$ rpki-client -vvf rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft File: 7AxIKy2XwoyJb67NUfUOmxYldEE.mft (raw, json) Hash identifier: Rr83KzYwr+yCX2uNe26OPOh7WqG/I8iBT382A0bQ7ys= Subject key identifier: 63:86:17:44:AD:95:08:41:CD:B9:4F:F5:92:59:D0:35:4F:0C:1D:0E Authority key identifier: EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41 Certificate issuer: /CN=A9140F6E/serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441 Certificate serial: 0DE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft Manifest number: 0DE0 Signing time: Tue 08 Apr 2025 17:52:19 +0000 Manifest this update: Tue 08 Apr 2025 17:52:19 +0000 Manifest next update: Tue 15 Apr 2025 17:52:19 +0000 Files and hashes: 1: 7AxIKy2XwoyJb67NUfUOmxYldEE.crl (hash: 2IvZoGs6X4FbRqfVGKFj2Ir7rZNmC2+o4UK6DOfOUQQ=) 2: 33534662AF4511E9B648CE6AC4F9AE02.roa (hash: qC1ZUsPrNWwJdA7aBQJNijhI12p3O3e9WwlBeIt463M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 17:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3560 (0xde8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140F6E Validity Not Before: Apr 8 17:52:19 2025 GMT Not After : Apr 15 17:52:19 2025 GMT Subject: CN=67f56253-da32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:de:2d:f5:00:a6:10:18:36:e0:a2:cc:c8:c8: 2e:62:5e:8e:b7:b6:5b:17:00:ea:f5:b0:1c:5e:d6: 90:83:4b:27:01:ef:bf:af:5a:22:22:9d:6a:20:f6: 08:82:3e:8c:c9:bc:32:7b:0d:04:28:34:7a:8d:aa: 3d:e2:fe:12:3f:aa:d2:02:2b:5e:71:e6:c6:96:58: 64:b0:eb:f0:24:77:bb:90:e8:97:a6:02:cc:87:3b: c6:81:9a:bb:67:c2:80:6d:b1:ab:f3:bf:d2:9b:85: 9b:f6:da:4d:f3:a1:8e:cf:5c:c0:b2:68:69:b8:47: e5:b0:29:b2:3d:04:6f:fc:28:45:83:d6:64:66:98: 4c:26:80:49:4d:cd:23:76:c5:b4:4a:05:9c:bd:33: c0:2d:62:7c:1d:4a:8f:75:fb:9a:10:aa:19:a4:7a: c2:55:ee:4e:0c:76:7e:50:f4:54:ab:d2:f6:7c:90: b6:92:53:d5:00:7f:14:4b:ea:67:12:f8:bc:28:43: 26:c2:25:35:57:fd:1e:53:7e:b0:29:1d:e2:ed:7b: bb:58:c9:89:3f:58:bb:f7:00:c9:89:52:b3:82:31: f4:fc:8a:13:f1:be:37:7b:8f:c2:62:fe:16:1e:72: 8e:c8:26:1b:a6:43:c9:da:73:72:f2:b2:80:48:aa: 3b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:86:17:44:AD:95:08:41:CD:B9:4F:F5:92:59:D0:35:4F:0C:1D:0E X509v3 Authority Key Identifier: keyid:EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:9f:dd:1b:a4:fd:81:18:43:4e:53:21:be:ab:7f:1c:13:f2: 18:d3:5d:92:67:95:49:a9:89:ea:ef:80:6f:7e:ca:fa:de:e7: 7a:7c:ce:1b:18:71:e1:0a:19:06:6d:3b:da:ee:80:7a:9b:5f: 0b:79:c0:5e:b1:ab:ee:ad:c0:a1:e7:20:2a:ae:fa:c8:74:1a: 94:de:a9:90:d5:55:f6:9f:32:fa:9a:18:5d:16:72:d4:cf:47: 55:24:cf:73:87:e8:ee:25:ba:1b:6f:b7:e8:ad:53:26:b3:1d: ca:5a:c5:30:f9:ed:95:54:fe:0c:61:94:d4:b0:52:18:d3:18: c5:8d:db:26:b5:37:f1:f2:4d:23:a6:05:f2:8d:45:23:10:2e: 57:db:3c:02:d5:69:c6:e1:1b:df:9e:1a:b7:3a:82:88:4c:81: 14:2e:a6:af:56:b3:3c:98:f2:bb:e0:db:a9:70:bf:24:7e:33: c7:0a:4a:d3:f6:74:31:9d:ce:6f:7a:95:b2:94:9b:11:8a:74: cf:5e:ea:ac:72:99:83:67:08:ae:ac:23:09:0f:38:6e:49:73: 34:3c:36:db:d6:c8:ae:bd:84:30:21:6e:49:56:c7:54:8c:1a: 16:58:2e:6e:ef:b6:44:64:06:a1:a9:ee:43:c8:4d:60:e8:1f: 71:b3:c6:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBGNkUxMTAvBgNVBAUTKEVDMEM0ODJCMkQ5N0MyOEM4OTZGQUVDRDUxRjUwRTlC MTYyNTc0NDEwHhcNMjUwNDA4MTc1MjE5WhcNMjUwNDE1MTc1MjE5WjAYMRYwFAYD VQQDEw02N2Y1NjI1My1kYTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxN4t9QCmEBg24KLMyMguYl6Ot7ZbFwDq9bAcXtaQg0snAe+/r1oiIp1qIPYI gj6Mybwyew0EKDR6jao94v4SP6rSAitecebGllhksOvwJHe7kOiXpgLMhzvGgZq7 Z8KAbbGr87/Sm4Wb9tpN86GOz1zAsmhpuEflsCmyPQRv/ChFg9ZkZphMJoBJTc0j dsW0SgWcvTPALWJ8HUqPdfuaEKoZpHrCVe5ODHZ+UPRUq9L2fJC2klPVAH8US+pn Evi8KEMmwiU1V/0eU36wKR3i7Xu7WMmJP1i79wDJiVKzgjH0/IoT8b43e4/CYv4W HnKOyCYbpkPJ2nNy8rKASKo7UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGOGF0St lQhBzblP9ZJZ0DVPDB0OMB8GA1UdIwQYMBaAFOwMSCstl8KMiW+uzVH1DpsWJXRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEY2RS9EMEU4MkRFMEFG NDMxMUU5QjNERkVFNjhDNEY5QUUwMi83QXhJS3kyWHdveUpiNjdOVWZVT214WWxk RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdBeElLeTJYd295SmI2N05VZlVPbXhZbGRFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEY2RS9EMEU4MkRFMEFGNDMxMUU5QjNERkVFNjhDNEY5QUUwMi83QXhJS3kyWHdv eUpiNjdOVWZVT214WWxkRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfn90bpP2BGENOUyG+q38cE/IY012SZ5VJqYnq74Bvfsr63ud6fM4b GHHhChkGbTva7oB6m18LecBesavurcCh5yAqrvrIdBqU3qmQ1VX2nzL6mhhdFnLU z0dVJM9zh+juJbobb7forVMmsx3KWsUw+e2VVP4MYZTUsFIY0xjFjdsmtTfx8k0j pgXyjUUjEC5X2zwC1WnG4Rvfnhq3OoKITIEULqavVrM8mPK74NupcL8kfjPHCkrT 9nQxnc5vepWylJsRinTPXuqscpmDZwiurCMJDzhuSXM0PDbb1siuvYQwIW5JVsdU jBoWWC5u77ZEZAahqe5DyE1g6B9xs8bk -----END CERTIFICATE-----Generated at Wed Apr 9 22:36:46 2025 by rpki-client