$ rpki-client -vvf rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft File: 7bQ_87hP5VlboMvE9ruHNxPkG7I.mft (raw, json) Hash identifier: UHE5BlR+WixSOI5FsJ+6iOMIogSfk3Jy71PADrJ5p0o= Subject key identifier: 6A:28:E3:D2:FD:9D:05:D1:BF:D1:F4:9D:42:2A:22:00:98:C1:19:2C Authority key identifier: ED:B4:3F:F3:B8:4F:E5:59:5B:A0:CB:C4:F6:BB:87:37:13:E4:1B:B2 Certificate issuer: /CN=A9167D85/serialNumber=EDB43FF3B84FE5595BA0CBC4F6BB873713E41BB2 Certificate serial: 0694 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft Manifest number: 068D Signing time: Fri 02 May 2025 22:23:53 +0000 Manifest this update: Fri 02 May 2025 22:23:53 +0000 Manifest next update: Fri 09 May 2025 22:23:53 +0000 Files and hashes: 1: 7bQ_87hP5VlboMvE9ruHNxPkG7I.crl (hash: 2Rb+vRqOfhJfdXAQaquxHiSi2FtlH4Fx3Wk6GgHc3G0=) 2: 44E9156C730811EC89C1CE31C4F9AE02.roa (hash: 3P7zE+Wtx98FiHeFJ5MpJ+Mdyi0A3n8ttsX2hYFO/Pg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.crl rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 22:23:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1684 (0x694) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167D85, serialNumber=EDB43FF3B84FE5595BA0CBC4F6BB873713E41BB2 Validity Not Before: May 2 22:23:53 2025 GMT Not After : May 9 22:23:53 2025 GMT Subject: CN=681545f9-52b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:de:84:ea:f4:7b:84:dc:1c:9c:e4:f0:10:14: cf:ba:17:05:96:c1:ef:a8:34:64:b0:75:09:e8:0a: 75:b0:c0:8c:78:11:38:5e:b7:3f:de:e1:14:df:c2: b0:80:81:bb:21:c1:50:ee:86:64:3a:37:5d:30:e8: 08:d5:29:88:67:94:46:0a:2b:44:e6:41:cf:7c:47: f8:1d:b9:4a:ea:1f:19:e6:12:85:bc:10:c9:eb:60: df:ab:a3:5c:31:ce:66:e0:6f:17:73:5e:ce:94:fe: 4b:34:19:48:59:ac:33:ad:03:4c:14:3a:34:5b:de: 48:4c:3f:c8:ab:b1:36:0e:42:06:88:b4:b7:85:3c: a4:7c:75:6d:c4:5d:f5:9d:1c:68:01:09:77:eb:3d: 16:e9:99:fe:fa:27:61:17:de:53:ce:44:25:c7:17: f0:b2:07:50:2c:22:bb:22:b2:dd:0e:b7:d0:79:45: 4b:4c:4a:4a:7f:2b:af:05:fa:ec:2f:63:d4:c0:da: 9b:c1:e9:a0:be:fe:cb:93:9b:1a:5e:53:50:65:47: 6c:08:9d:47:20:d7:e1:0e:9c:5e:95:47:5c:0f:22: 06:be:2b:0d:00:f8:2a:a8:40:26:73:f0:1b:71:50: 16:a3:4a:a4:ad:33:a8:1d:4c:2b:9e:2f:13:bd:e2: f0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:28:E3:D2:FD:9D:05:D1:BF:D1:F4:9D:42:2A:22:00:98:C1:19:2C X509v3 Authority Key Identifier: keyid:ED:B4:3F:F3:B8:4F:E5:59:5B:A0:CB:C4:F6:BB:87:37:13:E4:1B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:32:04:80:5c:41:23:fe:65:12:1d:9e:7e:50:bb:9f:c6:fb: 42:2c:02:1f:c2:45:03:54:dd:f1:a9:f9:98:5e:f6:d8:bd:f8: 5c:9d:65:f8:b9:55:99:d4:5e:0f:dc:66:9d:ef:c9:c8:4d:3c: 7f:0b:0a:83:c9:80:3c:b3:80:38:ac:2d:00:a8:7e:60:3b:36: 40:2a:87:07:fa:ba:0f:38:e7:46:f9:cd:ce:ed:e0:88:2f:a1: 11:92:8e:31:82:e2:a8:44:d6:d6:e8:b5:bd:e2:18:0f:07:d5: 37:78:0b:6f:b3:c8:3d:8e:65:a4:b7:d7:2e:86:e0:02:41:8f: 0b:71:6c:af:eb:c6:d0:ec:c8:04:81:fa:76:35:a3:0b:c5:dc: ce:63:02:1c:63:08:f9:e0:dd:d6:07:2a:9b:b6:58:2a:00:45: df:71:cb:5f:49:d3:ac:9d:69:60:ff:16:7a:ea:cb:c9:90:d4: 99:4b:0d:15:6d:98:47:44:ee:84:06:44:88:a3:ac:b9:9c:8c: 06:ef:dc:3b:25:43:43:3f:fe:c2:4a:f2:ac:ec:c5:c9:29:29: 4d:2a:aa:fa:d0:fd:dc:d8:6b:c1:3c:7c:93:50:cc:f7:3d:8f: 17:5e:89:31:b5:e6:2d:54:95:0c:eb:43:71:f9:6d:1e:c5:89: 71:34:4a:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdEODUxMTAvBgNVBAUTKEVEQjQzRkYzQjg0RkU1NTk1QkEwQ0JDNEY2QkI4NzM3 MTNFNDFCQjIwHhcNMjUwNTAyMjIyMzUzWhcNMjUwNTA5MjIyMzUzWjAYMRYwFAYD VQQDEw02ODE1NDVmOS01MmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsd6E6vR7hNwcnOTwEBTPuhcFlsHvqDRksHUJ6Ap1sMCMeBE4Xrc/3uEU38Kw gIG7IcFQ7oZkOjddMOgI1SmIZ5RGCitE5kHPfEf4HblK6h8Z5hKFvBDJ62Dfq6Nc Mc5m4G8Xc17OlP5LNBlIWawzrQNMFDo0W95ITD/Iq7E2DkIGiLS3hTykfHVtxF31 nRxoAQl36z0W6Zn++idhF95TzkQlxxfwsgdQLCK7IrLdDrfQeUVLTEpKfyuvBfrs L2PUwNqbwemgvv7Lk5saXlNQZUdsCJ1HINfhDpxelUdcDyIGvisNAPgqqEAmc/Ab cVAWo0qkrTOoHUwrni8TveLwswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGoo49L9 nQXRv9H0nUIqIgCYwRksMB8GA1UdIwQYMBaAFO20P/O4T+VZW6DLxPa7hzcT5Buy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0Q4NS83MUE2RjdENDZD NkMxMUVCQjlDNzlENENDNEY5QUUwMi83YlFfODdoUDVWbGJvTXZFOXJ1SE54UGtH N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdiUV84N2hQNVZsYm9NdkU5cnVITnhQa0c3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0Q4NS83MUE2RjdENDZDNkMxMUVCQjlDNzlENENDNEY5QUUwMi83YlFfODdoUDVW bGJvTXZFOXJ1SE54UGtHN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChMgSAXEEj/mUSHZ5+ULufxvtCLAIfwkUDVN3xqfmYXvbYvfhcnWX4 uVWZ1F4P3Gad78nITTx/CwqDyYA8s4A4rC0AqH5gOzZAKocH+roPOOdG+c3O7eCI L6ERko4xguKoRNbW6LW94hgPB9U3eAtvs8g9jmWkt9cuhuACQY8LcWyv68bQ7MgE gfp2NaMLxdzOYwIcYwj54N3WByqbtlgqAEXfcctfSdOsnWlg/xZ66svJkNSZSw0V bZhHRO6EBkSIo6y5nIwG79w7JUNDP/7CSvKs7MXJKSlNKqr60P3c2GvBPHyTUMz3 PY8XXokxteYtVJUM60Nx+W0exYlxNEob -----END CERTIFICATE-----Generated at Sun May 4 15:13:57 2025 by rpki-client