$ rpki-client -vvf rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft File: x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft (raw, json) Hash identifier: EUHPfnDwpW+gibvV8VD5Q6OchAwwsHAxNMcsYUsJSSg= Subject key identifier: 28:BA:E6:57:EE:AD:CA:D6:20:D4:36:0C:B8:74:25:02:71:D6:9E:FB Authority key identifier: C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB Certificate issuer: /CN=A9155675/serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB Certificate serial: 01C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft Manifest number: 01C1 Signing time: Thu 03 Apr 2025 02:17:56 +0000 Manifest this update: Thu 03 Apr 2025 02:17:55 +0000 Manifest next update: Thu 10 Apr 2025 02:17:55 +0000 Files and hashes: 1: x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl (hash: xtc1JWCBvNEqClCHMb4mTmszWzO3Q6XUql8+kvObFJE=) 2: B8370F3A5E6011EDB5361D3BC4F9AE02.roa (hash: 2v1fNj4a/xWl8aWsyyllbFfz3S6+MQv77E5w5OZvxxo=) 3: B788702E5E6011EDB5361D3BC4F9AE02.roa (hash: GrunRdOPzVgoKdklWpjxOZFACret6qIAPie8FS/bKnw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:17:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155675 Validity Not Before: Apr 3 02:17:55 2025 GMT Not After : Apr 10 02:17:55 2025 GMT Subject: CN=67edefd4-0373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:30:a4:67:b7:e1:53:2b:78:24:61:78:c8:bf: 65:11:c1:f5:11:2e:b1:2c:4d:7a:ed:7d:25:59:3b: 5b:9c:36:96:b3:98:98:99:17:c0:00:8e:16:74:59: e9:57:cf:4b:2f:d7:62:05:06:56:19:29:45:c4:2f: cc:4a:74:1b:90:6d:2c:da:e1:17:16:46:1a:8a:bf: 7e:ed:d6:e5:34:dc:a0:b2:69:c6:7a:29:e7:b3:b5: f2:9c:79:86:f6:4f:7b:f2:ba:55:d9:94:a4:c0:fa: 85:b5:3c:4b:5b:a6:1c:92:eb:29:2b:f2:af:23:ed: f2:09:ba:86:f4:ed:c0:2f:ee:f7:59:f7:ac:78:2b: 65:1e:cb:0e:22:f1:89:3c:97:fa:62:bf:40:07:9f: 34:45:43:f2:05:11:ff:56:46:0f:71:4f:c9:e3:4f: 4c:cf:1e:ad:fa:fe:72:ce:1d:96:dc:94:b1:90:21: a9:2d:e6:09:ab:bd:33:19:b6:31:35:69:a3:2c:ed: d9:b9:d2:64:cc:37:3d:a2:cb:50:13:56:e2:c6:4f: c1:fa:f3:a0:1b:24:c7:a7:ae:33:2f:56:cc:d8:40: d3:9b:ba:7c:54:fe:bb:78:5d:0f:2f:69:bb:ea:99: 8e:4e:5e:8a:63:45:9d:7a:58:b0:4c:59:7e:f7:d9: 00:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:BA:E6:57:EE:AD:CA:D6:20:D4:36:0C:B8:74:25:02:71:D6:9E:FB X509v3 Authority Key Identifier: keyid:C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:a5:74:e4:92:6f:5c:d8:1a:d7:c9:c6:12:6a:fb:31:4d:17: 53:74:86:75:ab:1e:90:12:b6:9e:6e:5d:ca:a9:f6:6d:26:88: d5:33:a0:0d:b1:16:2c:ec:78:94:82:e8:38:d4:37:b1:86:b7: 6a:89:f6:a8:2e:c9:93:07:be:2e:41:ec:ca:4e:65:fe:f4:7d: 2a:ee:00:03:37:37:ad:79:60:de:81:ab:84:52:05:6c:58:af: 18:b9:b3:a4:f4:ce:07:0a:17:13:28:66:cb:1b:96:c4:5d:4e: 62:1e:e8:9f:ee:53:51:f8:87:d9:1d:51:3d:c4:88:92:cb:cf: 9b:82:99:d2:89:ab:d3:ed:50:3f:25:86:7a:42:bf:aa:2e:78: 63:39:27:26:4b:57:57:cf:a3:04:5d:45:d9:5d:ce:33:68:dd: 44:fb:f7:d8:5f:73:83:d2:14:98:94:68:3d:21:4b:43:4a:92: cc:07:ed:5c:fd:68:c5:ba:a4:97:64:34:e9:a7:8d:0a:73:97: 3a:51:2a:2c:b3:9f:e5:c4:bb:66:13:e3:a0:08:43:70:7f:54: 94:bd:55:90:97:f1:cd:23:71:b3:9f:ef:a5:c8:d5:d5:b0:52: b5:58:0c:8c:1b:d3:81:e3:6d:41:6a:70:3d:e8:d0:5b:cb:98: 18:18:20:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU2NzUxMTAvBgNVBAUTKEM3QjEzMDlEMDA4NzJEMDY2NjM5NkI0QzIzRDhFRjVD MzEyQzZCRUIwHhcNMjUwNDAzMDIxNzU1WhcNMjUwNDEwMDIxNzU1WjAYMRYwFAYD VQQDEw02N2VkZWZkNC0wMzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjCkZ7fhUyt4JGF4yL9lEcH1ES6xLE167X0lWTtbnDaWs5iYmRfAAI4WdFnp V89LL9diBQZWGSlFxC/MSnQbkG0s2uEXFkYair9+7dblNNygsmnGeinns7XynHmG 9k978rpV2ZSkwPqFtTxLW6YckuspK/KvI+3yCbqG9O3AL+73WfeseCtlHssOIvGJ PJf6Yr9AB580RUPyBRH/VkYPcU/J409Mzx6t+v5yzh2W3JSxkCGpLeYJq70zGbYx NWmjLO3ZudJkzDc9ostQE1bixk/B+vOgGyTHp64zL1bM2EDTm7p8VP67eF0PL2m7 6pmOTl6KY0WdeliwTFl+99kAswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCi65lfu rcrWINQ2DLh0JQJx1p77MB8GA1UdIwQYMBaAFMexMJ0Ahy0GZjlrTCPY71wxLGvr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY3NS82RDExRjU3ODVF NUMxMUVEOUREREQyMURDNEY5QUUwMi94N0V3blFDSExRWm1PV3RNSTlqdlhERXNh LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3RXduUUNITFFabU9XdE1JOWp2WERFc2Etcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTY3NS82RDExRjU3ODVFNUMxMUVEOUREREQyMURDNEY5QUUwMi94N0V3blFDSExR Wm1PV3RNSTlqdlhERXNhLXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBupXTkkm9c2BrXycYSavsxTRdTdIZ1qx6QEraebl3KqfZtJojVM6AN sRYs7HiUgug41DexhrdqifaoLsmTB74uQezKTmX+9H0q7gADNzeteWDegauEUgVs WK8YubOk9M4HChcTKGbLG5bEXU5iHuif7lNR+IfZHVE9xIiSy8+bgpnSiavT7VA/ JYZ6Qr+qLnhjOScmS1dXz6MEXUXZXc4zaN1E+/fYX3OD0hSYlGg9IUtDSpLMB+1c /WjFuqSXZDTpp40Kc5c6USoss5/lxLtmE+OgCENwf1SUvVWQl/HNI3Gzn++lyNXV sFK1WAyMG9OB421BanA96NBby5gYGCDN -----END CERTIFICATE-----Generated at Fri Apr 4 22:27:05 2025 by rpki-client