$ rpki-client -vvf rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft File: 7AxIKy2XwoyJb67NUfUOmxYldEE.mft (raw, json) Hash identifier: 194Ek0WkdAyBU9X2HJLc5STWwoqvQe3CRbkz+U7Wkxo= Subject key identifier: 5A:E6:22:3B:E0:AB:28:B8:97:66:76:47:9F:8B:67:16:CA:BC:38:75 Authority key identifier: EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41 Certificate issuer: /CN=A9140F6E/serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441 Certificate serial: 0DF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft Manifest number: 0DE8 Signing time: Thu 24 Apr 2025 17:50:45 +0000 Manifest this update: Thu 24 Apr 2025 17:50:45 +0000 Manifest next update: Thu 01 May 2025 17:50:45 +0000 Files and hashes: 1: 7AxIKy2XwoyJb67NUfUOmxYldEE.crl (hash: dB9zlAICFqiG9qxDvBOzNVUy3N6JroI0IdIi76uwdRs=) 2: 33534662AF4511E9B648CE6AC4F9AE02.roa (hash: qC1ZUsPrNWwJdA7aBQJNijhI12p3O3e9WwlBeIt463M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:50:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3568 (0xdf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140F6E, serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441 Validity Not Before: Apr 24 17:50:45 2025 GMT Not After : May 1 17:50:45 2025 GMT Subject: CN=680a79f5-239b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fb:ec:13:05:c6:da:ca:8c:d0:44:33:82:67: 51:7a:1b:ee:d4:6a:9c:99:a6:81:be:ae:e9:d2:71: 6d:04:e4:72:a2:76:81:77:b7:9c:26:34:18:f2:53: 43:17:ce:64:66:49:ef:6e:4c:ac:07:ab:96:37:43: 85:b4:01:11:3c:a0:82:d0:00:cf:90:d0:40:c2:63: eb:88:f4:7a:12:39:4e:0e:63:0a:ea:4c:18:5e:a2: 95:f3:b8:fd:72:64:0a:c4:7b:bd:4b:5d:c1:2e:39: a7:7c:5f:9d:d7:d5:96:7e:e8:6d:41:c7:80:19:58: e8:88:b1:f5:59:14:3d:bd:49:08:ef:d2:21:8b:d9: 8d:77:28:d4:4f:4d:6c:65:52:16:c5:0b:e9:93:87: 13:ee:6a:7c:8e:7f:85:a8:c8:36:fd:31:22:74:e8: 65:fb:9d:91:34:07:5a:82:cb:5d:a7:16:27:c3:29: 7c:00:37:16:cb:8e:8f:c4:77:72:cb:c8:04:c6:fc: b4:11:e5:74:73:73:1a:81:78:c0:9b:3e:9f:a6:f1: 79:0e:c3:78:8f:ce:e5:81:6b:dd:87:11:31:56:ab: 99:5f:7f:89:57:73:34:09:31:00:9a:0e:b0:8c:3c: c3:6b:51:63:c0:cb:8e:97:23:f2:b3:9d:33:5a:bc: 48:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E6:22:3B:E0:AB:28:B8:97:66:76:47:9F:8B:67:16:CA:BC:38:75 X509v3 Authority Key Identifier: keyid:EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:c5:96:6d:5e:b9:f5:ee:db:26:6e:ee:d1:ea:a3:7a:53:c6: d0:e3:ed:fa:ec:c6:7a:c4:b9:60:ba:ed:91:86:76:24:80:54: 7d:ea:14:0d:00:96:ce:b9:1b:e8:13:27:e8:2e:75:e9:fd:17: f4:7f:6d:48:c1:a0:f2:7c:d5:4c:5d:57:22:9e:77:2e:3a:13: db:3b:bd:14:94:73:5f:d7:2c:8d:64:c3:4a:00:c9:f2:82:83: be:c8:45:5f:a9:91:30:5a:9e:00:76:8e:2b:2c:32:6e:40:5f: e8:51:e8:e9:4e:b8:6c:ca:24:32:de:1b:eb:2d:26:3c:6a:74: 0a:ad:67:ee:31:c4:57:fa:27:7a:b7:e7:99:59:d2:c1:75:2a: fd:b9:5b:fe:fc:49:6e:6c:da:65:74:0a:cf:9f:9b:bd:0d:8a: 24:56:a5:96:f4:80:af:d5:6f:1f:d2:7f:eb:04:cc:10:c5:c0: 0d:fc:83:3c:00:84:99:9a:58:e1:db:6e:70:4d:22:be:ac:5e: 56:cf:03:56:aa:2a:ab:08:59:b2:04:08:65:ba:b3:7a:29:3d: 33:ff:7a:ca:41:1f:2f:cf:ce:97:d2:f4:07:03:56:aa:56:15: 96:13:5c:40:0e:a2:13:62:25:a5:05:24:13:15:6e:4e:ce:84: 24:c2:9b:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBGNkUxMTAvBgNVBAUTKEVDMEM0ODJCMkQ5N0MyOEM4OTZGQUVDRDUxRjUwRTlC MTYyNTc0NDEwHhcNMjUwNDI0MTc1MDQ1WhcNMjUwNTAxMTc1MDQ1WjAYMRYwFAYD VQQDEw02ODBhNzlmNS0yMzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/vsEwXG2sqM0EQzgmdRehvu1GqcmaaBvq7p0nFtBORyonaBd7ecJjQY8lND F85kZknvbkysB6uWN0OFtAERPKCC0ADPkNBAwmPriPR6EjlODmMK6kwYXqKV87j9 cmQKxHu9S13BLjmnfF+d19WWfuhtQceAGVjoiLH1WRQ9vUkI79Ihi9mNdyjUT01s ZVIWxQvpk4cT7mp8jn+FqMg2/TEidOhl+52RNAdagstdpxYnwyl8ADcWy46PxHdy y8gExvy0EeV0c3MagXjAmz6fpvF5DsN4j87lgWvdhxExVquZX3+JV3M0CTEAmg6w jDzDa1FjwMuOlyPys50zWrxINQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrmIjvg qyi4l2Z2R5+LZxbKvDh1MB8GA1UdIwQYMBaAFOwMSCstl8KMiW+uzVH1DpsWJXRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEY2RS9EMEU4MkRFMEFG NDMxMUU5QjNERkVFNjhDNEY5QUUwMi83QXhJS3kyWHdveUpiNjdOVWZVT214WWxk RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdBeElLeTJYd295SmI2N05VZlVPbXhZbGRFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEY2RS9EMEU4MkRFMEFGNDMxMUU5QjNERkVFNjhDNEY5QUUwMi83QXhJS3kyWHdv eUpiNjdOVWZVT214WWxkRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXxZZtXrn17tsmbu7R6qN6U8bQ4+367MZ6xLlguu2RhnYkgFR96hQN AJbOuRvoEyfoLnXp/Rf0f21IwaDyfNVMXVcinncuOhPbO70UlHNf1yyNZMNKAMny goO+yEVfqZEwWp4Ado4rLDJuQF/oUejpTrhsyiQy3hvrLSY8anQKrWfuMcRX+id6 t+eZWdLBdSr9uVv+/ElubNpldArPn5u9DYokVqWW9ICv1W8f0n/rBMwQxcAN/IM8 AISZmljh225wTSK+rF5WzwNWqiqrCFmyBAhlurN6KT0z/3rKQR8vz86X0vQHA1aq VhWWE1xADqITYiWlBSQTFW5OzoQkwpsk -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:31 2025 by rpki-client