$ rpki-client -vvf rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft File: h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft (raw, json) Hash identifier: dqMGWChjIDf/eQuD6rQDkE9bOkBqyXsgTjT4A2pqn+A= Subject key identifier: A3:12:B2:0F:A5:79:AC:F7:32:D3:F9:83:48:C6:49:73:90:95:FF:42 Authority key identifier: 87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04 Certificate issuer: /CN=A912A294/serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04 Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft Manifest number: 0146 Signing time: Sat 29 Mar 2025 04:03:17 +0000 Manifest this update: Sat 29 Mar 2025 04:03:16 +0000 Manifest next update: Sat 05 Apr 2025 04:03:16 +0000 Files and hashes: 1: h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl (hash: phFt786LNw2462J29fB/0rtXTmzgHCpsEFsnvxb3pDM=) 2: 60C72042052911F0A2361C50C4F9AE02.roa (hash: eoqR2rI7tCJcx2sHbbxw1cinGXO6kmie9biadQvkvGU=) 3: 64B5B49A052C11F0AFEC0478C4F9AE02.roa (hash: osIylBmoiOl0hS+6q4jLTN9ELMVNH7Z3hIxqCI6TGCM=) 4: 24661146FA7311EFB58C366CC4F9AE02.roa (hash: vJ/paOcsiCM0y/LcDeCNMcXQ0i9PBxkDy6/mQy96vcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:03:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A294 Validity Not Before: Mar 29 04:03:16 2025 GMT Not After : Apr 5 04:03:16 2025 GMT Subject: CN=67e77104-6baf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4c:a4:43:a0:e0:2b:07:b1:0f:97:e6:36:13: 40:50:57:64:87:fd:fb:f6:8e:2f:cf:2d:58:cd:8b: 33:20:66:8b:9e:a9:a8:ec:51:ab:2d:e9:75:77:1e: 3f:99:a8:c3:0e:71:48:b7:90:d9:6f:62:d0:fc:d7: 78:8e:8d:02:ee:3d:5d:31:c5:7e:f2:38:20:f5:5d: f4:b0:24:e6:66:b0:39:6f:e8:72:df:9a:3b:4f:08: 1e:90:c9:f1:76:30:78:97:50:4b:1e:db:02:5d:20: e7:9a:ec:ff:93:97:72:ff:48:59:22:d0:99:84:63: c9:5a:28:b1:df:0d:aa:bd:21:d1:a4:6d:b8:ed:24: 18:8f:c5:3b:d9:41:0d:7e:fb:7d:64:a4:80:3e:ac: 5d:c2:e3:4e:8d:5f:ea:6c:90:24:d1:ef:6e:19:19: 8b:be:50:9a:45:c4:87:42:3c:5d:ff:ec:87:9f:96: 15:2e:15:37:a9:37:1d:a8:b3:08:5f:d4:0b:07:5c: b9:5d:e3:e3:0a:cc:b8:90:a6:44:8b:a8:05:c1:9b: c6:b5:50:3d:f3:02:5d:33:4f:e8:a1:72:54:7d:14: 75:97:9c:ea:14:fd:94:5e:e6:ac:8a:99:05:fa:68: 29:d4:ad:7f:4f:f2:a9:f1:c5:0e:cc:87:d2:46:c9: 12:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:12:B2:0F:A5:79:AC:F7:32:D3:F9:83:48:C6:49:73:90:95:FF:42 X509v3 Authority Key Identifier: keyid:87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:af:e0:3e:80:91:48:81:9e:2d:f1:89:58:2f:87:38:95:a8: f4:f9:9c:e5:6d:84:eb:c3:7f:fc:84:93:cf:20:e3:0e:b3:87: 7d:b6:24:9c:63:92:9b:ce:40:dc:cb:58:01:0c:4f:01:b5:54: 54:2e:4f:12:d8:2e:34:08:a3:84:05:8c:c6:6d:2f:89:15:cd: fb:2b:8e:f8:62:e9:f9:3f:ab:70:8f:cb:81:69:05:66:d7:d9: fe:b6:e9:ce:c0:a8:31:fb:03:72:e4:39:d1:fa:d3:1f:52:7b: 19:00:67:91:c3:f6:13:55:a1:25:1d:8f:ab:af:44:6b:5d:5b: e1:d6:a7:f2:db:b9:96:54:9d:b0:24:41:47:b7:78:7c:03:89: 48:42:43:96:33:b2:b7:6c:07:c4:db:8a:a7:b6:ed:2c:43:0b: 2d:f0:5f:ab:f5:3d:e4:ff:c2:b0:94:57:a1:12:e0:0f:68:db: 40:69:54:08:23:1e:15:96:00:5b:68:38:be:66:9b:0f:b3:37: b4:8d:13:8c:83:ff:98:98:83:64:17:e6:27:b5:17:a6:a9:cb: dc:29:78:d3:84:ff:4b:77:cf:1b:48:65:5c:78:b1:a0:9f:97: 59:69:fc:f5:fd:da:df:b6:49:a5:fd:d4:a8:e2:b5:55:a4:fc: 30:7e:f1:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEyOTQxMTAvBgNVBAUTKDg3QjVEODUzRjY0MjUyMTVBREE3ODIyRjAyQTU3NDgz RUUyNjdDMDQwHhcNMjUwMzI5MDQwMzE2WhcNMjUwNDA1MDQwMzE2WjAYMRYwFAYD VQQDEw02N2U3NzEwNC02YmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0ykQ6DgKwexD5fmNhNAUFdkh/379o4vzy1YzYszIGaLnqmo7FGrLel1dx4/ majDDnFIt5DZb2LQ/Nd4jo0C7j1dMcV+8jgg9V30sCTmZrA5b+hy35o7TwgekMnx djB4l1BLHtsCXSDnmuz/k5dy/0hZItCZhGPJWiix3w2qvSHRpG247SQYj8U72UEN fvt9ZKSAPqxdwuNOjV/qbJAk0e9uGRmLvlCaRcSHQjxd/+yHn5YVLhU3qTcdqLMI X9QLB1y5XePjCsy4kKZEi6gFwZvGtVA98wJdM0/ooXJUfRR1l5zqFP2UXuasipkF +mgp1K1/T/Kp8cUOzIfSRskSrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMSsg+l eaz3MtP5g0jGSXOQlf9CMB8GA1UdIwQYMBaAFIe12FP2QlIVraeCLwKldIPuJnwE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTI5NC85OTJGMUQwRTRB RDYxMUVFOTdCNTNGNzJDNEY5QUUwMi9oN1hZVV9aQ1VoV3RwNEl2QXFWMGctNG1m QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3WFlVX1pDVWhXdHA0SXZBcVYwZy00bWZBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTI5NC85OTJGMUQwRTRBRDYxMUVFOTdCNTNGNzJDNEY5QUUwMi9oN1hZVV9aQ1Vo V3RwNEl2QXFWMGctNG1mQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAor+A+gJFIgZ4t8YlYL4c4laj0+ZzlbYTrw3/8hJPPIOMOs4d9tiSc Y5KbzkDcy1gBDE8BtVRULk8S2C40CKOEBYzGbS+JFc37K474Yun5P6twj8uBaQVm 19n+tunOwKgx+wNy5DnR+tMfUnsZAGeRw/YTVaElHY+rr0RrXVvh1qfy27mWVJ2w JEFHt3h8A4lIQkOWM7K3bAfE24qntu0sQwst8F+r9T3k/8KwlFehEuAPaNtAaVQI Ix4VlgBbaDi+ZpsPsze0jROMg/+YmINkF+YntRemqcvcKXjThP9Ld88bSGVceLGg n5dZafz1/drftkml/dSo4rVVpPwwfvFf -----END CERTIFICATE-----Generated at Fri Apr 4 22:32:04 2025 by rpki-client