$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft File: c7ohvjbd39WGkBFtbux73H7--yg.mft (raw, json) Hash identifier: FFgmYfvbfr09yVE6wXDAJGa+YrTkwIi8dy1BdpMoP4k= Subject key identifier: E1:EF:E0:DB:46:E8:9A:E6:D2:04:33:A2:87:12:55:1B:71:6F:2B:C2 Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Certificate serial: 03A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft Manifest number: 037A Signing time: Sat 31 May 2025 01:12:37 +0000 Manifest this update: Sat 31 May 2025 01:12:36 +0000 Manifest next update: Sat 07 Jun 2025 01:12:36 +0000 Files and hashes: 1: c7ohvjbd39WGkBFtbux73H7--yg.crl (hash: xtvT5x8CpshKGdz68TeIXyq4Kju3j/1WdSOmFVMg2o0=) 2: 3143DEC26C8811EEBAB7F227C4F9AE02.roa (hash: DiuzbA0Eyu2SFjBtadVHxxhq9EQIpll9WL5oTCeuzso=) 3: AA730ACCBCFA11EDAD328D3AC4F9AE02.roa (hash: JIgqJZp1UxmLPN/QpABfqnpOQUWAjrpqyosKFp6OS4Q=) 4: 63F359F0620711EE8BBCFF68C4F9AE02.roa (hash: Keth2970vjYbkSSDZ7cyyc004SjVLXN/KW/3yleZzSU=) 5: 1ABD64C4FC4B11EC9E374483C4F9AE02.roa (hash: sxadIBziqD0gGHzlLgMeF3y6MatZTVAVquFeXL0wHHA=) 6: AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa (hash: yTZcvgK0CeflFtKCV7bhb3NpxPPVFQseYnOGqpYevgk=) 7: 9B39DA4A17B611F0949B3513C4F9AE02.roa (hash: JIzx72Iu5kXzy1zuPq6JcTLGHOjrjN0dOL1PQPVedEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 930 (0x3a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Validity Not Before: May 31 01:12:36 2025 GMT Not After : Jun 7 01:12:36 2025 GMT Subject: CN=683a5785-b757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4b:87:f8:38:3d:4b:46:b7:77:0d:38:f4:d4: 64:69:48:51:bf:7f:30:02:67:f9:2a:52:96:a5:a7: 9d:8b:e5:1a:11:e1:db:58:24:6d:53:a5:54:18:0b: 37:87:86:37:2d:bd:f5:0d:1c:c0:0a:8b:26:8b:42: f4:f1:a8:ff:df:86:f2:f4:a6:95:c9:63:ae:ac:85: 7d:95:25:e1:43:54:05:a3:05:33:e7:85:7f:c5:f1: f7:81:c1:4c:57:c6:71:0f:32:12:38:3e:07:38:da: 31:93:74:3c:06:ce:14:7b:19:60:91:fc:4e:ec:3a: 18:11:fa:10:3f:6f:99:50:fa:db:c3:ea:0c:78:77: 46:b5:f7:02:46:9f:c2:03:5f:ac:af:47:5a:a5:e6: 7b:6c:dd:27:9b:12:9d:51:ff:ba:ea:d0:e0:d8:b3: 3d:41:af:23:bd:ed:ba:51:ab:14:b4:4a:cb:35:3c: e7:a6:94:8c:38:2c:4b:e7:25:3f:2b:81:fe:4a:98: db:dc:7c:2f:a6:c3:48:51:25:19:a6:50:d6:d4:94: ee:60:f4:ea:7e:82:ea:10:bb:fb:57:ca:23:76:2c: d8:6d:85:22:84:75:d2:ee:8a:2c:db:b6:8e:77:84: 31:1f:e4:92:96:38:70:ed:01:c4:84:8b:d4:48:20: ad:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:EF:E0:DB:46:E8:9A:E6:D2:04:33:A2:87:12:55:1B:71:6F:2B:C2 X509v3 Authority Key Identifier: keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:41:85:6e:61:04:6e:c4:23:9d:54:72:6b:07:61:a8:06:4f: 50:7b:ef:86:1d:6a:b7:9a:b8:ad:c8:44:74:01:db:a1:a3:39: 74:01:ab:29:d4:ce:a5:5b:a7:2b:7e:8e:98:72:f0:53:cc:c4: 4d:f9:d6:f4:88:a9:d6:2f:7e:47:69:14:a6:7c:fe:f5:9b:91: 89:b0:69:cc:72:e7:fe:d3:47:04:a1:e8:98:fe:1e:5e:a2:5d: 5f:a4:7a:70:55:29:2e:0e:46:21:cf:6c:e9:a3:24:a5:49:27: d8:fa:17:ae:11:74:b3:e7:6c:01:7e:3e:4f:3d:c9:13:39:f4: ab:80:47:03:04:d4:87:bc:7f:3d:dc:c6:8d:17:f5:63:68:e9: 7d:92:b4:9b:67:8f:ba:c3:3f:39:76:14:e6:6b:ba:68:5d:f1: 79:c4:64:06:a1:d2:92:49:b1:3e:8f:86:7a:43:72:c9:52:b6: 3e:0c:4d:c0:72:d9:6a:29:98:7a:38:70:02:bb:71:b9:53:b7: d2:0b:c3:8a:01:0a:ea:90:a9:16:ca:26:b2:d5:9d:ae:7e:0c: 71:58:52:78:d9:51:38:52:8a:39:1d:75:4d:ab:3e:be:9d:2d: 59:61:69:8f:10:62:ef:22:b8:83:4c:b4:96:b8:da:6e:b4:64: a4:c5:6f:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdGQzIxMTAvBgNVBAUTKDczQkEyMUJFMzZERERGRDU4NjkwMTE2RDZFRUM3QkRD N0VGRUZCMjgwHhcNMjUwNTMxMDExMjM2WhcNMjUwNjA3MDExMjM2WjAYMRYwFAYD VQQDEw02ODNhNTc4NS1iNzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqUuH+Dg9S0a3dw049NRkaUhRv38wAmf5KlKWpaedi+UaEeHbWCRtU6VUGAs3 h4Y3Lb31DRzACosmi0L08aj/34by9KaVyWOurIV9lSXhQ1QFowUz54V/xfH3gcFM V8ZxDzISOD4HONoxk3Q8Bs4UexlgkfxO7DoYEfoQP2+ZUPrbw+oMeHdGtfcCRp/C A1+sr0dapeZ7bN0nmxKdUf+66tDg2LM9Qa8jve26UasUtErLNTznppSMOCxL5yU/ K4H+Spjb3HwvpsNIUSUZplDW1JTuYPTqfoLqELv7V8ojdizYbYUihHXS7oos27aO d4QxH+SSljhw7QHEhIvUSCCt7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHv4NtG 6Jrm0gQzoocSVRtxbyvCMB8GA1UdIwQYMBaAFHO6Ib423d/VhpARbW7se9x+/vso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0ZDMi81RTMwQkY3MEJC QTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5V0drQkZ0YnV4NzNINy0t eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3b2h2amJkMzlXR2tCRnRidXg3M0g3LS15Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0ZDMi81RTMwQkY3MEJCQTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5 V0drQkZ0YnV4NzNINy0teWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClQYVuYQRuxCOdVHJrB2GoBk9Qe++GHWq3mrityER0Aduhozl0Aasp 1M6lW6crfo6YcvBTzMRN+db0iKnWL35HaRSmfP71m5GJsGnMcuf+00cEoeiY/h5e ol1fpHpwVSkuDkYhz2zpoySlSSfY+heuEXSz52wBfj5PPckTOfSrgEcDBNSHvH89 3MaNF/VjaOl9krSbZ4+6wz85dhTma7poXfF5xGQGodKSSbE+j4Z6Q3LJUrY+DE3A ctlqKZh6OHACu3G5U7fSC8OKAQrqkKkWyiay1Z2ufgxxWFJ42VE4Uoo5HXVNqz6+ nS1ZYWmPEGLvIriDTLSWuNputGSkxW8T -----END CERTIFICATE-----Generated at Sat May 31 17:04:59 2025 by rpki-client