$ rpki-client -vvf rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft File: 7Yy8VM2G8sH5LexryQnbxvpjTIE.mft (raw, json) Hash identifier: jQDSDb4T0zi3wy8E5BzXSw08IxEZqtphI3jo26hVTE8= Subject key identifier: 55:05:66:D8:4A:4D:10:25:56:A7:56:D2:07:9B:D1:EC:88:A1:05:CE Authority key identifier: ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81 Certificate issuer: /CN=A918A3E6/serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81 Certificate serial: 07D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft Manifest number: 07C6 Signing time: Thu 24 Apr 2025 20:57:35 +0000 Manifest this update: Thu 24 Apr 2025 20:57:34 +0000 Manifest next update: Thu 01 May 2025 20:57:34 +0000 Files and hashes: 1: 7Yy8VM2G8sH5LexryQnbxvpjTIE.crl (hash: 62l8O7X336iLMGSUZ4iFCJEUfYgrCcpepgpTQ19WKzs=) 2: C130A016889811EE8EB03D6EC4F9AE02.roa (hash: ps8T51LAEWm+2oQL0cFEdFjjIOqwK71webhbpBac664=) 3: 7ABD27E4889811EEB99AD46DC4F9AE02.roa (hash: Tzogk+KlaMGiRbq9BoG9FBqCIAU/Ao8ia39qrUgrDpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:57:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2001 (0x7d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A3E6, serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81 Validity Not Before: Apr 24 20:57:34 2025 GMT Not After : May 1 20:57:34 2025 GMT Subject: CN=680aa5bf-26f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:23:05:1f:c1:bc:37:cb:60:c6:ac:50:50:0e: 5d:b9:5b:c1:3d:ba:2c:1f:bb:af:db:45:cd:ea:9f: 5d:70:0f:5f:84:17:79:9e:74:bc:e1:25:36:12:3c: 32:af:a6:89:83:1f:a2:65:3e:b7:ef:07:c4:76:13: 7c:e6:3e:64:37:81:03:d6:88:08:31:e5:6c:f6:aa: 1d:03:7e:df:bf:4c:1c:8a:ba:e9:a6:37:f4:f5:0d: 63:5f:97:f4:32:9e:0b:b3:ea:3c:ad:dd:b1:69:e5: 89:38:25:16:5a:1a:91:d0:a6:eb:b5:13:f1:ee:e7: 03:e4:d2:a5:a0:52:21:17:7d:c7:b6:21:3e:2b:9e: 02:c9:f6:00:e6:01:44:c2:ab:a0:53:75:da:44:b0: 20:c4:ac:15:f9:ac:bb:65:bc:c5:8c:b9:30:45:ce: e5:04:85:9f:43:e8:ce:20:c1:77:72:45:6b:08:29: 50:9f:8e:2a:70:6a:79:77:5e:bd:6a:d4:01:10:5a: f6:a4:dc:85:db:6a:27:76:fb:da:75:52:57:19:45: 19:c9:c7:5d:0e:84:bb:c7:e5:8b:60:d6:1d:52:8a: 26:8c:32:60:3a:28:59:e6:0e:9c:23:33:9d:1e:26: d3:90:c7:63:24:7a:eb:27:2a:19:5e:90:ef:25:0b: f4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:05:66:D8:4A:4D:10:25:56:A7:56:D2:07:9B:D1:EC:88:A1:05:CE X509v3 Authority Key Identifier: keyid:ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:12:bf:84:e9:da:78:a4:a8:33:dc:b7:68:34:8b:a1:9d:5d: 4e:8f:0f:fb:a2:89:1f:96:bd:4b:22:5d:73:a0:27:1b:36:ea: 44:1c:f7:68:be:fc:c7:05:a5:dc:b6:d7:e9:c1:28:0b:a4:c9: 69:4e:25:a6:0e:b4:a6:75:7c:66:f6:c5:8b:66:df:1c:09:e4: a9:72:df:e7:dc:cb:f7:53:c2:64:8a:16:83:e6:07:8a:39:e1: f2:e4:0f:f2:fd:d0:6e:da:87:0a:d6:48:69:00:e9:76:61:8f: d4:1c:d9:a5:b8:7a:9b:03:10:db:d0:46:41:44:d5:68:d7:46: 6f:bf:9a:dc:01:16:38:90:40:d4:ed:8f:c8:7b:dd:61:26:62: 12:ff:be:48:68:ce:ab:1d:5d:33:c2:a7:e0:9b:b7:d6:01:c2: c9:bf:d2:a6:39:57:a6:88:4e:7b:98:f1:1a:fb:6e:6e:cf:87: 49:48:c1:73:2a:c1:a8:c1:e2:ea:c1:fd:ea:71:c3:af:51:e0: 1b:c7:79:02:ba:41:4b:c8:0d:42:d6:02:ae:e8:0d:7a:54:07: 73:59:56:5c:d4:37:95:6e:4f:28:71:12:4c:ef:aa:bc:99:e6: d8:7c:83:c6:ce:94:c6:7b:ba:70:23:c5:76:e4:01:00:72:1b: bb:28:e7:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEzRTYxMTAvBgNVBAUTKEVEOENCQzU0Q0Q4NkYyQzFGOTJERUM2QkM5MDlEQkM2 RkE2MzRDODEwHhcNMjUwNDI0MjA1NzM0WhcNMjUwNTAxMjA1NzM0WjAYMRYwFAYD VQQDEw02ODBhYTViZi0yNmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnSMFH8G8N8tgxqxQUA5duVvBPbosH7uv20XN6p9dcA9fhBd5nnS84SU2Ejwy r6aJgx+iZT637wfEdhN85j5kN4ED1ogIMeVs9qodA37fv0wcirrppjf09Q1jX5f0 Mp4Ls+o8rd2xaeWJOCUWWhqR0KbrtRPx7ucD5NKloFIhF33HtiE+K54CyfYA5gFE wqugU3XaRLAgxKwV+ay7ZbzFjLkwRc7lBIWfQ+jOIMF3ckVrCClQn44qcGp5d169 atQBEFr2pNyF22ondvvadVJXGUUZycddDoS7x+WLYNYdUoomjDJgOihZ5g6cIzOd HibTkMdjJHrrJyoZXpDvJQv0EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFUFZthK TRAlVqdW0geb0eyIoQXOMB8GA1UdIwQYMBaAFO2MvFTNhvLB+S3sa8kJ28b6Y0yB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTNFNi82NDBENjE4RUYy QzkxMUVBODZGMTI3MTdDNEY5QUUwMi83WXk4Vk0yRzhzSDVMZXhyeVFuYnh2cGpU SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZeThWTTJHOHNINUxleHJ5UW5ieHZwalRJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTNFNi82NDBENjE4RUYyQzkxMUVBODZGMTI3MTdDNEY5QUUwMi83WXk4Vk0yRzhz SDVMZXhyeVFuYnh2cGpUSUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACEr+E6dp4pKgz3LdoNIuhnV1Ojw/7ookflr1LIl1zoCcbNupEHPdo vvzHBaXcttfpwSgLpMlpTiWmDrSmdXxm9sWLZt8cCeSpct/n3Mv3U8JkihaD5geK OeHy5A/y/dBu2ocK1khpAOl2YY/UHNmluHqbAxDb0EZBRNVo10Zvv5rcARY4kEDU 7Y/Ie91hJmIS/75IaM6rHV0zwqfgm7fWAcLJv9KmOVemiE57mPEa+25uz4dJSMFz KsGoweLqwf3qccOvUeAbx3kCukFLyA1C1gKu6A16VAdzWVZc1DeVbk8ocRJM76q8 mebYfIPGzpTGe7pwI8V25AEAchu7KOdd -----END CERTIFICATE-----Generated at Sat Apr 26 04:25:30 2025 by rpki-client