$ rpki-client -vvf rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/7FdAxHbX__RLph-FeRWh8XmTGko.mft File: 7FdAxHbX__RLph-FeRWh8XmTGko.mft (raw, json) Hash identifier: NUD6YNxmdYsLReXFmC8QsKH+th3v4Mp+zqS85UD/AXs= Subject key identifier: 53:99:98:B5:77:DF:85:63:46:BE:51:7E:B1:84:5D:65:0D:6A:3E:FB Authority key identifier: EC:57:40:C4:76:D7:FF:F4:4B:A6:1F:85:79:15:A1:F1:79:93:1A:4A Certificate issuer: /CN=A9160F2D/serialNumber=EC5740C476D7FFF44BA61F857915A1F179931A4A Certificate serial: 038A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FdAxHbX__RLph-FeRWh8XmTGko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/7FdAxHbX__RLph-FeRWh8XmTGko.mft Manifest number: 0382 Signing time: Fri 11 Apr 2025 00:48:56 +0000 Manifest this update: Fri 11 Apr 2025 00:48:55 +0000 Manifest next update: Fri 18 Apr 2025 00:48:55 +0000 Files and hashes: 1: 7FdAxHbX__RLph-FeRWh8XmTGko.crl (hash: gPK/F0UC89vydv0lfAJNEdyjsYRIs91U+JOXIfd3tK4=) 2: F7EA272C043111EDB7DA7485C4F9AE02.roa (hash: 5W3ewgTY4MZlMpsR+rLrO2l/JgTg/KEaYj7RxuRG5bs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/7FdAxHbX__RLph-FeRWh8XmTGko.crl rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/7FdAxHbX__RLph-FeRWh8XmTGko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FdAxHbX__RLph-FeRWh8XmTGko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 00:48:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 906 (0x38a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160F2D, serialNumber=EC5740C476D7FFF44BA61F857915A1F179931A4A Validity Not Before: Apr 11 00:48:55 2025 GMT Not After : Apr 18 00:48:55 2025 GMT Subject: CN=67f866f8-e04f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:58:e9:04:f0:fb:cf:25:35:ef:cb:16:9c:c0: 6d:d2:6e:23:ae:bc:f8:98:d8:99:37:33:63:71:61: 91:1d:47:99:24:da:a3:fe:b8:c3:2e:9d:92:2d:71: b7:41:64:cb:65:5b:8e:01:a5:0a:7d:85:92:79:70: ed:52:7d:80:33:f4:1f:66:5b:60:1f:be:59:28:ff: 8a:80:c2:08:be:a3:fd:bd:63:ec:84:e2:93:3d:c2: 06:ed:64:22:34:d4:9f:b1:05:e1:70:93:9f:3b:0d: e8:60:fc:13:90:f6:ac:41:f1:62:98:ba:14:c3:2a: 21:46:c3:bf:68:04:6a:7f:3b:0f:d4:23:84:65:84: ed:4a:2a:ed:75:31:ef:be:20:c3:0d:dd:10:78:d1: b1:f6:20:c8:3a:c2:95:6e:c5:8a:f5:d9:39:6a:c0: 9e:81:fe:4a:f7:1a:12:e5:4e:bd:fd:7b:7d:a2:9a: 9d:67:33:5e:cb:e8:02:3b:8a:e5:39:b9:5a:58:3e: b4:8c:b1:08:39:90:1e:07:24:8a:ee:6e:d3:9a:7e: dd:39:8d:00:60:57:d7:17:d9:24:d2:48:e3:d8:0a: 40:05:9f:7f:9b:87:18:9b:5a:6b:aa:da:aa:d0:2d: c9:4e:05:9c:50:c6:cd:4b:09:7c:fd:90:55:ea:b1: 76:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:99:98:B5:77:DF:85:63:46:BE:51:7E:B1:84:5D:65:0D:6A:3E:FB X509v3 Authority Key Identifier: keyid:EC:57:40:C4:76:D7:FF:F4:4B:A6:1F:85:79:15:A1:F1:79:93:1A:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/7FdAxHbX__RLph-FeRWh8XmTGko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FdAxHbX__RLph-FeRWh8XmTGko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/7FdAxHbX__RLph-FeRWh8XmTGko.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:36:e5:77:1a:5e:45:dd:b1:48:22:ff:49:fb:78:84:63:74: 6d:e0:2e:33:4b:e1:35:9e:d1:bc:22:f0:fd:ef:25:f7:3a:9c: 74:36:b1:e4:88:f5:f1:9b:55:ea:fa:93:52:5a:31:0b:f1:66: 04:5a:98:55:76:c1:be:d5:8a:ec:57:c2:7e:5c:3c:a3:b8:db: d7:06:f7:d1:ff:2f:82:40:82:f2:c9:ec:70:4b:ea:fe:da:e9: 30:bc:b4:ef:04:58:e0:a8:11:fc:4b:2f:e1:6a:5f:d8:bb:30: 31:89:5c:46:58:f2:b9:80:60:02:8f:d4:96:6a:ba:ab:90:0f: 55:c2:7c:7b:5b:7d:56:0b:0e:0c:6e:48:02:0c:cc:02:eb:26: d7:2e:02:9b:1c:12:a9:1e:d9:26:7b:9c:ae:68:eb:d0:9e:f9: ce:4e:39:a4:52:e1:09:5c:36:a1:d5:65:eb:72:36:28:ff:e6: b7:c5:0d:12:98:63:60:e1:0d:8c:29:a0:8e:3d:e2:8c:da:fb: 02:9c:6f:ec:e9:65:0b:38:2c:ef:b7:4c:92:06:e2:d1:98:a1: 26:27:39:29:0d:dc:0e:2c:8f:46:78:54:4a:e3:2a:ef:ec:fa: dc:f3:fa:5a:87:48:11:80:e7:6f:13:bc:fe:f1:cd:3a:61:41: 9f:1d:9e:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBGMkQxMTAvBgNVBAUTKEVDNTc0MEM0NzZEN0ZGRjQ0QkE2MUY4NTc5MTVBMUYx Nzk5MzFBNEEwHhcNMjUwNDExMDA0ODU1WhcNMjUwNDE4MDA0ODU1WjAYMRYwFAYD VQQDEw02N2Y4NjZmOC1lMDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmljpBPD7zyU178sWnMBt0m4jrrz4mNiZNzNjcWGRHUeZJNqj/rjDLp2SLXG3 QWTLZVuOAaUKfYWSeXDtUn2AM/QfZltgH75ZKP+KgMIIvqP9vWPshOKTPcIG7WQi NNSfsQXhcJOfOw3oYPwTkPasQfFimLoUwyohRsO/aARqfzsP1COEZYTtSirtdTHv viDDDd0QeNGx9iDIOsKVbsWK9dk5asCegf5K9xoS5U69/Xt9opqdZzNey+gCO4rl OblaWD60jLEIOZAeBySK7m7Tmn7dOY0AYFfXF9kk0kjj2ApABZ9/m4cYm1prqtqq 0C3JTgWcUMbNSwl8/ZBV6rF2QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOZmLV3 34VjRr5RfrGEXWUNaj77MB8GA1UdIwQYMBaAFOxXQMR21//0S6YfhXkVofF5kxpK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEYyRC8wODVBNzA0ODlE RjkxMUVDODNDQ0ZBNjVDNEY5QUUwMi83RmRBeEhiWF9fUkxwaC1GZVJXaDhYbVRH a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGZEF4SGJYX19STHBoLUZlUldoOFhtVEdrby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEYyRC8wODVBNzA0ODlERjkxMUVDODNDQ0ZBNjVDNEY5QUUwMi83RmRBeEhiWF9f UkxwaC1GZVJXaDhYbVRHa28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSNuV3Gl5F3bFIIv9J+3iEY3Rt4C4zS+E1ntG8IvD97yX3Opx0NrHk iPXxm1Xq+pNSWjEL8WYEWphVdsG+1YrsV8J+XDyjuNvXBvfR/y+CQILyyexwS+r+ 2ukwvLTvBFjgqBH8Sy/hal/YuzAxiVxGWPK5gGACj9SWarqrkA9Vwnx7W31WCw4M bkgCDMwC6ybXLgKbHBKpHtkme5yuaOvQnvnOTjmkUuEJXDah1WXrcjYo/+a3xQ0S mGNg4Q2MKaCOPeKM2vsCnG/s6WULOCzvt0ySBuLRmKEmJzkpDdwOLI9GeFRK4yrv 7Prc8/pah0gRgOdvE7z+8c06YUGfHZ4Y -----END CERTIFICATE-----Generated at Sat Apr 12 17:20:48 2025 by rpki-client