$ rpki-client -vvf rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft File: 7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft (raw, json) Hash identifier: JrcoF+g71+Xx9ydk/6LTDJeOQMcIBjXQzjpA/iVK0Ww= Subject key identifier: B9:80:6B:00:9C:AB:2A:FF:C8:A5:63:C2:EA:22:62:8A:95:18:E6:93 Authority key identifier: EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7 Certificate issuer: /CN=A915D64F/serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7 Certificate serial: 09DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft Manifest number: 09D8 Signing time: Fri 30 May 2025 20:07:15 +0000 Manifest this update: Fri 30 May 2025 20:07:15 +0000 Manifest next update: Fri 06 Jun 2025 20:07:15 +0000 Files and hashes: 1: 7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl (hash: HcDwqK9bhE63z3rhos0Z6J4dBqtru9VV+RgPH16Z1JU=) 2: 2F7EAF12932411EB97630343C4F9AE02.roa (hash: uDDzLcWBodLbCzdLP4VyOIXnIAGgVu5+EW/H/aSjYJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:07:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2527 (0x9df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D64F, serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7 Validity Not Before: May 30 20:07:15 2025 GMT Not After : Jun 6 20:07:15 2025 GMT Subject: CN=683a0ff3-f487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:00:0f:0a:93:57:c7:0a:bd:b0:9f:9d:16:01: 39:fd:52:fb:66:ad:e6:15:0c:a6:f8:04:94:39:0e: 0b:01:e4:3d:30:c3:df:03:1d:aa:c8:55:0f:20:6f: a5:2a:1b:85:9a:50:dd:5d:d0:a1:e2:92:34:66:b1: c2:21:bd:4f:c4:59:36:5b:7c:10:03:f9:26:6b:25: dd:15:30:aa:ef:6b:21:79:cd:47:64:be:09:e5:ad: ba:a4:64:3d:59:ea:06:25:b9:14:5b:d1:19:d9:e8: af:dc:dd:8f:54:be:bf:52:2d:ae:a5:3d:c7:ea:e0: ef:11:ed:3f:4c:57:d5:24:be:b5:03:f0:50:6b:80: e9:69:4e:b4:88:38:43:27:4c:1b:45:df:a4:a9:e8: 21:6d:b1:54:13:4f:96:99:3d:66:11:44:0a:6a:fc: 8c:e6:12:29:e3:61:81:db:9c:22:5e:fb:d6:15:34: 2b:c0:ff:0e:91:3b:f7:34:34:b3:d7:d4:78:88:8d: 52:02:ef:9d:37:75:7e:c4:0b:8d:18:58:9a:19:40: b7:af:14:19:55:ed:60:c1:91:08:e3:21:5f:71:75: 2f:7d:ff:af:d9:25:7e:12:72:b2:be:94:c5:40:00: 28:e1:e9:31:0c:5f:02:a5:9a:69:02:87:7b:06:e7: 80:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:80:6B:00:9C:AB:2A:FF:C8:A5:63:C2:EA:22:62:8A:95:18:E6:93 X509v3 Authority Key Identifier: keyid:EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:ef:03:94:d6:12:6f:cd:e8:2a:d0:c8:74:44:8a:cf:9e:f1: 41:57:d5:20:04:39:ef:5a:d2:01:2c:63:c1:e1:12:28:35:2e: ae:31:42:24:09:f6:87:22:13:43:13:1c:b8:41:36:e7:2c:72: 20:db:82:2e:2c:64:c5:3a:43:a5:79:db:c3:4a:73:3d:be:ef: ef:a0:c8:11:93:b8:45:e2:fd:1d:35:ff:60:f1:9d:57:44:c5: b0:ad:81:31:20:c4:25:fb:83:4d:05:9f:38:1d:e4:6a:1c:18: ae:72:22:5a:44:3a:fa:e9:24:8a:26:9b:33:de:9e:03:9b:be: f4:aa:69:a9:d1:4d:76:aa:ae:2e:bc:7e:dc:a7:ad:2e:f2:03: 78:0c:01:e6:49:44:47:3d:56:2c:43:98:b1:8d:ab:e5:5f:4a: bd:68:5c:e0:02:f9:84:43:c0:d8:85:db:4f:0f:b7:f3:e7:d7: 49:8f:9a:a8:e0:79:a5:07:91:38:e0:6b:ce:1f:5d:63:51:43: ce:63:30:5a:fd:94:03:8f:1f:79:40:f5:09:7e:93:e7:44:e7: 30:45:d4:c0:e2:b3:05:af:9c:71:a8:41:cf:92:ea:30:07:e9: 28:bd:c1:21:72:5a:f5:33:55:80:f1:3e:f6:dc:d4:04:de:60: 23:82:0d:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2NEYxMTAvBgNVBAUTKEVDNzA1QjJBRDZGQjEzRkQ2RkM0MjE0Qjk3NzI3MDQx MTNFNjY4RDcwHhcNMjUwNTMwMjAwNzE1WhcNMjUwNjA2MjAwNzE1WjAYMRYwFAYD VQQDEw02ODNhMGZmMy1mNDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0AAPCpNXxwq9sJ+dFgE5/VL7Zq3mFQym+ASUOQ4LAeQ9MMPfAx2qyFUPIG+l KhuFmlDdXdCh4pI0ZrHCIb1PxFk2W3wQA/kmayXdFTCq72shec1HZL4J5a26pGQ9 WeoGJbkUW9EZ2eiv3N2PVL6/Ui2upT3H6uDvEe0/TFfVJL61A/BQa4DpaU60iDhD J0wbRd+kqeghbbFUE0+WmT1mEUQKavyM5hIp42GB25wiXvvWFTQrwP8OkTv3NDSz 19R4iI1SAu+dN3V+xAuNGFiaGUC3rxQZVe1gwZEI4yFfcXUvff+v2SV+EnKyvpTF QAAo4ekxDF8CpZppAod7BueABwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmAawCc qyr/yKVjwuoiYoqVGOaTMB8GA1UdIwQYMBaAFOxwWyrW+xP9b8QhS5dycEET5mjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY0Ri9GMTE1QjY3MjdE RUQxMUVBOUE1Q0NDNEJDNEY5QUUwMi83SEJiS3RiN0VfMXZ4Q0ZMbDNKd1FSUG1h TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdIQmJLdGI3RV8xdnhDRkxsM0p3UVJQbWFOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDY0Ri9GMTE1QjY3MjdERUQxMUVBOUE1Q0NDNEJDNEY5QUUwMi83SEJiS3RiN0Vf MXZ4Q0ZMbDNKd1FSUG1hTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG7wOU1hJvzegq0Mh0RIrPnvFBV9UgBDnvWtIBLGPB4RIoNS6uMUIk CfaHIhNDExy4QTbnLHIg24IuLGTFOkOledvDSnM9vu/voMgRk7hF4v0dNf9g8Z1X RMWwrYExIMQl+4NNBZ84HeRqHBiuciJaRDr66SSKJpsz3p4Dm770qmmp0U12qq4u vH7cp60u8gN4DAHmSURHPVYsQ5ixjavlX0q9aFzgAvmEQ8DYhdtPD7fz59dJj5qo 4HmlB5E44GvOH11jUUPOYzBa/ZQDjx95QPUJfpPnROcwRdTA4rMFr5xxqEHPkuow B+kovcEhclr1M1WA8T723NQE3mAjgg2t -----END CERTIFICATE-----Generated at Sat May 31 16:30:31 2025 by rpki-client