$ rpki-client -vvf rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft File: 7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft (raw, json) Hash identifier: WU6V84cqPtUK3BdZt1L0k+afRrwkkMcSSmncpDmOGkQ= Subject key identifier: 03:22:80:4C:EB:A2:D3:8F:E5:27:A1:B6:14:1A:12:2B:E7:A3:6E:F2 Authority key identifier: EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7 Certificate issuer: /CN=A915D64F/serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7 Certificate serial: 09C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft Manifest number: 09BF Signing time: Sat 12 Apr 2025 19:45:41 +0000 Manifest this update: Sat 12 Apr 2025 19:45:40 +0000 Manifest next update: Sat 19 Apr 2025 19:45:40 +0000 Files and hashes: 1: 7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl (hash: ZD3J76bOrxXKvzoSpLx3t9Dhzexk1vDTfIw2dk5odBo=) 2: 2F7EAF12932411EB97630343C4F9AE02.roa (hash: taEGqA6seasVUG8wh6upIg7VNN7tLKDnm912bRHf+NY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 17:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2501 (0x9c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D64F, serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7 Validity Not Before: Apr 12 19:45:40 2025 GMT Not After : Apr 19 19:45:40 2025 GMT Subject: CN=67fac2e5-8da9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5a:8c:4a:7d:47:b5:3f:12:a7:61:18:4c:e0: 49:21:2f:17:e9:7a:b0:c6:8b:f1:45:96:58:f5:fc: 47:5a:f8:4f:84:47:d6:19:e7:8f:f5:36:6d:61:64: 68:02:7f:f9:bb:e0:e6:a4:db:cd:a9:46:ad:82:0a: b5:b1:b1:e7:4c:28:34:09:05:8c:a2:a1:16:de:09: c5:56:54:15:5f:74:2c:98:9e:4b:91:26:5e:e3:24: 52:64:06:13:a0:c1:7e:37:9d:e4:79:72:b9:34:44: c6:70:65:32:b0:b8:1d:57:06:e5:ba:6e:a3:09:b8: ab:e2:b9:f9:ce:ac:52:80:bb:ed:15:db:a7:ee:f5: 32:75:cd:c9:f4:e0:93:26:6c:1d:46:b9:b0:3e:dd: 7c:ff:30:97:45:6a:d7:96:cf:64:0c:42:fc:97:a5: 97:3b:e3:42:c9:f4:20:2d:3c:f5:ae:0c:d1:cf:19: e8:27:86:80:05:3e:35:87:0c:95:f9:c9:42:c8:db: 5d:e6:5b:60:e4:0f:84:5a:68:1d:0a:9a:e8:74:ed: 99:1f:5b:e2:8d:f4:4a:53:01:66:5e:97:78:00:57: a3:ee:25:69:c9:91:43:a0:fc:b7:22:2f:f3:84:0b: a7:0d:c0:ed:03:06:6a:01:f0:af:e3:aa:76:fa:e5: 0c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:22:80:4C:EB:A2:D3:8F:E5:27:A1:B6:14:1A:12:2B:E7:A3:6E:F2 X509v3 Authority Key Identifier: keyid:EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:2b:2a:92:16:8b:32:3d:bb:0b:b6:e6:c4:f3:cc:12:db:1b: 9d:a0:11:2f:f1:16:47:8a:37:40:ae:88:6f:22:52:c1:61:cb: ab:e1:8a:c7:18:33:8e:6f:a0:63:ec:49:60:78:b7:1f:7b:d5: 1f:90:21:67:7d:92:34:4d:8a:3c:91:d8:48:87:b9:e4:a6:63: b3:1c:b1:c8:44:26:9f:ad:85:fa:b4:f2:53:20:8e:5e:f8:7e: 57:50:28:32:c4:e8:08:f2:f1:8f:85:56:27:9c:89:b1:e4:60: 80:c7:c1:ae:4e:14:17:b3:02:a1:54:28:42:ba:31:0b:60:b7: 6f:aa:a2:8e:70:d5:eb:61:89:fc:58:11:f9:33:4e:2f:9d:61: 96:34:c3:ef:6d:5a:df:ac:87:23:10:c6:a1:44:14:81:6e:1f: 19:31:8c:9c:d6:e8:8f:18:9c:af:99:33:fc:22:c8:83:7a:aa: 9b:ad:55:34:35:ad:b8:b1:04:c8:5e:72:71:06:4c:e7:86:41: 55:13:1d:9c:0c:61:85:70:c7:70:70:03:61:b5:f0:d6:4e:20: c9:cb:3b:f5:44:ca:dd:1b:fc:11:6f:ef:47:fa:ed:ff:96:0f: 6d:cf:c9:2e:46:4f:9b:47:f5:e8:77:ec:a8:16:6e:18:07:ed: 76:f1:8b:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2NEYxMTAvBgNVBAUTKEVDNzA1QjJBRDZGQjEzRkQ2RkM0MjE0Qjk3NzI3MDQx MTNFNjY4RDcwHhcNMjUwNDEyMTk0NTQwWhcNMjUwNDE5MTk0NTQwWjAYMRYwFAYD VQQDEw02N2ZhYzJlNS04ZGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VqMSn1HtT8Sp2EYTOBJIS8X6XqwxovxRZZY9fxHWvhPhEfWGeeP9TZtYWRo An/5u+DmpNvNqUatggq1sbHnTCg0CQWMoqEW3gnFVlQVX3QsmJ5LkSZe4yRSZAYT oMF+N53keXK5NETGcGUysLgdVwblum6jCbir4rn5zqxSgLvtFdun7vUydc3J9OCT JmwdRrmwPt18/zCXRWrXls9kDEL8l6WXO+NCyfQgLTz1rgzRzxnoJ4aABT41hwyV +clCyNtd5ltg5A+EWmgdCprodO2ZH1vijfRKUwFmXpd4AFej7iVpyZFDoPy3Ii/z hAunDcDtAwZqAfCv46p2+uUMeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMigEzr otOP5SehthQaEivno27yMB8GA1UdIwQYMBaAFOxwWyrW+xP9b8QhS5dycEET5mjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY0Ri9GMTE1QjY3MjdE RUQxMUVBOUE1Q0NDNEJDNEY5QUUwMi83SEJiS3RiN0VfMXZ4Q0ZMbDNKd1FSUG1h TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdIQmJLdGI3RV8xdnhDRkxsM0p3UVJQbWFOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDY0Ri9GMTE1QjY3MjdERUQxMUVBOUE1Q0NDNEJDNEY5QUUwMi83SEJiS3RiN0Vf MXZ4Q0ZMbDNKd1FSUG1hTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVKyqSFosyPbsLtubE88wS2xudoBEv8RZHijdArohvIlLBYcur4YrH GDOOb6Bj7ElgeLcfe9UfkCFnfZI0TYo8kdhIh7nkpmOzHLHIRCafrYX6tPJTII5e +H5XUCgyxOgI8vGPhVYnnImx5GCAx8GuThQXswKhVChCujELYLdvqqKOcNXrYYn8 WBH5M04vnWGWNMPvbVrfrIcjEMahRBSBbh8ZMYyc1uiPGJyvmTP8IsiDeqqbrVU0 Na24sQTIXnJxBkznhkFVEx2cDGGFcMdwcANhtfDWTiDJyzv1RMrdG/wRb+9H+u3/ lg9tz8kuRk+bR/Xod+yoFm4YB+128Yug -----END CERTIFICATE-----Generated at Sun Apr 13 01:33:58 2025 by rpki-client