$ rpki-client -vvf rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.mft File: byO7S-gvNLDnRhJ5Ugxzl3qx0jw.mft (raw, json) Hash identifier: OEO4B2NcAEc6DFeEUhpGUBsGfFPRb6UkMKt/6NSeQEw= Subject key identifier: 42:C2:AA:FB:3D:59:B1:8B:EF:83:FB:79:A1:AA:51:DA:EC:A4:0C:AE Authority key identifier: 6F:23:BB:4B:E8:2F:34:B0:E7:46:12:79:52:0C:73:97:7A:B1:D2:3C Certificate issuer: /CN=A9111926/serialNumber=6F23BB4BE82F34B0E7461279520C73977AB1D23C Certificate serial: 0BC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.mft Manifest number: 0BB3 Signing time: Thu 24 Apr 2025 18:53:54 +0000 Manifest this update: Thu 24 Apr 2025 18:53:53 +0000 Manifest next update: Thu 01 May 2025 18:53:53 +0000 Files and hashes: 1: byO7S-gvNLDnRhJ5Ugxzl3qx0jw.crl (hash: hndaXkwoy4LsWHwVQ9/1oAaV6BqSP+VgKaAv9gG/oqI=) 2: 54B32544D84711EF81BD1E0BC4F9AE02.roa (hash: n/Sc1HZXxr+QB2+UH8INg78Itmv5yzjeOuf4NXzLeAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.crl rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3015 (0xbc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111926, serialNumber=6F23BB4BE82F34B0E7461279520C73977AB1D23C Validity Not Before: Apr 24 18:53:53 2025 GMT Not After : May 1 18:53:53 2025 GMT Subject: CN=680a88c1-61eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b4:38:a2:b8:3b:42:8d:86:b8:54:80:6c:2e: c6:1b:bf:98:5c:35:cb:ab:a2:b4:ee:cc:f3:50:e4: 18:d8:62:41:7b:0b:ec:00:b7:b8:93:90:ed:8d:ef: fb:13:0b:c7:a9:2e:78:a7:26:41:a7:c9:6a:cb:7b: a5:69:9b:cf:b0:16:34:2c:3c:2d:cd:54:86:ea:32: 7a:59:3e:9d:d0:27:bf:0c:42:45:cf:86:63:ec:d3: f8:4b:0d:27:95:3d:d9:c8:33:8f:a9:ea:4f:d7:d5: 0c:11:ed:fe:fa:35:07:25:f2:f6:54:0c:a5:fa:39: 7b:49:b1:ba:88:04:48:53:fc:43:94:c6:31:1d:dc: e0:8c:1a:6c:ac:ea:5d:da:37:44:6a:25:53:a9:45: 3d:48:3e:00:e3:0c:d4:f1:e9:7c:b5:b9:47:e2:62: 1e:14:83:f8:3f:85:8a:bc:e1:c7:56:3f:95:5c:f8: ca:45:a2:4e:cc:87:7e:27:76:b2:6f:3f:70:8a:11: e2:a8:7b:76:6d:6c:41:9b:55:fe:e3:39:2e:92:3b: 99:c3:ef:69:37:e7:d1:34:b8:6b:27:81:40:e4:74: 34:94:9d:23:96:cb:a6:bb:64:19:00:7b:f6:c0:3d: 13:a1:27:ad:1b:05:89:d8:24:c9:2b:34:b7:d7:eb: e6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C2:AA:FB:3D:59:B1:8B:EF:83:FB:79:A1:AA:51:DA:EC:A4:0C:AE X509v3 Authority Key Identifier: keyid:6F:23:BB:4B:E8:2F:34:B0:E7:46:12:79:52:0C:73:97:7A:B1:D2:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:46:ab:39:72:75:5c:c6:68:9f:d3:dd:51:2f:f4:d7:2b:4d: f3:ab:4d:a4:43:39:e8:39:c3:64:c3:d8:48:af:3b:af:f4:85: b7:b2:51:e6:57:82:68:19:bf:14:da:2a:53:42:6b:05:c7:69: 2b:ce:04:15:dc:3b:99:9b:06:bf:1d:72:be:20:bc:eb:3b:08: 08:b4:bc:d1:9e:86:0e:ef:08:7d:23:6c:70:35:64:5f:c0:0c: e9:31:18:c3:6e:63:6f:96:4c:c2:2e:e7:ab:6c:de:9b:18:df: 03:73:40:6f:cb:9b:9d:8e:4a:b3:85:76:f1:c9:83:4e:9f:95: ca:96:01:f0:f1:a5:18:1f:a5:d7:ad:cc:c9:21:a4:a7:e6:42: 9d:28:fa:8d:e4:39:e8:88:cb:d1:a5:94:9f:ce:6d:e5:68:05: d2:d7:5f:b9:75:0c:6a:43:4e:08:1a:d8:f5:70:fb:4c:f0:30: 44:58:fe:ca:09:81:3a:3d:cb:14:24:2f:93:33:b7:e5:4e:23: eb:63:c2:2f:06:32:25:9e:5a:ba:bc:c0:ec:d6:51:a9:90:72: 4b:5b:9e:e2:b1:98:35:3c:bb:52:39:7e:d8:97:d9:09:7c:9c: cd:b3:4b:9b:d1:e8:71:11:1e:52:01:86:f8:a3:10:be:e6:f3: 6d:2d:2d:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE5MjYxMTAvBgNVBAUTKDZGMjNCQjRCRTgyRjM0QjBFNzQ2MTI3OTUyMEM3Mzk3 N0FCMUQyM0MwHhcNMjUwNDI0MTg1MzUzWhcNMjUwNTAxMTg1MzUzWjAYMRYwFAYD VQQDEw02ODBhODhjMS02MWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5rQ4org7Qo2GuFSAbC7GG7+YXDXLq6K07szzUOQY2GJBewvsALe4k5Dtje/7 EwvHqS54pyZBp8lqy3ulaZvPsBY0LDwtzVSG6jJ6WT6d0Ce/DEJFz4Zj7NP4Sw0n lT3ZyDOPqepP19UMEe3++jUHJfL2VAyl+jl7SbG6iARIU/xDlMYxHdzgjBpsrOpd 2jdEaiVTqUU9SD4A4wzU8el8tblH4mIeFIP4P4WKvOHHVj+VXPjKRaJOzId+J3ay bz9wihHiqHt2bWxBm1X+4zkukjuZw+9pN+fRNLhrJ4FA5HQ0lJ0jlsumu2QZAHv2 wD0ToSetGwWJ2CTJKzS31+vmEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELCqvs9 WbGL74P7eaGqUdrspAyuMB8GA1UdIwQYMBaAFG8ju0voLzSw50YSeVIMc5d6sdI8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTkyNi83QzZBMEU0NDIx RkYxMUVBQTcyMzJBM0RDNEY5QUUwMi9ieU83Uy1ndk5MRG5SaEo1VWd4emwzcXgw ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J5TzdTLWd2TkxEblJoSjVVZ3h6bDNxeDBqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTkyNi83QzZBMEU0NDIxRkYxMUVBQTcyMzJBM0RDNEY5QUUwMi9ieU83Uy1ndk5M RG5SaEo1VWd4emwzcXgwancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsRqs5cnVcxmif091RL/TXK03zq02kQznoOcNkw9hIrzuv9IW3slHm V4JoGb8U2ipTQmsFx2krzgQV3DuZmwa/HXK+ILzrOwgItLzRnoYO7wh9I2xwNWRf wAzpMRjDbmNvlkzCLuerbN6bGN8Dc0Bvy5udjkqzhXbxyYNOn5XKlgHw8aUYH6XX rczJIaSn5kKdKPqN5DnoiMvRpZSfzm3laAXS11+5dQxqQ04IGtj1cPtM8DBEWP7K CYE6PcsUJC+TM7flTiPrY8IvBjIlnlq6vMDs1lGpkHJLW57isZg1PLtSOX7Yl9kJ fJzNs0ub0ehxER5SAYb4oxC+5vNtLS2V -----END CERTIFICATE-----Generated at Sat Apr 26 13:11:27 2025 by rpki-client