$ rpki-client -vvf rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft File: DL7Sere2gbyZZqziRPy_KX5lyhk.mft (raw, json) Hash identifier: 6WWSd3fGln3OrDTCJJNVrbTo0sc+lT/AG2Zm2w1SPFc= Subject key identifier: 74:B2:D6:63:C7:7B:D7:33:38:F3:E2:E1:DA:13:B8:98:F4:E7:A1:AF Authority key identifier: 0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19 Certificate issuer: /CN=A9163BEF/serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19 Certificate serial: 04AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft Manifest number: 04A7 Signing time: Sat 29 Mar 2025 00:10:31 +0000 Manifest this update: Sat 29 Mar 2025 00:10:31 +0000 Manifest next update: Sat 05 Apr 2025 00:10:31 +0000 Files and hashes: 1: DL7Sere2gbyZZqziRPy_KX5lyhk.crl (hash: cHQY9Y+q7dnefM5pIOO2wpCPsIHQLh8SsiCvocIqngw=) 2: 8A9545AE6D1011EFA13D6E2BC4F9AE02.roa (hash: 6texudPJbHfd6J0MPN1D5Oqp/jznw5zyBOIDtk3K0JM=) 3: 8A190AB66D1011EFA13D6E2BC4F9AE02.roa (hash: JXwBxiGEkFaFWVz8HbHFVp2nlp17eTZBvyxAVrqYWhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1197 (0x4ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163BEF Validity Not Before: Mar 29 00:10:31 2025 GMT Not After : Apr 5 00:10:31 2025 GMT Subject: CN=67e73a77-5af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5c:bf:93:bc:de:fc:57:51:c0:fc:ce:68:0b: 0f:a9:f6:e6:67:de:a9:7f:aa:89:e1:e4:18:2a:00: eb:ef:63:37:89:8f:c5:1e:fe:1a:14:b2:42:34:9d: b3:1e:9c:52:cc:b7:86:c9:3f:9e:d4:7f:7f:ea:34: a4:1e:3e:2d:2b:a3:c3:d0:f6:5a:28:4b:47:88:a8: f2:96:63:a3:7d:e9:83:65:92:24:54:b1:81:75:f2: c1:09:79:f2:50:0d:99:17:75:12:9a:dd:96:e6:09: 12:92:01:d2:2c:45:76:7c:3d:88:f3:20:51:c1:3c: 87:ae:65:bd:5b:66:f3:fe:af:d2:1d:df:26:d8:b9: 8c:84:5f:ca:b0:e8:41:bf:6a:a2:00:44:82:9d:46: 0a:d7:c0:1b:41:84:5d:c6:e4:df:31:3c:c9:d2:44: 27:2e:7d:2c:59:a7:41:85:ea:72:a9:83:b8:34:90: 53:a4:e1:84:e6:63:2d:31:9b:da:79:87:16:64:9e: e6:55:5b:48:2e:20:d2:82:71:5b:64:96:3a:6b:d7: 37:04:63:4c:5b:45:40:67:87:f5:35:ea:86:ce:f4: 0c:4c:2b:7a:f3:b2:fa:63:a5:55:3a:94:13:4a:c7: 86:96:0c:69:b6:35:d9:c1:cc:dd:d2:4a:d3:24:85: 5a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B2:D6:63:C7:7B:D7:33:38:F3:E2:E1:DA:13:B8:98:F4:E7:A1:AF X509v3 Authority Key Identifier: keyid:0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:5a:5e:2b:bd:a9:cb:13:07:50:16:28:7b:ed:00:15:71:58: d0:f7:96:4b:d4:c9:fd:40:9e:54:42:8a:4c:95:53:e7:59:08: cc:5b:62:01:26:3d:0f:53:23:4e:b5:96:03:99:d7:88:9f:e6: 35:8d:19:b4:15:a1:5f:10:47:6e:54:4e:bb:89:c2:53:f8:34: e3:2e:8a:7d:b3:95:b9:1e:c0:2c:8a:5d:b8:96:fb:b7:7d:41: 0b:4f:4a:8f:2a:11:58:63:d9:e3:8a:27:e8:72:57:e8:7c:54: 73:28:8a:ca:3b:23:04:d7:41:5f:b3:57:09:04:c5:76:0b:c5: 6a:5f:f7:1d:4e:92:e1:37:fd:5a:35:ea:db:0e:a0:c4:be:54: 01:da:21:c1:1f:cf:1d:18:ec:61:21:79:dc:cd:bf:ef:57:93: 78:18:a5:0a:70:3c:42:28:45:5b:6d:f9:f4:ab:d7:17:d9:33: fd:83:13:58:50:37:93:61:21:a5:d9:63:b2:fb:b1:07:57:e8: a3:bc:7a:3b:dc:60:00:d5:97:d4:12:aa:34:3e:27:15:80:c6: 5c:9a:f4:1b:5a:3c:07:e8:33:b8:a7:91:a8:ef:88:cb:ee:93: a6:51:e9:30:6d:07:8a:96:74:a2:85:91:8c:e9:c6:90:b6:f7: ae:1f:2c:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNCRUYxMTAvBgNVBAUTKDBDQkVEMjdBQjdCNjgxQkM5OTY2QUNFMjQ0RkNCRjI5 N0U2NUNBMTkwHhcNMjUwMzI5MDAxMDMxWhcNMjUwNDA1MDAxMDMxWjAYMRYwFAYD VQQDEw02N2U3M2E3Ny01YWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1y/k7ze/FdRwPzOaAsPqfbmZ96pf6qJ4eQYKgDr72M3iY/FHv4aFLJCNJ2z HpxSzLeGyT+e1H9/6jSkHj4tK6PD0PZaKEtHiKjylmOjfemDZZIkVLGBdfLBCXny UA2ZF3USmt2W5gkSkgHSLEV2fD2I8yBRwTyHrmW9W2bz/q/SHd8m2LmMhF/KsOhB v2qiAESCnUYK18AbQYRdxuTfMTzJ0kQnLn0sWadBhepyqYO4NJBTpOGE5mMtMZva eYcWZJ7mVVtILiDSgnFbZJY6a9c3BGNMW0VAZ4f1NeqGzvQMTCt687L6Y6VVOpQT SseGlgxptjXZwczd0krTJIVa3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSy1mPH e9czOPPi4doTuJj056GvMB8GA1UdIwQYMBaAFAy+0nq3toG8mWas4kT8vyl+ZcoZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0JFRi84QUFGRTI4QzI1 Q0YxMUVDOEI0QTk5MkVDNEY5QUUwMi9ETDdTZXJlMmdieVpacXppUlB5X0tYNWx5 aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RMN1NlcmUyZ2J5WlpxemlSUHlfS1g1bHloay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0JFRi84QUFGRTI4QzI1Q0YxMUVDOEI0QTk5MkVDNEY5QUUwMi9ETDdTZXJlMmdi eVpacXppUlB5X0tYNWx5aGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQWl4rvanLEwdQFih77QAVcVjQ95ZL1Mn9QJ5UQopMlVPnWQjMW2IB Jj0PUyNOtZYDmdeIn+Y1jRm0FaFfEEduVE67icJT+DTjLop9s5W5HsAsil24lvu3 fUELT0qPKhFYY9njiifoclfofFRzKIrKOyME10Ffs1cJBMV2C8VqX/cdTpLhN/1a NerbDqDEvlQB2iHBH88dGOxhIXnczb/vV5N4GKUKcDxCKEVbbfn0q9cX2TP9gxNY UDeTYSGl2WOy+7EHV+ijvHo73GAA1ZfUEqo0PicVgMZcmvQbWjwH6DO4p5Go74jL 7pOmUekwbQeKlnSihZGM6caQtveuHywJ -----END CERTIFICATE-----Generated at Fri Apr 4 18:24:47 2025 by rpki-client