$ rpki-client -vvf rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft File: 0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft (raw, json) Hash identifier: FDK4MLDiVWIgfnQr3APzRkaCZhEj1JUG6HQp5a7P6mQ= Subject key identifier: 9C:16:F9:CA:DF:9D:F4:68:3B:A2:FF:A2:34:F8:66:44:CA:70:8D:72 Authority key identifier: D0:49:F1:5C:5B:00:41:98:3E:8B:35:C5:17:B6:51:71:F7:16:5C:DC Certificate issuer: /CN=A9128077/serialNumber=D049F15C5B0041983E8B35C517B65171F7165CDC Certificate serial: 071E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft Manifest number: 0712 Signing time: Fri 02 May 2025 22:03:30 +0000 Manifest this update: Fri 02 May 2025 22:03:29 +0000 Manifest next update: Fri 09 May 2025 22:03:29 +0000 Files and hashes: 1: 0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl (hash: 58Jbryc5SJbLb7pQIPRH2tv19u5/c5igH5ltwOwAaKU=) 2: 7AD47B2234EE11EE927E9F6AC4F9AE02.roa (hash: Mt4tb4VC4mD0Nqt0BXFmGgw6RIVVzrPQVbsXvi8D500=) 3: 1D4A72B2350811EE96CD9F16C4F9AE02.roa (hash: aL7cUy872ECZEAqqjrWWrqFvQPWZOr2k97DKB+JwHf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 22:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1822 (0x71e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128077, serialNumber=D049F15C5B0041983E8B35C517B65171F7165CDC Validity Not Before: May 2 22:03:29 2025 GMT Not After : May 9 22:03:29 2025 GMT Subject: CN=68154131-d3de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d9:09:6d:3a:1a:e3:c4:65:1a:2d:35:87:ab: d2:69:db:29:85:1d:c3:a7:12:ea:4d:dd:1a:ae:d8: cf:f8:06:46:f0:38:48:2d:9e:df:37:79:c2:0b:53: dc:69:12:01:56:f0:c5:7b:d3:b5:a4:47:84:e1:6b: d1:36:2b:08:11:87:f0:13:9e:07:51:0b:af:42:a7: 63:a2:09:8f:ef:0b:52:e7:fa:a6:ae:d3:d4:6b:be: 63:a8:a7:e7:70:c0:97:2c:0e:1e:f4:bf:05:9f:dd: ec:de:62:38:0f:9f:2b:e0:31:74:d9:25:e8:f4:a3: 9f:80:39:1f:1a:be:2c:92:43:cc:e8:cd:3e:d6:36: 90:7e:f0:87:ca:04:e2:70:ab:c3:69:6d:f9:1c:ab: cc:c5:5a:ca:8a:09:9c:b8:4b:00:5e:df:5a:78:be: 53:f9:02:f5:31:28:40:93:4d:3d:99:bd:9f:28:ec: 57:e5:58:3d:38:c0:86:19:01:8e:01:11:6b:7e:f4: cb:b0:b1:57:2a:c5:f9:33:b4:39:f7:80:ae:4d:68: 4a:56:f6:69:f4:99:c2:ca:dd:e6:1c:58:92:4a:27: bd:ba:c7:8f:b2:e4:a3:ee:02:93:39:b2:35:d5:2c: 84:12:03:8c:95:8b:b5:9b:21:9f:e6:6f:6d:54:22: 47:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:16:F9:CA:DF:9D:F4:68:3B:A2:FF:A2:34:F8:66:44:CA:70:8D:72 X509v3 Authority Key Identifier: keyid:D0:49:F1:5C:5B:00:41:98:3E:8B:35:C5:17:B6:51:71:F7:16:5C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:eb:74:69:a0:f5:20:73:54:2e:f2:42:0d:b3:54:fe:da:83: c8:8d:97:3b:68:51:bb:0a:35:82:cf:5e:71:6f:ab:0f:3a:46: 10:44:63:61:f6:da:73:df:8b:b4:63:0f:ed:01:60:53:84:1b: 19:a1:35:42:cd:ce:7d:e3:17:b3:d2:23:0e:05:06:f3:90:c4: e7:9e:fc:83:a5:16:36:b0:59:6d:31:e1:fc:c4:76:ca:db:8d: 3c:45:7f:03:e5:e3:32:59:20:e4:6f:f2:8b:c2:5c:2e:c1:63: bd:2d:a6:e7:12:68:32:7e:4b:97:bc:4a:24:46:90:6f:1b:48: 7e:62:c2:92:c4:e4:3f:52:1b:74:08:08:60:7c:d5:4b:dd:f3: aa:9b:cf:2a:5a:00:bf:24:bb:29:29:39:a9:33:96:d3:f5:2f: fa:32:c6:a4:fa:da:97:ff:34:69:e3:98:56:25:2f:23:16:89: 81:39:0b:7a:d1:3b:a7:a6:65:3c:36:40:33:59:3f:32:b2:a1: ff:b0:49:80:7e:91:43:fe:44:19:69:f4:e2:2e:c7:b2:c6:f7: c9:99:d3:64:af:d5:9f:28:2b:75:27:37:0d:1b:56:c5:7b:d8: 6a:d7:d5:bf:a1:40:25:b7:cf:18:a7:0d:d0:a0:6b:c4:72:c6: 37:c5:01:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgwNzcxMTAvBgNVBAUTKEQwNDlGMTVDNUIwMDQxOTgzRThCMzVDNTE3QjY1MTcx RjcxNjVDREMwHhcNMjUwNTAyMjIwMzI5WhcNMjUwNTA5MjIwMzI5WjAYMRYwFAYD VQQDEw02ODE1NDEzMS1kM2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdkJbToa48RlGi01h6vSadsphR3DpxLqTd0artjP+AZG8DhILZ7fN3nCC1Pc aRIBVvDFe9O1pEeE4WvRNisIEYfwE54HUQuvQqdjogmP7wtS5/qmrtPUa75jqKfn cMCXLA4e9L8Fn93s3mI4D58r4DF02SXo9KOfgDkfGr4skkPM6M0+1jaQfvCHygTi cKvDaW35HKvMxVrKigmcuEsAXt9aeL5T+QL1MShAk009mb2fKOxX5Vg9OMCGGQGO ARFrfvTLsLFXKsX5M7Q594CuTWhKVvZp9JnCyt3mHFiSSie9usePsuSj7gKTObI1 1SyEEgOMlYu1myGf5m9tVCJHAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwW+crf nfRoO6L/ojT4ZkTKcI1yMB8GA1UdIwQYMBaAFNBJ8VxbAEGYPos1xRe2UXH3Flzc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODA3Ny85ODBDQThGRTNB RDcxMUVCQTI5MjFBNEFDNEY5QUUwMi8wRW54WEZzQVFaZy1pelhGRjdaUmNmY1dY TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBFbnhYRnNBUVpnLWl6WEZGN1pSY2ZjV1hOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODA3Ny85ODBDQThGRTNBRDcxMUVCQTI5MjFBNEFDNEY5QUUwMi8wRW54WEZzQVFa Zy1pelhGRjdaUmNmY1dYTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq63RpoPUgc1Qu8kINs1T+2oPIjZc7aFG7CjWCz15xb6sPOkYQRGNh 9tpz34u0Yw/tAWBThBsZoTVCzc594xez0iMOBQbzkMTnnvyDpRY2sFltMeH8xHbK 2408RX8D5eMyWSDkb/KLwlwuwWO9LabnEmgyfkuXvEokRpBvG0h+YsKSxOQ/Uht0 CAhgfNVL3fOqm88qWgC/JLspKTmpM5bT9S/6Msak+tqX/zRp45hWJS8jFomBOQt6 0TunpmU8NkAzWT8ysqH/sEmAfpFD/kQZafTiLseyxvfJmdNkr9WfKCt1JzcNG1bF e9hq19W/oUAlt88Ypw3QoGvEcsY3xQHQ -----END CERTIFICATE-----Generated at Sun May 4 07:55:21 2025 by rpki-client