$ rpki-client -vvf rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft File: C7z952hnW5lPKiMRTDUUEiAVVbg.mft (raw, json) Hash identifier: C4ahcXuSxJambG3JspSPZFWSujZ8du7ykYayohj4nQ0= Subject key identifier: FF:55:D7:09:36:CA:06:7A:CB:FB:36:BC:82:F5:F0:A7:2D:64:94:67 Authority key identifier: 0B:BC:FD:E7:68:67:5B:99:4F:2A:23:11:4C:35:14:12:20:15:55:B8 Certificate issuer: /CN=A9123193/serialNumber=0BBCFDE768675B994F2A23114C351412201555B8 Certificate serial: 072F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft Manifest number: 0724 Signing time: Fri 30 May 2025 22:03:48 +0000 Manifest this update: Fri 30 May 2025 22:03:48 +0000 Manifest next update: Fri 06 Jun 2025 22:03:48 +0000 Files and hashes: 1: C7z952hnW5lPKiMRTDUUEiAVVbg.crl (hash: V7peUn9vRgKNG50pInC1mpZHVNOnb+MdJazLeH0h28Q=) 2: 31BF0C48D8DE11EDBACEEE7FC4F9AE02.roa (hash: 9esbbGrIEshCzgVAuh0Un9LyG8pst2lzVqe8bmApqT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.crl rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:03:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1839 (0x72f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123193, serialNumber=0BBCFDE768675B994F2A23114C351412201555B8 Validity Not Before: May 30 22:03:48 2025 GMT Not After : Jun 6 22:03:48 2025 GMT Subject: CN=683a2b44-7f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:66:49:3d:32:5a:a7:98:02:8f:e9:ac:ee:8c: 83:0f:6d:5f:4f:62:a9:96:cb:84:16:ef:7c:d9:6b: c8:e6:e5:41:8b:6d:64:88:45:95:58:43:34:c9:3f: 3e:c5:c9:f5:5a:8c:ab:71:57:0d:0a:5a:1f:f8:d7: f7:b9:31:c7:ea:62:54:04:51:df:3b:f2:a0:39:11: 14:85:7d:8e:17:4b:4c:7e:97:b3:7f:22:5d:fa:34: e0:a2:b1:b9:37:62:0b:70:16:51:a6:ab:e7:c9:d1: e1:fd:f0:58:16:9e:5a:b1:cc:01:a3:79:12:52:0b: 6e:49:5e:b6:04:d4:45:85:84:8a:03:4b:d3:84:c6: 31:36:64:c7:9c:7c:20:33:06:f6:73:ff:95:49:c3: f6:ca:f9:a0:04:13:ef:e5:3e:01:96:d4:05:5b:46: 77:42:f9:26:c7:c6:ad:ce:8d:07:0e:04:7b:37:24: d6:3c:93:50:7d:3d:41:4c:40:a9:77:0e:58:b9:99: 34:a9:ab:d8:b6:30:46:35:43:79:fb:ed:d8:a9:ea: 95:b9:35:eb:ec:8b:c8:64:49:13:76:eb:6b:9f:69: 39:10:8b:96:57:aa:c0:4d:5a:a0:70:ec:5a:4f:79: 63:20:b0:9b:7a:26:6f:33:59:6c:d8:0c:f9:16:14: a1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:55:D7:09:36:CA:06:7A:CB:FB:36:BC:82:F5:F0:A7:2D:64:94:67 X509v3 Authority Key Identifier: keyid:0B:BC:FD:E7:68:67:5B:99:4F:2A:23:11:4C:35:14:12:20:15:55:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:95:a1:dc:03:ba:8a:1d:05:bc:56:1c:c2:12:8a:63:eb:59: f5:f9:c0:b8:19:f7:fc:f1:68:6e:71:bf:df:b5:4b:7a:79:8c: ed:9a:26:ae:03:9c:47:9f:f2:23:03:7e:5a:c4:a7:08:b7:a0: 2b:7e:90:3b:9e:4a:dd:a1:60:ef:0a:7e:13:31:a6:88:76:8b: 6b:67:45:54:72:23:de:1b:83:5c:b5:22:21:8c:10:ff:99:d2: b0:e4:0f:e8:d4:5c:9f:80:40:04:58:39:30:2f:6e:09:30:12: 87:4f:8a:b3:ad:ec:84:a0:5a:c5:b5:3e:9a:79:3b:ab:f8:86: 33:c4:e9:bf:e0:48:32:88:2c:c1:01:2d:cf:70:15:6a:5a:88: 03:48:7e:5f:96:f1:a3:d1:9f:e0:d7:ae:5d:1a:bc:43:67:fc: 7b:1d:39:5a:1d:ff:58:02:1e:d4:ef:54:eb:ab:2f:54:40:a5: af:a3:2e:9a:42:a7:fa:ad:bb:d2:a6:10:73:d4:e7:7d:dd:3f: 70:28:42:62:bb:85:e6:c3:d4:fc:25:3a:e7:12:9d:7d:7b:55: 1a:38:67:f5:99:4b:0b:67:d6:77:4f:01:ed:17:01:27:ad:39: 52:d6:fc:d9:96:c2:b0:cd:05:aa:8f:35:25:82:38:dc:1a:83: 94:2a:e9:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMxOTMxMTAvBgNVBAUTKDBCQkNGREU3Njg2NzVCOTk0RjJBMjMxMTRDMzUxNDEy MjAxNTU1QjgwHhcNMjUwNTMwMjIwMzQ4WhcNMjUwNjA2MjIwMzQ4WjAYMRYwFAYD VQQDEw02ODNhMmI0NC03ZjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2ZJPTJap5gCj+ms7oyDD21fT2KplsuEFu982WvI5uVBi21kiEWVWEM0yT8+ xcn1WoyrcVcNClof+Nf3uTHH6mJUBFHfO/KgOREUhX2OF0tMfpezfyJd+jTgorG5 N2ILcBZRpqvnydHh/fBYFp5ascwBo3kSUgtuSV62BNRFhYSKA0vThMYxNmTHnHwg Mwb2c/+VScP2yvmgBBPv5T4BltQFW0Z3Qvkmx8atzo0HDgR7NyTWPJNQfT1BTECp dw5YuZk0qavYtjBGNUN5++3YqeqVuTXr7IvIZEkTdutrn2k5EIuWV6rATVqgcOxa T3ljILCbeiZvM1ls2Az5FhShswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9V1wk2 ygZ6y/s2vIL18KctZJRnMB8GA1UdIwQYMBaAFAu8/edoZ1uZTyojEUw1FBIgFVW4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzE5My9DQThBNEIzQzM5 RDkxMUVCQTc4MUZBNTdDNEY5QUUwMi9DN3o5NTJoblc1bFBLaU1SVERVVUVpQVZW YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M3ejk1MmhuVzVsUEtpTVJURFVVRWlBVlZiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzE5My9DQThBNEIzQzM5RDkxMUVCQTc4MUZBNTdDNEY5QUUwMi9DN3o5NTJoblc1 bFBLaU1SVERVVUVpQVZWYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4laHcA7qKHQW8VhzCEopj61n1+cC4Gff88Whucb/ftUt6eYztmiau A5xHn/IjA35axKcIt6ArfpA7nkrdoWDvCn4TMaaIdotrZ0VUciPeG4NctSIhjBD/ mdKw5A/o1FyfgEAEWDkwL24JMBKHT4qzreyEoFrFtT6aeTur+IYzxOm/4EgyiCzB AS3PcBVqWogDSH5flvGj0Z/g165dGrxDZ/x7HTlaHf9YAh7U71Trqy9UQKWvoy6a Qqf6rbvSphBz1Od93T9wKEJiu4Xmw9T8JTrnEp19e1UaOGf1mUsLZ9Z3TwHtFwEn rTlS1vzZlsKwzQWqjzUlgjjcGoOUKumD -----END CERTIFICATE-----Generated at Sat May 31 17:56:26 2025 by rpki-client