$ rpki-client -vvf rpki.apnic.net/member_repository/A9167CB5/FA37C63E225611EFB7561F46C4F9AE02/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.mft File: -oEfUuUZWkKdcG0ZwAMjfDIJqjc.mft (raw, json) Hash identifier: 7Ohi/X6W88/dOuRLHhkga9g19HkWHqQb1TMmf/yYFXg= Subject key identifier: D5:3C:73:1C:72:20:A3:42:4E:9B:3F:63:25:C7:27:CF:4B:91:EC:B4 Authority key identifier: FA:81:1F:52:E5:19:5A:42:9D:70:6D:19:C0:03:23:7C:32:09:AA:37 Certificate issuer: /CN=A9167CB5/serialNumber=FA811F52E5195A429D706D19C003237C3209AA37 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167CB5/FA37C63E225611EFB7561F46C4F9AE02/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.mft Manifest number: A7 Signing time: Fri 25 Apr 2025 05:08:46 +0000 Manifest this update: Fri 25 Apr 2025 05:08:46 +0000 Manifest next update: Fri 02 May 2025 05:08:46 +0000 Files and hashes: 1: -oEfUuUZWkKdcG0ZwAMjfDIJqjc.crl (hash: 8uxwXkttheAPXG+TlMHED21uRH2x4K+iYsKeYgfdjzg=) 2: D16A1B5C225711EF975F6747C4F9AE02.roa (hash: 8wJfVmwicvQp5ybkXyvh/U8tiFP/mOR8lTRB18DXQ0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167CB5/FA37C63E225611EFB7561F46C4F9AE02/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.crl rsync://rpki.apnic.net/member_repository/A9167CB5/FA37C63E225611EFB7561F46C4F9AE02/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167CB5, serialNumber=FA811F52E5195A429D706D19C003237C3209AA37 Validity Not Before: Apr 25 05:08:46 2025 GMT Not After : May 2 05:08:46 2025 GMT Subject: CN=680b18de-3788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fc:a3:46:48:bc:bc:48:d7:2b:00:ff:6f:3a: 2e:63:a5:11:89:7e:86:97:12:9e:02:cb:8f:52:98: 89:5a:6c:ad:9d:c6:d9:10:54:58:a9:5c:c5:81:2a: 64:d7:9f:b2:f6:00:fc:07:5e:e4:91:42:f9:05:5b: c5:39:8f:e8:46:13:ec:9e:dc:79:1b:a5:29:1d:43: cc:81:d6:73:5c:e0:d9:d1:f6:cd:6d:50:b2:40:f3: 7e:1f:dd:f4:44:2f:a4:f0:94:f2:28:f6:a9:52:95: 71:3c:6b:84:b0:71:4c:c5:0d:9c:39:1b:35:c9:51: 9f:7c:53:cf:1f:66:7d:09:21:4b:fe:44:61:a8:41: 36:8f:f7:ba:fd:f6:61:bb:1d:4d:5c:a1:53:05:26: df:92:44:63:c8:13:08:a7:13:74:75:fe:30:41:eb: c6:f8:5e:e7:b6:3f:ec:48:84:23:1c:16:eb:15:51: 56:11:02:ba:bf:7a:dc:00:eb:14:40:98:99:0b:7d: 7c:a1:2e:29:51:b9:11:ea:2c:77:bf:30:c7:6d:b5: 42:6f:2f:f1:60:24:b6:99:87:a0:89:ea:f6:6e:b0: 83:ca:2b:62:79:b6:7e:45:62:2f:32:34:78:4e:67: ec:0f:59:9a:48:e1:bd:78:88:3c:b3:d5:4a:e5:ac: 08:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:3C:73:1C:72:20:A3:42:4E:9B:3F:63:25:C7:27:CF:4B:91:EC:B4 X509v3 Authority Key Identifier: keyid:FA:81:1F:52:E5:19:5A:42:9D:70:6D:19:C0:03:23:7C:32:09:AA:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167CB5/FA37C63E225611EFB7561F46C4F9AE02/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167CB5/FA37C63E225611EFB7561F46C4F9AE02/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:c6:3e:c1:18:f6:56:e2:fc:04:8d:97:48:00:08:8c:23:77: 6f:f0:ca:55:63:43:28:e0:f4:c3:86:87:d8:85:d9:99:36:d0: c4:57:df:ba:e2:0e:5c:10:83:72:ab:85:da:69:b8:a1:01:ff: a5:59:f8:c8:dc:fb:f0:ed:38:75:24:b0:21:07:f4:64:75:0b: aa:9b:74:10:fe:4b:e2:9b:0d:ba:3c:2e:9e:6c:82:ea:83:03: dc:72:84:83:64:85:eb:f4:48:61:54:ec:6c:3b:81:90:42:bb: 9d:53:e2:75:a3:c2:bd:59:bd:d7:cb:91:1b:f4:fe:bb:78:b5: 18:ce:8a:cd:a3:f6:a5:59:03:c8:f1:10:33:b0:ee:e1:e5:74: e6:47:0b:40:36:29:93:95:72:08:db:e2:fb:e4:ca:40:48:4e: c0:2e:f3:74:9e:f3:38:84:cf:68:2b:64:f6:51:56:0b:e0:36: 91:54:e1:53:e9:8c:26:f0:11:a8:1c:0e:2d:bf:6c:a1:6d:5b: c1:18:6d:aa:ad:c4:6f:bf:87:23:16:d9:66:80:b1:7e:70:24: 77:d7:0b:ab:d8:0b:32:22:06:c2:63:fc:28:42:aa:b7:6f:9e: a9:d8:71:b4:86:f5:fe:cc:f0:23:f1:ee:e6:2d:34:52:31:9c: 2c:b3:7e:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdDQjUxMTAvBgNVBAUTKEZBODExRjUyRTUxOTVBNDI5RDcwNkQxOUMwMDMyMzdD MzIwOUFBMzcwHhcNMjUwNDI1MDUwODQ2WhcNMjUwNTAyMDUwODQ2WjAYMRYwFAYD VQQDEw02ODBiMThkZS0zNzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3vyjRki8vEjXKwD/bzouY6URiX6GlxKeAsuPUpiJWmytncbZEFRYqVzFgSpk 15+y9gD8B17kkUL5BVvFOY/oRhPsntx5G6UpHUPMgdZzXODZ0fbNbVCyQPN+H930 RC+k8JTyKPapUpVxPGuEsHFMxQ2cORs1yVGffFPPH2Z9CSFL/kRhqEE2j/e6/fZh ux1NXKFTBSbfkkRjyBMIpxN0df4wQevG+F7ntj/sSIQjHBbrFVFWEQK6v3rcAOsU QJiZC318oS4pUbkR6ix3vzDHbbVCby/xYCS2mYegier2brCDyitiebZ+RWIvMjR4 TmfsD1maSOG9eIg8s9VK5awIOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNU8cxxy IKNCTps/YyXHJ89Lkey0MB8GA1UdIwQYMBaAFPqBH1LlGVpCnXBtGcADI3wyCao3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0NCNS9GQTM3QzYzRTIy NTYxMUVGQjc1NjFGNDZDNEY5QUUwMi8tb0VmVXVVWldrS2RjRzBad0FNamZESUpx amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1vRWZVdVVaV2tLZGNHMFp3QU1qZkRJSnFqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0NCNS9GQTM3QzYzRTIyNTYxMUVGQjc1NjFGNDZDNEY5QUUwMi8tb0VmVXVVWldr S2RjRzBad0FNamZESUpxamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpxj7BGPZW4vwEjZdIAAiMI3dv8MpVY0Mo4PTDhofYhdmZNtDEV9+6 4g5cEINyq4XaabihAf+lWfjI3Pvw7Th1JLAhB/RkdQuqm3QQ/kvimw26PC6ebILq gwPccoSDZIXr9EhhVOxsO4GQQrudU+J1o8K9Wb3Xy5Eb9P67eLUYzorNo/alWQPI 8RAzsO7h5XTmRwtANimTlXII2+L75MpASE7ALvN0nvM4hM9oK2T2UVYL4DaRVOFT 6Ywm8BGoHA4tv2yhbVvBGG2qrcRvv4cjFtlmgLF+cCR31wur2AsyIgbCY/woQqq3 b56p2HG0hvX+zPAj8e7mLTRSMZwss341 -----END CERTIFICATE-----Generated at Sat Apr 26 13:07:34 2025 by rpki-client