$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft File: h7_uyP-fsmiAINtZpiLBOhXlryA.mft (raw, json) Hash identifier: HZuYeQYSkl0UsWBYZ57op/2LXdXt/6w3WCb8KFvoNKI= Subject key identifier: 5B:19:7E:FF:64:66:2B:FF:48:21:08:0D:44:C8:71:9E:5D:33:E8:94 Authority key identifier: 87:BF:EE:C8:FF:9F:B2:68:80:20:DB:59:A6:22:C1:3A:15:E5:AF:20 Certificate issuer: /CN=A9132B7A/serialNumber=87BFEEC8FF9FB2688020DB59A622C13A15E5AF20 Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft Manifest number: 011F Signing time: Thu 03 Apr 2025 04:02:50 +0000 Manifest this update: Thu 03 Apr 2025 04:02:49 +0000 Manifest next update: Thu 10 Apr 2025 04:02:49 +0000 Files and hashes: 1: h7_uyP-fsmiAINtZpiLBOhXlryA.crl (hash: IckuQlyoTy6RcXh3c1kTiRSLcqJ/26hLoJxjx3IwOyY=) 2: 28382F96644E11EEA1DCB653C4F9AE02.roa (hash: tkC94LIcazFbktBOOWxjViOTNkAmC8Zs4gf9iesOvuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.crl rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B7A Validity Not Before: Apr 3 04:02:49 2025 GMT Not After : Apr 10 04:02:49 2025 GMT Subject: CN=67ee0869-a862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a3:8a:9f:7c:55:91:92:7d:75:02:d9:b2:1e: 70:f3:1a:11:c4:8d:75:c0:9c:d1:9f:80:47:05:23: df:d6:9a:fa:66:4d:7d:97:60:41:3d:b0:70:1c:8c: 35:b9:9d:67:41:7c:b1:b2:c5:5e:9d:44:68:a8:44: 22:7d:65:b9:03:0c:31:c3:71:f0:a1:2e:85:76:4c: 72:13:0f:4e:fc:a4:f4:8a:8f:80:7f:a9:6b:b7:8e: bb:59:e6:c3:45:2d:b9:04:3e:0e:36:11:ce:c0:f6: 0a:ac:ae:4e:26:ac:3e:62:08:0a:16:f8:cd:84:67: 95:3f:d5:36:f1:d2:e5:5e:aa:90:e0:0a:5a:03:5c: 47:6d:25:29:70:a4:bd:a7:8b:0a:93:4e:b0:23:04: 9b:40:99:e9:e6:6d:61:70:83:c7:38:27:c9:67:ef: 7b:c5:81:9b:d9:06:50:3e:e4:80:81:04:29:55:ff: 6e:39:6b:b9:a5:0c:c0:ac:1d:9d:30:d6:99:e0:e0: ec:ed:9b:f2:a8:a7:11:dd:68:ec:c6:f3:91:de:6a: d4:d3:78:e5:68:e5:f7:e5:2c:46:7f:f6:7b:27:f2: bb:2e:e0:86:02:6a:2f:a2:a6:15:ed:8d:2d:c4:6a: 9c:ac:69:ad:bb:6c:8b:aa:c8:2b:6d:d4:35:de:49: 55:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:19:7E:FF:64:66:2B:FF:48:21:08:0D:44:C8:71:9E:5D:33:E8:94 X509v3 Authority Key Identifier: keyid:87:BF:EE:C8:FF:9F:B2:68:80:20:DB:59:A6:22:C1:3A:15:E5:AF:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:31:7c:f7:82:af:bc:9c:69:b9:12:d3:b2:32:bd:74:d4:8e: e2:14:67:1c:b7:bf:72:bf:47:94:07:d6:a2:7b:4f:92:35:0c: f3:34:06:ef:ec:23:52:51:ef:78:13:49:cd:23:e9:38:c0:0e: a6:7f:6c:8e:2e:82:9a:f4:fc:f1:7b:5f:76:14:9c:46:32:81: 80:1b:30:b1:07:f4:ff:cb:5b:3c:4f:5f:63:4d:6b:53:60:14: 1c:6e:eb:83:29:7b:fc:7c:ac:1c:85:93:24:64:87:32:ac:e1: 7e:de:7a:f2:a4:8b:ae:b7:39:53:af:b8:92:dc:e9:11:6e:63: f5:bb:95:9d:c3:86:d0:87:37:90:9f:39:ba:61:62:8c:a8:56: f0:8d:96:fa:e4:0a:98:39:a1:ea:48:68:9d:19:06:b2:70:d4: 06:0b:cc:02:2b:5a:3b:e6:e7:d1:f6:cf:64:bf:6e:ef:a1:10: bc:66:5b:d6:55:22:67:86:9c:4c:45:86:6f:e8:0e:9a:3c:9f: 73:bc:fa:0e:24:9c:22:d8:8d:67:17:0d:53:14:0f:51:87:22: 95:b0:81:61:37:95:16:b0:3a:ad:ff:32:f1:23:96:93:f8:43: 40:0a:fc:62:dc:7d:c7:d8:5e:bb:0f:3f:f0:6f:84:18:9e:cb: 66:0d:37:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCN0ExMTAvBgNVBAUTKDg3QkZFRUM4RkY5RkIyNjg4MDIwREI1OUE2MjJDMTNB MTVFNUFGMjAwHhcNMjUwNDAzMDQwMjQ5WhcNMjUwNDEwMDQwMjQ5WjAYMRYwFAYD VQQDEw02N2VlMDg2OS1hODYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KOKn3xVkZJ9dQLZsh5w8xoRxI11wJzRn4BHBSPf1pr6Zk19l2BBPbBwHIw1 uZ1nQXyxssVenURoqEQifWW5Awwxw3HwoS6FdkxyEw9O/KT0io+Af6lrt467WebD RS25BD4ONhHOwPYKrK5OJqw+YggKFvjNhGeVP9U28dLlXqqQ4ApaA1xHbSUpcKS9 p4sKk06wIwSbQJnp5m1hcIPHOCfJZ+97xYGb2QZQPuSAgQQpVf9uOWu5pQzArB2d MNaZ4ODs7ZvyqKcR3WjsxvOR3mrU03jlaOX35SxGf/Z7J/K7LuCGAmovoqYV7Y0t xGqcrGmtu2yLqsgrbdQ13klVjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFsZfv9k Ziv/SCEIDUTIcZ5dM+iUMB8GA1UdIwQYMBaAFIe/7sj/n7JogCDbWaYiwToV5a8g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkI3QS8wNkExOTYwMjY0 NEQxMUVFODRENDAzNEZDNEY5QUUwMi9oN191eVAtZnNtaUFJTnRacGlMQk9oWGxy eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3X3V5UC1mc21pQUlOdFpwaUxCT2hYbHJ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkI3QS8wNkExOTYwMjY0NEQxMUVFODRENDAzNEZDNEY5QUUwMi9oN191eVAtZnNt aUFJTnRacGlMQk9oWGxyeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkMXz3gq+8nGm5EtOyMr101I7iFGcct79yv0eUB9aie0+SNQzzNAbv 7CNSUe94E0nNI+k4wA6mf2yOLoKa9Pzxe192FJxGMoGAGzCxB/T/y1s8T19jTWtT YBQcbuuDKXv8fKwchZMkZIcyrOF+3nrypIuutzlTr7iS3OkRbmP1u5Wdw4bQhzeQ nzm6YWKMqFbwjZb65AqYOaHqSGidGQaycNQGC8wCK1o75ufR9s9kv27voRC8ZlvW VSJnhpxMRYZv6A6aPJ9zvPoOJJwi2I1nFw1TFA9RhyKVsIFhN5UWsDqt/zLxI5aT +ENACvxi3H3H2F67Dz/wb4QYnstmDTeJ -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:11 2025 by rpki-client