$ rpki-client -vvf rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft File: 07pE2ly9wcxRJeLBAHts233c3IU.mft (raw, json) Hash identifier: EyXF5CBwtk40VcpNUueQtQOsKu7k1rr6FTgix3Yhx7k= Subject key identifier: 36:A6:6A:3E:A2:59:2C:0E:F8:0E:D5:D9:3F:01:33:25:F7:29:B1:12 Authority key identifier: D3:BA:44:DA:5C:BD:C1:CC:51:25:E2:C1:00:7B:6C:DB:7D:DC:DC:85 Certificate issuer: /CN=A9129757/serialNumber=D3BA44DA5CBDC1CC5125E2C1007B6CDB7DDCDC85 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft Manifest number: 4D Signing time: Fri 25 Apr 2025 06:21:37 +0000 Manifest this update: Fri 25 Apr 2025 06:21:36 +0000 Manifest next update: Fri 02 May 2025 06:21:36 +0000 Files and hashes: 1: 07pE2ly9wcxRJeLBAHts233c3IU.crl (hash: V1T5UUS3GdpWNnQ9cN4D32rXqb7+fG7VLZCtpSPY10Y=) 2: 46A6690EB41911EFA68E0826C4F9AE02.roa (hash: PLX4kBW7Q6lIgEXicoBPIcX2q4HXvsbwpw0VmOF96dY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.crl rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129757, serialNumber=D3BA44DA5CBDC1CC5125E2C1007B6CDB7DDCDC85 Validity Not Before: Apr 25 06:21:36 2025 GMT Not After : May 2 06:21:36 2025 GMT Subject: CN=680b29f0-25fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:33:92:af:53:bd:c7:cc:c0:53:5d:86:92:e0: 23:c5:ee:73:60:1e:a4:7b:46:76:46:5c:25:27:a8: 2c:8a:ae:9e:0d:0e:ec:db:f8:85:eb:26:22:8f:86: 69:30:65:44:46:ca:df:8f:00:c9:7a:fa:5c:27:af: e7:b1:0f:fe:8b:60:a5:a7:c4:ac:f8:7b:06:b3:50: 19:28:ca:6c:9b:4c:df:33:24:b7:7f:07:0d:7e:ce: a0:e1:73:ae:3f:14:7f:ca:ac:94:13:3b:0c:4f:9a: d0:9a:49:69:a9:81:20:96:0d:ab:e4:36:09:0c:9b: 99:20:37:77:31:dc:02:8d:1e:21:e1:f6:2e:f1:af: de:ea:c7:9f:ee:54:4a:e7:96:c8:40:d6:21:df:3f: 73:2f:bc:50:0b:46:b4:b3:28:36:73:6c:bd:1c:8b: 2c:02:ea:eb:16:74:c2:1e:e0:f7:6d:15:d8:e7:5a: 95:cd:73:06:17:a9:eb:84:6a:07:f4:65:72:06:c9: fa:62:15:6b:51:a4:e4:af:88:be:6f:bb:b9:37:22: ad:08:49:8c:7b:36:b4:74:18:2c:0e:6e:b3:96:d4: f5:4b:12:9e:46:16:93:c5:f2:66:81:96:7c:ea:67: 25:2f:90:85:5c:db:ce:53:96:4c:e4:92:a4:ca:2c: 10:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A6:6A:3E:A2:59:2C:0E:F8:0E:D5:D9:3F:01:33:25:F7:29:B1:12 X509v3 Authority Key Identifier: keyid:D3:BA:44:DA:5C:BD:C1:CC:51:25:E2:C1:00:7B:6C:DB:7D:DC:DC:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:18:98:7f:60:45:e1:b5:9d:60:c7:d0:f4:5b:7a:07:45:e3: d7:5d:d6:39:ef:02:7b:f7:9e:69:1c:f0:fd:35:29:fc:c0:9f: dc:6d:46:bc:14:30:38:e1:03:d0:8d:b5:34:39:47:b2:24:08: 76:81:3f:fb:0b:de:4c:5a:62:21:48:e9:5a:ff:9a:11:50:a3: d3:4e:0f:f0:b7:30:1a:47:86:49:f6:d2:67:80:d9:87:42:ca: 3d:af:9b:91:80:0c:a7:a5:3b:21:ff:8b:7a:b6:90:6c:a9:ef: 3f:72:8b:28:1b:09:32:37:92:b9:51:72:5d:de:d5:07:d6:f4: 5b:35:47:1a:a4:09:b9:99:e8:ce:23:aa:78:50:af:0c:92:8a: e5:9a:9a:57:34:82:dc:9d:dd:00:75:e3:73:6b:10:74:b0:7f: c7:f0:67:08:2c:a2:36:e4:f3:60:e7:b2:2b:2a:32:0d:6f:eb: 54:53:3b:e6:2d:7b:55:6d:79:28:a1:e8:c0:a1:95:de:48:48: 58:6c:bb:cc:5e:43:49:b0:e7:88:59:63:b4:48:cd:27:8b:ce: 03:53:c7:49:9a:68:bb:dc:f7:ce:7b:6c:d8:ad:a1:f3:b5:6c: 23:52:d4:15:df:6b:32:7d:ef:a3:ec:bb:09:23:35:96:c3:36: 49:ea:b8:ac -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OTc1NzExMC8GA1UEBRMoRDNCQTQ0REE1Q0JEQzFDQzUxMjVFMkMxMDA3QjZDREI3 RERDREM4NTAeFw0yNTA0MjUwNjIxMzZaFw0yNTA1MDIwNjIxMzZaMBgxFjAUBgNV BAMTDTY4MGIyOWYwLTI1ZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClM5KvU73HzMBTXYaS4CPF7nNgHqR7RnZGXCUnqCyKrp4NDuzb+IXrJiKPhmkw ZURGyt+PAMl6+lwnr+exD/6LYKWnxKz4ewazUBkoymybTN8zJLd/Bw1+zqDhc64/ FH/KrJQTOwxPmtCaSWmpgSCWDavkNgkMm5kgN3cx3AKNHiHh9i7xr97qx5/uVErn lshA1iHfP3MvvFALRrSzKDZzbL0ciywC6usWdMIe4PdtFdjnWpXNcwYXqeuEagf0 ZXIGyfpiFWtRpOSviL5vu7k3Iq0ISYx7NrR0GCwObrOW1PVLEp5GFpPF8maBlnzq ZyUvkIVc285TlkzkkqTKLBARAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNqZqPqJZ LA74DtXZPwEzJfcpsRIwHwYDVR0jBBgwFoAU07pE2ly9wcxRJeLBAHts233c3IUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5NzU3LzMyOTM0Q0VDQjM3 QTExRUY5QzA3QzY1QkM0RjlBRTAyLzA3cEUybHk5d2N4UkplTEJBSHRzMjMzYzNJ VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMDdwRTJseTl3Y3hSSmVMQkFIdHMyMzNjM0lVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5 NzU3LzMyOTM0Q0VDQjM3QTExRUY5QzA3QzY1QkM0RjlBRTAyLzA3cEUybHk5d2N4 UkplTEJBSHRzMjMzYzNJVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABkYmH9gReG1nWDH0PRbegdF49dd1jnvAnv3nmkc8P01KfzAn9xtRrwU MDjhA9CNtTQ5R7IkCHaBP/sL3kxaYiFI6Vr/mhFQo9NOD/C3MBpHhkn20meA2YdC yj2vm5GADKelOyH/i3q2kGyp7z9yiygbCTI3krlRcl3e1QfW9Fs1RxqkCbmZ6M4j qnhQrwySiuWamlc0gtyd3QB143NrEHSwf8fwZwgsojbk82DnsisqMg1v61RTO+Yt e1VteSih6MChld5ISFhsu8xeQ0mw54hZY7RIzSeLzgNTx0maaLvc9857bNitofO1 bCNS1BXfazJ976PsuwkjNZbDNknquKw= -----END CERTIFICATE-----Generated at Sat Apr 26 14:59:11 2025 by rpki-client