$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft File: h7LA6ClUHS71JmOF6zlGuNUpBgg.mft (raw, json) Hash identifier: +XF4YRfGGx+ZJXI+bbRicc7J1wN0Muj6uVDkshwwP20= Subject key identifier: 61:8C:73:5F:32:27:3C:07:44:20:4A:6E:C5:5D:CA:66:64:A9:F9:F3 Authority key identifier: 87:B2:C0:E8:29:54:1D:2E:F5:26:63:85:EB:39:46:B8:D5:29:06:08 Certificate issuer: /CN=A911B5B0/serialNumber=87B2C0E829541D2EF5266385EB3946B8D5290608 Certificate serial: 082F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft Manifest number: 0813 Signing time: Thu 08 May 2025 20:47:15 +0000 Manifest this update: Thu 08 May 2025 20:47:14 +0000 Manifest next update: Thu 15 May 2025 20:47:14 +0000 Files and hashes: 1: h7LA6ClUHS71JmOF6zlGuNUpBgg.crl (hash: BhISBYbYLphVMu3ni7YtHm1bJ5GHIQOpCubwqps81gQ=) 2: 0A7320284D4811EE86B7A71FC4F9AE02.roa (hash: SiDzLOasKO+XNvQ+goSOpdOQE3ZO4gyfhkgA7eX7eA0=) 3: 021F5D1E005F11EE9D6E2530C4F9AE02.roa (hash: D9Du1jxG8oE9wceHFEoY5Nl8COEasjJYKId8W2qCUf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.crl rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 20:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2095 (0x82f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5B0, serialNumber=87B2C0E829541D2EF5266385EB3946B8D5290608 Validity Not Before: May 8 20:47:14 2025 GMT Not After : May 15 20:47:14 2025 GMT Subject: CN=681d1853-4788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f7:af:c0:3b:5e:3f:c8:d1:1f:91:ac:ee:45: 1f:b6:31:b7:7c:e1:3b:0f:05:2c:c1:a8:58:87:49: e6:58:49:d2:e6:a2:3f:64:25:43:2b:03:5e:b6:31: aa:89:46:eb:07:96:ec:18:26:5d:0b:cd:c0:30:66: 18:07:34:48:2a:de:fa:6d:98:79:fd:f0:b1:6b:61: 4f:00:91:48:1c:ab:63:10:1c:a9:ba:e7:0f:43:0f: 1c:de:6f:9b:71:1e:77:7e:25:45:2a:34:8c:a8:a8: 27:bf:fb:67:f2:74:f4:56:8f:d1:1c:aa:a3:f1:a5: 47:65:1a:9e:dd:b7:c2:6f:71:ee:79:d4:9a:13:49: 90:cc:78:11:b6:f3:4a:17:ed:dd:e7:d5:16:f4:c2: 6f:30:b4:d1:88:31:1e:71:ef:59:22:20:35:9e:07: 4e:a7:40:e2:d7:d1:9a:cb:09:a7:00:5a:b0:e0:e6: e9:f5:18:52:1f:6f:03:a3:1a:e7:d3:3b:1e:2c:f8: 7b:03:44:f7:f5:92:82:c1:4d:cb:66:e3:d2:25:ae: 21:a1:9e:ea:28:8f:66:25:da:7d:02:b8:1a:5c:3a: ba:52:1a:26:5a:f0:40:d7:89:bf:a4:9c:d6:ca:d0: 6c:8b:07:48:41:a1:77:85:08:ae:e1:70:31:42:2d: a5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:8C:73:5F:32:27:3C:07:44:20:4A:6E:C5:5D:CA:66:64:A9:F9:F3 X509v3 Authority Key Identifier: keyid:87:B2:C0:E8:29:54:1D:2E:F5:26:63:85:EB:39:46:B8:D5:29:06:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:60:cd:56:92:82:9e:a0:ce:79:48:9c:b2:09:96:e6:cf:35: 04:76:57:ce:41:97:0f:44:3f:1e:16:a0:56:9d:c6:33:78:3f: f8:0d:24:fd:67:92:55:fd:b1:0f:c2:e7:b2:42:51:28:42:ff: 55:ce:e2:a9:ca:34:f7:28:da:cc:0b:ae:59:bd:6a:b8:8d:72: 90:f9:9c:84:32:a9:d1:e6:8f:b7:58:dd:c2:66:9d:c3:a0:85: 3b:2f:83:02:ff:10:ac:2e:8d:25:1d:c8:f1:46:7c:6c:32:89: 71:9c:54:a1:c4:75:50:bc:2b:89:79:8f:19:70:fa:80:c1:64: c3:50:24:7e:c9:20:1b:1a:2d:74:4d:4d:5c:24:fb:58:75:ec: f1:26:d8:9d:bb:3c:33:48:43:b1:0f:7e:24:be:8b:93:42:9d: 51:f6:39:46:ba:f2:63:02:08:32:d3:ae:f6:33:68:1f:db:c0: af:2a:1e:dc:42:17:cd:03:9b:fa:20:0f:34:96:a3:ac:4f:85: 76:92:b4:a9:cb:4f:55:67:3d:1e:8a:ce:7c:15:aa:eb:7d:f4: 00:5e:21:c4:e9:43:f0:53:f9:44:6d:a1:55:75:7e:27:8c:25: 48:be:d2:ea:93:eb:76:88:3c:1b:8b:99:e4:fb:bb:31:a8:64: 1a:9b:de:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QjAxMTAvBgNVBAUTKDg3QjJDMEU4Mjk1NDFEMkVGNTI2NjM4NUVCMzk0NkI4 RDUyOTA2MDgwHhcNMjUwNTA4MjA0NzE0WhcNMjUwNTE1MjA0NzE0WjAYMRYwFAYD VQQDEw02ODFkMTg1My00Nzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5/evwDteP8jRH5Gs7kUftjG3fOE7DwUswahYh0nmWEnS5qI/ZCVDKwNetjGq iUbrB5bsGCZdC83AMGYYBzRIKt76bZh5/fCxa2FPAJFIHKtjEBypuucPQw8c3m+b cR53fiVFKjSMqKgnv/tn8nT0Vo/RHKqj8aVHZRqe3bfCb3HuedSaE0mQzHgRtvNK F+3d59UW9MJvMLTRiDEece9ZIiA1ngdOp0Di19GaywmnAFqw4Obp9RhSH28Doxrn 0zseLPh7A0T39ZKCwU3LZuPSJa4hoZ7qKI9mJdp9ArgaXDq6UhomWvBA14m/pJzW ytBsiwdIQaF3hQiu4XAxQi2lOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGMc18y JzwHRCBKbsVdymZkqfnzMB8GA1UdIwQYMBaAFIeywOgpVB0u9SZjhes5RrjVKQYI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVCMC9BMkRGNENFQ0RE NEQxMUVBQkI3Njk2N0JDNEY5QUUwMi9oN0xBNkNsVUhTNzFKbU9GNnpsR3VOVXBC Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3TEE2Q2xVSFM3MUptT0Y2emxHdU5VcEJnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjVCMC9BMkRGNENFQ0RENEQxMUVBQkI3Njk2N0JDNEY5QUUwMi9oN0xBNkNsVUhT NzFKbU9GNnpsR3VOVXBCZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcYM1WkoKeoM55SJyyCZbmzzUEdlfOQZcPRD8eFqBWncYzeD/4DST9 Z5JV/bEPwueyQlEoQv9VzuKpyjT3KNrMC65ZvWq4jXKQ+ZyEMqnR5o+3WN3CZp3D oIU7L4MC/xCsLo0lHcjxRnxsMolxnFShxHVQvCuJeY8ZcPqAwWTDUCR+ySAbGi10 TU1cJPtYdezxJtiduzwzSEOxD34kvouTQp1R9jlGuvJjAggy0672M2gf28CvKh7c QhfNA5v6IA80lqOsT4V2krSpy09VZz0eis58FarrffQAXiHE6UPwU/lEbaFVdX4n jCVIvtLqk+t2iDwbi5nk+7sxqGQam94Z -----END CERTIFICATE-----Generated at Sat May 10 04:40:09 2025 by rpki-client