$ rpki-client -vvf rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.mft File: 7Ko9FfqLFNqq_iBZpAGbIPUn-D0.mft (raw, json) Hash identifier: vENU0WnL3a1f/lVi2Z+yWEM6wnOJn2Ggexn7PTfDqGk= Subject key identifier: D7:92:01:80:9B:BA:DE:4D:BA:99:4E:CE:45:12:20:80:BD:D7:06:2F Authority key identifier: EC:AA:3D:15:FA:8B:14:DA:AA:FE:20:59:A4:01:9B:20:F5:27:F8:3D Certificate issuer: /CN=A913DC07/serialNumber=ECAA3D15FA8B14DAAAFE2059A4019B20F527F83D Certificate serial: 04B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.mft Manifest number: 04AB Signing time: Sat 31 May 2025 00:09:45 +0000 Manifest this update: Sat 31 May 2025 00:09:45 +0000 Manifest next update: Sat 07 Jun 2025 00:09:45 +0000 Files and hashes: 1: 7Ko9FfqLFNqq_iBZpAGbIPUn-D0.crl (hash: CjdVnPxWJ4u4Dt/yEv3L+ddla+6KyfLhgqMrYD0fLzI=) 2: 1E6E1BE8DB0711EFBD49DC56C4F9AE02.roa (hash: gvMSrYkjgEBiNDDMq1X7x98IStl9qcCUAlgSn78iVmM=) 3: 18612BE6DB0711EF9B67D356C4F9AE02.roa (hash: K6xw9z5FHd3cBcaSkpj6+6W0ng+CbMowA+OXIfonnos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.crl rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:09:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1205 (0x4b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DC07, serialNumber=ECAA3D15FA8B14DAAAFE2059A4019B20F527F83D Validity Not Before: May 31 00:09:45 2025 GMT Not After : Jun 7 00:09:45 2025 GMT Subject: CN=683a48c9-6eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:97:7f:cf:c1:5e:e5:a7:10:f0:74:28:95:e0: 34:e4:46:4c:68:0d:0d:0f:3d:62:19:80:e3:39:6c: c8:21:17:56:df:07:c0:88:43:f8:75:f2:65:cc:4b: e4:14:dd:42:a1:98:08:59:9b:b8:81:42:32:52:b2: c7:18:93:3b:2a:90:73:f0:38:0a:e3:00:8f:5b:f2: 72:48:d8:f1:61:13:b7:fb:80:e0:42:a1:10:35:7d: bf:71:9d:73:9b:d2:bb:9c:fc:35:ec:c0:c8:de:23: ef:8e:e8:d4:ee:e1:c1:a6:54:76:02:9e:9e:a1:bb: 1d:f5:13:5e:31:32:df:9a:f2:6b:31:13:a5:50:a5: 9c:f6:3e:9d:c7:62:15:34:50:82:e9:dc:c3:02:f2: bc:5d:99:ab:1d:8e:2b:ff:20:f8:9c:b5:a5:e3:73: d4:66:e7:17:e3:c6:54:f5:d4:9d:da:7a:d6:78:46: d7:d7:a8:f8:7c:b0:45:3c:9b:05:48:e0:0d:d5:18: 44:0d:d8:db:57:14:87:75:13:d1:f9:06:0d:26:93: 14:40:30:8e:e8:b6:ca:0d:bb:d0:76:e2:d0:ea:26: fb:e2:be:7e:ac:63:8b:69:95:5f:30:48:ba:ae:f6: ad:fb:a0:27:c3:06:ef:9c:99:f5:96:b4:bc:89:f8: ec:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:92:01:80:9B:BA:DE:4D:BA:99:4E:CE:45:12:20:80:BD:D7:06:2F X509v3 Authority Key Identifier: keyid:EC:AA:3D:15:FA:8B:14:DA:AA:FE:20:59:A4:01:9B:20:F5:27:F8:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:98:8a:f2:fe:c5:fd:06:44:a9:75:16:7f:df:a8:c2:ec:61: c7:36:cf:0b:ab:37:1e:2a:ab:5e:93:02:92:9b:8f:68:0d:81: 88:5f:f4:68:83:fc:9f:7a:72:af:b1:8e:81:49:b0:8c:a8:ed: 48:a4:49:a9:c2:d5:f2:a5:bb:85:9f:2b:bd:65:fb:96:63:96: be:cb:bb:f5:d0:0c:db:90:a0:1c:d8:1e:70:ef:30:1b:da:4f: 85:23:30:0f:e1:cd:af:d6:5a:52:8b:25:00:a3:3d:a6:12:d6: c0:18:14:47:ba:28:86:c9:ef:b9:a7:95:2f:c1:1e:56:02:d4: b1:c2:e7:48:57:18:f7:d3:3e:de:aa:84:dd:00:13:c4:92:7f: e0:e6:e5:b4:e6:d4:bc:81:c5:f5:bd:c2:39:ee:6c:77:33:b8: 74:44:5d:32:36:d2:92:93:af:7d:4e:05:af:ca:e1:c9:e4:44: 62:da:6d:93:e8:f4:51:eb:19:02:34:87:3d:1c:79:31:ba:7b: 1e:f6:b6:94:1c:8c:e1:78:af:6e:53:49:10:f2:20:c6:54:3b: c1:bc:a4:42:36:1e:cf:db:76:8b:55:f7:e2:7c:d5:65:0a:ce: 17:e9:e7:d7:0b:f3:71:45:e7:02:23:cc:3f:30:78:85:fa:68: 93:bc:6f:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RDMDcxMTAvBgNVBAUTKEVDQUEzRDE1RkE4QjE0REFBQUZFMjA1OUE0MDE5QjIw RjUyN0Y4M0QwHhcNMjUwNTMxMDAwOTQ1WhcNMjUwNjA3MDAwOTQ1WjAYMRYwFAYD VQQDEw02ODNhNDhjOS02ZWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJd/z8Fe5acQ8HQoleA05EZMaA0NDz1iGYDjOWzIIRdW3wfAiEP4dfJlzEvk FN1CoZgIWZu4gUIyUrLHGJM7KpBz8DgK4wCPW/JySNjxYRO3+4DgQqEQNX2/cZ1z m9K7nPw17MDI3iPvjujU7uHBplR2Ap6eobsd9RNeMTLfmvJrMROlUKWc9j6dx2IV NFCC6dzDAvK8XZmrHY4r/yD4nLWl43PUZucX48ZU9dSd2nrWeEbX16j4fLBFPJsF SOAN1RhEDdjbVxSHdRPR+QYNJpMUQDCO6LbKDbvQduLQ6ib74r5+rGOLaZVfMEi6 rvat+6AnwwbvnJn1lrS8ifjs6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNeSAYCb ut5NuplOzkUSIIC91wYvMB8GA1UdIwQYMBaAFOyqPRX6ixTaqv4gWaQBmyD1J/g9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREMwNy80RUI5RURENjMz NjIxMUVDQTdBQzUxMzFDNEY5QUUwMi83S285RmZxTEZOcXFfaUJacEFHYklQVW4t RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdLbzlGZnFMRk5xcV9pQlpwQUdiSVBVbi1EMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REMwNy80RUI5RURENjMzNjIxMUVDQTdBQzUxMzFDNEY5QUUwMi83S285RmZxTEZO cXFfaUJacEFHYklQVW4tRDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHmIry/sX9BkSpdRZ/36jC7GHHNs8LqzceKqtekwKSm49oDYGIX/Ro g/yfenKvsY6BSbCMqO1IpEmpwtXypbuFnyu9ZfuWY5a+y7v10AzbkKAc2B5w7zAb 2k+FIzAP4c2v1lpSiyUAoz2mEtbAGBRHuiiGye+5p5UvwR5WAtSxwudIVxj30z7e qoTdABPEkn/g5uW05tS8gcX1vcI57mx3M7h0RF0yNtKSk699TgWvyuHJ5ERi2m2T 6PRR6xkCNIc9HHkxunse9raUHIzheK9uU0kQ8iDGVDvBvKRCNh7P23aLVffifNVl Cs4X6efXC/NxRecCI8w/MHiF+miTvG9k -----END CERTIFICATE-----Generated at Sat May 31 16:26:54 2025 by rpki-client