$ rpki-client -vvf rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft File: 7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft (raw, json) Hash identifier: Z+mF4ZWiLU0wZPlNMd0UBtplkSZjf5BioEbfsMu/6RU= Subject key identifier: 82:F6:53:FF:EC:31:26:94:3E:11:26:C5:FA:DD:8C:C8:4A:55:5D:85 Authority key identifier: EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7 Certificate issuer: /CN=A915D64F/serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7 Certificate serial: 09CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft Manifest number: 09C5 Signing time: Thu 24 Apr 2025 19:51:06 +0000 Manifest this update: Thu 24 Apr 2025 19:51:05 +0000 Manifest next update: Thu 01 May 2025 19:51:05 +0000 Files and hashes: 1: 7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl (hash: eFel0x+xC3xsSTYXGouSUHwv6V1dqYp7rZTU8nsEis4=) 2: 2F7EAF12932411EB97630343C4F9AE02.roa (hash: taEGqA6seasVUG8wh6upIg7VNN7tLKDnm912bRHf+NY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:51:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2507 (0x9cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D64F, serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7 Validity Not Before: Apr 24 19:51:05 2025 GMT Not After : May 1 19:51:05 2025 GMT Subject: CN=680a962a-8867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ab:45:7a:50:c3:b2:1a:ce:77:c6:e0:b0:da: d5:a1:b4:6f:27:56:01:d6:8e:87:06:5c:b3:35:f0: cc:6b:2a:8c:1f:d4:1c:5d:23:8c:e7:d6:f2:3a:a5: 18:48:4b:01:61:e1:63:72:6e:96:d5:9e:4d:ae:e1: 37:62:79:51:25:c6:26:ed:5f:a2:ce:cc:66:7d:cf: 9f:51:d3:81:11:1b:f0:ac:f4:7b:90:f0:6e:fb:ee: 2d:39:2f:72:45:37:47:1f:9d:67:b4:78:62:cc:82: e0:5f:1d:ff:20:b5:06:fd:55:c1:73:b9:36:0d:e6: 30:34:f8:6a:ba:76:03:b4:3a:84:51:6d:85:d6:ae: 7c:8b:a9:6e:f4:0a:72:9c:16:24:1b:71:89:0e:2e: 82:cb:ce:d2:1f:cb:a0:ee:2b:58:73:6f:fb:03:19: 63:eb:11:52:7b:54:ac:35:ec:da:9f:44:83:eb:ed: c7:cf:18:70:69:4f:ee:5a:d3:4e:04:01:d9:28:0b: 0e:27:d2:b6:d5:f1:43:2c:99:e5:47:d2:21:f3:b3: 5e:e0:a9:e2:be:98:22:66:88:2d:2d:e1:ae:6c:33: bc:a0:db:6d:7a:e7:0f:ec:7f:24:56:73:30:39:5a: 53:5c:51:6a:60:da:63:05:b3:34:05:5d:ac:2b:f4: 42:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F6:53:FF:EC:31:26:94:3E:11:26:C5:FA:DD:8C:C8:4A:55:5D:85 X509v3 Authority Key Identifier: keyid:EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:8e:3e:bb:25:fb:ee:d1:3b:7e:41:0b:c6:fa:d3:24:62:3f: 6d:b5:9e:ec:d3:e4:22:af:cd:6a:6f:50:54:95:ad:ab:9d:a8: 9a:49:d8:44:8d:e6:63:0c:b8:5d:b2:c7:42:c4:c7:41:e3:18: 1b:96:3c:65:1c:a7:5b:d4:76:61:d3:6b:a4:f2:b1:5c:91:27: 5e:61:57:df:bf:f6:05:5a:17:87:59:2c:b0:fb:23:90:fa:06: 2e:9c:ff:fe:79:c3:ff:40:eb:5c:ae:de:b8:20:e6:b0:7d:f4: dc:36:db:d2:c0:ca:6f:0e:93:83:ac:55:de:e9:8b:d5:30:f8: 3c:05:a9:88:46:68:df:76:a1:2e:d8:12:ef:4c:84:b5:c1:e2: fc:6f:06:5e:51:cb:8d:0d:4c:f0:b9:14:2b:69:8e:fd:30:26: 6c:33:c9:18:fe:cb:2e:7a:57:28:e9:2b:b9:b7:22:18:00:86: 93:2a:12:64:6f:fc:5f:3b:42:38:31:90:15:9a:7c:99:5e:c1: 34:2f:79:d0:c3:af:61:cf:2e:f9:b0:76:19:6e:6b:3d:51:73: f5:f0:c5:66:2a:fe:00:04:d3:b5:cf:00:6c:01:7d:8e:e9:08: 78:27:9e:e6:8c:8b:e7:e0:30:77:a4:19:ac:74:0b:73:71:17: cb:e2:82:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2NEYxMTAvBgNVBAUTKEVDNzA1QjJBRDZGQjEzRkQ2RkM0MjE0Qjk3NzI3MDQx MTNFNjY4RDcwHhcNMjUwNDI0MTk1MTA1WhcNMjUwNTAxMTk1MTA1WjAYMRYwFAYD VQQDEw02ODBhOTYyYS04ODY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2atFelDDshrOd8bgsNrVobRvJ1YB1o6HBlyzNfDMayqMH9QcXSOM59byOqUY SEsBYeFjcm6W1Z5NruE3YnlRJcYm7V+izsxmfc+fUdOBERvwrPR7kPBu++4tOS9y RTdHH51ntHhizILgXx3/ILUG/VXBc7k2DeYwNPhqunYDtDqEUW2F1q58i6lu9Apy nBYkG3GJDi6Cy87SH8ug7itYc2/7Axlj6xFSe1SsNezan0SD6+3HzxhwaU/uWtNO BAHZKAsOJ9K21fFDLJnlR9Ih87Ne4KnivpgiZogtLeGubDO8oNtteucP7H8kVnMw OVpTXFFqYNpjBbM0BV2sK/RCOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIL2U//s MSaUPhEmxfrdjMhKVV2FMB8GA1UdIwQYMBaAFOxwWyrW+xP9b8QhS5dycEET5mjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY0Ri9GMTE1QjY3MjdE RUQxMUVBOUE1Q0NDNEJDNEY5QUUwMi83SEJiS3RiN0VfMXZ4Q0ZMbDNKd1FSUG1h TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdIQmJLdGI3RV8xdnhDRkxsM0p3UVJQbWFOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDY0Ri9GMTE1QjY3MjdERUQxMUVBOUE1Q0NDNEJDNEY5QUUwMi83SEJiS3RiN0Vf MXZ4Q0ZMbDNKd1FSUG1hTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+jj67Jfvu0Tt+QQvG+tMkYj9ttZ7s0+Qir81qb1BUla2rnaiaSdhE jeZjDLhdssdCxMdB4xgbljxlHKdb1HZh02uk8rFckSdeYVffv/YFWheHWSyw+yOQ +gYunP/+ecP/QOtcrt64IOawffTcNtvSwMpvDpODrFXe6YvVMPg8BamIRmjfdqEu 2BLvTIS1weL8bwZeUcuNDUzwuRQraY79MCZsM8kY/ssuelco6Su5tyIYAIaTKhJk b/xfO0I4MZAVmnyZXsE0L3nQw69hzy75sHYZbms9UXP18MVmKv4ABNO1zwBsAX2O 6Qh4J57mjIvn4DB3pBmsdAtzcRfL4oLO -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:56 2025 by rpki-client