$ rpki-client -vvf rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft File: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft (raw, json) Hash identifier: QrzFtXxQIQCfCo37WQe7yrznCxrnDrNU2YKWFC8uAPs= Subject key identifier: ED:1D:62:1C:6A:75:4E:56:89:5C:95:AE:4C:41:FC:C5:2A:E5:2A:D3 Authority key identifier: ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 Certificate issuer: /CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Certificate serial: 09F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft Manifest number: 09BF Signing time: Fri 30 May 2025 20:58:40 +0000 Manifest this update: Fri 30 May 2025 20:58:39 +0000 Manifest next update: Fri 06 Jun 2025 20:58:39 +0000 Files and hashes: 1: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl (hash: HxX2r73sZG7I/Gfj6fIg6cKdgzSJ3xjGj89NB5loR9U=) 2: D411F96C532E11EFB0B63E60C4F9AE02.roa (hash: 838b7qHkfNcVQ+dG+2+ikVBrip48qajejDAv66Es7Do=) 3: 0A627D5653AD11EF94BC7F0BC4F9AE02.roa (hash: lHubJpI54TUZB9ErKrK2Uh2G0dB2IBaNDMotiEzD5Do=) 4: A2120E06FD7F11EFA8C89755C4F9AE02.roa (hash: t6q2fLRleWOAh29sMouXev7NxP/StSGtuqhQ1bcdSrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:58:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2551 (0x9f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146944, serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Validity Not Before: May 30 20:58:39 2025 GMT Not After : Jun 6 20:58:39 2025 GMT Subject: CN=683a1c00-317b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:9f:f4:79:0f:51:56:12:dc:21:e7:01:47:2e: 73:04:02:8f:1c:1c:d6:06:5e:ec:4e:23:07:e9:83: 2e:c7:61:46:79:70:e5:42:50:33:1d:98:e7:c5:d9: bf:4d:92:ad:11:41:20:c1:7d:97:2c:c4:13:21:3d: 04:2d:b9:32:d0:3f:d4:95:54:43:fd:82:26:b0:8c: 03:5a:f0:ee:a9:36:b6:03:31:d1:d6:6d:cc:e6:20: 4f:3d:7e:45:3d:0f:93:46:67:bc:85:26:cb:a7:00: 31:01:08:d1:dc:5c:ea:a0:94:a5:9e:de:82:08:54: 93:3f:6f:4e:62:37:78:69:74:f3:50:fe:4d:49:f1: 4b:62:f5:16:3c:cc:35:22:de:bb:9d:1c:03:32:e8: 49:be:aa:ca:de:6e:96:58:c9:aa:f4:e0:55:96:7f: 4c:a6:e4:f2:a2:45:07:e2:39:45:76:0e:13:c0:18: 61:f6:0a:cc:2f:57:da:ba:a2:fc:c4:1b:52:6f:78: 21:df:22:ce:3e:e1:12:fa:53:e2:de:54:15:43:91: d7:0b:8b:dd:e0:78:03:f5:02:eb:a6:54:4a:bb:72: 1a:84:db:a2:de:63:d0:92:c8:e7:fb:10:61:f8:0f: 20:04:14:38:51:db:91:7e:25:60:c1:25:e2:be:36: 5e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:1D:62:1C:6A:75:4E:56:89:5C:95:AE:4C:41:FC:C5:2A:E5:2A:D3 X509v3 Authority Key Identifier: keyid:ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:a5:ae:68:b8:85:0c:7a:be:45:c1:3f:70:35:14:80:93:db: 65:84:97:75:18:50:c9:a8:60:f8:f2:5e:6b:b1:27:79:1a:e3: bc:bf:91:22:ab:fc:21:82:54:22:b4:01:31:2d:f1:40:8d:97: 2b:e9:74:c4:12:bf:d7:c9:87:36:aa:f3:7c:b2:65:18:6f:be: 8e:b2:d2:a9:7c:b3:dd:67:0d:a6:a1:a8:b8:1a:f3:2a:62:78: 0e:72:5c:e7:16:6f:bb:8d:6b:ff:82:3a:bd:d7:3f:03:8d:dc: 8b:57:2f:9a:df:84:eb:e4:82:06:2f:af:06:a3:58:f3:03:01: 5a:00:39:8c:60:b5:9c:5c:6f:bf:73:4b:68:83:4c:04:f6:e8: da:ab:53:34:ab:dc:d1:fc:e9:eb:ee:92:56:53:73:98:dc:f3: a7:2f:29:83:fa:0b:e0:06:a9:ac:36:43:e4:36:57:4b:67:0f: 4e:a3:5d:39:7a:f3:ce:6e:1d:ee:61:06:e0:42:4c:67:2e:be: 05:e5:aa:6b:16:1e:74:19:de:19:fe:20:8d:b2:69:c5:b5:44: 10:09:bc:6e:0c:97:1c:8e:31:09:6f:8d:eb:bb:e3:35:19:f2: 46:dd:80:3c:b3:32:e6:94:39:7c:f0:dc:21:6a:fe:40:0f:07: 9a:86:f1:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY5NDQxMTAvBgNVBAUTKEVEMUY5NThDQjYwNEI1NzZFODIyMTRCNENGM0NDMEZF NjIwRUY5RjQwHhcNMjUwNTMwMjA1ODM5WhcNMjUwNjA2MjA1ODM5WjAYMRYwFAYD VQQDEw02ODNhMWMwMC0zMTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA75/0eQ9RVhLcIecBRy5zBAKPHBzWBl7sTiMH6YMux2FGeXDlQlAzHZjnxdm/ TZKtEUEgwX2XLMQTIT0ELbky0D/UlVRD/YImsIwDWvDuqTa2AzHR1m3M5iBPPX5F PQ+TRme8hSbLpwAxAQjR3FzqoJSlnt6CCFSTP29OYjd4aXTzUP5NSfFLYvUWPMw1 It67nRwDMuhJvqrK3m6WWMmq9OBVln9MpuTyokUH4jlFdg4TwBhh9grML1fauqL8 xBtSb3gh3yLOPuES+lPi3lQVQ5HXC4vd4HgD9QLrplRKu3IahNui3mPQksjn+xBh +A8gBBQ4UduRfiVgwSXivjZeWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0dYhxq dU5WiVyVrkxB/MUq5SrTMB8GA1UdIwQYMBaAFO0flYy2BLV26CIUtM88wP5iDvn0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Njk0NC80M0JEMUM2RThF OTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRYYm9JaFMwenp6QV9tSU8t ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdSLVZqTFlFdFhib0loUzB6enpBX21JTy1mUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Njk0NC80M0JEMUM2RThFOTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRY Ym9JaFMwenp6QV9tSU8tZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnpa5ouIUMer5FwT9wNRSAk9tlhJd1GFDJqGD48l5rsSd5GuO8v5Ei q/whglQitAExLfFAjZcr6XTEEr/XyYc2qvN8smUYb76OstKpfLPdZw2moai4GvMq YngOclznFm+7jWv/gjq91z8DjdyLVy+a34Tr5IIGL68Go1jzAwFaADmMYLWcXG+/ c0tog0wE9ujaq1M0q9zR/Onr7pJWU3OY3POnLymD+gvgBqmsNkPkNldLZw9Oo105 evPObh3uYQbgQkxnLr4F5aprFh50Gd4Z/iCNsmnFtUQQCbxuDJccjjEJb43ru+M1 GfJG3YA8szLmlDl88Nwhav5ADweahvEu -----END CERTIFICATE-----Generated at Sat May 31 17:50:37 2025 by rpki-client