$ rpki-client -vvf rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft File: baFr8M0J73aPkCE7ZtjLw86TQgY.mft (raw, json) Hash identifier: I2Yzf3yRf3Qc2dkgkETg8t3iOi4sEpleq+ZWxbB3aoI= Subject key identifier: 2F:0C:70:B4:3C:9A:6A:97:0D:CF:4F:0D:21:67:AD:2D:DD:17:C8:73 Authority key identifier: 6D:A1:6B:F0:CD:09:EF:76:8F:90:21:3B:66:D8:CB:C3:CE:93:42:06 Certificate issuer: /CN=A9151B71/serialNumber=6DA16BF0CD09EF768F90213B66D8CBC3CE934206 Certificate serial: 0737 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft Manifest number: 072E Signing time: Thu 24 Apr 2025 21:36:53 +0000 Manifest this update: Thu 24 Apr 2025 21:36:52 +0000 Manifest next update: Thu 01 May 2025 21:36:52 +0000 Files and hashes: 1: baFr8M0J73aPkCE7ZtjLw86TQgY.crl (hash: o7xO2GnVWtscvsXXlwopfwW6GhL+WSYX/To3wsU0QY4=) 2: 0A866A522EAB11EBAB198239C4F9AE02.roa (hash: y8a8NpATY6YYaN1sCCi6QGlP5oTWUdFfM/H2gKyeO+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.crl rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:36:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1847 (0x737) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151B71, serialNumber=6DA16BF0CD09EF768F90213B66D8CBC3CE934206 Validity Not Before: Apr 24 21:36:52 2025 GMT Not After : May 1 21:36:52 2025 GMT Subject: CN=680aaef5-ddfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:24:07:5e:3e:f1:11:4d:85:f0:44:b3:40:db: 58:c8:11:d4:dc:e5:fb:57:bb:d7:7b:b4:87:39:02: b7:ea:e3:82:8f:fa:81:55:45:fc:74:5d:a3:95:76: 84:14:a1:9c:eb:9e:60:a0:d7:98:e7:d5:c6:9a:24: c0:f1:ca:e2:33:e4:70:4f:49:7b:50:8a:06:70:ba: c1:2b:79:20:42:51:1d:a8:36:08:14:51:e7:b0:a3: 2b:68:3e:46:05:5b:2f:e8:07:38:5e:89:83:60:9a: d4:34:21:06:a3:4a:a4:34:cb:90:99:ea:39:b9:11: 3f:ae:6e:18:19:42:dc:83:50:7e:8e:47:92:18:44: 17:fb:62:07:4d:3a:7c:84:b0:f3:9d:ba:2f:7b:21: 89:99:2a:0b:58:aa:12:f3:20:37:ae:ce:94:4b:16: 77:a5:c1:4f:10:24:4b:c6:18:0e:a3:21:36:15:0b: 6d:9c:25:a8:0b:c0:79:e5:4c:73:e8:38:02:64:8c: 2d:82:65:a5:66:0a:a5:67:25:fe:a9:62:e4:11:70: cf:72:65:d6:15:cb:38:9d:e9:9e:a9:43:85:d2:07: f2:9b:01:aa:09:ec:87:6b:28:56:b6:b6:db:2f:f8: d8:75:8c:b1:fa:ab:e9:c0:12:92:b5:79:df:c2:05: 5a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:0C:70:B4:3C:9A:6A:97:0D:CF:4F:0D:21:67:AD:2D:DD:17:C8:73 X509v3 Authority Key Identifier: keyid:6D:A1:6B:F0:CD:09:EF:76:8F:90:21:3B:66:D8:CB:C3:CE:93:42:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:a5:f6:e1:91:0d:d6:0e:c8:57:15:77:e2:a7:d7:fc:15:aa: ff:fd:6f:6f:cf:9d:67:fa:96:81:c0:c7:ad:02:44:c0:58:19: 7c:f4:54:82:80:3f:a2:e5:ea:c5:61:0d:1b:d4:52:5d:c1:ae: 55:da:38:be:63:7d:16:ba:dc:55:fe:32:21:e5:52:08:a1:16: 6a:4d:76:70:4c:43:0c:7d:f6:a5:f0:d6:34:75:fe:12:21:66: 23:13:fc:9e:db:43:49:fc:29:61:4e:44:74:62:c8:ed:ec:bc: 08:2f:d2:e1:08:0b:a0:d8:04:45:4d:3a:fe:ab:d1:6d:32:82: 0f:de:dc:7a:23:c6:26:f7:11:7d:ce:5f:cd:c7:f0:4f:80:07: ce:2e:fe:ca:3c:88:f3:f5:04:61:e9:10:5d:28:c0:66:d5:d8: 06:d3:36:3a:ed:26:1d:f9:a7:da:af:d4:74:f9:c3:3d:1a:0f: 32:39:aa:e7:1d:22:1a:4b:21:79:48:da:8e:1d:aa:5c:8b:7d: 79:c6:23:bc:c3:d1:c6:6e:ac:19:84:82:fb:97:c3:38:a9:53: a3:f5:77:ae:fd:86:21:ee:5d:d1:7e:e9:dc:1e:c2:f5:80:59: 05:bf:1a:2a:0f:5d:0a:66:27:ef:5d:33:4a:54:23:ad:40:ff: e5:9f:a0:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFCNzExMTAvBgNVBAUTKDZEQTE2QkYwQ0QwOUVGNzY4RjkwMjEzQjY2RDhDQkMz Q0U5MzQyMDYwHhcNMjUwNDI0MjEzNjUyWhcNMjUwNTAxMjEzNjUyWjAYMRYwFAYD VQQDEw02ODBhYWVmNS1kZGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3CQHXj7xEU2F8ESzQNtYyBHU3OX7V7vXe7SHOQK36uOCj/qBVUX8dF2jlXaE FKGc655goNeY59XGmiTA8criM+RwT0l7UIoGcLrBK3kgQlEdqDYIFFHnsKMraD5G BVsv6Ac4XomDYJrUNCEGo0qkNMuQmeo5uRE/rm4YGULcg1B+jkeSGEQX+2IHTTp8 hLDznboveyGJmSoLWKoS8yA3rs6USxZ3pcFPECRLxhgOoyE2FQttnCWoC8B55Uxz 6DgCZIwtgmWlZgqlZyX+qWLkEXDPcmXWFcs4nemeqUOF0gfymwGqCeyHayhWtrbb L/jYdYyx+qvpwBKStXnfwgVa4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8McLQ8 mmqXDc9PDSFnrS3dF8hzMB8GA1UdIwQYMBaAFG2ha/DNCe92j5AhO2bYy8POk0IG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUI3MS85RkQ1RjgwRTJF QTkxMUVCOTE2OEZCMzdDNEY5QUUwMi9iYUZyOE0wSjczYVBrQ0U3WnRqTHc4NlRR Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhRnI4TTBKNzNhUGtDRTdadGpMdzg2VFFnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUI3MS85RkQ1RjgwRTJFQTkxMUVCOTE2OEZCMzdDNEY5QUUwMi9iYUZyOE0wSjcz YVBrQ0U3WnRqTHc4NlRRZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3pfbhkQ3WDshXFXfip9f8Far//W9vz51n+paBwMetAkTAWBl89FSC gD+i5erFYQ0b1FJdwa5V2ji+Y30WutxV/jIh5VIIoRZqTXZwTEMMffal8NY0df4S IWYjE/ye20NJ/ClhTkR0Ysjt7LwIL9LhCAug2ARFTTr+q9FtMoIP3tx6I8Ym9xF9 zl/Nx/BPgAfOLv7KPIjz9QRh6RBdKMBm1dgG0zY67SYd+afar9R0+cM9Gg8yOarn HSIaSyF5SNqOHapci315xiO8w9HGbqwZhIL7l8M4qVOj9Xeu/YYh7l3RfuncHsL1 gFkFvxoqD10KZifvXTNKVCOtQP/ln6BG -----END CERTIFICATE-----Generated at Sat Apr 26 13:04:22 2025 by rpki-client