$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft File: 7MBefFuSR4uMxDst35ql9slCnyE.mft (raw, json) Hash identifier: /VhpU6AmwyP6t7OT1atncbM42hqyqEw9RRVw2JbYgG4= Subject key identifier: F0:18:9E:AE:B2:E6:52:36:B4:B7:C1:49:63:56:BE:FA:06:E2:DF:77 Authority key identifier: EC:C0:5E:7C:5B:92:47:8B:8C:C4:3B:2D:DF:9A:A5:F6:C9:42:9F:21 Certificate issuer: /CN=A9190D0D/serialNumber=ECC05E7C5B92478B8CC43B2DDF9AA5F6C9429F21 Certificate serial: 0AE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft Manifest number: 0ADB Signing time: Thu 24 Apr 2025 19:18:54 +0000 Manifest this update: Thu 24 Apr 2025 19:18:54 +0000 Manifest next update: Thu 01 May 2025 19:18:54 +0000 Files and hashes: 1: 7MBefFuSR4uMxDst35ql9slCnyE.crl (hash: JxjS2bpQYvXr8AxzI1Pz5dox/BAOGuVebL1kubDRCok=) 2: 2791E5FC476811EA943F5A66C4F9AE02.roa (hash: CuzGm85wLiuHxUTSuvnqnZczG2t94ONHHbEKTXpyL78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.crl rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2785 (0xae1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D0D, serialNumber=ECC05E7C5B92478B8CC43B2DDF9AA5F6C9429F21 Validity Not Before: Apr 24 19:18:54 2025 GMT Not After : May 1 19:18:54 2025 GMT Subject: CN=680a8e9e-812e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ca:79:ba:4d:21:e9:57:b2:02:34:e2:1d:1a: e2:b2:6b:bb:15:19:1f:b9:7a:e9:18:98:50:91:f0: 34:2b:b9:fa:71:93:5e:43:18:5b:83:e6:7f:d1:b8: c3:56:c3:f0:8b:b3:1c:51:a0:07:00:05:96:99:1b: 00:49:0b:67:47:39:e1:62:5d:6f:3c:d4:e6:6e:0e: 3e:12:63:96:43:44:7d:db:a3:df:00:a7:12:d6:e2: 76:04:df:1f:95:87:2d:8a:62:ae:83:82:54:9a:e0: ca:49:e7:b7:01:64:f6:a4:fd:1b:ca:45:ee:27:3d: 97:f1:47:98:ee:53:72:ad:3b:7a:10:fa:98:41:3a: 87:96:e6:1a:a1:de:2f:eb:79:49:d6:1a:94:96:da: 03:64:3c:5d:8b:c9:d3:50:c3:cb:bc:f1:1f:c9:99: ff:ad:8b:d7:a6:fc:73:c3:96:62:81:be:63:d3:3d: d9:6f:9f:b2:a9:5e:af:67:1c:65:4e:75:03:04:c2: 03:8f:9f:f0:8e:bd:69:50:d8:d2:52:4d:d8:42:32: db:03:66:fd:be:7e:ba:42:a7:ba:05:af:bd:08:24: cf:03:7d:3a:0d:24:0e:3c:6e:2d:5d:80:c7:d6:b6: e9:0b:32:b2:85:72:66:53:14:a1:58:b3:48:de:ed: a5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:18:9E:AE:B2:E6:52:36:B4:B7:C1:49:63:56:BE:FA:06:E2:DF:77 X509v3 Authority Key Identifier: keyid:EC:C0:5E:7C:5B:92:47:8B:8C:C4:3B:2D:DF:9A:A5:F6:C9:42:9F:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:9d:14:18:57:3f:c3:63:03:6f:9f:b4:c5:5f:91:b4:6e:b4: 36:8d:0a:af:7b:3c:fe:b2:10:e0:09:2f:6c:aa:1e:35:ce:98: e3:04:c6:9f:6e:c9:c5:2a:fc:58:10:b3:f9:f2:68:16:2a:9b: 3a:d8:4f:e9:8f:99:18:1b:f7:f2:a3:79:70:f2:4a:92:c0:ba: 2b:3c:1c:08:22:ce:ec:fd:c2:df:cc:19:56:bc:70:e1:38:4f: 63:aa:23:01:9b:64:39:01:6d:28:98:8c:49:fc:54:8a:5a:b2: 52:25:ba:3d:cc:ff:fa:1a:11:ca:83:4a:02:b6:23:6a:b3:1a: 2a:02:52:ce:38:1a:97:26:f8:64:ea:d8:4f:5d:b5:62:35:df: 99:82:ef:d4:d1:8a:84:78:b4:ae:65:e8:b0:e0:ce:96:fb:60: 42:fb:fb:02:5e:36:4d:eb:38:1d:a2:2b:e7:91:af:b2:1d:de: f4:a5:07:b3:2c:b6:ea:74:b1:13:7a:97:e0:c1:52:f3:db:29: f9:03:55:8c:eb:d2:ea:45:8b:25:d8:aa:4e:1f:c3:a5:42:f1: c7:56:a6:6c:91:c7:ff:d2:f7:1f:60:62:e1:e3:4e:06:ef:c2: ca:0b:db:9f:f9:48:09:78:45:8d:96:94:9b:3d:95:4f:d5:71: 08:50:81:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBEMEQxMTAvBgNVBAUTKEVDQzA1RTdDNUI5MjQ3OEI4Q0M0M0IyRERGOUFBNUY2 Qzk0MjlGMjEwHhcNMjUwNDI0MTkxODU0WhcNMjUwNTAxMTkxODU0WjAYMRYwFAYD VQQDEw02ODBhOGU5ZS04MTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Mp5uk0h6VeyAjTiHRrismu7FRkfuXrpGJhQkfA0K7n6cZNeQxhbg+Z/0bjD VsPwi7McUaAHAAWWmRsASQtnRznhYl1vPNTmbg4+EmOWQ0R926PfAKcS1uJ2BN8f lYctimKug4JUmuDKSee3AWT2pP0bykXuJz2X8UeY7lNyrTt6EPqYQTqHluYaod4v 63lJ1hqUltoDZDxdi8nTUMPLvPEfyZn/rYvXpvxzw5Zigb5j0z3Zb5+yqV6vZxxl TnUDBMIDj5/wjr1pUNjSUk3YQjLbA2b9vn66Qqe6Ba+9CCTPA306DSQOPG4tXYDH 1rbpCzKyhXJmUxShWLNI3u2lUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPAYnq6y 5lI2tLfBSWNWvvoG4t93MB8GA1UdIwQYMBaAFOzAXnxbkkeLjMQ7Ld+apfbJQp8h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQwRC9GMDM3QkQwODQ3 NjYxMUVBQUJCMTFBNjVDNEY5QUUwMi83TUJlZkZ1U1I0dU14RHN0MzVxbDlzbENu eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdNQmVmRnVTUjR1TXhEc3QzNXFsOXNsQ255RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEQwRC9GMDM3QkQwODQ3NjYxMUVBQUJCMTFBNjVDNEY5QUUwMi83TUJlZkZ1U1I0 dU14RHN0MzVxbDlzbENueUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfnRQYVz/DYwNvn7TFX5G0brQ2jQqvezz+shDgCS9sqh41zpjjBMaf bsnFKvxYELP58mgWKps62E/pj5kYG/fyo3lw8kqSwLorPBwIIs7s/cLfzBlWvHDh OE9jqiMBm2Q5AW0omIxJ/FSKWrJSJbo9zP/6GhHKg0oCtiNqsxoqAlLOOBqXJvhk 6thPXbViNd+Zgu/U0YqEeLSuZeiw4M6W+2BC+/sCXjZN6zgdoivnka+yHd70pQez LLbqdLETepfgwVLz2yn5A1WM69LqRYsl2KpOH8OlQvHHVqZskcf/0vcfYGLh404G 78LKC9uf+UgJeEWNlpSbPZVP1XEIUIHL -----END CERTIFICATE-----Generated at Sat Apr 26 16:57:38 2025 by rpki-client