$ rpki-client -vvf rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft File: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft (raw, json) Hash identifier: r6rZWHnEh70wXGHC0z7isH7/rg4W1Np1SonUswSeUAc= Subject key identifier: 12:B0:35:73:B1:E8:2B:FF:A8:D9:B8:C4:EF:45:B1:44:6A:45:A7:42 Authority key identifier: ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC Certificate issuer: /CN=A91A02D8/serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft Manifest number: A4 Signing time: Fri 25 Apr 2025 05:11:54 +0000 Manifest this update: Fri 25 Apr 2025 05:11:54 +0000 Manifest next update: Fri 02 May 2025 05:11:54 +0000 Files and hashes: 1: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl (hash: y8ssxXpIZqkFXfjtL23rUwISyrVP+12kZwWKQD/I7HA=) 2: 86F9CBCC2AB711EF996EC819C4F9AE02.roa (hash: dEaYlEkH9R7ZFvmgUUxoyfXOgBDXEq+zy0JoQWINyBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A02D8, serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC Validity Not Before: Apr 25 05:11:54 2025 GMT Not After : May 2 05:11:54 2025 GMT Subject: CN=680b199a-261a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a2:94:c6:db:2e:86:2f:96:5e:a8:b2:10:a3: 46:32:26:d6:30:4f:71:ae:73:06:89:21:e1:f5:0e: c4:a2:a1:4a:ef:fb:2b:20:f4:e3:bd:3c:23:23:70: a4:3e:81:99:10:65:b4:fe:f6:db:f4:a9:71:61:c8: 41:70:ba:7f:87:64:92:88:fb:d5:03:c2:fe:e1:b5: 43:03:7e:56:c7:01:ca:b5:0d:53:c8:2e:11:02:e4: 0b:b6:45:92:89:13:9c:91:59:77:5b:c4:69:e9:07: 21:86:6c:e5:17:eb:4c:60:f1:36:6f:58:1a:d6:43: 96:b9:09:38:4d:fe:7a:80:11:87:a0:d3:8f:2f:c7: 12:a4:d8:ce:00:e3:9d:5f:e7:6c:28:2b:69:2b:ff: 4c:ce:1e:2e:21:d3:2d:3b:de:27:39:72:09:52:a9: cc:c1:ca:a4:12:68:3e:95:a1:df:51:e2:8d:9e:8f: df:51:de:8a:b3:d5:b8:23:9a:d8:bd:29:b8:c2:28: 0a:86:be:3f:22:5f:52:7d:52:95:f8:d0:87:bc:39: 6b:72:74:6d:1d:87:f0:1f:be:ed:df:1b:3a:fd:d6: 60:8b:d2:16:ba:4d:8a:2e:0c:b1:89:c7:9a:04:5b: 87:4e:c6:37:02:e1:fe:0a:bf:a4:7f:53:96:02:ba: 6a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B0:35:73:B1:E8:2B:FF:A8:D9:B8:C4:EF:45:B1:44:6A:45:A7:42 X509v3 Authority Key Identifier: keyid:ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:d8:da:af:7c:de:75:62:76:81:72:d1:23:72:77:9d:a0:bb: 76:8e:cc:ba:57:bb:d7:fc:45:a3:fa:f1:b7:eb:5d:34:65:0a: 64:42:03:41:d0:42:64:92:fa:ab:48:92:ee:05:bb:46:34:23: 88:f5:a5:ef:0b:23:ef:e5:36:f7:b0:60:52:e5:83:d6:08:c8: 98:d8:74:a2:f4:4f:97:16:d3:89:f3:50:09:c5:43:b3:92:98: 54:32:a3:cc:6d:b3:bb:6c:1f:7a:0f:c3:96:94:9e:dc:6a:fa: cd:37:63:68:eb:d2:db:c6:57:36:10:68:c9:4b:94:d4:aa:16: e5:55:d1:66:76:de:70:87:89:dd:61:7f:60:eb:ea:dd:5f:5e: f2:2e:38:7f:01:6c:c3:1b:98:3b:11:7e:f4:a9:d4:f1:6e:f8: 43:56:69:36:bf:3c:04:81:a9:10:67:2e:59:6e:f4:39:f0:d7: d9:43:70:0e:c0:71:3b:2c:c5:a4:19:82:91:c0:73:4d:2a:95: 16:05:f4:a4:d8:2d:f5:f6:26:d8:0e:2f:f3:4a:0e:c4:7e:d7: 33:50:6d:f6:6e:8c:59:64:49:49:a0:32:d0:47:90:9d:8e:84: 77:a1:2a:24:06:a5:e6:b0:da:c2:cc:b9:61:1f:c5:df:e1:bd: dc:ee:cd:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAyRDgxMTAvBgNVBAUTKEVEOUIwRTYwODVBMjVERjI2NzQ5RkYyNzU4MUE0RThC QzdDMTg2Q0MwHhcNMjUwNDI1MDUxMTU0WhcNMjUwNTAyMDUxMTU0WjAYMRYwFAYD VQQDEw02ODBiMTk5YS0yNjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqKUxtsuhi+WXqiyEKNGMibWME9xrnMGiSHh9Q7EoqFK7/srIPTjvTwjI3Ck PoGZEGW0/vbb9KlxYchBcLp/h2SSiPvVA8L+4bVDA35WxwHKtQ1TyC4RAuQLtkWS iROckVl3W8Rp6QchhmzlF+tMYPE2b1ga1kOWuQk4Tf56gBGHoNOPL8cSpNjOAOOd X+dsKCtpK/9Mzh4uIdMtO94nOXIJUqnMwcqkEmg+laHfUeKNno/fUd6Ks9W4I5rY vSm4wigKhr4/Il9SfVKV+NCHvDlrcnRtHYfwH77t3xs6/dZgi9IWuk2KLgyxicea BFuHTsY3AuH+Cr+kf1OWArpqiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKwNXOx 6Cv/qNm4xO9FsURqRadCMB8GA1UdIwQYMBaAFO2bDmCFol3yZ0n/J1gaTovHwYbM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDJEOC9FMDkyNDhFQTJB QjYxMUVGQjMzOUZEODFDNEY5QUUwMi83WnNPWUlXaVhmSm5TZjhuV0JwT2k4ZkJo c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdac09ZSVdpWGZKblNmOG5XQnBPaThmQmhzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDJEOC9FMDkyNDhFQTJBQjYxMUVGQjMzOUZEODFDNEY5QUUwMi83WnNPWUlXaVhm Sm5TZjhuV0JwT2k4ZkJoc3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL2NqvfN51YnaBctEjcnedoLt2jsy6V7vX/EWj+vG36100ZQpkQgNB 0EJkkvqrSJLuBbtGNCOI9aXvCyPv5Tb3sGBS5YPWCMiY2HSi9E+XFtOJ81AJxUOz kphUMqPMbbO7bB96D8OWlJ7cavrNN2No69Lbxlc2EGjJS5TUqhblVdFmdt5wh4nd YX9g6+rdX17yLjh/AWzDG5g7EX70qdTxbvhDVmk2vzwEgakQZy5ZbvQ58NfZQ3AO wHE7LMWkGYKRwHNNKpUWBfSk2C319ibYDi/zSg7EftczUG32boxZZElJoDLQR5Cd joR3oSokBqXmsNrCzLlhH8Xf4b3c7s1T -----END CERTIFICATE-----Generated at Sat Apr 26 17:11:44 2025 by rpki-client