$ rpki-client -vvf rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft File: 07chXhZgoZ79Lncvm6envcbuDSg.mft (raw, json) Hash identifier: OMCyb9p4oV3JTR10y0KhZlb2YOoI1FMRuRZBkmqkggA= Subject key identifier: 23:84:79:D4:E8:4A:65:22:1D:91:A6:0E:AD:4F:26:8A:36:47:17:0C Authority key identifier: D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28 Certificate issuer: /CN=A912BBC9/serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28 Certificate serial: 0921 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft Manifest number: 0905 Signing time: Thu 24 Apr 2025 20:17:08 +0000 Manifest this update: Thu 24 Apr 2025 20:17:08 +0000 Manifest next update: Thu 01 May 2025 20:17:08 +0000 Files and hashes: 1: 07chXhZgoZ79Lncvm6envcbuDSg.crl (hash: VRJYT6RaEkpERf5iCjZsSJ9RZuFG9bW6fGOTyOamF90=) 2: 42B13940C3C011EE86C2C317C4F9AE02.roa (hash: LGFMxkvmdVELBOkg0tqQjRMiBrTGNLnJnZeQEwD+enQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2337 (0x921) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BBC9, serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28 Validity Not Before: Apr 24 20:17:08 2025 GMT Not After : May 1 20:17:08 2025 GMT Subject: CN=680a9c44-97a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2d:46:11:b7:40:80:8d:3e:10:32:ff:03:7d: 6e:0c:dd:0c:6d:cd:7e:d7:7a:cc:53:69:16:7b:b0: 8e:50:ce:39:f8:27:32:d3:7c:37:1e:56:d6:52:ae: d0:a2:f4:8f:b2:f5:51:af:dc:1a:c6:1f:1c:01:de: 47:1f:70:3c:e5:c5:94:67:c3:28:17:e3:20:df:e2: 0e:3f:9c:f8:95:65:f6:aa:0d:03:28:af:0a:c7:cb: 6f:9a:cf:84:0f:99:60:70:17:9a:3f:39:b7:b5:fa: 8a:a9:95:2c:c9:e8:aa:1a:a7:af:32:8b:2d:34:21: 20:21:c8:17:ec:77:ec:58:a5:b4:a3:81:a9:07:f7: 1a:5e:86:6f:7a:79:43:53:3a:56:ac:25:d0:96:be: 32:44:ba:f1:e2:99:69:ba:22:49:cf:46:c3:99:98: 5e:41:c0:5d:33:4b:3e:56:53:4d:4f:05:da:04:32: 5d:88:00:3f:73:dc:2e:d2:d2:d0:aa:64:a7:91:3e: 67:53:68:61:19:f9:13:3d:f2:13:2e:5b:23:4d:e2: 9b:43:8c:ec:23:cf:f7:a3:51:73:4c:d2:44:86:40: 53:2e:4f:1a:3e:4c:c7:c6:20:28:8d:5e:20:11:0d: 83:d7:2d:b1:ea:5e:27:91:dd:bf:f5:36:15:df:e7: 10:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:84:79:D4:E8:4A:65:22:1D:91:A6:0E:AD:4F:26:8A:36:47:17:0C X509v3 Authority Key Identifier: keyid:D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:ac:63:d1:29:06:c1:fe:8c:2f:56:dc:8d:15:fc:53:8e:eb: 99:f5:a2:85:87:63:40:b6:d3:96:9e:fc:cd:78:2a:d7:e9:ff: b9:ac:a7:5d:cd:dc:24:9e:6b:ba:1d:bb:e3:21:6e:54:08:9a: 20:f0:77:a1:0b:4b:f8:97:35:57:21:33:76:ed:81:08:5b:33: 36:66:53:f6:34:ee:3e:02:42:87:97:3d:42:fd:60:6d:65:34: 8a:ef:a3:9b:aa:82:f8:87:4f:49:5d:9d:9a:76:21:12:9d:10: 34:22:67:ab:64:02:56:d9:78:ac:43:ad:cf:99:9a:75:a8:35: 2e:3d:41:f0:17:a2:71:71:d5:af:73:0e:87:a6:d0:fb:c2:34: 86:54:d9:e8:22:65:41:0d:6e:ad:4e:f6:03:66:58:1f:b0:9c: 9e:32:b5:93:f9:ae:8f:37:35:dd:62:f6:68:45:d9:22:d0:b8: b7:f8:ed:6f:fe:27:bd:f2:8a:00:34:0b:c2:6a:21:6a:62:0d: ab:bc:42:0a:96:67:2c:62:ce:b4:3e:b2:4c:ae:87:c8:2b:b5: 07:1d:f5:6b:ea:65:8f:c5:cc:9a:1e:cd:76:1c:87:8c:1c:ee: 6c:82:c0:35:51:58:a7:2c:bd:24:da:7d:43:bb:e3:6d:7d:f0: 35:d6:f0:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJCQzkxMTAvBgNVBAUTKEQzQjcyMTVFMTY2MEExOUVGRDJFNzcyRjlCQTdBN0JE QzZFRTBEMjgwHhcNMjUwNDI0MjAxNzA4WhcNMjUwNTAxMjAxNzA4WjAYMRYwFAYD VQQDEw02ODBhOWM0NC05N2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuS1GEbdAgI0+EDL/A31uDN0Mbc1+13rMU2kWe7COUM45+Ccy03w3HlbWUq7Q ovSPsvVRr9waxh8cAd5HH3A85cWUZ8MoF+Mg3+IOP5z4lWX2qg0DKK8Kx8tvms+E D5lgcBeaPzm3tfqKqZUsyeiqGqevMostNCEgIcgX7HfsWKW0o4GpB/caXoZvenlD UzpWrCXQlr4yRLrx4plpuiJJz0bDmZheQcBdM0s+VlNNTwXaBDJdiAA/c9wu0tLQ qmSnkT5nU2hhGfkTPfITLlsjTeKbQ4zsI8/3o1FzTNJEhkBTLk8aPkzHxiAojV4g EQ2D1y2x6l4nkd2/9TYV3+cQ6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOEedTo SmUiHZGmDq1PJoo2RxcMMB8GA1UdIwQYMBaAFNO3IV4WYKGe/S53L5unp73G7g0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkJDOS84M0ZGOUZFQ0FB ODExMUVBQjQyQTA0MzNDNEY5QUUwMi8wN2NoWGhaZ29aNzlMbmN2bTZlbnZjYnVE U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA3Y2hYaFpnb1o3OUxuY3ZtNmVudmNidURTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkJDOS84M0ZGOUZFQ0FBODExMUVBQjQyQTA0MzNDNEY5QUUwMi8wN2NoWGhaZ29a NzlMbmN2bTZlbnZjYnVEU2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgrGPRKQbB/owvVtyNFfxTjuuZ9aKFh2NAttOWnvzNeCrX6f+5rKdd zdwknmu6HbvjIW5UCJog8HehC0v4lzVXITN27YEIWzM2ZlP2NO4+AkKHlz1C/WBt ZTSK76ObqoL4h09JXZ2adiESnRA0ImerZAJW2XisQ63PmZp1qDUuPUHwF6JxcdWv cw6HptD7wjSGVNnoImVBDW6tTvYDZlgfsJyeMrWT+a6PNzXdYvZoRdki0Li3+O1v /ie98ooANAvCaiFqYg2rvEIKlmcsYs60PrJMrofIK7UHHfVr6mWPxcyaHs12HIeM HO5sgsA1UVinLL0k2n1Du+NtffA11vAP -----END CERTIFICATE-----Generated at Sat Apr 26 15:58:51 2025 by rpki-client