$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft File: x7AAT_axhojBl7xLOfrBJdSfvPk.mft (raw, json) Hash identifier: IvMMot1asKcvzortk8iuL5dL7tNxc4e6vfrgl7CwyoE= Subject key identifier: EB:25:36:99:93:07:9D:2B:63:EA:8E:09:D3:3A:46:87:C0:46:7F:4D Authority key identifier: C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 Certificate issuer: /CN=A9174C15/serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Certificate serial: 0502 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft Manifest number: 04F4 Signing time: Tue 08 Apr 2025 23:26:09 +0000 Manifest this update: Tue 08 Apr 2025 23:26:08 +0000 Manifest next update: Tue 15 Apr 2025 23:26:08 +0000 Files and hashes: 1: x7AAT_axhojBl7xLOfrBJdSfvPk.crl (hash: hZRpjywf2YeVPKuLKAsSGcJ3IjoPKhV/h5IwU50btVk=) 2: CD665F4E0AA611EE84B0053DC4F9AE02.roa (hash: ZFVD/gWXM15jrbAvaaadW934NyuKqXgp7C1n9VDgd6M=) 3: 778B08A40A4911EC8BC5AF5EC4F9AE02.roa (hash: i3s18BaY3hcoxMjxy2QU6cAUMzbd78K/9/AXgiaYx9w=) 4: CC5C527A0AA611EE84B0053DC4F9AE02.roa (hash: 2k3mmFRSm00PZ1eU/1nDOAndoGHlqgxcb+UsBjNPu14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 23:26:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1282 (0x502) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C15 Validity Not Before: Apr 8 23:26:08 2025 GMT Not After : Apr 15 23:26:08 2025 GMT Subject: CN=67f5b090-f12d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a9:58:61:03:11:67:e6:5c:da:c6:78:36:2a: 33:e8:0b:70:b9:a0:ca:43:a6:5b:9a:8d:35:ed:b8: 2d:2b:5a:ea:41:35:9b:95:39:df:c6:a3:a9:82:17: d9:df:86:f0:9d:39:ca:62:f3:98:17:ce:a6:9c:59: 77:11:ac:4e:49:85:7a:be:fb:21:7c:b3:21:91:ba: ff:b7:0f:15:77:bf:bc:83:d4:53:76:5f:fc:6e:45: 1f:36:f0:cd:ba:0d:34:f0:06:51:0c:57:c5:d9:3d: db:30:87:09:e1:96:d8:8c:78:75:a8:9d:67:9b:16: c2:53:b5:3b:27:e9:90:e8:bc:c3:19:3c:07:5a:ba: e2:ab:90:17:1b:d3:bd:29:14:8e:15:ee:d6:ef:3e: 69:3f:7e:79:2c:57:e9:d1:58:d0:8e:2f:e6:9a:22: 92:ca:03:be:76:cd:aa:4c:8d:0a:90:07:82:f0:e8: ff:a5:38:fc:85:0c:2c:83:6e:1f:5f:43:20:74:95: 15:de:14:87:61:2d:8a:ea:72:ef:7c:89:a1:5a:a8: 96:a1:fc:f3:11:ae:5d:2c:45:7a:f5:15:53:23:29: 60:23:62:3f:86:1c:a1:6b:0f:e6:5e:d1:4d:35:be: 62:f0:74:3d:0a:ac:b6:9c:6c:8b:da:ce:2d:cc:7b: 1f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:25:36:99:93:07:9D:2B:63:EA:8E:09:D3:3A:46:87:C0:46:7F:4D X509v3 Authority Key Identifier: keyid:C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:cd:2c:53:88:7f:bb:a6:0b:d9:c1:2b:c4:9b:77:47:97:9c: 2c:0f:76:f8:b4:10:ab:d1:7b:ce:55:ae:09:3a:12:db:2e:89: 2e:26:32:d5:37:54:bb:e0:f4:15:5f:93:58:07:98:18:f1:8f: dc:7c:67:fb:f1:06:87:2d:7e:1f:a1:fb:95:da:14:a1:03:61: 59:32:23:b4:4c:d4:ba:b2:d3:20:e5:5a:aa:6f:47:e2:c8:4f: 39:e8:a6:4c:98:c4:c6:50:d4:f0:4a:cf:16:5c:df:46:70:31: b4:84:c5:4a:0b:7d:46:6e:79:cd:12:3c:9f:6e:9a:18:f9:8b: c1:ac:25:c1:c2:e9:44:a9:83:94:a6:a3:76:b4:0a:17:08:a3: ec:e1:ba:2a:62:f1:39:e4:b0:09:fb:ee:92:78:9d:bc:b5:aa: 69:b6:5b:e9:a9:92:39:66:d6:d8:e2:ca:46:a8:93:93:b2:c3: ce:36:7f:11:aa:1c:2c:02:c7:d6:d8:5a:0c:93:5d:ed:27:ce: 72:18:0a:c9:a0:d6:3c:18:9b:ae:64:3d:f5:41:4c:9d:ac:0a: 38:65:d2:f7:8f:7a:ad:49:a0:cf:f3:ff:26:eb:95:92:c1:d5: 6a:c7:1b:1f:db:f3:f6:1c:eb:b1:e3:3c:f3:ad:6e:ff:66:df: a3:d3:b1:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDMTUxMTAvBgNVBAUTKEM3QjAwMDRGRjZCMTg2ODhDMTk3QkM0QjM5RkFDMTI1 RDQ5RkJDRjkwHhcNMjUwNDA4MjMyNjA4WhcNMjUwNDE1MjMyNjA4WjAYMRYwFAYD VQQDEw02N2Y1YjA5MC1mMTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKlYYQMRZ+Zc2sZ4Nioz6AtwuaDKQ6Zbmo017bgtK1rqQTWblTnfxqOpghfZ 34bwnTnKYvOYF86mnFl3EaxOSYV6vvshfLMhkbr/tw8Vd7+8g9RTdl/8bkUfNvDN ug008AZRDFfF2T3bMIcJ4ZbYjHh1qJ1nmxbCU7U7J+mQ6LzDGTwHWrriq5AXG9O9 KRSOFe7W7z5pP355LFfp0VjQji/mmiKSygO+ds2qTI0KkAeC8Oj/pTj8hQwsg24f X0MgdJUV3hSHYS2K6nLvfImhWqiWofzzEa5dLEV69RVTIylgI2I/hhyhaw/mXtFN Nb5i8HQ9Cqy2nGyL2s4tzHsfUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOslNpmT B50rY+qOCdM6RofARn9NMB8GA1UdIwQYMBaAFMewAE/2sYaIwZe8Szn6wSXUn7z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEMxNS9BQzlDNkI1MDBB NDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhvakJsN3hMT2ZyQkpkU2Z2 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3QUFUX2F4aG9qQmw3eExPZnJCSmRTZnZQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEMxNS9BQzlDNkI1MDBBNDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhv akJsN3hMT2ZyQkpkU2Z2UGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATzSxTiH+7pgvZwSvEm3dHl5wsD3b4tBCr0XvOVa4JOhLbLokuJjLV N1S74PQVX5NYB5gY8Y/cfGf78QaHLX4fofuV2hShA2FZMiO0TNS6stMg5Vqqb0fi yE856KZMmMTGUNTwSs8WXN9GcDG0hMVKC31GbnnNEjyfbpoY+YvBrCXBwulEqYOU pqN2tAoXCKPs4boqYvE55LAJ++6SeJ28tapptlvpqZI5ZtbY4spGqJOTssPONn8R qhwsAsfW2FoMk13tJ85yGArJoNY8GJuuZD31QUydrAo4ZdL3j3qtSaDP8/8m65WS wdVqxxsf2/P2HOux4zzzrW7/Zt+j07Go -----END CERTIFICATE-----Generated at Thu Apr 10 20:33:22 2025 by rpki-client