$ rpki-client -vvf rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft File: 7Yy8VM2G8sH5LexryQnbxvpjTIE.mft (raw, json) Hash identifier: sfP5HgfevsO6PFvDk/hVQRMhDSNvWU76+l6Y5r2dqtA= Subject key identifier: 73:5E:79:3E:58:A1:96:F5:0F:51:D2:C7:D5:33:95:A4:1E:7B:BE:A5 Authority key identifier: ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81 Certificate issuer: /CN=A918A3E6/serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81 Certificate serial: 07C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft Manifest number: 07BC Signing time: Fri 04 Apr 2025 21:18:34 +0000 Manifest this update: Fri 04 Apr 2025 21:18:33 +0000 Manifest next update: Fri 11 Apr 2025 21:18:33 +0000 Files and hashes: 1: 7Yy8VM2G8sH5LexryQnbxvpjTIE.crl (hash: dd7/nzNrKjV6VrTrKJok3E54kW1XV3QZpjZTGr4nVlA=) 2: C130A016889811EE8EB03D6EC4F9AE02.roa (hash: ps8T51LAEWm+2oQL0cFEdFjjIOqwK71webhbpBac664=) 3: 7ABD27E4889811EEB99AD46DC4F9AE02.roa (hash: Tzogk+KlaMGiRbq9BoG9FBqCIAU/Ao8ia39qrUgrDpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1991 (0x7c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A3E6 Validity Not Before: Apr 4 21:18:33 2025 GMT Not After : Apr 11 21:18:33 2025 GMT Subject: CN=67f04ca9-7a30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:25:2e:03:f0:8a:48:66:de:59:a3:ee:64:2a: b4:e5:35:1b:0c:a2:ff:d3:12:8b:1a:02:84:08:4d: 22:4c:52:cf:ea:0b:1c:8c:a8:e5:47:ca:8c:fc:ed: cf:e2:b8:e4:97:f0:b6:26:14:f4:a2:ad:78:c7:54: a4:84:2a:b5:29:25:11:64:ed:0e:7a:aa:2a:97:a3: f0:ea:ba:97:ff:a2:bd:a6:2c:7f:1a:df:7e:7c:29: dd:5f:f6:c2:2a:f9:49:61:5b:93:04:1c:70:4e:20: e5:58:c7:3e:b7:22:31:59:32:12:2f:26:0b:a2:d6: 19:c1:27:f5:ae:21:49:5a:00:06:17:05:4d:da:46: ff:05:03:ac:10:a3:54:6b:74:20:93:54:47:21:43: 7a:43:24:3c:43:b6:74:d5:46:97:58:dd:cb:42:9d: e5:0a:95:62:3c:3f:0d:6e:16:fd:c0:ea:31:d0:3f: 4e:54:1f:22:dd:8d:10:c2:52:12:be:cc:dd:f4:6e: 36:c4:39:2d:5d:02:3a:00:55:cf:37:e2:a9:41:04: e8:17:0e:2a:90:d1:3b:05:60:35:6a:19:1e:47:7c: bd:b3:5b:d2:37:23:c1:a4:8b:d0:d5:6b:1b:69:0c: d0:30:2c:f1:4c:b6:9e:b3:b0:0e:69:9d:d7:96:1a: fb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:5E:79:3E:58:A1:96:F5:0F:51:D2:C7:D5:33:95:A4:1E:7B:BE:A5 X509v3 Authority Key Identifier: keyid:ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:f4:a3:9f:0f:de:a6:49:4b:c2:e6:fc:1f:f0:38:18:b1:72: fd:05:0b:2e:b6:19:ce:b5:c1:9f:ac:d1:d9:16:e1:38:39:e2: ea:55:ef:35:9d:ab:4b:cd:03:e4:3a:28:67:0f:aa:fd:f1:bf: ee:71:4b:7f:45:ab:30:a0:79:58:19:1e:20:55:e6:d2:78:e6: 25:e2:9a:2b:e7:ca:a4:db:1c:00:7e:36:8b:c5:85:6f:f2:7e: a3:3b:b0:56:cb:41:03:31:af:b2:45:f9:d7:cf:56:bf:7c:31: 75:32:e4:a2:92:14:2b:8d:f4:ce:13:bf:b4:9a:6c:09:75:e2: b3:64:fe:e3:95:69:7a:b6:34:78:5e:0c:55:41:dd:6a:b1:05: 07:e1:6a:17:7c:d9:fc:35:57:85:64:e3:d6:99:0e:9b:07:d0: 7c:72:a6:9d:f5:86:c7:f0:62:de:d9:ae:5a:8c:19:88:db:91: 9e:0d:b0:44:b4:cf:49:0f:d2:a5:d8:16:c4:95:9e:c8:a6:50: 3f:97:87:dc:1f:d4:14:4a:b6:6f:bb:0a:d8:df:84:0c:fb:c2: a2:c1:c6:89:15:8c:b8:f1:33:64:28:ae:71:8a:78:db:2f:d7: 10:f9:02:dd:82:04:a1:92:b0:46:42:ca:db:a0:4c:93:b3:71: 50:02:5e:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEzRTYxMTAvBgNVBAUTKEVEOENCQzU0Q0Q4NkYyQzFGOTJERUM2QkM5MDlEQkM2 RkE2MzRDODEwHhcNMjUwNDA0MjExODMzWhcNMjUwNDExMjExODMzWjAYMRYwFAYD VQQDEw02N2YwNGNhOS03YTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCUuA/CKSGbeWaPuZCq05TUbDKL/0xKLGgKECE0iTFLP6gscjKjlR8qM/O3P 4rjkl/C2JhT0oq14x1SkhCq1KSURZO0Oeqoql6Pw6rqX/6K9pix/Gt9+fCndX/bC KvlJYVuTBBxwTiDlWMc+tyIxWTISLyYLotYZwSf1riFJWgAGFwVN2kb/BQOsEKNU a3Qgk1RHIUN6QyQ8Q7Z01UaXWN3LQp3lCpViPD8Nbhb9wOox0D9OVB8i3Y0QwlIS vszd9G42xDktXQI6AFXPN+KpQQToFw4qkNE7BWA1ahkeR3y9s1vSNyPBpIvQ1Wsb aQzQMCzxTLaes7AOaZ3Xlhr7twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNeeT5Y oZb1D1HSx9UzlaQee76lMB8GA1UdIwQYMBaAFO2MvFTNhvLB+S3sa8kJ28b6Y0yB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTNFNi82NDBENjE4RUYy QzkxMUVBODZGMTI3MTdDNEY5QUUwMi83WXk4Vk0yRzhzSDVMZXhyeVFuYnh2cGpU SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZeThWTTJHOHNINUxleHJ5UW5ieHZwalRJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTNFNi82NDBENjE4RUYyQzkxMUVBODZGMTI3MTdDNEY5QUUwMi83WXk4Vk0yRzhz SDVMZXhyeVFuYnh2cGpUSUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDW9KOfD96mSUvC5vwf8DgYsXL9BQsuthnOtcGfrNHZFuE4OeLqVe81 natLzQPkOihnD6r98b/ucUt/RaswoHlYGR4gVebSeOYl4por58qk2xwAfjaLxYVv 8n6jO7BWy0EDMa+yRfnXz1a/fDF1MuSikhQrjfTOE7+0mmwJdeKzZP7jlWl6tjR4 XgxVQd1qsQUH4WoXfNn8NVeFZOPWmQ6bB9B8cqad9YbH8GLe2a5ajBmI25GeDbBE tM9JD9Kl2BbElZ7IplA/l4fcH9QUSrZvuwrY34QM+8KiwcaJFYy48TNkKK5xinjb L9cQ+QLdggShkrBGQsrboEyTs3FQAl5v -----END CERTIFICATE-----Generated at Sat Apr 5 22:05:20 2025 by rpki-client