$ rpki-client -vvf rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft File: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft (raw, json) Hash identifier: XjhjABsXi8pywdylztTOqgpZ5y2nDGNmjLq6ZcJef1I= Subject key identifier: 40:6D:86:7D:44:C5:4B:45:3B:F9:E8:B8:8C:08:DC:11:BF:70:60:C5 Authority key identifier: EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33 Certificate issuer: /CN=A9164B0A/serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33 Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft Manifest number: B4 Signing time: Fri 25 Apr 2025 05:01:41 +0000 Manifest this update: Fri 25 Apr 2025 05:01:40 +0000 Manifest next update: Fri 02 May 2025 05:01:40 +0000 Files and hashes: 1: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl (hash: D/UVafFvwR6Kzo/DvmwbUkfzq17fFuzYkNg0ZDNq3IA=) 2: 0913CC14A59911EFBA373D1BC4F9AE02.roa (hash: gsiPVh91f5x0agyT4K6ET9Cizm+TUqAkZy67lxkkwXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164B0A, serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33 Validity Not Before: Apr 25 05:01:40 2025 GMT Not After : May 2 05:01:40 2025 GMT Subject: CN=680b1734-9cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:b4:63:ef:a1:8f:c0:ad:16:8e:64:d6:db:df: d6:31:67:b9:74:3c:20:a7:c6:be:90:5c:39:99:7a: b9:6d:fc:33:4e:17:0d:a3:14:fc:76:0b:dc:5e:c2: 93:1e:76:fd:e1:d8:d1:ca:c5:ce:5b:37:08:b4:2a: 03:89:2a:91:38:94:83:36:d9:1b:2b:01:52:01:92: 84:d5:10:60:99:f5:a7:b1:29:aa:96:c0:80:32:63: 9b:5b:06:3c:12:4d:31:6e:84:54:2a:e8:79:bd:ed: 3b:01:81:75:1e:7a:60:17:12:8b:ce:31:83:98:cf: 65:d2:a1:ea:d3:b5:f2:7a:75:e3:da:d0:86:5a:4b: 8a:30:42:2d:50:04:3d:06:9e:8c:12:87:a6:1b:2e: e1:8a:19:b5:28:e7:bd:4a:7c:25:5c:1b:8c:c9:c7: 09:bc:f5:ae:2b:ed:59:fe:33:ef:1b:20:99:9e:a5: ae:c7:db:b0:00:b4:e1:7f:f1:f0:65:2b:22:3a:14: eb:af:5d:eb:0b:54:c5:2b:fa:37:29:98:43:94:19: 33:91:83:ef:39:3e:eb:7e:34:08:38:31:9b:06:ec: 6c:b1:fa:52:5c:bb:97:ce:5c:62:50:69:5f:26:94: 6b:be:fa:30:2f:e3:ec:e9:7c:a8:73:8d:f3:e4:30: 91:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:6D:86:7D:44:C5:4B:45:3B:F9:E8:B8:8C:08:DC:11:BF:70:60:C5 X509v3 Authority Key Identifier: keyid:EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:39:95:a6:b5:9f:00:53:b3:08:ab:e0:25:22:ef:fa:68:81: f1:ca:83:85:d6:81:e8:d4:30:8f:1a:5f:54:24:9b:35:d9:e7: b1:9c:4b:93:5a:3b:f8:d4:46:b4:96:20:e1:39:a2:8d:39:75: c2:0d:33:c9:a5:54:ea:e4:df:ef:84:c6:18:52:3e:29:88:ba: 0e:2a:c0:0f:85:81:3b:67:15:9c:5c:80:06:f9:8c:13:5e:ad: 80:7d:f5:13:6c:69:ca:c5:75:31:9f:1f:a8:ac:fd:89:92:0c: 51:ec:57:da:f0:aa:53:4f:db:f6:b4:ba:b5:96:c7:10:77:78: a4:4e:78:fb:4b:e8:66:d2:29:ba:61:e9:d3:d1:4d:83:55:2f: 87:1a:18:94:51:ac:6f:06:97:fb:da:0b:62:4c:d5:31:67:e8: d8:d3:b6:15:92:db:69:38:6c:70:3e:ee:07:d4:19:83:ed:86: 88:e3:32:5f:b7:c8:b5:1e:f1:13:53:8f:64:fe:45:8c:c3:47: d1:8a:85:2d:12:29:b7:99:a5:71:ff:7e:a3:72:a6:b2:d8:b0: 7f:bd:3d:ff:75:08:c2:84:95:48:e9:16:e0:d4:08:7a:66:ea: cf:7c:42:26:55:be:ff:07:b0:48:a4:cf:91:bf:62:dc:85:cf: f3:76:6e:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRCMEExMTAvBgNVBAUTKEVFNEIwNTYxODQzN0YxOTQ4RDkyOTlGOEE0RjkyOUMx ODdEOTdGMzMwHhcNMjUwNDI1MDUwMTQwWhcNMjUwNTAyMDUwMTQwWjAYMRYwFAYD VQQDEw02ODBiMTczNC05Y2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+LRj76GPwK0WjmTW29/WMWe5dDwgp8a+kFw5mXq5bfwzThcNoxT8dgvcXsKT Hnb94djRysXOWzcItCoDiSqROJSDNtkbKwFSAZKE1RBgmfWnsSmqlsCAMmObWwY8 Ek0xboRUKuh5ve07AYF1HnpgFxKLzjGDmM9l0qHq07XyenXj2tCGWkuKMEItUAQ9 Bp6MEoemGy7hihm1KOe9SnwlXBuMyccJvPWuK+1Z/jPvGyCZnqWux9uwALThf/Hw ZSsiOhTrr13rC1TFK/o3KZhDlBkzkYPvOT7rfjQIODGbBuxssfpSXLuXzlxiUGlf JpRrvvowL+Ps6Xyoc43z5DCRBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBthn1E xUtFO/nouIwI3BG/cGDFMB8GA1UdIwQYMBaAFO5LBWGEN/GUjZKZ+KT5KcGH2X8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEIwQS80Q0YwRjcwODEy OTIxMUVGQUIxMDY1NjRDNEY5QUUwMi83a3NGWVlRMzhaU05rcG40cFBrcHdZZlpm ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdrc0ZZWVEzOFpTTmtwbjRwUGtwd1lmWmZ6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEIwQS80Q0YwRjcwODEyOTIxMUVGQUIxMDY1NjRDNEY5QUUwMi83a3NGWVlRMzha U05rcG40cFBrcHdZZlpmek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaOZWmtZ8AU7MIq+AlIu/6aIHxyoOF1oHo1DCPGl9UJJs12eexnEuT Wjv41Ea0liDhOaKNOXXCDTPJpVTq5N/vhMYYUj4piLoOKsAPhYE7ZxWcXIAG+YwT Xq2AffUTbGnKxXUxnx+orP2JkgxR7Ffa8KpTT9v2tLq1lscQd3ikTnj7S+hm0im6 YenT0U2DVS+HGhiUUaxvBpf72gtiTNUxZ+jY07YVkttpOGxwPu4H1BmD7YaI4zJf t8i1HvETU49k/kWMw0fRioUtEim3maVx/36jcqay2LB/vT3/dQjChJVI6Rbg1Ah6 ZurPfEImVb7/B7BIpM+Rv2Lchc/zdm74 -----END CERTIFICATE-----Generated at Sat Apr 26 05:27:42 2025 by rpki-client