$ rpki-client -vvf rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft File: 7ulOOvQOrIyjbcMuSeREbs-zNQU.mft (raw, json) Hash identifier: goT2Hv0O/rup3woyaNYJeMKPFx6MrHxbRzi0m41bx8M= Subject key identifier: C7:8F:12:7C:36:0F:37:00:BF:4C:C6:95:46:49:55:A1:93:7B:50:DD Authority key identifier: EE:E9:4E:3A:F4:0E:AC:8C:A3:6D:C3:2E:49:E4:44:6E:CF:B3:35:05 Certificate issuer: /CN=A9161FF7/serialNumber=EEE94E3AF40EAC8CA36DC32E49E4446ECFB33505 Certificate serial: 1208 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft Manifest number: 11FA Signing time: Tue 08 Apr 2025 17:11:36 +0000 Manifest this update: Tue 08 Apr 2025 17:11:35 +0000 Manifest next update: Tue 15 Apr 2025 17:11:35 +0000 Files and hashes: 1: 7ulOOvQOrIyjbcMuSeREbs-zNQU.crl (hash: DJAQHwUnQvC1sr2SWqaPl3f9TSsG5QK+Vk2kwX5bYDQ=) 2: 44A110AE77F311EEBFBD3064C4F9AE02.roa (hash: nLUHgXDw/FqHMkpa6OTKWrgVqXi50zS8nf/fSNtv6d4=) 3: 43CDA63877F311EEBFBD3064C4F9AE02.roa (hash: DAhhlDd0WQ6jBratV7Sxl4UrRGi+wYN1gX4H3UsXhbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.crl rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 17:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4616 (0x1208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161FF7 Validity Not Before: Apr 8 17:11:35 2025 GMT Not After : Apr 15 17:11:35 2025 GMT Subject: CN=67f558c7-cefd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:49:c3:ca:1c:7e:70:e7:f1:40:da:c1:98:20: ba:fb:f0:38:1c:6a:e8:ee:e1:dc:ee:52:bc:29:6a: 1e:5c:d0:2f:5c:86:5f:ee:73:84:a3:87:4b:b2:6e: ad:06:3f:a4:bb:f2:d3:b8:44:e4:f2:67:37:6b:36: 4e:8f:1d:08:3f:c2:fd:d6:e9:12:eb:98:5d:96:08: 42:c1:d2:d3:a8:b8:f8:e4:a1:4f:f3:94:44:b6:c2: 34:29:7a:88:59:ae:fc:e6:05:c4:97:b0:b1:fe:ce: 1c:c8:6d:58:8c:bb:81:7d:b8:b9:45:3f:98:e3:14: 00:5f:8e:9d:68:ca:0e:fb:58:69:fa:7c:ec:78:67: 5c:91:72:d8:21:bf:ab:c8:b5:30:91:d4:6e:a3:5f: 6e:0d:14:09:97:95:7d:b9:67:cf:8f:a5:ae:6a:67: 10:52:61:c1:50:5a:97:0c:a8:54:c3:2b:ea:88:9a: 2a:56:b2:4e:f1:40:08:c7:79:28:37:81:3b:20:ea: b5:59:62:94:6e:34:c5:e0:2f:ff:d4:f8:79:07:a8: 4d:5b:6d:6d:26:ec:ba:4e:1c:1e:f5:f0:55:de:0a: b5:c9:89:11:da:5d:a7:46:2b:18:54:24:33:f0:90: 58:fb:f5:6f:52:1e:46:bc:96:32:0c:83:00:97:6c: 63:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:8F:12:7C:36:0F:37:00:BF:4C:C6:95:46:49:55:A1:93:7B:50:DD X509v3 Authority Key Identifier: keyid:EE:E9:4E:3A:F4:0E:AC:8C:A3:6D:C3:2E:49:E4:44:6E:CF:B3:35:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:98:37:4a:27:db:76:98:63:75:2b:e4:44:ae:9e:8d:5d:ef: b0:73:aa:d4:e2:26:71:e1:26:fb:d8:a3:97:84:ef:aa:7f:dc: e0:7a:b1:64:ac:30:9a:57:a7:85:b9:35:c2:4f:2b:ae:31:7e: 42:87:b8:6e:f3:3a:f8:c2:1b:71:52:91:21:2e:50:5c:29:e2: e7:1a:7a:31:1c:cf:9a:7e:fe:63:9a:9e:34:98:82:62:7c:da: d0:a2:be:e8:e5:83:12:e3:5e:80:62:e5:de:58:f7:80:7d:22: 4f:54:52:01:0d:e7:cb:54:85:1f:7e:77:9b:9e:d3:bd:03:8a: 33:7e:46:d0:af:b0:4c:b7:ec:03:2d:8a:0f:67:72:4d:21:12: a3:83:21:c8:56:fd:b4:ed:e6:93:d4:fd:4d:77:f1:a8:38:88: 7c:e1:e0:72:0b:0b:35:25:1b:3e:14:a6:a1:ad:ac:8f:3e:8b: 0f:5a:92:29:96:be:09:fe:ec:1c:0a:c7:02:33:a4:7e:6d:cc: 86:8f:1b:40:af:19:4d:fd:ad:a0:f7:ac:83:65:bf:12:b1:72: 8c:33:50:45:bc:d9:ac:bb:f0:f5:ba:2e:c1:9d:a2:9d:72:a0: d4:25:44:bc:70:20:92:54:01:f6:75:c0:53:f1:50:46:39:b4: ba:c6:a1:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFGRjcxMTAvBgNVBAUTKEVFRTk0RTNBRjQwRUFDOENBMzZEQzMyRTQ5RTQ0NDZF Q0ZCMzM1MDUwHhcNMjUwNDA4MTcxMTM1WhcNMjUwNDE1MTcxMTM1WjAYMRYwFAYD VQQDEw02N2Y1NThjNy1jZWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEnDyhx+cOfxQNrBmCC6+/A4HGro7uHc7lK8KWoeXNAvXIZf7nOEo4dLsm6t Bj+ku/LTuETk8mc3azZOjx0IP8L91ukS65hdlghCwdLTqLj45KFP85REtsI0KXqI Wa785gXEl7Cx/s4cyG1YjLuBfbi5RT+Y4xQAX46daMoO+1hp+nzseGdckXLYIb+r yLUwkdRuo19uDRQJl5V9uWfPj6WuamcQUmHBUFqXDKhUwyvqiJoqVrJO8UAIx3ko N4E7IOq1WWKUbjTF4C//1Ph5B6hNW21tJuy6Thwe9fBV3gq1yYkR2l2nRisYVCQz 8JBY+/VvUh5GvJYyDIMAl2xjmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMePEnw2 DzcAv0zGlUZJVaGTe1DdMB8GA1UdIwQYMBaAFO7pTjr0DqyMo23DLknkRG7PszUF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUZGNy8yMTg2MkM2NEUw QzAxMUU4OUU5QkZFMTVDNEY5QUUwMi83dWxPT3ZRT3JJeWpiY011U2VSRWJzLXpO UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd1bE9PdlFPckl5amJjTXVTZVJFYnMtek5RVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUZGNy8yMTg2MkM2NEUwQzAxMUU4OUU5QkZFMTVDNEY5QUUwMi83dWxPT3ZRT3JJ eWpiY011U2VSRWJzLXpOUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLmDdKJ9t2mGN1K+RErp6NXe+wc6rU4iZx4Sb72KOXhO+qf9zgerFk rDCaV6eFuTXCTyuuMX5Ch7hu8zr4whtxUpEhLlBcKeLnGnoxHM+afv5jmp40mIJi fNrQor7o5YMS416AYuXeWPeAfSJPVFIBDefLVIUffnebntO9A4ozfkbQr7BMt+wD LYoPZ3JNIRKjgyHIVv207eaT1P1Nd/GoOIh84eByCws1JRs+FKahrayPPosPWpIp lr4J/uwcCscCM6R+bcyGjxtArxlN/a2g96yDZb8SsXKMM1BFvNmsu/D1ui7BnaKd cqDUJUS8cCCSVAH2dcBT8VBGObS6xqGM -----END CERTIFICATE-----Generated at Thu Apr 10 20:46:39 2025 by rpki-client