$ rpki-client -vvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft File: c7-jegclQ-L9dR5OBQw603ABDFk.mft (raw, json) Hash identifier: EvPidm32gbTBBQvMEUvD5pq4x9VA/20oTNk0y/rKH9A= Subject key identifier: D3:03:AE:17:F7:8E:7E:B7:A1:D9:F6:7C:9C:FE:2D:8F:B8:BE:78:D2 Authority key identifier: 73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59 Certificate issuer: /CN=A9195AA2/serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59 Certificate serial: 07D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft Manifest number: 13E9 Signing time: Thu 24 Apr 2025 18:27:12 +0000 Manifest this update: Thu 24 Apr 2025 18:27:11 +0000 Manifest next update: Thu 01 May 2025 18:27:11 +0000 Files and hashes: 1: c7-jegclQ-L9dR5OBQw603ABDFk.crl (hash: pzi81t35xrzr8oqzrrEXYY9LJQgILL7YxZ7dud8KNlE=) 2: 9839F630765111EDA744AE3AC4F9AE02.roa (hash: wVNJXIBMdOA17Qx14FaFmrSL3yk1+Qgxj7UVSyMJrHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2001 (0x7d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195AA2, serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59 Validity Not Before: Apr 24 18:27:11 2025 GMT Not After : May 1 18:27:11 2025 GMT Subject: CN=680a8280-2761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ec:8c:a0:14:dc:10:51:0c:d0:76:c5:8b:c1: 48:54:f9:ab:23:70:1c:8a:de:a2:cf:d5:24:6c:4e: 03:4f:40:0b:32:62:ae:b8:18:7e:43:1b:3c:be:62: 42:a6:56:7e:60:8d:11:bf:39:71:c4:24:fe:dc:1c: 45:ba:ae:86:e3:f7:3e:99:49:31:aa:bf:f1:75:d9: e2:d0:9c:21:38:07:a9:db:ba:71:0d:24:fb:ff:52: 1f:05:4d:58:8e:20:23:f9:f7:31:6a:10:51:2f:ec: f5:c1:61:9e:64:d0:e2:a3:b7:96:5f:b1:4d:ce:19: 88:ac:3e:d6:7b:b9:6f:75:76:93:ab:db:c5:ff:85: b2:51:7b:c5:95:50:de:e3:03:eb:57:ab:c1:5a:dd: b3:33:5f:5d:0f:81:90:a2:01:bc:1e:e1:b2:9c:30: 74:aa:01:15:57:c1:18:bd:40:06:3b:ff:ca:ec:1d: 7d:69:65:99:d0:98:71:e7:21:00:49:72:6e:86:38: b4:e7:a0:70:80:8f:9c:c7:8a:e7:be:fd:b0:49:2f: c4:4b:32:fe:1c:6e:33:1a:47:3a:3e:6a:22:40:67: 98:e2:d8:58:28:21:6a:cd:41:ed:68:b0:3a:cf:90: 4d:87:f0:bc:3b:c1:98:1f:b9:eb:6c:9a:ef:84:5d: 94:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:03:AE:17:F7:8E:7E:B7:A1:D9:F6:7C:9C:FE:2D:8F:B8:BE:78:D2 X509v3 Authority Key Identifier: keyid:73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:64:47:03:a2:b6:58:9d:37:8e:22:34:85:3e:ec:ff:62:a8: fb:c7:81:4c:29:b5:25:a2:b3:7d:8d:1e:e2:c5:b1:1f:9b:f7: b6:0c:8a:15:5e:80:d8:1f:5e:85:f5:01:60:c9:22:df:2a:a7: 78:8f:30:76:d5:6e:5c:5e:4a:0b:5a:5d:1d:41:2b:fa:1e:1e: 5e:27:d1:14:e7:6c:f1:0e:0a:4a:af:c0:5a:13:35:8b:13:cd: 11:9b:0f:1f:96:df:4c:5a:88:4e:06:e2:e2:df:51:cd:43:69: 28:67:17:60:86:bc:04:48:b0:d3:86:ec:d1:da:fa:d2:28:6d: fa:30:84:9c:60:c3:04:3c:34:56:85:8a:db:af:bc:2b:ac:64: 31:86:5a:9c:6e:4f:8e:ed:34:71:24:5e:89:8c:50:f2:dc:f2: 3b:26:9f:28:ec:9d:6d:f6:06:17:0e:45:43:e9:15:a9:35:0f: 74:7a:23:e7:2d:4a:20:94:22:2d:f7:9f:3b:65:28:55:73:e8: 39:2d:9f:96:bb:63:fe:c4:13:29:e5:a4:38:a8:fc:1a:04:bf: 12:20:85:a3:eb:91:fc:0a:a8:0a:fb:9e:97:99:82:22:21:bd: 45:2f:72:e3:87:86:83:dc:dc:f5:37:01:4e:34:eb:ec:0a:79: 76:79:d7:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBQTIxMTAvBgNVBAUTKDczQkZBMzdBMDcyNTQzRTJGRDc1MUU0RTA1MEMzQUQz NzAwMTBDNTkwHhcNMjUwNDI0MTgyNzExWhcNMjUwNTAxMTgyNzExWjAYMRYwFAYD VQQDEw02ODBhODI4MC0yNzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+yMoBTcEFEM0HbFi8FIVPmrI3Acit6iz9UkbE4DT0ALMmKuuBh+Qxs8vmJC plZ+YI0RvzlxxCT+3BxFuq6G4/c+mUkxqr/xddni0JwhOAep27pxDST7/1IfBU1Y jiAj+fcxahBRL+z1wWGeZNDio7eWX7FNzhmIrD7We7lvdXaTq9vF/4WyUXvFlVDe 4wPrV6vBWt2zM19dD4GQogG8HuGynDB0qgEVV8EYvUAGO//K7B19aWWZ0Jhx5yEA SXJuhji056BwgI+cx4rnvv2wSS/ESzL+HG4zGkc6PmoiQGeY4thYKCFqzUHtaLA6 z5BNh/C8O8GYH7nrbJrvhF2UXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMDrhf3 jn63odn2fJz+LY+4vnjSMB8GA1UdIwQYMBaAFHO/o3oHJUPi/XUeTgUMOtNwAQxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUFBMi8xRkUzNTdENDA2 QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9jNy1qZWdjbFEtTDlkUjVPQlF3NjAzQUJE RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3LWplZ2NsUS1MOWRSNU9CUXc2MDNBQkRGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUFBMi8xRkUzNTdENDA2QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9jNy1qZWdjbFEt TDlkUjVPQlF3NjAzQUJERmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGZEcDorZYnTeOIjSFPuz/Yqj7x4FMKbUlorN9jR7ixbEfm/e2DIoV XoDYH16F9QFgySLfKqd4jzB21W5cXkoLWl0dQSv6Hh5eJ9EU52zxDgpKr8BaEzWL E80Rmw8flt9MWohOBuLi31HNQ2koZxdghrwESLDThuzR2vrSKG36MIScYMMEPDRW hYrbr7wrrGQxhlqcbk+O7TRxJF6JjFDy3PI7Jp8o7J1t9gYXDkVD6RWpNQ90eiPn LUoglCIt9587ZShVc+g5LZ+Wu2P+xBMp5aQ4qPwaBL8SIIWj65H8CqgK+56XmYIi Ib1FL3Ljh4aD3Nz1NwFONOvsCnl2edeg -----END CERTIFICATE-----Generated at Sat Apr 26 03:42:18 2025 by rpki-client