$ rpki-client -vvf rpki.apnic.net/member_repository/A9127AE0/DD6587AC0F4C11EAA014267BC4F9AE02/7VXfoOxp2WS4W4bXi0AFHeoSlnM.mft File: 7VXfoOxp2WS4W4bXi0AFHeoSlnM.mft (raw, json) Hash identifier: CgRhvGWRA69XOhLWOrR9P1KMCqL0ziZ2dSW/8p9Cu0g= Subject key identifier: 62:2C:21:97:49:0B:49:46:3D:D5:16:88:34:75:38:67:EC:C0:55:E2 Authority key identifier: ED:55:DF:A0:EC:69:D9:64:B8:5B:86:D7:8B:40:05:1D:EA:12:96:73 Certificate issuer: /CN=A9127AE0/serialNumber=ED55DFA0EC69D964B85B86D78B40051DEA129673 Certificate serial: 0C06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VXfoOxp2WS4W4bXi0AFHeoSlnM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127AE0/DD6587AC0F4C11EAA014267BC4F9AE02/7VXfoOxp2WS4W4bXi0AFHeoSlnM.mft Manifest number: 0BFE Signing time: Thu 24 Apr 2025 18:37:46 +0000 Manifest this update: Thu 24 Apr 2025 18:37:46 +0000 Manifest next update: Thu 01 May 2025 18:37:46 +0000 Files and hashes: 1: 7VXfoOxp2WS4W4bXi0AFHeoSlnM.crl (hash: CyW5CVVYhH9ykEAMMFDNQsm4WDVGI6QppaLtT+tpYyA=) 2: 6DB16BB40F4D11EAA6E7A17BC4F9AE02.roa (hash: OAnDbpXpqj53nUK26ywgZEPTuuA4/o8QEENllBabbSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127AE0/DD6587AC0F4C11EAA014267BC4F9AE02/7VXfoOxp2WS4W4bXi0AFHeoSlnM.crl rsync://rpki.apnic.net/member_repository/A9127AE0/DD6587AC0F4C11EAA014267BC4F9AE02/7VXfoOxp2WS4W4bXi0AFHeoSlnM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VXfoOxp2WS4W4bXi0AFHeoSlnM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3078 (0xc06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127AE0, serialNumber=ED55DFA0EC69D964B85B86D78B40051DEA129673 Validity Not Before: Apr 24 18:37:46 2025 GMT Not After : May 1 18:37:46 2025 GMT Subject: CN=680a84fa-6309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5e:c3:d8:42:bd:a5:a7:a8:60:92:af:5c:a0: 37:f0:54:f9:76:50:a0:d0:22:8d:b3:f5:db:54:e0: c3:d2:78:52:46:9e:a0:37:41:31:3a:6b:08:b1:6c: d9:84:4e:fc:d4:34:d2:78:36:b0:06:7e:08:bd:40: fa:67:87:99:4f:c4:9c:3e:77:6d:0d:c9:a7:e5:be: 49:b6:63:12:9e:9a:48:15:bb:c5:b5:fa:85:c3:10: a1:ed:f0:d5:28:4e:e0:a6:12:3a:bd:bd:1d:84:8a: fa:b3:7b:c1:c6:70:fa:c4:59:54:8d:e0:e7:16:98: 2c:33:9b:a4:5e:52:fb:c1:83:89:7e:41:cc:9b:0f: 41:8b:8b:3a:03:3f:3f:58:05:a5:8b:b0:ce:9f:7c: 99:4e:2a:77:3c:c9:19:35:6d:a3:2f:60:42:2a:9f: f5:88:29:aa:e4:04:a0:e8:6b:4a:ea:02:b6:ff:91: 5d:53:70:dd:63:49:b4:8c:9f:65:bd:39:42:1d:26: 5a:04:44:c8:9a:2b:d6:22:91:bf:28:ff:3a:db:c6: 3b:33:04:29:d6:b2:ab:ca:ed:8c:0c:62:0d:c1:a2: 91:36:7f:e3:85:17:56:c5:2d:f3:90:25:d3:82:7b: 33:ea:e0:56:72:24:80:4c:3d:3a:63:66:90:1d:12: ac:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:2C:21:97:49:0B:49:46:3D:D5:16:88:34:75:38:67:EC:C0:55:E2 X509v3 Authority Key Identifier: keyid:ED:55:DF:A0:EC:69:D9:64:B8:5B:86:D7:8B:40:05:1D:EA:12:96:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127AE0/DD6587AC0F4C11EAA014267BC4F9AE02/7VXfoOxp2WS4W4bXi0AFHeoSlnM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VXfoOxp2WS4W4bXi0AFHeoSlnM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127AE0/DD6587AC0F4C11EAA014267BC4F9AE02/7VXfoOxp2WS4W4bXi0AFHeoSlnM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:d4:e8:61:e1:ce:e7:86:1b:cd:f4:43:1e:96:af:bc:c3:1a: 10:ac:c7:35:a6:49:ff:c4:11:7b:1b:1e:65:b3:2b:d2:b9:52: 4c:6f:52:61:7e:9e:fa:7f:e6:17:34:7e:f3:fd:a8:69:a8:26: b4:09:bc:b7:80:48:a6:40:c3:9c:2e:90:e6:8b:5d:d3:d1:a9: 7c:81:d6:dd:06:96:57:98:b5:af:77:29:4d:73:50:c9:18:4d: 50:6d:fc:6e:a1:3a:86:30:6a:60:68:3e:23:4f:95:95:f5:d8: 7e:90:e8:05:0c:af:42:f8:9e:06:cc:1b:62:a0:82:f7:c2:f8: aa:dc:b2:32:ef:80:c9:01:0d:cb:ff:52:3f:d9:c6:28:2e:97: db:6c:a9:fd:53:ef:49:f9:50:c6:a2:1b:e0:5f:68:ff:9e:74: 21:c7:58:69:97:63:ee:21:62:a3:6a:69:59:34:8e:36:e9:45: 18:44:c3:e6:32:28:89:59:f0:7d:4d:71:84:f5:dd:ee:cf:8a: 45:4f:37:54:c4:c8:ea:c3:79:69:af:9b:f3:df:14:0f:67:76: fa:1d:fa:e1:f6:5a:c3:2f:62:c3:0a:a1:49:e6:b9:58:91:2c: cf:fe:08:d5:ad:7e:06:0f:e8:f7:f2:d9:c2:b4:9f:31:90:e3: 38:38:b2:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdBRTAxMTAvBgNVBAUTKEVENTVERkEwRUM2OUQ5NjRCODVCODZENzhCNDAwNTFE RUExMjk2NzMwHhcNMjUwNDI0MTgzNzQ2WhcNMjUwNTAxMTgzNzQ2WjAYMRYwFAYD VQQDEw02ODBhODRmYS02MzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr17D2EK9paeoYJKvXKA38FT5dlCg0CKNs/XbVODD0nhSRp6gN0ExOmsIsWzZ hE781DTSeDawBn4IvUD6Z4eZT8ScPndtDcmn5b5JtmMSnppIFbvFtfqFwxCh7fDV KE7gphI6vb0dhIr6s3vBxnD6xFlUjeDnFpgsM5ukXlL7wYOJfkHMmw9Bi4s6Az8/ WAWli7DOn3yZTip3PMkZNW2jL2BCKp/1iCmq5ASg6GtK6gK2/5FdU3DdY0m0jJ9l vTlCHSZaBETImivWIpG/KP8628Y7MwQp1rKryu2MDGINwaKRNn/jhRdWxS3zkCXT gnsz6uBWciSATD06Y2aQHRKsDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGIsIZdJ C0lGPdUWiDR1OGfswFXiMB8GA1UdIwQYMBaAFO1V36DsadlkuFuG14tABR3qEpZz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0FFMC9ERDY1ODdBQzBG NEMxMUVBQTAxNDI2N0JDNEY5QUUwMi83Vlhmb094cDJXUzRXNGJYaTBBRkhlb1Ns bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdWWGZvT3hwMldTNFc0YlhpMEFGSGVvU2xuTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0FFMC9ERDY1ODdBQzBGNEMxMUVBQTAxNDI2N0JDNEY5QUUwMi83Vlhmb094cDJX UzRXNGJYaTBBRkhlb1Nsbk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW1Ohh4c7nhhvN9EMelq+8wxoQrMc1pkn/xBF7Gx5lsyvSuVJMb1Jh fp76f+YXNH7z/ahpqCa0Cby3gEimQMOcLpDmi13T0al8gdbdBpZXmLWvdylNc1DJ GE1QbfxuoTqGMGpgaD4jT5WV9dh+kOgFDK9C+J4GzBtioIL3wviq3LIy74DJAQ3L /1I/2cYoLpfbbKn9U+9J+VDGohvgX2j/nnQhx1hpl2PuIWKjamlZNI426UUYRMPm MiiJWfB9TXGE9d3uz4pFTzdUxMjqw3lpr5vz3xQPZ3b6Hfrh9lrDL2LDCqFJ5rlY kSzP/gjVrX4GD+j38tnCtJ8xkOM4OLJ1 -----END CERTIFICATE-----Generated at Sat Apr 26 16:50:25 2025 by rpki-client