$ rpki-client -vvf rpki.apnic.net/member_repository/A9127AE0/DD6587AC0F4C11EAA014267BC4F9AE02/7VXfoOxp2WS4W4bXi0AFHeoSlnM.mft File: 7VXfoOxp2WS4W4bXi0AFHeoSlnM.mft (raw, json) Hash identifier: /o+zFpJQEnmiRyaV27A3xlaOb6Elyp16GzRW5iz9LUA= Subject key identifier: 40:B2:AC:CE:8C:7B:60:D4:4D:C5:31:F4:59:88:5A:95:F8:86:6C:58 Authority key identifier: ED:55:DF:A0:EC:69:D9:64:B8:5B:86:D7:8B:40:05:1D:EA:12:96:73 Certificate issuer: /CN=A9127AE0/serialNumber=ED55DFA0EC69D964B85B86D78B40051DEA129673 Certificate serial: 0C1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VXfoOxp2WS4W4bXi0AFHeoSlnM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127AE0/DD6587AC0F4C11EAA014267BC4F9AE02/7VXfoOxp2WS4W4bXi0AFHeoSlnM.mft Manifest number: 0C11 Signing time: Fri 30 May 2025 18:51:49 +0000 Manifest this update: Fri 30 May 2025 18:51:49 +0000 Manifest next update: Fri 06 Jun 2025 18:51:49 +0000 Files and hashes: 1: 7VXfoOxp2WS4W4bXi0AFHeoSlnM.crl (hash: 78QpzHq8ovq8OVpvUvHA9d0bFIrY64IrKOcISZtPAV0=) 2: 6DB16BB40F4D11EAA6E7A17BC4F9AE02.roa (hash: fS0hvzQx5VOp/GPOlj0QCeoy3XoReYfGYf/82xIaZFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127AE0/DD6587AC0F4C11EAA014267BC4F9AE02/7VXfoOxp2WS4W4bXi0AFHeoSlnM.crl rsync://rpki.apnic.net/member_repository/A9127AE0/DD6587AC0F4C11EAA014267BC4F9AE02/7VXfoOxp2WS4W4bXi0AFHeoSlnM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VXfoOxp2WS4W4bXi0AFHeoSlnM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:51:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3098 (0xc1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127AE0, serialNumber=ED55DFA0EC69D964B85B86D78B40051DEA129673 Validity Not Before: May 30 18:51:49 2025 GMT Not After : Jun 6 18:51:49 2025 GMT Subject: CN=6839fe45-2727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:05:47:7f:ff:be:64:e8:9f:93:25:43:7b:0d: d6:24:24:92:ca:0d:0a:ad:04:ed:9a:8c:d7:b9:dd: cd:64:37:7b:fd:2e:33:6a:62:dc:bf:93:9a:a3:ae: f2:97:46:04:08:64:dd:af:e2:64:64:96:de:78:53: 55:df:f2:35:46:a1:2b:2d:f0:2f:95:08:1f:92:6c: ff:df:a8:96:1b:61:34:4c:43:d5:e0:91:c3:33:3f: 57:61:99:78:bc:a2:0d:fa:16:0e:67:d5:8b:fe:c0: ef:87:11:7e:d1:62:95:be:78:1d:66:71:f2:db:57: 73:4e:af:a1:46:f8:d4:41:cc:8b:f2:b4:71:4d:5b: c0:b7:26:ef:53:e0:30:d9:58:f8:ae:14:a8:34:2c: 48:6a:be:00:c2:05:21:e6:29:85:fe:86:9d:fb:29: c7:98:60:ca:79:54:3e:6e:4b:e9:64:0d:95:7d:45: 88:33:e0:65:e3:d2:7a:a7:ef:04:20:5a:63:46:5f: b3:aa:d1:92:5e:d9:47:9e:e1:8d:f3:d3:51:ff:e6: dd:4a:c8:12:74:13:5a:ad:76:5e:d0:30:66:28:bf: 20:22:14:c2:20:b4:13:a4:e4:34:20:15:f9:18:75: ab:8a:2f:61:4f:8a:a6:2f:4c:29:f3:96:40:1e:4a: c2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B2:AC:CE:8C:7B:60:D4:4D:C5:31:F4:59:88:5A:95:F8:86:6C:58 X509v3 Authority Key Identifier: keyid:ED:55:DF:A0:EC:69:D9:64:B8:5B:86:D7:8B:40:05:1D:EA:12:96:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127AE0/DD6587AC0F4C11EAA014267BC4F9AE02/7VXfoOxp2WS4W4bXi0AFHeoSlnM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VXfoOxp2WS4W4bXi0AFHeoSlnM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127AE0/DD6587AC0F4C11EAA014267BC4F9AE02/7VXfoOxp2WS4W4bXi0AFHeoSlnM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:cb:79:8c:de:44:fc:a6:92:9c:9a:f8:05:a9:06:9d:4c:e5: 50:17:0d:6e:7a:a2:52:65:bd:ca:1e:94:06:f5:52:34:12:44: d3:1c:c4:f8:13:1b:c7:6b:01:24:a4:ee:95:77:41:20:80:c7: 67:04:06:1d:f3:cc:fe:f5:73:39:39:b8:5b:62:7e:b6:db:1b: ad:a1:0d:77:df:67:7f:e3:c7:00:ca:36:2a:0e:4d:7f:74:c0: d8:07:3c:47:ab:c5:81:fe:72:ba:ab:94:50:c5:0d:5e:c4:27: 8f:f4:8d:58:bb:2f:ed:40:08:c1:2d:96:30:65:b6:13:9d:cb: 24:bf:b1:35:62:27:32:2a:92:4a:0c:b3:c7:9c:0e:9f:e6:52: 73:8b:5c:53:61:0f:0a:87:da:59:f1:4c:ed:a0:7c:58:d5:85: 22:48:91:24:46:87:bb:e7:3a:5d:78:71:f5:28:6e:56:92:28: 5e:90:a6:1e:72:4b:bc:1c:a6:32:43:7b:8a:b0:98:95:4f:01: 5d:3d:8b:4c:8e:45:f3:dc:8a:27:b6:cf:f5:8e:ef:48:19:44: d0:01:87:56:a0:7f:67:8c:d0:ff:19:66:1f:3e:c4:cd:2d:dd: a1:c3:b7:c0:75:98:e8:f3:46:69:8d:1e:97:31:c7:28:58:7e: 76:86:7f:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdBRTAxMTAvBgNVBAUTKEVENTVERkEwRUM2OUQ5NjRCODVCODZENzhCNDAwNTFE RUExMjk2NzMwHhcNMjUwNTMwMTg1MTQ5WhcNMjUwNjA2MTg1MTQ5WjAYMRYwFAYD VQQDEw02ODM5ZmU0NS0yNzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6wVHf/++ZOifkyVDew3WJCSSyg0KrQTtmozXud3NZDd7/S4zamLcv5Oao67y l0YECGTdr+JkZJbeeFNV3/I1RqErLfAvlQgfkmz/36iWG2E0TEPV4JHDMz9XYZl4 vKIN+hYOZ9WL/sDvhxF+0WKVvngdZnHy21dzTq+hRvjUQcyL8rRxTVvAtybvU+Aw 2Vj4rhSoNCxIar4AwgUh5imF/oad+ynHmGDKeVQ+bkvpZA2VfUWIM+Bl49J6p+8E IFpjRl+zqtGSXtlHnuGN89NR/+bdSsgSdBNarXZe0DBmKL8gIhTCILQTpOQ0IBX5 GHWrii9hT4qmL0wp85ZAHkrCFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFECyrM6M e2DUTcUx9FmIWpX4hmxYMB8GA1UdIwQYMBaAFO1V36DsadlkuFuG14tABR3qEpZz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0FFMC9ERDY1ODdBQzBG NEMxMUVBQTAxNDI2N0JDNEY5QUUwMi83Vlhmb094cDJXUzRXNGJYaTBBRkhlb1Ns bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdWWGZvT3hwMldTNFc0YlhpMEFGSGVvU2xuTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0FFMC9ERDY1ODdBQzBGNEMxMUVBQTAxNDI2N0JDNEY5QUUwMi83Vlhmb094cDJX UzRXNGJYaTBBRkhlb1Nsbk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzy3mM3kT8ppKcmvgFqQadTOVQFw1ueqJSZb3KHpQG9VI0EkTTHMT4 ExvHawEkpO6Vd0EggMdnBAYd88z+9XM5ObhbYn622xutoQ1332d/48cAyjYqDk1/ dMDYBzxHq8WB/nK6q5RQxQ1exCeP9I1Yuy/tQAjBLZYwZbYTncskv7E1YicyKpJK DLPHnA6f5lJzi1xTYQ8Kh9pZ8UztoHxY1YUiSJEkRoe75zpdeHH1KG5WkihekKYe cku8HKYyQ3uKsJiVTwFdPYtMjkXz3Ionts/1ju9IGUTQAYdWoH9njND/GWYfPsTN Ld2hw7fAdZjo80ZpjR6XMccoWH52hn9N -----END CERTIFICATE-----Generated at Sat May 31 16:52:13 2025 by rpki-client