$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft File: l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft (raw, json) Hash identifier: SrxcChcFN5TybILhI1+w3fw4K2R4/4Rwb7O7wtjFmwM= Subject key identifier: B1:27:C5:BD:2C:41:2E:3A:16:5F:16:54:84:1B:2C:D5:D1:D6:25:4C Authority key identifier: 97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44 Certificate issuer: /CN=A9126A3C/serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft Manifest number: 40 Signing time: Fri 25 Apr 2025 06:27:56 +0000 Manifest this update: Fri 25 Apr 2025 06:27:55 +0000 Manifest next update: Fri 02 May 2025 06:27:55 +0000 Files and hashes: 1: l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl (hash: lZLAkH/Ox/rwMxutx5jkVyw/PrJDryx3J8QTbqoqEKI=) 2: F120EB84C6D911EFA447E849C4F9AE02.roa (hash: mo70D3RkkFpkqu5IGLksT/J6Tz0OUu7ujkEgshBAI8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:27:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126A3C, serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944 Validity Not Before: Apr 25 06:27:55 2025 GMT Not After : May 2 06:27:55 2025 GMT Subject: CN=680b2b6c-2747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:47:ee:f9:e5:34:2f:be:0c:79:2f:c3:3c:ff: b1:13:8a:0c:b7:c2:dd:88:08:75:90:b0:5e:ae:86: cc:85:e4:bb:ba:ec:1c:59:62:25:e0:6e:a1:b1:5b: 13:07:3d:4f:9a:e5:26:82:2b:79:16:ec:16:ef:42: 3f:3e:b3:34:00:59:df:11:bf:65:37:4c:e2:3d:50: 1c:05:18:4d:21:c8:84:f1:3b:0f:5f:48:39:6b:88: 58:45:3e:c0:ef:2c:74:55:ef:4e:ba:18:90:93:a6: 53:38:39:3e:27:5b:d8:94:00:03:34:c1:e6:a8:b9: ae:64:f4:d6:30:95:84:0f:c7:5f:fd:5b:08:3e:30: 36:e5:ee:a4:5a:8f:b3:55:58:da:3f:9e:6f:0e:bb: 07:36:b3:e6:2a:30:ab:91:fb:4c:57:9e:69:65:bb: 41:e6:09:f4:2e:4f:3d:61:f2:49:1e:bf:b6:d9:b1: 03:cd:1c:6e:cd:c2:ca:8c:eb:1c:7e:04:06:26:3e: ab:10:ba:56:25:75:3d:fc:c6:87:fa:d3:29:73:d0: 92:cb:c9:b4:88:de:c6:db:0a:f8:03:06:96:3c:3d: f9:aa:eb:b8:32:91:cb:71:3d:68:6f:64:07:6d:94: 4d:d7:1e:7a:ad:ae:4a:63:11:bd:33:fc:90:73:88: c4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:27:C5:BD:2C:41:2E:3A:16:5F:16:54:84:1B:2C:D5:D1:D6:25:4C X509v3 Authority Key Identifier: keyid:97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:8f:a0:5f:5c:43:dd:94:ac:83:e7:57:47:a4:62:25:d3:95: f1:bc:7c:dc:41:ad:08:ce:04:76:5d:55:de:58:ce:42:e5:03: 51:c8:5b:ca:cb:19:6f:2c:8b:7d:aa:2c:a8:50:0b:c0:74:52: c0:35:e0:38:74:89:59:70:b6:a7:25:55:64:96:82:6f:2d:aa: e1:62:a0:49:4c:7e:55:43:24:d1:97:ff:b0:cb:f4:fe:09:91: 75:80:66:31:e6:31:0b:b2:26:8b:2c:3c:56:40:13:fa:99:2b: a6:ab:1b:eb:57:6a:51:3c:e1:64:f1:9b:a5:43:2c:10:66:ab: 28:aa:22:87:0f:52:88:00:8a:4d:69:42:6d:4b:33:39:15:72: 05:85:67:04:a1:4e:e2:bc:bf:c9:58:25:78:f9:51:61:ae:f9: c4:ac:91:9e:2e:8d:0d:49:7a:08:22:d9:7b:71:0a:e7:29:b8: 1b:26:ad:28:38:03:c9:f0:5d:b4:07:7b:a4:a1:fe:9b:85:b3: e4:dd:68:06:81:91:c1:78:3e:ee:62:f8:d4:1a:a3:b1:bd:0f: 8b:66:5f:10:cd:95:d4:1d:c3:00:81:90:86:35:eb:16:23:e8: 50:f3:a3:2c:42:ba:a4:d5:4a:be:ec:79:28:c6:15:6c:3b:e7: 8e:f8:4c:4a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NkEzQzExMC8GA1UEBRMoOTdCMDNEQTJGQjQ1RjU2RTNGNTgyMTYzREY3QkQ5NTA2 OTM5OTk0NDAeFw0yNTA0MjUwNjI3NTVaFw0yNTA1MDIwNjI3NTVaMBgxFjAUBgNV BAMTDTY4MGIyYjZjLTI3NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVR+755TQvvgx5L8M8/7ETigy3wt2ICHWQsF6uhsyF5Lu67BxZYiXgbqGxWxMH PU+a5SaCK3kW7BbvQj8+szQAWd8Rv2U3TOI9UBwFGE0hyITxOw9fSDlriFhFPsDv LHRV7066GJCTplM4OT4nW9iUAAM0weaoua5k9NYwlYQPx1/9Wwg+MDbl7qRaj7NV WNo/nm8Ouwc2s+YqMKuR+0xXnmllu0HmCfQuTz1h8kkev7bZsQPNHG7NwsqM6xx+ BAYmPqsQulYldT38xof60ylz0JLLybSI3sbbCvgDBpY8Pfmq67gykctxPWhvZAdt lE3XHnqtrkpjEb0z/JBziMSLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsSfFvSxB LjoWXxZUhBss1dHWJUwwHwYDVR0jBBgwFoAUl7A9ovtF9W4/WCFj33vZUGk5mUQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2QTNDLzczOTBCMzRBQzZB MDExRUY5MjhCNzk2MEM0RjlBRTAyL2w3QTlvdnRGOVc0X1dDRmozM3ZaVUdrNW1V US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbDdBOW92dEY5VzRfV0NGajMzdlpVR2s1bVVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2 QTNDLzczOTBCMzRBQzZBMDExRUY5MjhCNzk2MEM0RjlBRTAyL2w3QTlvdnRGOVc0 X1dDRmozM3ZaVUdrNW1VUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABSPoF9cQ92UrIPnV0ekYiXTlfG8fNxBrQjOBHZdVd5YzkLlA1HIW8rL GW8si32qLKhQC8B0UsA14Dh0iVlwtqclVWSWgm8tquFioElMflVDJNGX/7DL9P4J kXWAZjHmMQuyJossPFZAE/qZK6arG+tXalE84WTxm6VDLBBmqyiqIocPUogAik1p Qm1LMzkVcgWFZwShTuK8v8lYJXj5UWGu+cSskZ4ujQ1Jeggi2XtxCucpuBsmrSg4 A8nwXbQHe6Sh/puFs+TdaAaBkcF4Pu5i+NQao7G9D4tmXxDNldQdwwCBkIY16xYj 6FDzoyxCuqTVSr7seSjGFWw75474TEo= -----END CERTIFICATE-----Generated at Sat Apr 26 13:05:32 2025 by rpki-client