$ rpki-client -vvf rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft File: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft (raw, json) Hash identifier: 2CZjpHUZ5bUferfxbPSaCtWpYgDta7CIH2UEycEi2a4= Subject key identifier: E4:C8:48:95:91:6F:9A:3D:12:FA:21:18:E5:D4:41:0D:90:0C:B0:E6 Authority key identifier: ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 Certificate issuer: /CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Certificate serial: 09E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft Manifest number: 09AC Signing time: Thu 24 Apr 2025 20:02:38 +0000 Manifest this update: Thu 24 Apr 2025 20:02:37 +0000 Manifest next update: Thu 01 May 2025 20:02:37 +0000 Files and hashes: 1: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl (hash: PvDKbxpQyQv4t3OYOW+yLmNF5Z+gIMZ26h0k/nDKCcQ=) 2: D411F96C532E11EFB0B63E60C4F9AE02.roa (hash: 838b7qHkfNcVQ+dG+2+ikVBrip48qajejDAv66Es7Do=) 3: 0A627D5653AD11EF94BC7F0BC4F9AE02.roa (hash: lHubJpI54TUZB9ErKrK2Uh2G0dB2IBaNDMotiEzD5Do=) 4: A2120E06FD7F11EFA8C89755C4F9AE02.roa (hash: t6q2fLRleWOAh29sMouXev7NxP/StSGtuqhQ1bcdSrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2532 (0x9e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146944, serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Validity Not Before: Apr 24 20:02:37 2025 GMT Not After : May 1 20:02:37 2025 GMT Subject: CN=680a98de-7ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3e:95:44:97:26:8a:18:53:fb:2c:f0:e2:65: 07:df:be:4f:77:92:1c:d1:f7:2a:e4:b1:46:09:66: 2a:43:13:80:4c:f9:12:af:09:ac:47:05:3c:87:d5: 7f:5b:dd:d0:cd:5b:e1:d2:75:d2:c0:30:dd:5b:fb: 5b:45:b5:ba:2e:70:0b:28:92:11:9b:a9:a0:13:62: e6:1f:d0:3a:5f:17:c1:d9:91:40:1d:4b:61:f5:1d: a2:e0:20:88:de:6a:08:42:2e:5f:9b:3a:65:0d:10: c0:95:7a:af:7b:0a:17:2b:ff:fa:9b:0c:5f:62:d8: 5a:0f:b4:c3:f1:8d:b2:9d:fd:54:15:d4:08:6e:6c: 65:d0:07:60:8d:ea:36:fe:2f:10:26:87:4c:a5:5e: 4f:d3:e7:55:a7:c7:21:3d:d2:c9:2f:90:8c:b1:37: 6e:07:e1:28:fc:ea:1a:d0:fc:70:46:25:79:36:32: e1:5b:7a:d6:69:13:8c:ee:02:b7:9c:ac:b8:63:e0: 2e:09:f1:30:e5:55:90:13:fb:3a:35:94:66:95:f6: d2:19:a1:73:b7:9d:91:0e:c3:19:75:6f:5d:10:2f: 65:6b:39:99:1e:18:2c:35:8e:4f:d8:90:d4:ae:94: d8:02:cc:b3:83:58:e8:46:26:8d:2f:b8:d1:52:ff: 4a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C8:48:95:91:6F:9A:3D:12:FA:21:18:E5:D4:41:0D:90:0C:B0:E6 X509v3 Authority Key Identifier: keyid:ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:bd:59:33:d5:17:22:80:3d:ff:40:88:92:ee:89:8a:cb:6d: 13:fa:7b:26:26:fe:02:b9:ac:b9:96:2b:06:6b:53:7c:6c:ad: 09:96:3d:d7:3d:88:00:f0:64:92:14:d4:3e:72:04:b1:5a:b2: 24:45:df:f9:ec:46:4d:8a:70:43:9f:43:67:3d:0a:6d:d7:cc: 16:32:c2:9d:fc:ee:a0:8e:c0:bb:d6:7b:98:02:a5:c5:2f:ce: 76:0d:1c:d4:2f:45:15:89:80:ff:e7:ac:19:0a:50:d9:da:97: f3:5d:b1:52:c4:78:11:65:1e:8e:e7:9a:cc:cb:d0:e5:8b:42: d9:70:51:da:61:fb:18:75:72:25:41:c7:57:37:7d:97:b2:1b: da:3c:7c:bc:5c:55:58:24:23:18:67:63:89:fc:0b:58:d0:ed: e3:65:42:2f:3e:3c:80:58:b6:4d:7e:0e:82:8b:1d:19:51:f2: 58:ab:be:97:8e:f5:c3:31:1f:98:54:91:55:49:1c:5f:cc:98: ee:65:e3:73:da:3f:c4:57:eb:c5:8a:4c:28:cf:7c:73:ae:98: a0:d9:bc:5c:94:a8:83:62:bd:86:60:69:13:30:d1:8f:81:2c: fc:86:9d:6a:26:94:56:d5:70:82:ec:fe:d8:01:f3:4e:3f:29: 08:2c:2d:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY5NDQxMTAvBgNVBAUTKEVEMUY5NThDQjYwNEI1NzZFODIyMTRCNENGM0NDMEZF NjIwRUY5RjQwHhcNMjUwNDI0MjAwMjM3WhcNMjUwNTAxMjAwMjM3WjAYMRYwFAYD VQQDEw02ODBhOThkZS03YWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvT6VRJcmihhT+yzw4mUH375Pd5Ic0fcq5LFGCWYqQxOATPkSrwmsRwU8h9V/ W93QzVvh0nXSwDDdW/tbRbW6LnALKJIRm6mgE2LmH9A6XxfB2ZFAHUth9R2i4CCI 3moIQi5fmzplDRDAlXqvewoXK//6mwxfYthaD7TD8Y2ynf1UFdQIbmxl0Adgjeo2 /i8QJodMpV5P0+dVp8chPdLJL5CMsTduB+Eo/Ooa0PxwRiV5NjLhW3rWaROM7gK3 nKy4Y+AuCfEw5VWQE/s6NZRmlfbSGaFzt52RDsMZdW9dEC9lazmZHhgsNY5P2JDU rpTYAsyzg1joRiaNL7jRUv9KlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOTISJWR b5o9EvohGOXUQQ2QDLDmMB8GA1UdIwQYMBaAFO0flYy2BLV26CIUtM88wP5iDvn0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Njk0NC80M0JEMUM2RThF OTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRYYm9JaFMwenp6QV9tSU8t ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdSLVZqTFlFdFhib0loUzB6enpBX21JTy1mUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Njk0NC80M0JEMUM2RThFOTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRY Ym9JaFMwenp6QV9tSU8tZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfvVkz1RcigD3/QIiS7omKy20T+nsmJv4Cuay5lisGa1N8bK0Jlj3X PYgA8GSSFNQ+cgSxWrIkRd/57EZNinBDn0NnPQpt18wWMsKd/O6gjsC71nuYAqXF L852DRzUL0UViYD/56wZClDZ2pfzXbFSxHgRZR6O55rMy9Dli0LZcFHaYfsYdXIl QcdXN32XshvaPHy8XFVYJCMYZ2OJ/AtY0O3jZUIvPjyAWLZNfg6Cix0ZUfJYq76X jvXDMR+YVJFVSRxfzJjuZeNz2j/EV+vFikwoz3xzrpig2bxclKiDYr2GYGkTMNGP gSz8hp1qJpRW1XCC7P7YAfNOPykILC2Q -----END CERTIFICATE-----Generated at Sat Apr 26 14:29:04 2025 by rpki-client