$ rpki-client -vvf rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft File: 7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft (raw, json) Hash identifier: 4bY2BE/E2NF5P1BTDKQ1wOf4vrpPWUYBfAL2GXfUmaA= Subject key identifier: BB:6F:96:71:A0:D0:7F:F2:B6:3C:FF:FD:A0:FE:B7:1C:20:21:F5:01 Authority key identifier: ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9 Certificate issuer: /CN=A912D70A/serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9 Certificate serial: 0BCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft Manifest number: 0BB6 Signing time: Sun 06 Apr 2025 18:41:36 +0000 Manifest this update: Sun 06 Apr 2025 18:41:36 +0000 Manifest next update: Sun 13 Apr 2025 18:41:36 +0000 Files and hashes: 1: 7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl (hash: cezwnw4bbtKUZedf7rxrl8FMh8Uh3smgKcDY/hgLWxU=) 2: 61EE7C6C281211EA881CC32DC4F9AE02.roa (hash: HvkNMYRpxj5Pjk2b6IdbHOGMu5kf16FTiNfirlOJwkA=) 3: 57A5ACF20FE911EBB5AE5524C4F9AE02.roa (hash: db0uZkZWuJQaQM8R/3bIEhp6I+FLcCb/1k0tn5JacmM=) 4: 627B1438281211EA881CC32DC4F9AE02.roa (hash: g8z7pfsZjZXsZNzC0de4NUY66eo2G1FWTU8PNhYjoTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 18:41:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3018 (0xbca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D70A Validity Not Before: Apr 6 18:41:36 2025 GMT Not After : Apr 13 18:41:36 2025 GMT Subject: CN=67f2cae0-0a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:dc:38:34:dc:b4:de:b6:50:53:c5:25:04:01: 0e:8e:9d:e8:9f:e9:1e:63:90:5b:d7:5a:d5:46:94: 53:f9:2d:1f:68:b6:eb:83:96:eb:7d:e8:20:88:e3: 76:aa:ce:d8:dd:96:be:5c:68:09:65:47:e7:c4:37: f2:b9:6f:83:9e:17:36:e3:8c:d7:fa:16:94:eb:ff: 4b:e9:50:a1:b9:e3:ee:16:9e:dd:cf:0d:f9:65:be: c5:87:6d:9e:58:4b:7c:e0:fb:30:3c:e3:c5:eb:1b: 74:46:b2:0d:ce:14:6e:01:64:b5:32:4a:d0:e1:b3: c5:66:3c:b8:cd:4c:44:2b:90:c9:07:1f:20:71:77: 10:d0:39:0d:4b:92:32:0d:34:4a:23:23:b9:85:33: ae:08:bb:61:96:f8:55:c4:d2:51:2e:9a:70:15:3b: d9:65:3e:2a:3b:9d:b4:3b:54:a8:74:92:b0:2a:78: 16:f0:99:84:89:3a:92:29:15:65:54:1d:bc:e5:6a: 0e:c3:ad:c5:57:99:fb:1f:32:6c:e3:ec:4b:f3:50: a3:40:82:66:29:8b:90:e9:f0:bb:96:e8:1b:4a:a4: af:3a:18:0c:c9:88:83:59:b5:72:cc:f9:c1:d4:e2: ad:15:87:f6:4d:b2:70:d1:93:de:3f:e2:16:92:c0: 3c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:6F:96:71:A0:D0:7F:F2:B6:3C:FF:FD:A0:FE:B7:1C:20:21:F5:01 X509v3 Authority Key Identifier: keyid:ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:82:f9:1f:62:4a:35:6f:8c:c7:3b:cc:0b:d4:6d:42:b2:55: 05:76:df:da:59:0b:4a:76:20:08:43:50:9a:21:9a:17:7e:a8: 09:3a:7b:49:83:73:ad:dc:56:c6:f5:69:16:c4:18:30:38:5d: e2:36:ba:b3:dd:ff:86:d6:87:41:88:89:cb:d1:a7:e0:f0:bf: f6:84:16:fc:dd:d7:a7:cd:e9:29:51:4d:c9:e6:f2:3b:4a:c4: 5a:4b:d4:54:c8:00:f9:e3:dd:a5:4e:1e:52:3b:fd:4e:b7:61: ab:28:85:49:fa:d5:a0:ad:65:04:e7:39:b2:35:73:c6:e7:73: 19:c1:5c:1e:df:fd:37:66:b8:65:05:22:b1:9d:41:f5:dd:09: 4e:b2:4a:fd:1a:15:d1:f6:99:cd:2d:91:21:04:68:93:52:99: d0:61:70:1f:68:ba:62:ce:73:df:7a:06:ba:80:2d:64:c8:a7: ce:33:d2:4f:a1:f7:ab:89:db:1f:ed:6b:8f:f1:e2:55:19:62: 6d:03:b3:96:57:1d:11:23:59:22:4b:8b:5e:d9:ba:50:9a:0e: f6:13:db:bf:8a:84:b3:b4:50:ab:cb:7a:b6:80:26:06:cf:7b: 80:82:f7:65:76:50:34:8f:fa:25:be:66:24:bc:1e:60:16:1d: f2:31:80:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ3MEExMTAvBgNVBAUTKEVEMzMwODIwRkZBQkQwQUIyODQxQkE5M0U5MDJFQTY4 Mjk5MkRBQTkwHhcNMjUwNDA2MTg0MTM2WhcNMjUwNDEzMTg0MTM2WjAYMRYwFAYD VQQDEw02N2YyY2FlMC0wYTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtw4NNy03rZQU8UlBAEOjp3on+keY5Bb11rVRpRT+S0faLbrg5brfeggiON2 qs7Y3Za+XGgJZUfnxDfyuW+Dnhc244zX+haU6/9L6VChuePuFp7dzw35Zb7Fh22e WEt84PswPOPF6xt0RrINzhRuAWS1MkrQ4bPFZjy4zUxEK5DJBx8gcXcQ0DkNS5Iy DTRKIyO5hTOuCLthlvhVxNJRLppwFTvZZT4qO520O1SodJKwKngW8JmEiTqSKRVl VB285WoOw63FV5n7HzJs4+xL81CjQIJmKYuQ6fC7lugbSqSvOhgMyYiDWbVyzPnB 1OKtFYf2TbJw0ZPeP+IWksA8lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLtvlnGg 0H/ytjz//aD+txwgIfUBMB8GA1UdIwQYMBaAFO0zCCD/q9CrKEG6k+kC6mgpktqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDcwQS80MUFCRDI5RTFC ODYxMUVBOUM5QUYyNDNDNEY5QUUwMi83VE1JSVAtcjBLc29RYnFUNlFMcWFDbVMy cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdUTUlJUC1yMEtzb1FicVQ2UUxxYUNtUzJxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDcwQS80MUFCRDI5RTFCODYxMUVBOUM5QUYyNDNDNEY5QUUwMi83VE1JSVAtcjBL c29RYnFUNlFMcWFDbVMycWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6gvkfYko1b4zHO8wL1G1CslUFdt/aWQtKdiAIQ1CaIZoXfqgJOntJ g3Ot3FbG9WkWxBgwOF3iNrqz3f+G1odBiInL0afg8L/2hBb83denzekpUU3J5vI7 SsRaS9RUyAD5492lTh5SO/1Ot2GrKIVJ+tWgrWUE5zmyNXPG53MZwVwe3/03Zrhl BSKxnUH13QlOskr9GhXR9pnNLZEhBGiTUpnQYXAfaLpiznPfega6gC1kyKfOM9JP oferidsf7WuP8eJVGWJtA7OWVx0RI1kiS4te2bpQmg72E9u/ioSztFCry3q2gCYG z3uAgvdldlA0j/olvmYkvB5gFh3yMYBu -----END CERTIFICATE-----Generated at Mon Apr 7 11:15:58 2025 by rpki-client