$ rpki-client -vvf rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft File: chMb8CkEqEkfuTxB1F376UKq1nE.mft (raw, json) Hash identifier: P0Lbh0Hj9k82nWI+ZF0lx0SsJJj9b13q8pmRoMh3rzo= Subject key identifier: 35:A3:15:2D:AC:64:39:04:B2:2E:5A:2A:FA:88:A3:03:BB:75:28:27 Authority key identifier: 72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71 Certificate issuer: /CN=A9128EED/serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671 Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft Manifest number: 7B Signing time: Sat 29 Mar 2025 06:00:54 +0000 Manifest this update: Sat 29 Mar 2025 06:00:54 +0000 Manifest next update: Sat 05 Apr 2025 06:00:54 +0000 Files and hashes: 1: chMb8CkEqEkfuTxB1F376UKq1nE.crl (hash: 5VD3mCFGbNqSzZsRb3h9WEoYIwGK1vCmc6iXL64UIkA=) 2: E5B66960553A11EFB6BCFB83C4F9AE02.roa (hash: E5suk2cFemWvaevEKzcTmHU5tWd+iiNDKFUohuI1SXE=) 3: E62E8D50553A11EFB6BCFB83C4F9AE02.roa (hash: spLMbb3mjNqo3JOAdT4XdnGINqr0/vPrWt9FF24zq10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128EED Validity Not Before: Mar 29 06:00:54 2025 GMT Not After : Apr 5 06:00:54 2025 GMT Subject: CN=67e78c96-02ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d1:de:ad:99:71:c4:8b:f0:35:b0:73:cd:b6: 57:72:4d:9e:39:49:89:e9:28:ad:61:05:61:90:65: 16:4b:17:67:08:8a:d6:57:2b:ce:49:7a:46:26:10: 8b:12:22:2a:c7:a7:a3:91:28:70:d4:81:e2:56:59: 78:22:9c:14:8a:2a:30:68:48:ae:04:e7:1d:a0:b8: 68:2c:4f:9b:a2:93:77:c2:39:ff:08:86:77:62:31: 8e:02:10:b3:1f:f7:0a:a1:21:fd:77:b5:18:03:1e: 79:fe:e5:27:00:3f:3e:2f:c7:c4:2c:a5:48:68:1d: 06:4e:9f:9b:9e:0d:b1:e6:cf:11:fc:61:41:a8:27: 6f:bf:e6:fc:c6:84:e4:74:1f:72:1c:0d:09:a8:ea: 36:80:53:b0:99:14:46:98:52:ed:93:6a:68:54:c4: 18:cd:a7:ed:13:48:ad:86:5a:1e:bd:e6:8b:e2:1e: 29:9b:3d:57:70:a9:1b:9e:64:3f:c0:89:e0:bf:6e: 5a:00:5c:de:c4:13:11:63:42:25:cb:52:ab:ab:a3: 0f:a6:ba:69:9e:40:b6:cd:f6:82:00:56:4e:5f:a8: 46:09:a4:38:3d:52:ba:8e:47:56:17:8f:7e:1f:1d: 2d:ba:c4:10:68:f8:da:7b:e7:d8:63:ba:e0:80:c2: 37:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A3:15:2D:AC:64:39:04:B2:2E:5A:2A:FA:88:A3:03:BB:75:28:27 X509v3 Authority Key Identifier: keyid:72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ee:14:0d:e0:08:3e:61:6c:7f:b0:fd:51:de:6f:c0:c7:03:3d: c5:95:98:ef:ad:b6:ea:94:2d:ac:aa:6c:61:cc:82:db:76:84: ab:62:dd:93:6f:5f:ce:5d:f6:31:71:52:af:31:35:82:e0:bc: 44:5a:7b:15:88:a7:18:0d:b7:22:df:cf:21:de:65:42:c8:fe: 87:19:0b:42:f3:ea:55:5a:c6:c3:78:b9:87:46:5c:6f:09:a2: 28:46:d4:f4:0b:79:5b:57:b2:65:ce:18:a0:35:ea:70:ce:6a: 0a:e8:86:1a:b9:84:75:c9:7e:72:d4:85:fe:78:21:f3:02:1d: dd:29:56:23:e5:70:94:1e:3e:d8:b3:c4:9d:65:e3:fa:1a:b1: a7:14:08:b5:d4:f3:5a:be:2d:f5:31:1d:99:37:83:fd:fa:91: 4f:25:e0:72:18:ab:5a:2f:3e:6f:a4:91:01:d1:73:9a:2e:4d: d2:d5:7d:37:9c:e1:c6:4d:b1:5b:d5:45:fe:61:45:99:ba:bc: f8:6a:f2:b9:fc:6a:88:46:a6:77:79:a9:52:bf:1f:3f:d3:2c: 21:f3:6a:59:a0:bc:76:8c:87:2a:75:5e:2a:7d:1f:65:6c:9c: 72:63:d3:90:2b:20:9a:7e:8f:ed:3f:dc:c3:64:8b:f9:25:34: b7:f4:56:54 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OEVFRDExMC8GA1UEBRMoNzIxMzFCRjAyOTA0QTg0OTFGQjkzQzQxRDQ1REZCRTk0 MkFBRDY3MTAeFw0yNTAzMjkwNjAwNTRaFw0yNTA0MDUwNjAwNTRaMBgxFjAUBgNV BAMTDTY3ZTc4Yzk2LTAyYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCY0d6tmXHEi/A1sHPNtldyTZ45SYnpKK1hBWGQZRZLF2cIitZXK85JekYmEIsS IirHp6ORKHDUgeJWWXginBSKKjBoSK4E5x2guGgsT5uik3fCOf8IhndiMY4CELMf 9wqhIf13tRgDHnn+5ScAPz4vx8QspUhoHQZOn5ueDbHmzxH8YUGoJ2+/5vzGhOR0 H3IcDQmo6jaAU7CZFEaYUu2TamhUxBjNp+0TSK2GWh695oviHimbPVdwqRueZD/A ieC/bloAXN7EExFjQiXLUqurow+mummeQLbN9oIAVk5fqEYJpDg9UrqOR1YXj34f HS26xBBo+Np759hjuuCAwjcpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNaMVLaxk OQSyLloq+oijA7t1KCcwHwYDVR0jBBgwFoAUchMb8CkEqEkfuTxB1F376UKq1nEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4RUVELzI4M0U0RTUyNTUz QTExRUY5RUMzQjczOEM0RjlBRTAyL2NoTWI4Q2tFcUVrZnVUeEIxRjM3NlVLcTFu RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY2hNYjhDa0VxRWtmdVR4QjFGMzc2VUtxMW5FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4 RUVELzI4M0U0RTUyNTUzQTExRUY5RUMzQjczOEM0RjlBRTAyL2NoTWI4Q2tFcUVr ZnVUeEIxRjM3NlVLcTFuRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAO4UDeAIPmFsf7D9Ud5vwMcDPcWVmO+ttuqULayqbGHMgtt2hKti3ZNv X85d9jFxUq8xNYLgvERaexWIpxgNtyLfzyHeZULI/ocZC0Lz6lVaxsN4uYdGXG8J oihG1PQLeVtXsmXOGKA16nDOagrohhq5hHXJfnLUhf54IfMCHd0pViPlcJQePtiz xJ1l4/oasacUCLXU81q+LfUxHZk3g/36kU8l4HIYq1ovPm+kkQHRc5ouTdLVfTec 4cZNsVvVRf5hRZm6vPhq8rn8aohGpnd5qVK/Hz/TLCHzalmgvHaMhyp1Xip9H2Vs nHJj05ArIJp+j+0/3MNki/klNLf0VlQ= -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:38 2025 by rpki-client