$ rpki-client -vvf rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft File: 7f5wbJSbXs8du-Rg29BO_nweEos.mft (raw, json) Hash identifier: qy1fcoi36wAZxogYqeYcA2XC+zFL60j9BucFoTo7tj4= Subject key identifier: 8D:0E:D8:A3:04:58:44:0E:05:9E:25:01:32:F1:BE:E4:E3:81:AC:0C Authority key identifier: ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B Certificate issuer: /CN=A9170EED/serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft Manifest number: 6E Signing time: Fri 25 Apr 2025 05:55:43 +0000 Manifest this update: Fri 25 Apr 2025 05:55:42 +0000 Manifest next update: Fri 02 May 2025 05:55:42 +0000 Files and hashes: 1: 7f5wbJSbXs8du-Rg29BO_nweEos.crl (hash: 1qwSO8BbeYhpH4RMpVy8DtSOrnzMHVG/lUCVNDfu5LA=) 2: A647525E853B11EFB513D149C4F9AE02.roa (hash: NVZ/4pC5x+KRkn1xpv0XuIrsdCyF6l6g38IM7lDAhYA=) 3: 4A6837A4CE0C11EF8EFFF140C4F9AE02.roa (hash: HwJfMTQ7jgg3uM77Aihq1iVX6drdh4vJBA8hbyppq9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:55:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170EED, serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B Validity Not Before: Apr 25 05:55:42 2025 GMT Not After : May 2 05:55:42 2025 GMT Subject: CN=680b23df-5bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:eb:32:73:9e:25:15:bf:7a:5a:27:89:7e:95: a3:ac:b3:82:64:3b:62:5e:7f:8d:99:a4:fc:2b:99: 9d:ee:24:0b:89:ae:32:c0:c1:5f:f9:d9:d3:ca:fc: f4:d2:f3:6a:9f:99:af:ad:b2:df:2e:92:02:69:35: 83:12:ef:e2:3f:c2:a5:77:80:0b:f4:55:a6:3e:f6: 90:06:20:f8:dd:e1:00:cb:fb:50:42:40:3c:0e:cc: df:87:81:2a:68:fd:08:db:b6:8d:c0:4e:52:cc:0d: 88:20:a7:f1:a3:6b:c2:e7:f2:a6:e0:bc:19:ce:1a: a6:d1:c2:87:bc:48:9b:c4:19:7e:09:c9:f8:a4:4b: 8a:a9:f8:4f:12:c4:bc:3e:8e:0e:24:fc:ed:8e:21: de:17:53:fa:ba:cb:03:ce:04:46:71:63:34:54:30: cd:d4:8a:df:6e:71:28:e6:eb:b4:66:a8:05:79:d3: 23:ad:ed:34:e2:16:99:2e:38:3b:fe:34:68:02:8e: 8d:ea:ed:89:f3:6c:91:da:75:37:26:88:97:2f:b2: d4:04:11:9b:29:93:d7:2e:a8:8e:8e:30:d0:2c:62: 6c:53:cf:88:83:9b:bf:50:a0:ff:e8:8b:3c:ad:30: 3c:7c:a0:a5:de:b2:e2:be:56:db:db:5c:d9:df:d6: d0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0E:D8:A3:04:58:44:0E:05:9E:25:01:32:F1:BE:E4:E3:81:AC:0C X509v3 Authority Key Identifier: keyid:ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:78:9c:d7:9c:ab:8d:88:86:4e:2f:97:30:b4:7b:65:55:01: e3:7b:78:e4:37:ae:a0:ae:fb:27:7f:66:c0:3a:a4:64:77:04: ed:20:fe:c5:14:ad:ec:e1:e3:92:38:a0:0a:16:78:97:c1:1c: d7:b1:51:f1:87:a2:91:27:95:04:3d:f9:04:e6:3b:76:3f:75: 07:e4:61:cf:47:d1:ae:1f:fc:43:ba:7f:5e:82:b6:0d:6f:86: 9a:f5:9a:7b:c8:74:40:c7:7a:80:3b:f9:d0:41:6f:65:e5:a4: 99:eb:03:0b:91:99:f7:0b:9d:98:8f:6d:48:c2:9a:d7:c7:71: 91:2e:7d:84:42:c7:c2:34:70:7f:d9:ad:5c:dd:ef:69:02:c8: 73:7a:65:f8:b1:5f:b7:09:91:35:4f:c6:a3:d5:db:34:65:f6: d3:b9:16:c3:1c:89:a6:06:a8:1e:39:56:48:47:88:0c:da:cc: a1:e3:a2:1e:57:6e:88:d7:a4:b3:85:53:4f:32:bb:17:9b:85: fb:c5:08:c9:4d:50:de:a1:51:82:7a:18:ae:c8:af:21:a8:5e: 42:5e:08:4d:e6:de:0e:e8:ba:bd:ac:8d:22:22:07:bd:09:d5: 98:7e:9e:e5:8a:a0:98:d5:dd:7a:ee:9c:a5:eb:6c:59:15:c7: 53:a7:1b:db -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MEVFRDExMC8GA1UEBRMoRURGRTcwNkM5NDlCNUVDRjFEQkJFNDYwREJEMDRFRkU3 QzFFMTI4QjAeFw0yNTA0MjUwNTU1NDJaFw0yNTA1MDIwNTU1NDJaMBgxFjAUBgNV BAMTDTY4MGIyM2RmLTViZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC66zJzniUVv3paJ4l+laOss4JkO2Jef42ZpPwrmZ3uJAuJrjLAwV/52dPK/PTS 82qfma+tst8ukgJpNYMS7+I/wqV3gAv0VaY+9pAGIPjd4QDL+1BCQDwOzN+HgSpo /Qjbto3ATlLMDYggp/Gja8Ln8qbgvBnOGqbRwoe8SJvEGX4JyfikS4qp+E8SxLw+ jg4k/O2OId4XU/q6ywPOBEZxYzRUMM3Uit9ucSjm67RmqAV50yOt7TTiFpkuODv+ NGgCjo3q7YnzbJHadTcmiJcvstQEEZspk9cuqI6OMNAsYmxTz4iDm79QoP/oizyt MDx8oKXesuK+VtvbXNnf1tBTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjQ7YowRY RA4FniUBMvG+5OOBrAwwHwYDVR0jBBgwFoAU7f5wbJSbXs8du+Rg29BO/nweEosw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwRUVELzNGRjM5NDBFODUz QjExRUZBMzA3MjM0OUM0RjlBRTAyLzdmNXdiSlNiWHM4ZHUtUmcyOUJPX253ZUVv cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN2Y1d2JKU2JYczhkdS1SZzI5Qk9fbndlRW9zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw RUVELzNGRjM5NDBFODUzQjExRUZBMzA3MjM0OUM0RjlBRTAyLzdmNXdiSlNiWHM4 ZHUtUmcyOUJPX253ZUVvcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEB4nNecq42Ihk4vlzC0e2VVAeN7eOQ3rqCu+yd/ZsA6pGR3BO0g/sUU rezh45I4oAoWeJfBHNexUfGHopEnlQQ9+QTmO3Y/dQfkYc9H0a4f/EO6f16Ctg1v hpr1mnvIdEDHeoA7+dBBb2XlpJnrAwuRmfcLnZiPbUjCmtfHcZEufYRCx8I0cH/Z rVzd72kCyHN6ZfixX7cJkTVPxqPV2zRl9tO5FsMciaYGqB45VkhHiAzazKHjoh5X bojXpLOFU08yuxebhfvFCMlNUN6hUYJ6GK7IryGoXkJeCE3m3g7our2sjSIiB70J 1Zh+nuWKoJjV3XrunKXrbFkVx1OnG9s= -----END CERTIFICATE-----Generated at Sat Apr 26 03:51:33 2025 by rpki-client