$ rpki-client -vvf rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft File: 7AxIKy2XwoyJb67NUfUOmxYldEE.mft (raw, json) Hash identifier: Hr6rqFx0MpFHYIgIwjRKuwz0GAw9kgUReEo1Wzp0s/I= Subject key identifier: BB:9A:29:A7:6E:41:91:96:5B:55:71:FD:E8:2A:48:87:14:6A:75:D2 Authority key identifier: EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41 Certificate issuer: /CN=A9140F6E/serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441 Certificate serial: 0E01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft Manifest number: 0DF9 Signing time: Fri 30 May 2025 18:02:09 +0000 Manifest this update: Fri 30 May 2025 18:02:09 +0000 Manifest next update: Fri 06 Jun 2025 18:02:09 +0000 Files and hashes: 1: 7AxIKy2XwoyJb67NUfUOmxYldEE.crl (hash: /HWc1DuQBLQGJMqpA2V0BEDULcWpopycgVZKq2Q7VL8=) 2: 33534662AF4511E9B648CE6AC4F9AE02.roa (hash: qC1ZUsPrNWwJdA7aBQJNijhI12p3O3e9WwlBeIt463M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3585 (0xe01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140F6E, serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441 Validity Not Before: May 30 18:02:09 2025 GMT Not After : Jun 6 18:02:09 2025 GMT Subject: CN=6839f2a1-4d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:85:c1:9d:2a:5f:21:e7:03:de:b7:31:6d:8c: 87:5d:07:81:46:32:ae:81:e5:81:57:7f:44:25:58: 94:fb:a9:48:35:ea:7b:be:6c:27:11:e9:ab:76:9e: 1b:9e:c4:b1:6e:97:e4:fc:56:f7:d5:94:5a:30:b7: 99:4f:e4:93:5e:aa:51:30:b7:ee:d6:e9:35:d9:5d: d9:13:60:75:28:0b:75:32:28:ed:18:7c:e1:17:da: 48:b2:5d:c7:10:10:2a:71:d8:2b:59:08:1c:60:9f: d1:e5:db:39:88:8e:d7:cd:c5:07:a2:9f:49:dc:4e: 87:41:36:b4:32:ea:de:24:ff:80:1f:77:6e:a8:a4: 7b:b6:b0:48:30:99:be:07:4d:de:88:4d:58:08:cc: 3a:4b:6e:28:58:6c:22:85:f0:6b:ac:17:77:6b:e4: 16:3c:2b:5b:6a:7e:3b:49:18:45:38:15:2f:5a:7e: 5e:e0:38:fe:b9:e2:fb:ca:c1:df:78:72:d6:ae:2a: 34:d0:b3:76:a2:d6:99:ab:47:eb:35:bb:9e:50:b4: ac:32:36:57:44:52:13:cb:ff:fa:c4:4b:29:6d:a3: d0:59:64:a6:b8:06:91:87:ca:0d:f8:de:33:a1:c1: 00:ac:33:5f:cb:03:8d:32:c3:b5:54:fc:c2:25:1b: 20:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:9A:29:A7:6E:41:91:96:5B:55:71:FD:E8:2A:48:87:14:6A:75:D2 X509v3 Authority Key Identifier: keyid:EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:63:ab:db:41:3c:cc:25:fb:37:0e:f4:a7:01:bc:22:95:c1: dd:d4:e0:8e:c4:dd:b0:d3:d3:9f:44:fc:d2:59:77:de:79:58: a2:1c:ba:c7:3e:90:2d:97:b8:6c:d1:2c:3f:3d:69:f9:47:a2: 77:89:bf:9a:4b:82:93:35:9b:4f:ce:ad:56:b4:80:56:94:33: e4:90:c0:99:48:87:0d:5f:b2:6d:93:3c:66:8d:21:69:e4:23: 87:2b:4e:7f:10:eb:dc:f5:36:63:23:ff:d6:4a:e1:cb:13:e0: 6a:44:3e:97:1c:52:59:93:33:70:6c:1d:2d:c4:3f:18:3a:41: 00:30:1d:e3:8d:b0:37:be:ae:4e:8d:da:54:cf:c8:72:6d:aa: 10:1f:c0:0a:0b:22:9f:c7:4a:31:2a:b0:c0:e2:d4:e1:af:51: 88:db:8b:18:e1:ca:5b:72:ac:5c:74:d1:18:d4:e5:d3:df:1c: 36:24:39:ee:08:ab:e0:6b:88:14:88:96:18:58:96:ce:8d:2c: 95:f8:e4:ba:d1:44:d9:be:ad:b2:b9:bb:fd:04:b4:54:bc:7b: 07:1b:c4:46:f1:68:81:ba:18:9e:e1:2b:a9:43:c4:f5:76:b9: 86:ee:49:4d:99:58:68:4b:7a:81:27:dc:77:38:b3:5e:2d:4d: 10:1b:d5:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBGNkUxMTAvBgNVBAUTKEVDMEM0ODJCMkQ5N0MyOEM4OTZGQUVDRDUxRjUwRTlC MTYyNTc0NDEwHhcNMjUwNTMwMTgwMjA5WhcNMjUwNjA2MTgwMjA5WjAYMRYwFAYD VQQDEw02ODM5ZjJhMS00ZDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoIXBnSpfIecD3rcxbYyHXQeBRjKugeWBV39EJViU+6lINep7vmwnEemrdp4b nsSxbpfk/Fb31ZRaMLeZT+STXqpRMLfu1uk12V3ZE2B1KAt1MijtGHzhF9pIsl3H EBAqcdgrWQgcYJ/R5ds5iI7XzcUHop9J3E6HQTa0MureJP+AH3duqKR7trBIMJm+ B03eiE1YCMw6S24oWGwihfBrrBd3a+QWPCtban47SRhFOBUvWn5e4Dj+ueL7ysHf eHLWrio00LN2otaZq0frNbueULSsMjZXRFITy//6xEspbaPQWWSmuAaRh8oN+N4z ocEArDNfywONMsO1VPzCJRsgvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLuaKadu QZGWW1Vx/egqSIcUanXSMB8GA1UdIwQYMBaAFOwMSCstl8KMiW+uzVH1DpsWJXRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEY2RS9EMEU4MkRFMEFG NDMxMUU5QjNERkVFNjhDNEY5QUUwMi83QXhJS3kyWHdveUpiNjdOVWZVT214WWxk RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdBeElLeTJYd295SmI2N05VZlVPbXhZbGRFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEY2RS9EMEU4MkRFMEFGNDMxMUU5QjNERkVFNjhDNEY5QUUwMi83QXhJS3kyWHdv eUpiNjdOVWZVT214WWxkRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAY6vbQTzMJfs3DvSnAbwilcHd1OCOxN2w09OfRPzSWXfeeViiHLrH PpAtl7hs0Sw/PWn5R6J3ib+aS4KTNZtPzq1WtIBWlDPkkMCZSIcNX7JtkzxmjSFp 5COHK05/EOvc9TZjI//WSuHLE+BqRD6XHFJZkzNwbB0txD8YOkEAMB3jjbA3vq5O jdpUz8hybaoQH8AKCyKfx0oxKrDA4tThr1GI24sY4cpbcqxcdNEY1OXT3xw2JDnu CKvga4gUiJYYWJbOjSyV+OS60UTZvq2yubv9BLRUvHsHG8RG8WiBuhie4SupQ8T1 drmG7klNmVhoS3qBJ9x3OLNeLU0QG9WA -----END CERTIFICATE-----Generated at Sat May 31 17:03:34 2025 by rpki-client