$ rpki-client -vvf rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft File: 7ObXRymptklRLPzniy2vzsFGlzo.mft (raw, json) Hash identifier: BeAw6mD0KSugJ1IwMXqbX7a6e13YReKthgUFPcuycCI= Subject key identifier: A7:81:F9:74:1B:E3:47:70:5B:89:DF:2E:55:92:3A:A7:37:C7:D4:00 Authority key identifier: EC:E6:D7:47:29:A9:B6:49:51:2C:FC:E7:8B:2D:AF:CE:C1:46:97:3A Certificate issuer: /CN=A916A171/serialNumber=ECE6D74729A9B649512CFCE78B2DAFCEC146973A Certificate serial: 0C8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ObXRymptklRLPzniy2vzsFGlzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft Manifest number: 0C81 Signing time: Fri 04 Apr 2025 18:19:40 +0000 Manifest this update: Fri 04 Apr 2025 18:19:40 +0000 Manifest next update: Fri 11 Apr 2025 18:19:40 +0000 Files and hashes: 1: 7ObXRymptklRLPzniy2vzsFGlzo.crl (hash: NhhgrnfV9SnGbeRg13UnWaTbdgEUw5cIuLEohVHeZQM=) 2: F268590C1B9911ED9A50C30EC4F9AE02.roa (hash: B32sLriEZBiwsvO/X5p+YP5+TxaEvkZ8AXqcNmiVRPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.crl rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ObXRymptklRLPzniy2vzsFGlzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3210 (0xc8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A171 Validity Not Before: Apr 4 18:19:40 2025 GMT Not After : Apr 11 18:19:40 2025 GMT Subject: CN=67f022bc-97c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fd:2e:a5:f9:a2:b3:f6:02:2a:30:45:8f:94: cf:92:44:2a:d9:87:28:f0:08:63:69:b1:6a:31:45: 80:44:c3:41:f5:4b:e4:07:82:52:ce:a7:cc:a9:86: 66:30:64:99:53:36:6f:fc:8f:e8:60:9c:a2:85:30: c2:2c:f3:c5:f0:8e:c7:b4:0e:b9:66:7f:3e:70:dc: 90:19:9c:69:96:54:58:3d:4a:53:3d:6e:9c:9c:dc: 1d:d9:a2:62:75:f0:c3:d9:db:be:3f:86:ee:7b:7e: b9:f9:14:43:89:85:5a:71:91:57:bb:45:d5:3b:2b: 48:bc:75:cc:31:b6:01:f9:64:68:bc:fd:77:6d:2c: a9:8d:0f:af:38:eb:7b:4f:57:90:dd:8f:6a:c2:48: 80:49:60:e1:43:df:8c:0c:29:61:49:63:67:2f:25: d7:ed:d2:a2:8e:34:ad:a6:ea:a8:ae:b8:51:c5:04: e8:a6:ac:46:07:9f:b0:57:7d:3b:7e:6d:54:d8:95: 76:52:07:a6:cb:85:ed:0e:24:c2:d4:e1:ad:61:f9: 56:a4:2a:ef:fa:f1:25:0f:dd:6f:2d:6c:3b:7a:20: da:85:06:d8:15:5f:0c:41:c0:c8:10:e3:24:5c:2f: c9:dc:5d:4c:25:3b:e4:ce:4b:92:6d:79:58:fe:50: 6a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:81:F9:74:1B:E3:47:70:5B:89:DF:2E:55:92:3A:A7:37:C7:D4:00 X509v3 Authority Key Identifier: keyid:EC:E6:D7:47:29:A9:B6:49:51:2C:FC:E7:8B:2D:AF:CE:C1:46:97:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ObXRymptklRLPzniy2vzsFGlzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:cb:e2:d5:7a:8e:ed:f4:87:f3:24:b0:ce:73:67:61:c6:c8: 9a:50:d5:e8:d9:40:71:fe:01:61:c7:90:b0:d1:c9:7a:ce:32: 4c:4a:33:9a:37:03:04:a3:dd:3a:79:04:da:f3:b5:f3:a0:c4: 03:23:22:f4:6e:85:e9:db:78:3e:fa:9d:54:24:88:4d:c9:05: a0:cb:3e:02:ff:12:ba:54:fb:03:f7:12:15:54:9b:75:1e:33: af:a7:2b:78:c8:a4:93:ad:fc:02:04:09:70:de:cb:a3:2a:a9: 24:cd:ce:26:3d:e4:16:50:cc:98:90:3e:71:a3:30:fb:11:93: 29:eb:7a:0c:55:c8:02:93:95:1e:53:02:a5:de:5d:39:e1:c6: c6:ee:40:68:d3:b0:02:a6:6d:16:1f:9b:03:8d:02:3f:50:81: 0a:82:a5:8f:ab:d8:08:62:d4:3a:3a:a2:27:97:60:a4:bb:61: 02:f6:0b:77:a4:07:5e:17:c3:55:ac:b9:3b:21:56:cf:ba:f2: 5b:84:cd:f6:98:52:12:f5:58:b8:ed:ea:6b:7d:7e:6f:61:4b: db:c1:ad:10:a2:b5:d4:73:d8:14:fa:75:61:07:45:86:2a:c5: 96:6d:ec:09:64:eb:de:43:3b:10:e9:ea:ea:97:83:a3:49:7a: a2:5f:34:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkExNzExMTAvBgNVBAUTKEVDRTZENzQ3MjlBOUI2NDk1MTJDRkNFNzhCMkRBRkNF QzE0Njk3M0EwHhcNMjUwNDA0MTgxOTQwWhcNMjUwNDExMTgxOTQwWjAYMRYwFAYD VQQDEw02N2YwMjJiYy05N2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArf0upfmis/YCKjBFj5TPkkQq2Yco8AhjabFqMUWARMNB9UvkB4JSzqfMqYZm MGSZUzZv/I/oYJyihTDCLPPF8I7HtA65Zn8+cNyQGZxpllRYPUpTPW6cnNwd2aJi dfDD2du+P4bue365+RRDiYVacZFXu0XVOytIvHXMMbYB+WRovP13bSypjQ+vOOt7 T1eQ3Y9qwkiASWDhQ9+MDClhSWNnLyXX7dKijjStpuqorrhRxQTopqxGB5+wV307 fm1U2JV2Ugemy4XtDiTC1OGtYflWpCrv+vElD91vLWw7eiDahQbYFV8MQcDIEOMk XC/J3F1MJTvkzkuSbXlY/lBqsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKeB+XQb 40dwW4nfLlWSOqc3x9QAMB8GA1UdIwQYMBaAFOzm10cpqbZJUSz854str87BRpc6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTE3MS80RjU3RTlCRUY0 OTkxMUU5OEYzN0RDMUNDNEY5QUUwMi83T2JYUnltcHRrbFJMUHpuaXkydnpzRkds em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdPYlhSeW1wdGtsUkxQem5peTJ2enNGR2x6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTE3MS80RjU3RTlCRUY0OTkxMUU5OEYzN0RDMUNDNEY5QUUwMi83T2JYUnltcHRr bFJMUHpuaXkydnpzRkdsem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYy+LVeo7t9IfzJLDOc2dhxsiaUNXo2UBx/gFhx5Cw0cl6zjJMSjOa NwMEo906eQTa87XzoMQDIyL0boXp23g++p1UJIhNyQWgyz4C/xK6VPsD9xIVVJt1 HjOvpyt4yKSTrfwCBAlw3sujKqkkzc4mPeQWUMyYkD5xozD7EZMp63oMVcgCk5Ue UwKl3l054cbG7kBo07ACpm0WH5sDjQI/UIEKgqWPq9gIYtQ6OqInl2Cku2EC9gt3 pAdeF8NVrLk7IVbPuvJbhM32mFIS9Vi47eprfX5vYUvbwa0QorXUc9gU+nVhB0WG KsWWbewJZOveQzsQ6erql4OjSXqiXzRI -----END CERTIFICATE-----Generated at Sun Apr 6 06:38:18 2025 by rpki-client