$ rpki-client -vvf rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft File: 7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft (raw, json) Hash identifier: 7Mnyv1+Idg2eltbfdKQxZWgBF2P3jmpqiK2lRAp5F7Y= Subject key identifier: 5A:6E:84:BC:9F:E7:72:EA:A9:C7:F0:4A:D4:95:A4:EB:2A:6B:D8:98 Authority key identifier: EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1 Certificate issuer: /CN=A912B12A/serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft Manifest number: 46 Signing time: Wed 09 Apr 2025 06:14:31 +0000 Manifest this update: Wed 09 Apr 2025 06:14:31 +0000 Manifest next update: Wed 16 Apr 2025 06:14:31 +0000 Files and hashes: 1: 7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl (hash: oUA1CiQ2TwRR2rtwHjQ2813EKElt8vVhmPmWNXyYUKs=) 2: 2346577EAE5811EFAFE7FF84C4F9AE02.roa (hash: 2DuyIR+wk4mvn+XwoOsHwRQcxItN+5KREj3DX0f4tYs=) 3: 246315A2AE5811EFAFE7FF84C4F9AE02.roa (hash: GhFLUJsibCVFeaw+HURiwfIuyrQYgDP+XOZxzfH6Sw0=) 4: 23F9E186AE5811EFAFE7FF84C4F9AE02.roa (hash: 1/AZpd9pLcHU8N9tmsYLkTIAugSfqWDpWEBhQfVHYVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 06:14:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B12A Validity Not Before: Apr 9 06:14:31 2025 GMT Not After : Apr 16 06:14:31 2025 GMT Subject: CN=67f61047-ff0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6c:2f:05:89:32:50:83:5c:df:e3:40:8e:71: 39:fc:ca:d6:78:32:35:71:3c:8d:3c:35:75:c6:3a: 2d:f4:67:c2:3d:e0:4c:a3:f6:02:f8:7a:6e:05:04: 29:09:00:97:72:82:fd:cc:07:2b:39:c0:b3:99:3c: 4a:31:e5:6f:5f:a3:38:14:11:91:e0:46:5d:b6:d2: 93:c0:84:cd:31:c4:f3:b9:28:78:67:a8:6c:35:c9: 28:2c:3f:07:e7:26:cb:57:a0:d2:7e:fd:8a:7c:c0: 0a:8e:ed:b7:52:83:94:17:86:c4:37:46:ff:d1:ff: 53:21:43:a4:f7:c6:b2:ef:31:73:d2:96:d1:74:d4: d8:83:a4:8e:54:82:f6:7c:75:70:6e:07:66:65:ee: 07:7b:79:c6:06:fd:df:52:ea:a3:03:e5:cc:e8:62: 0c:48:ed:cb:41:73:20:27:c3:af:72:b3:ba:7a:41: 44:d5:ca:e4:6a:d0:0b:fd:8d:fb:6e:3a:43:4c:46: 76:ed:e0:96:66:3c:58:a6:37:6a:cb:3b:59:ad:4d: 27:9a:37:c8:8f:4d:b0:5a:2f:e7:31:ab:a1:41:5e: 9c:66:e2:9d:ad:a2:3c:d0:c7:f8:2b:72:3d:7d:f6: 8f:31:c8:1f:0c:32:83:d3:1c:ae:25:d7:7b:1e:60: 02:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6E:84:BC:9F:E7:72:EA:A9:C7:F0:4A:D4:95:A4:EB:2A:6B:D8:98 X509v3 Authority Key Identifier: keyid:EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:00:55:c3:b8:35:ff:2f:3b:7f:f9:cb:69:70:65:9e:45:5f: 12:b2:d3:7f:0f:27:c3:24:a0:7b:48:e8:73:ee:da:a0:b5:03: 2f:97:cf:2d:11:29:dd:f1:10:be:ad:7e:b8:9c:d7:eb:20:10: 94:3f:65:0a:8f:18:5d:cf:a0:a6:26:fd:60:e6:af:18:62:93: 78:60:41:27:df:96:13:fe:73:a7:86:2e:86:7f:63:50:99:83: 3d:48:ff:4f:ba:c1:ae:e0:cc:75:72:6f:94:fa:43:c5:d6:7a: b8:e4:ea:72:a7:b7:d1:37:d0:2e:a0:b4:1e:b2:00:b8:cd:c0: e4:48:85:a6:04:3f:27:4d:18:d9:f9:fa:d7:5e:b2:eb:22:96: 78:2e:5d:f4:c3:38:a5:c1:3b:29:b0:89:ef:17:b4:ef:d1:f1: d4:87:9f:d6:bc:6a:20:14:15:72:40:64:d8:7a:35:5a:68:ec: 19:54:5d:c5:3d:2c:f9:7e:bf:95:64:61:3d:98:e4:82:3d:e7: 99:bd:a7:ef:2e:d8:55:96:9e:aa:cf:e1:10:7d:73:4e:29:b3: 25:d7:5c:0b:1c:ae:51:b0:e2:3f:85:cc:a1:6d:8c:9c:1a:64: 21:a1:cf:a6:a5:04:ed:c3:8e:72:a9:0b:0c:4b:05:66:0c:47: e7:31:ba:5d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QjEyQTExMC8GA1UEBRMoRUNGRjMyNDQwQzRFRTFEMjc5NDNDREI3MkE3RDQ5MTA2 MzQwMkRGMTAeFw0yNTA0MDkwNjE0MzFaFw0yNTA0MTYwNjE0MzFaMBgxFjAUBgNV BAMTDTY3ZjYxMDQ3LWZmMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/bC8FiTJQg1zf40COcTn8ytZ4MjVxPI08NXXGOi30Z8I94Eyj9gL4em4FBCkJ AJdygv3MBys5wLOZPEox5W9fozgUEZHgRl220pPAhM0xxPO5KHhnqGw1ySgsPwfn JstXoNJ+/Yp8wAqO7bdSg5QXhsQ3Rv/R/1MhQ6T3xrLvMXPSltF01NiDpI5UgvZ8 dXBuB2Zl7gd7ecYG/d9S6qMD5czoYgxI7ctBcyAnw69ys7p6QUTVyuRq0Av9jftu OkNMRnbt4JZmPFimN2rLO1mtTSeaN8iPTbBaL+cxq6FBXpxm4p2tojzQx/grcj19 9o8xyB8MMoPTHK4l13seYAINAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWm6EvJ/n cuqpx/BK1JWk6ypr2JgwHwYDVR0jBBgwFoAU7P8yRAxO4dJ5Q823Kn1JEGNALfEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCMTJBL0I5RDRDRjQyQUUz RDExRUY5NkI3NkM2QUM0RjlBRTAyLzdQOHlSQXhPNGRKNVE4MjNLbjFKRUdOQUxm RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN1A4eVJBeE80ZEo1UTgyM0tuMUpFR05BTGZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC MTJBL0I5RDRDRjQyQUUzRDExRUY5NkI3NkM2QUM0RjlBRTAyLzdQOHlSQXhPNGRK NVE4MjNLbjFKRUdOQUxmRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI8AVcO4Nf8vO3/5y2lwZZ5FXxKy038PJ8MkoHtI6HPu2qC1Ay+Xzy0R Kd3xEL6tfric1+sgEJQ/ZQqPGF3PoKYm/WDmrxhik3hgQSfflhP+c6eGLoZ/Y1CZ gz1I/0+6wa7gzHVyb5T6Q8XWerjk6nKnt9E30C6gtB6yALjNwORIhaYEPydNGNn5 +tdesusilnguXfTDOKXBOymwie8XtO/R8dSHn9a8aiAUFXJAZNh6NVpo7BlUXcU9 LPl+v5VkYT2Y5II955m9p+8u2FWWnqrP4RB9c04psyXXXAscrlGw4j+FzKFtjJwa ZCGhz6alBO3DjnKpCwxLBWYMR+cxul0= -----END CERTIFICATE-----Generated at Fri Apr 11 23:34:29 2025 by rpki-client