi8wRW54WEZzQVFaZy1pelhGRjdaUmNmY1dY TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBFbnhYRnNBUVpnLWl6WEZGN1pSY2ZjV1hOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODA3Ny85ODBDQThGRTNBRDcxMUVCQTI5MjFBNEFDNEY5QUUwMi8wRW54WEZzQVFa Zy1pelhGRjdaUmNmY1dYTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFMpfrbbm+77jsEvwnnG7qqqB0zl+q5xjfqcH0OLWeTIT6f/lUJ8Kb ZDIQaQ2zz7CQsABasxhAHylNDovHuW1ZedFTFjKLFrZpqE0j6UwZzf9pOMif56fi ztJqPaQI7kmmq1qE2sFsya49vsvwKLwMFmNkRHBw/G9e+x0leCzf+x83ZZObVZ8w NJ3nbbpkmZauo2bvPLgZY+vCPK1ZnlMMBWgU+qH2jv1j4Qxq2TnosD+Fta/H0pRx EFlUv1v99IzSBN0+D1eAGuhQK6wIaZbiQbBxRgAdj5y/lFsZTrGJt2XWgkm1vFom ONT0D4Zm1n85FqEnaNxnbHVTzIcE4UbA -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:45 2025 by rpki-client