$ rpki-client -vvf rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft File: 7knhDcoGuBY3lASCqMSKzvukTT8.mft (raw, json) Hash identifier: kjLciXr6calNhOT41fY0BKrIin8L+GiB2DRbv0VvhZo= Subject key identifier: 8B:66:39:9A:63:90:AC:1D:AD:EB:48:55:BC:BC:57:96:51:D4:19:03 Authority key identifier: EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F Certificate issuer: /CN=A918E76B/serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F Certificate serial: 094D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft Manifest number: 0947 Signing time: Sun 06 Apr 2025 19:59:09 +0000 Manifest this update: Sun 06 Apr 2025 19:59:08 +0000 Manifest next update: Sun 13 Apr 2025 19:59:08 +0000 Files and hashes: 1: 7knhDcoGuBY3lASCqMSKzvukTT8.crl (hash: qN7A+gPzx2PPjYm0I0n7DHSMIwS4bMHnG1yeCLq3cLY=) 2: DD726152945311EAB9A9B971C4F9AE02.roa (hash: eARvkLPx4cJh+IeHG0XdxEw7zw/djQ5xDufaDbeB8VU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 19:59:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2381 (0x94d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E76B Validity Not Before: Apr 6 19:59:08 2025 GMT Not After : Apr 13 19:59:08 2025 GMT Subject: CN=67f2dd0d-515c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7c:df:33:50:09:bd:1b:d3:51:8d:76:07:b2: 86:81:13:c9:d2:b5:7d:ec:66:99:70:c2:14:3a:03: b0:c6:58:13:0a:2f:83:2e:e7:d5:e6:18:9e:c5:62: 90:d4:8d:60:9c:6e:75:5c:de:30:dd:9c:23:01:20: 90:e0:f0:18:a7:bb:07:14:ae:73:67:fe:55:52:34: 2c:cc:67:80:30:4d:cd:e3:c1:8b:5d:5f:04:df:ac: da:ba:4f:0a:bf:da:d9:fe:84:65:50:59:aa:b8:4f: 18:a5:7c:f0:09:62:b7:df:1d:58:f8:6f:cc:28:7a: 68:48:c9:76:ab:6d:e6:cb:e8:9f:49:69:ad:43:84: 82:b1:95:03:db:72:00:6e:90:f1:59:50:26:4b:1c: 58:47:58:88:3c:d1:b1:00:4e:fd:c7:17:de:5f:bd: 2b:6e:99:9f:73:f5:33:c3:0b:16:6e:17:53:e1:a4: 76:15:e4:68:43:78:3c:00:e9:ae:10:02:33:ee:e9: fd:c9:98:2e:ab:a6:61:e2:ff:1c:5f:ad:46:e3:f2: 83:e6:3f:58:5a:69:b5:95:72:1f:a6:3e:b3:ce:8c: ce:29:00:f4:47:2e:3b:f6:22:8d:8a:6a:66:9d:87: e2:16:43:0c:da:b1:47:58:5d:e8:ca:34:fb:ec:9d: 14:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:66:39:9A:63:90:AC:1D:AD:EB:48:55:BC:BC:57:96:51:D4:19:03 X509v3 Authority Key Identifier: keyid:EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:fd:2c:cb:29:55:71:1f:d9:76:33:fb:b0:b7:48:28:72:ba: fe:c6:0a:30:bb:f7:0e:e5:5c:0d:67:0e:26:d2:e2:06:55:1f: b1:fc:22:a6:5e:67:28:c5:0d:7a:32:f4:b3:a0:cd:b7:60:4a: 45:eb:f1:2f:5f:4d:bf:b2:81:b0:14:e2:6e:16:5b:2f:a2:dd: 4f:cd:03:7a:6e:a2:17:0d:66:68:e8:58:26:b6:a3:25:6e:01: b2:99:f3:00:81:44:31:32:d9:82:b9:bc:93:6f:c0:64:3b:76: 07:32:b1:1d:77:53:09:7c:82:fb:c9:ca:e1:64:0e:e1:d9:79: f3:df:cf:5f:d1:7c:36:c1:6c:eb:71:4b:d7:99:66:0e:33:f9: 59:11:52:c6:25:5e:5f:62:e7:a4:6f:e8:91:29:2d:eb:92:e6: 03:21:46:be:29:40:0e:1f:ae:db:c9:be:ba:d4:b6:4c:86:ff: 32:86:e3:c9:be:d5:70:fd:b5:83:4b:de:ab:02:15:19:3d:4a: 43:4f:25:c5:36:a7:33:18:5b:f3:69:0c:26:b2:2a:f0:4c:03: c0:89:4d:d0:b4:5f:5f:b2:0c:89:77:43:d1:18:a8:0c:31:12: b4:93:48:d6:bc:30:ac:98:83:58:19:57:7c:f2:57:f6:2b:36: 1a:af:0b:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU3NkIxMTAvBgNVBAUTKEVFNDlFMTBEQ0EwNkI4MTYzNzk0MDQ4MkE4QzQ4QUNF RkJBNDREM0YwHhcNMjUwNDA2MTk1OTA4WhcNMjUwNDEzMTk1OTA4WjAYMRYwFAYD VQQDEw02N2YyZGQwZC01MTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3zfM1AJvRvTUY12B7KGgRPJ0rV97GaZcMIUOgOwxlgTCi+DLufV5hiexWKQ 1I1gnG51XN4w3ZwjASCQ4PAYp7sHFK5zZ/5VUjQszGeAME3N48GLXV8E36zauk8K v9rZ/oRlUFmquE8YpXzwCWK33x1Y+G/MKHpoSMl2q23my+ifSWmtQ4SCsZUD23IA bpDxWVAmSxxYR1iIPNGxAE79xxfeX70rbpmfc/UzwwsWbhdT4aR2FeRoQ3g8AOmu EAIz7un9yZguq6Zh4v8cX61G4/KD5j9YWmm1lXIfpj6zzozOKQD0Ry479iKNimpm nYfiFkMM2rFHWF3oyjT77J0UIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFItmOZpj kKwdretIVby8V5ZR1BkDMB8GA1UdIwQYMBaAFO5J4Q3KBrgWN5QEgqjEis77pE0/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc2Qi9CRjE4MzIzMjk0 NTIxMUVBODA2RTY5NzBDNEY5QUUwMi83a25oRGNvR3VCWTNsQVNDcU1TS3p2dWtU VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdrbmhEY29HdUJZM2xBU0NxTVNLenZ1a1RUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTc2Qi9CRjE4MzIzMjk0NTIxMUVBODA2RTY5NzBDNEY5QUUwMi83a25oRGNvR3VC WTNsQVNDcU1TS3p2dWtUVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN/SzLKVVxH9l2M/uwt0gocrr+xgowu/cO5VwNZw4m0uIGVR+x/CKm XmcoxQ16MvSzoM23YEpF6/EvX02/soGwFOJuFlsvot1PzQN6bqIXDWZo6FgmtqMl bgGymfMAgUQxMtmCubyTb8BkO3YHMrEdd1MJfIL7ycrhZA7h2Xnz389f0Xw2wWzr cUvXmWYOM/lZEVLGJV5fYuekb+iRKS3rkuYDIUa+KUAOH67byb661LZMhv8yhuPJ vtVw/bWDS96rAhUZPUpDTyXFNqczGFvzaQwmsirwTAPAiU3QtF9fsgyJd0PRGKgM MRK0k0jWvDCsmINYGVd88lf2KzYarwtP -----END CERTIFICATE-----Generated at Mon Apr 7 13:57:16 2025 by rpki-client