$ rpki-client -vvf rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft File: 7knhDcoGuBY3lASCqMSKzvukTT8.mft (raw, json) Hash identifier: n2gnX6OYNBkm/IZdV0JgpSiBGslKivZln6FiFYnAs7s= Subject key identifier: C7:04:54:95:1E:44:24:72:5C:57:EF:3B:3E:AE:7A:AE:4F:09:4F:64 Authority key identifier: EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F Certificate issuer: /CN=A918E76B/serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F Certificate serial: 0956 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft Manifest number: 0950 Signing time: Thu 24 Apr 2025 20:06:07 +0000 Manifest this update: Thu 24 Apr 2025 20:06:07 +0000 Manifest next update: Thu 01 May 2025 20:06:07 +0000 Files and hashes: 1: 7knhDcoGuBY3lASCqMSKzvukTT8.crl (hash: nf9/53aNnEmgufRUMIuLxSW6JWCoPK3KqRpCytwJ1ks=) 2: DD726152945311EAB9A9B971C4F9AE02.roa (hash: eARvkLPx4cJh+IeHG0XdxEw7zw/djQ5xDufaDbeB8VU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2390 (0x956) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E76B, serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F Validity Not Before: Apr 24 20:06:07 2025 GMT Not After : May 1 20:06:07 2025 GMT Subject: CN=680a99af-de98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:36:b0:51:8a:92:ee:5b:f4:ec:a4:b7:e5:e3: 5a:5d:3e:f5:97:56:5b:9d:06:8e:fb:8c:c3:8e:1f: 04:83:8b:e3:21:64:3b:65:0a:5b:06:84:9c:2a:81: ee:c2:8b:44:e7:9b:53:6e:25:26:a9:c7:23:a1:ae: 8a:d7:16:b0:34:1d:12:8b:96:95:1d:89:a9:cf:61: 27:6e:fa:df:ce:51:ae:c3:00:b5:79:fb:1b:81:59: 90:cd:f8:f5:21:aa:8d:e6:78:07:16:18:28:78:ce: 1d:cd:97:77:17:7f:69:6e:7a:10:d1:33:4c:90:d0: af:92:79:06:66:83:04:c0:d7:42:6b:bf:2c:f1:7b: 71:04:64:3c:af:34:14:4c:49:bd:f0:59:76:ea:7b: dc:b5:ab:35:03:36:ed:3b:e3:2b:ba:98:4a:ab:0d: bf:85:68:dd:b2:e0:b5:a6:99:cc:ca:52:c3:a7:c3: 8a:03:9d:64:61:01:cf:d4:66:f5:f7:f1:c0:23:27: 17:17:0f:80:b0:ae:79:7a:0f:5e:1a:7d:25:29:53: 0a:9e:76:61:68:51:10:62:97:4a:68:0a:b4:e5:f0: 39:be:6c:f6:1b:94:91:ae:94:c5:43:a7:47:a8:29: 0f:c5:3a:52:20:81:50:f9:5a:ee:25:bb:67:4f:fd: 32:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:04:54:95:1E:44:24:72:5C:57:EF:3B:3E:AE:7A:AE:4F:09:4F:64 X509v3 Authority Key Identifier: keyid:EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:a6:5a:77:19:3c:67:3c:fd:ac:d6:33:b4:1c:04:3e:27:bb: 1a:f9:7d:be:11:09:c8:1d:95:93:a8:8e:1c:df:45:10:d8:f8: 8e:3c:bb:44:39:77:48:90:a5:46:6a:41:20:45:62:08:3d:87: f9:bc:58:7c:de:87:f5:b2:26:55:e5:bd:ee:67:9d:8d:ad:4a: 80:ab:53:c0:86:f9:c0:b1:59:5c:c7:f0:66:29:27:5a:3e:f2: 09:c0:d0:a2:d8:df:25:89:1f:60:18:ab:de:04:e3:32:85:9d: 64:76:de:57:37:09:04:c9:08:ab:30:e1:ea:71:77:aa:68:90: bb:e8:b7:a4:d4:bc:d6:2c:83:09:cf:62:dc:b1:98:f6:b1:a0: ce:1b:26:7f:60:66:ce:ed:6f:74:76:68:da:92:15:d3:1d:f1: 9d:03:40:5b:0f:77:ef:7e:00:cf:cb:4b:d0:7d:54:e5:05:4a: d1:c2:ca:98:94:8f:29:98:c7:97:38:55:9c:47:c5:bd:d2:6f: ba:94:10:0f:7e:28:c8:e8:c0:37:fe:ed:13:1f:60:8e:39:49: 32:05:00:73:1c:4d:5d:0e:f3:5b:5f:6b:42:1e:bc:95:a9:8a: 8c:ac:7d:9d:15:af:0e:34:9b:f4:76:cc:01:a4:65:9f:8a:eb: 0a:10:44:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU3NkIxMTAvBgNVBAUTKEVFNDlFMTBEQ0EwNkI4MTYzNzk0MDQ4MkE4QzQ4QUNF RkJBNDREM0YwHhcNMjUwNDI0MjAwNjA3WhcNMjUwNTAxMjAwNjA3WjAYMRYwFAYD VQQDEw02ODBhOTlhZi1kZTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzawUYqS7lv07KS35eNaXT71l1ZbnQaO+4zDjh8Eg4vjIWQ7ZQpbBoScKoHu wotE55tTbiUmqccjoa6K1xawNB0Si5aVHYmpz2EnbvrfzlGuwwC1efsbgVmQzfj1 IaqN5ngHFhgoeM4dzZd3F39pbnoQ0TNMkNCvknkGZoMEwNdCa78s8XtxBGQ8rzQU TEm98Fl26nvctas1AzbtO+MruphKqw2/hWjdsuC1ppnMylLDp8OKA51kYQHP1Gb1 9/HAIycXFw+AsK55eg9eGn0lKVMKnnZhaFEQYpdKaAq05fA5vmz2G5SRrpTFQ6dH qCkPxTpSIIFQ+VruJbtnT/0ySwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcEVJUe RCRyXFfvOz6ueq5PCU9kMB8GA1UdIwQYMBaAFO5J4Q3KBrgWN5QEgqjEis77pE0/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc2Qi9CRjE4MzIzMjk0 NTIxMUVBODA2RTY5NzBDNEY5QUUwMi83a25oRGNvR3VCWTNsQVNDcU1TS3p2dWtU VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdrbmhEY29HdUJZM2xBU0NxTVNLenZ1a1RUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTc2Qi9CRjE4MzIzMjk0NTIxMUVBODA2RTY5NzBDNEY5QUUwMi83a25oRGNvR3VC WTNsQVNDcU1TS3p2dWtUVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEplp3GTxnPP2s1jO0HAQ+J7sa+X2+EQnIHZWTqI4c30UQ2PiOPLtE OXdIkKVGakEgRWIIPYf5vFh83of1siZV5b3uZ52NrUqAq1PAhvnAsVlcx/BmKSda PvIJwNCi2N8liR9gGKveBOMyhZ1kdt5XNwkEyQirMOHqcXeqaJC76Lek1LzWLIMJ z2LcsZj2saDOGyZ/YGbO7W90dmjakhXTHfGdA0BbD3fvfgDPy0vQfVTlBUrRwsqY lI8pmMeXOFWcR8W90m+6lBAPfijI6MA3/u0TH2COOUkyBQBzHE1dDvNbX2tCHryV qYqMrH2dFa8ONJv0dswBpGWfiusKEEQF -----END CERTIFICATE-----Generated at Sat Apr 26 04:02:33 2025 by rpki-client