$ rpki-client -vvf rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft File: 7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft (raw, json) Hash identifier: Y3epjcy0Gz2/SWOTXvN7Zi4jqHRymVkbyU+RHDZLQGU= Subject key identifier: 66:22:40:7B:5F:7B:6E:8E:EB:A1:B4:04:12:08:51:7D:EF:C0:4D:32 Authority key identifier: ED:82:A2:FD:7D:E1:47:52:7C:FC:C4:24:7A:25:6C:1A:0E:DB:4E:D3 Certificate issuer: /CN=A9152787/serialNumber=ED82A2FD7DE147527CFCC4247A256C1A0EDB4ED3 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YKi_X3hR1J8_MQkeiVsGg7bTtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft Manifest number: 61 Signing time: Fri 25 Apr 2025 06:02:16 +0000 Manifest this update: Fri 25 Apr 2025 06:02:16 +0000 Manifest next update: Fri 02 May 2025 06:02:16 +0000 Files and hashes: 1: 7YKi_X3hR1J8_MQkeiVsGg7bTtM.crl (hash: 8JM2cvSQIf9Ie71diPcjFr+qsR2Lg/C10EpwAh1/4a0=) 2: 45D37CC28F8111EFB699FB63C4F9AE02.roa (hash: 559cCrhl2gmU3vGuvWQWRr1GfQBHKWRfQIAknTBhv8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.crl rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YKi_X3hR1J8_MQkeiVsGg7bTtM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152787, serialNumber=ED82A2FD7DE147527CFCC4247A256C1A0EDB4ED3 Validity Not Before: Apr 25 06:02:16 2025 GMT Not After : May 2 06:02:16 2025 GMT Subject: CN=680b2568-70ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:94:72:e2:a7:6d:b6:67:67:59:a3:8f:45:d3: 51:ca:79:42:03:e2:76:0e:25:e9:f9:4f:a3:52:70: 0e:a5:33:71:56:0e:7b:36:e5:89:01:a9:ff:d7:b5: e1:f6:ea:c4:17:b6:07:9b:af:43:3c:45:b0:25:3e: e2:14:37:ad:4f:cf:af:e5:4c:50:e6:72:54:89:2a: a2:b8:d1:5d:93:e9:91:24:08:0e:5e:70:3c:eb:65: ce:0d:5b:37:65:fd:89:8a:72:10:9b:f0:48:bb:7e: 5e:3c:32:a7:1b:aa:09:a5:91:6e:d7:ce:3e:72:89: 1d:f3:22:19:9b:98:a9:fa:13:6b:91:58:fb:bf:b3: ad:34:79:c3:8d:2c:df:dd:d3:bb:2a:27:a9:b4:f0: 7d:22:23:a3:cf:b3:c3:f3:bb:70:f2:40:16:59:86: a7:c0:bc:59:36:ee:ac:5f:1e:ae:3d:3a:fb:00:41: 75:3f:1d:74:b6:b3:52:55:6f:37:1d:51:c7:9f:18: 7b:de:fe:4d:61:de:de:e5:14:ef:00:1d:61:82:0b: 9f:59:8f:e7:21:67:d9:ea:b0:1e:69:c0:ca:a3:2c: 60:57:2c:68:d2:70:9d:e1:2b:78:3e:75:91:db:ba: 92:f0:57:8b:95:a2:9b:f6:ee:00:4d:67:10:f3:56: 46:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:22:40:7B:5F:7B:6E:8E:EB:A1:B4:04:12:08:51:7D:EF:C0:4D:32 X509v3 Authority Key Identifier: keyid:ED:82:A2:FD:7D:E1:47:52:7C:FC:C4:24:7A:25:6C:1A:0E:DB:4E:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YKi_X3hR1J8_MQkeiVsGg7bTtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:13:c4:a1:0d:8d:72:94:8a:02:1a:06:3d:37:9f:9e:74:53: fd:5d:f3:4d:88:d3:34:9f:15:c9:16:97:d9:0a:ec:1e:1d:01: 21:ee:47:85:72:9d:1f:81:e0:41:08:76:2a:c8:63:15:c6:6a: 93:2b:a5:9f:b9:80:dd:77:29:b9:ed:01:88:4e:ce:f7:48:0b: ca:31:70:15:a9:4c:5c:26:73:a7:3d:0f:f7:eb:1a:a6:44:5c: 7b:fa:34:07:50:df:96:d1:7c:55:dc:7f:9e:33:f8:3e:0a:2f: 01:a6:34:64:28:82:e0:a2:95:ff:d6:61:df:7b:a5:43:ed:cd: f3:a6:02:60:f3:6f:4a:62:f4:f6:43:8c:af:e4:56:c8:30:d5: 89:db:56:e1:12:05:22:4d:91:44:22:db:47:f5:28:fa:b4:93: d9:4c:30:2d:e6:d8:ca:49:0a:d8:fa:83:c2:59:da:c9:0b:c6: bc:20:35:07:cf:ff:de:c5:01:3c:fd:8a:b0:d7:39:8e:20:f1: da:96:d0:19:2b:90:34:d5:10:b8:0b:be:88:39:0d:5b:d7:8c: be:18:8e:70:eb:a5:b0:8d:8b:57:b8:9c:01:a5:48:f0:dd:82: bc:9c:34:70:3a:96:2d:6e:11:e0:ff:40:5e:21:29:17:21:89: 21:77:b0:40 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Mjc4NzExMC8GA1UEBRMoRUQ4MkEyRkQ3REUxNDc1MjdDRkNDNDI0N0EyNTZDMUEw RURCNEVEMzAeFw0yNTA0MjUwNjAyMTZaFw0yNTA1MDIwNjAyMTZaMBgxFjAUBgNV BAMTDTY4MGIyNTY4LTcwYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDclHLip222Z2dZo49F01HKeUID4nYOJen5T6NScA6lM3FWDns25YkBqf/XteH2 6sQXtgebr0M8RbAlPuIUN61Pz6/lTFDmclSJKqK40V2T6ZEkCA5ecDzrZc4NWzdl /YmKchCb8Ei7fl48MqcbqgmlkW7Xzj5yiR3zIhmbmKn6E2uRWPu/s600ecONLN/d 07sqJ6m08H0iI6PPs8Pzu3DyQBZZhqfAvFk27qxfHq49OvsAQXU/HXS2s1JVbzcd UcefGHve/k1h3t7lFO8AHWGCC59Zj+chZ9nqsB5pwMqjLGBXLGjScJ3hK3g+dZHb upLwV4uVopv27gBNZxDzVkbdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZiJAe197 bo7robQEEghRfe/ATTIwHwYDVR0jBBgwFoAU7YKi/X3hR1J8/MQkeiVsGg7bTtMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyNzg3LzJCMUM0N0ZFOEY3 OTExRUY5MkFDNzgxRUM0RjlBRTAyLzdZS2lfWDNoUjFKOF9NUWtlaVZzR2c3YlR0 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN1lLaV9YM2hSMUo4X01Ra2VpVnNHZzdiVHRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy Nzg3LzJCMUM0N0ZFOEY3OTExRUY5MkFDNzgxRUM0RjlBRTAyLzdZS2lfWDNoUjFK OF9NUWtlaVZzR2c3YlR0TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD4TxKENjXKUigIaBj03n550U/1d802I0zSfFckWl9kK7B4dASHuR4Vy nR+B4EEIdirIYxXGapMrpZ+5gN13KbntAYhOzvdIC8oxcBWpTFwmc6c9D/frGqZE XHv6NAdQ35bRfFXcf54z+D4KLwGmNGQoguCilf/WYd97pUPtzfOmAmDzb0pi9PZD jK/kVsgw1YnbVuESBSJNkUQi20f1KPq0k9lMMC3m2MpJCtj6g8JZ2skLxrwgNQfP /97FATz9irDXOY4g8dqW0BkrkDTVELgLvog5DVvXjL4YjnDrpbCNi1e4nAGlSPDd grycNHA6li1uEeD/QF4hKRchiSF3sEA= -----END CERTIFICATE-----Generated at Sat Apr 26 14:20:55 2025 by rpki-client