$ rpki-client -vvf rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft File: 7knhDcoGuBY3lASCqMSKzvukTT8.mft (raw, json) Hash identifier: bQ512yzKzxet50LORUTI0SF8VTgKfeypkdtcXIfL9SQ= Subject key identifier: 2B:E6:E3:C8:84:5B:32:A8:92:0B:17:61:86:F3:D4:CB:1B:C2:30:BE Authority key identifier: EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F Certificate issuer: /CN=A918E76B/serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F Certificate serial: 096C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft Manifest number: 0966 Signing time: Wed 04 Jun 2025 20:05:49 +0000 Manifest this update: Wed 04 Jun 2025 20:05:49 +0000 Manifest next update: Wed 11 Jun 2025 20:05:49 +0000 Files and hashes: 1: 7knhDcoGuBY3lASCqMSKzvukTT8.crl (hash: phqGsqV3HXvjZfh/OA0HnZtZoUwenGXMYYWJ0ZIAhFw=) 2: DD726152945311EAB9A9B971C4F9AE02.roa (hash: eARvkLPx4cJh+IeHG0XdxEw7zw/djQ5xDufaDbeB8VU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 20:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2412 (0x96c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E76B, serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F Validity Not Before: Jun 4 20:05:49 2025 GMT Not After : Jun 11 20:05:49 2025 GMT Subject: CN=6840a71d-210f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e4:1f:7d:15:f9:ce:19:ee:1f:08:ac:1d:27: 65:73:21:b7:d1:a6:8b:0a:fb:9e:7c:ae:34:bc:d9: 4e:7a:a5:7b:20:63:fb:70:e4:82:cf:b9:7f:79:cd: 73:01:1c:73:81:dd:88:fb:be:94:89:3a:0e:32:43: 63:ea:c2:82:a7:b2:f6:2c:03:09:46:e2:f9:80:cb: c0:5e:b4:e3:43:38:ec:af:4c:6f:8c:8d:15:bd:a1: 9a:c4:ec:e5:fd:13:cb:1f:31:a1:12:d5:12:24:e2: 02:c9:61:7b:ee:72:bc:02:36:b0:16:ce:06:2b:b1: 4a:8c:c9:19:25:33:c1:3e:01:2f:05:c4:46:ca:48: 33:c5:ab:d3:18:89:ff:4a:ee:c3:21:0a:23:c2:df: 05:2d:0a:45:2e:e4:cc:ac:cf:bc:2b:21:b6:0f:a3: b7:a7:6c:ab:ca:23:bc:81:17:0c:14:01:d0:87:16: ae:f6:04:0b:bd:e1:e7:1c:58:83:54:07:d8:a3:d1: 51:50:60:bf:0a:1b:e3:8b:8a:66:79:3e:9d:6a:74: 2a:14:76:fa:84:86:2b:d1:3a:75:e4:78:90:0a:fd: c3:1d:70:9a:d9:29:c7:d2:88:25:5a:c0:9a:ba:ac: 54:3f:78:cb:9f:38:97:0d:e6:f4:71:d6:90:cb:a9: 1d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E6:E3:C8:84:5B:32:A8:92:0B:17:61:86:F3:D4:CB:1B:C2:30:BE X509v3 Authority Key Identifier: keyid:EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:66:83:63:d9:79:d2:16:f2:ad:36:04:f0:89:ae:59:f6:06: 18:27:44:be:83:60:16:69:d4:e0:09:04:08:a6:7e:d1:a7:9c: 70:4d:d7:0e:e7:d6:93:13:b4:88:91:9e:82:13:7c:bc:06:5b: de:fc:df:4e:ab:22:82:55:a9:d5:51:eb:da:96:87:40:92:75: ab:29:35:77:81:a4:f2:a5:81:31:76:c9:0c:a7:06:4b:96:8f: 8e:c5:e0:b5:81:4e:cc:48:c7:f3:2a:6a:04:dd:a5:50:a6:14: e6:50:83:e8:2c:bf:d4:9e:6c:99:1c:44:65:9c:f1:de:2a:58: c1:0b:70:7c:8a:9d:be:b3:70:e2:4a:70:88:01:33:31:43:21: 88:21:05:f1:0d:b7:e6:63:35:c2:0f:57:94:c1:36:64:0d:c5: 23:c1:30:76:a1:b7:6d:50:a8:82:75:d8:ca:57:15:00:16:e3: 25:87:44:88:ac:6c:a8:ee:9e:f9:99:0d:4c:2a:24:cf:1a:de: cb:13:e2:60:01:8d:8b:91:59:12:5c:bc:2b:65:8e:ad:b3:21: 28:ad:02:46:bc:cb:47:a2:0b:14:d5:e5:1c:74:f8:54:d4:3f: 7f:8f:0d:94:53:1e:e6:8f:c0:46:02:06:7f:42:14:2f:6d:11: fc:dd:45:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU3NkIxMTAvBgNVBAUTKEVFNDlFMTBEQ0EwNkI4MTYzNzk0MDQ4MkE4QzQ4QUNF RkJBNDREM0YwHhcNMjUwNjA0MjAwNTQ5WhcNMjUwNjExMjAwNTQ5WjAYMRYwFAYD VQQDEw02ODQwYTcxZC0yMTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOQffRX5zhnuHwisHSdlcyG30aaLCvuefK40vNlOeqV7IGP7cOSCz7l/ec1z ARxzgd2I+76UiToOMkNj6sKCp7L2LAMJRuL5gMvAXrTjQzjsr0xvjI0VvaGaxOzl /RPLHzGhEtUSJOICyWF77nK8AjawFs4GK7FKjMkZJTPBPgEvBcRGykgzxavTGIn/ Su7DIQojwt8FLQpFLuTMrM+8KyG2D6O3p2yryiO8gRcMFAHQhxau9gQLveHnHFiD VAfYo9FRUGC/Chvji4pmeT6danQqFHb6hIYr0Tp15HiQCv3DHXCa2SnH0oglWsCa uqxUP3jLnziXDeb0cdaQy6kdXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvm48iE WzKokgsXYYbz1MsbwjC+MB8GA1UdIwQYMBaAFO5J4Q3KBrgWN5QEgqjEis77pE0/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc2Qi9CRjE4MzIzMjk0 NTIxMUVBODA2RTY5NzBDNEY5QUUwMi83a25oRGNvR3VCWTNsQVNDcU1TS3p2dWtU VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdrbmhEY29HdUJZM2xBU0NxTVNLenZ1a1RUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTc2Qi9CRjE4MzIzMjk0NTIxMUVBODA2RTY5NzBDNEY5QUUwMi83a25oRGNvR3VC WTNsQVNDcU1TS3p2dWtUVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQZoNj2XnSFvKtNgTwia5Z9gYYJ0S+g2AWadTgCQQIpn7Rp5xwTdcO 59aTE7SIkZ6CE3y8Blve/N9OqyKCVanVUevalodAknWrKTV3gaTypYExdskMpwZL lo+OxeC1gU7MSMfzKmoE3aVQphTmUIPoLL/UnmyZHERlnPHeKljBC3B8ip2+s3Di SnCIATMxQyGIIQXxDbfmYzXCD1eUwTZkDcUjwTB2obdtUKiCddjKVxUAFuMlh0SI rGyo7p75mQ1MKiTPGt7LE+JgAY2LkVkSXLwrZY6tsyEorQJGvMtHogsU1eUcdPhU 1D9/jw2UUx7mj8BGAgZ/QhQvbRH83UUY -----END CERTIFICATE-----Generated at Thu Jun 5 20:02:51 2025 by rpki-client