$ rpki-client -vvf rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.mft File: pp7mLFrogRdKQhI3WepCPWH3NCM.mft (raw, json) Hash identifier: MCCpmGfaS8p9fkALwImR7VV9cC2SJWvEw/EB1TAbg8g= Subject key identifier: 5D:4E:0A:44:29:18:55:8B:CF:3C:97:8B:17:33:E4:18:36:B2:AA:EF Authority key identifier: A6:9E:E6:2C:5A:E8:81:17:4A:42:12:37:59:EA:42:3D:61:F7:34:23 Certificate issuer: /CN=A9132F12/serialNumber=A69EE62C5AE881174A42123759EA423D61F73423 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pp7mLFrogRdKQhI3WepCPWH3NCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.mft Manifest number: 7C Signing time: Fri 25 Apr 2025 05:42:21 +0000 Manifest this update: Fri 25 Apr 2025 05:42:20 +0000 Manifest next update: Fri 02 May 2025 05:42:20 +0000 Files and hashes: 1: pp7mLFrogRdKQhI3WepCPWH3NCM.crl (hash: l6L55x7y6TTipUU3lPTxasheYGVOFB7mEf6+jelg1rk=) 2: A1418C5E68C411EF841B7987C4F9AE02.roa (hash: w11TSOq/EaycCd3tkTNvuoFONdTStuPzFxhygocn60Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.crl rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pp7mLFrogRdKQhI3WepCPWH3NCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:42:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132F12, serialNumber=A69EE62C5AE881174A42123759EA423D61F73423 Validity Not Before: Apr 25 05:42:20 2025 GMT Not After : May 2 05:42:20 2025 GMT Subject: CN=680b20bd-59f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5b:93:78:5c:32:af:15:6b:69:13:ae:cc:83: 67:f8:29:51:b4:af:ba:d6:18:af:d4:45:ad:ce:54: 53:44:55:e9:87:f9:80:97:00:0e:d8:00:01:2f:b1: f9:9b:b2:a0:d6:d9:fa:d1:e6:c9:ec:c3:4f:37:1c: 27:b6:eb:a9:c6:03:87:c1:82:88:6c:f4:8a:ea:b2: 1e:a6:16:0a:a1:94:25:1d:f9:8b:d0:a4:f8:53:1e: e0:bd:ab:23:16:85:50:ba:c2:20:39:9c:dc:e4:04: 9f:6f:de:d6:12:5f:fe:f6:3a:b2:d7:fb:6f:2f:86: 7e:a4:cd:81:10:25:39:99:08:08:3f:90:91:87:23: 4a:41:e5:b8:af:9f:93:91:74:f3:86:97:a2:18:9b: f3:2f:f0:2e:a4:cf:c7:40:a3:2e:77:41:ff:80:56: f0:4a:91:10:09:74:3c:42:03:81:c6:d3:bc:40:80: cc:b5:4b:04:30:f7:99:4f:c2:a6:22:ff:80:ba:0b: af:28:f4:2d:17:f8:61:3f:5a:ba:2f:d1:8d:f5:9e: 2f:16:0b:5a:dc:fb:e7:29:be:66:e5:6e:7e:c2:86: 89:96:e2:ab:88:97:0b:3b:e9:bc:a9:b9:9c:ac:9e: db:37:4f:02:79:36:9a:aa:78:ca:f3:d6:1c:a7:7a: 31:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:4E:0A:44:29:18:55:8B:CF:3C:97:8B:17:33:E4:18:36:B2:AA:EF X509v3 Authority Key Identifier: keyid:A6:9E:E6:2C:5A:E8:81:17:4A:42:12:37:59:EA:42:3D:61:F7:34:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pp7mLFrogRdKQhI3WepCPWH3NCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:d1:cc:d7:bc:c2:0e:c3:e5:7f:c2:fa:e5:4a:22:53:69:a6: 93:15:72:5a:8c:46:cb:3a:cf:f6:b7:f4:c4:8b:58:6a:a1:24: 28:4b:85:85:8e:43:9a:7d:17:c0:c7:06:39:35:1a:b3:5c:8f: 78:af:c2:a8:00:ff:32:f1:c5:40:71:d3:42:88:70:cb:0f:9a: 37:cb:11:cc:ce:bb:e2:ee:87:3b:4a:0f:0c:6a:62:d5:c3:8b: e8:58:8c:a9:ec:eb:9f:e7:8b:3a:12:36:96:1b:6d:ea:56:aa: fc:88:ba:eb:a1:19:cd:10:ef:b2:9a:2d:6f:33:2b:94:a5:cf: 7d:70:b9:51:dc:eb:3c:29:6a:d6:6a:18:84:07:69:5d:69:40: 85:38:a8:1b:a4:ad:6f:65:bd:3e:32:b0:f1:27:38:bd:56:24: 75:10:9c:22:ac:4a:b5:97:f9:b8:f1:dc:4a:06:97:04:40:ca: 7c:54:08:0c:53:a2:b2:f1:b7:32:65:57:06:1f:30:ab:da:55: 2b:fd:fd:39:16:85:b7:f2:68:32:f6:4b:3c:30:45:d8:cb:94: e9:95:79:d8:de:3c:c1:4c:13:10:4d:0c:8e:4f:da:81:d2:2e: 87:9b:ef:c0:de:37:fa:92:e1:78:77:7a:79:91:d4:b0:44:06: 4a:eb:87:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MkYxMjExMC8GA1UEBRMoQTY5RUU2MkM1QUU4ODExNzRBNDIxMjM3NTlFQTQyM0Q2 MUY3MzQyMzAeFw0yNTA0MjUwNTQyMjBaFw0yNTA1MDIwNTQyMjBaMBgxFjAUBgNV BAMTDTY4MGIyMGJkLTU5ZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMW5N4XDKvFWtpE67Mg2f4KVG0r7rWGK/URa3OVFNEVemH+YCXAA7YAAEvsfmb sqDW2frR5snsw083HCe266nGA4fBgohs9Irqsh6mFgqhlCUd+YvQpPhTHuC9qyMW hVC6wiA5nNzkBJ9v3tYSX/72OrLX+28vhn6kzYEQJTmZCAg/kJGHI0pB5bivn5OR dPOGl6IYm/Mv8C6kz8dAoy53Qf+AVvBKkRAJdDxCA4HG07xAgMy1SwQw95lPwqYi /4C6C68o9C0X+GE/Wrov0Y31ni8WC1rc++cpvmblbn7ChomW4quIlws76bypuZys nts3TwJ5NpqqeMrz1hynejFfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXU4KRCkY VYvPPJeLFzPkGDayqu8wHwYDVR0jBBgwFoAUpp7mLFrogRdKQhI3WepCPWH3NCMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyRjEyL0ZGMzMzQjhBNjhD MTExRUZBNzUzQTE2NEM0RjlBRTAyL3BwN21MRnJvZ1JkS1FoSTNXZXBDUFdIM05D TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcHA3bUxGcm9nUmRLUWhJM1dlcENQV0gzTkNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMy RjEyL0ZGMzMzQjhBNjhDMTExRUZBNzUzQTE2NEM0RjlBRTAyL3BwN21MRnJvZ1Jk S1FoSTNXZXBDUFdIM05DTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACfRzNe8wg7D5X/C+uVKIlNpppMVclqMRss6z/a39MSLWGqhJChLhYWO Q5p9F8DHBjk1GrNcj3ivwqgA/zLxxUBx00KIcMsPmjfLEczOu+LuhztKDwxqYtXD i+hYjKns65/nizoSNpYbbepWqvyIuuuhGc0Q77KaLW8zK5Slz31wuVHc6zwpatZq GIQHaV1pQIU4qBukrW9lvT4ysPEnOL1WJHUQnCKsSrWX+bjx3EoGlwRAynxUCAxT orLxtzJlVwYfMKvaVSv9/TkWhbfyaDL2SzwwRdjLlOmVedjePMFMExBNDI5P2oHS Loeb78DeN/qS4Xh3enmR1LBEBkrrh0E= -----END CERTIFICATE-----Generated at Sat Apr 26 04:26:30 2025 by rpki-client