$ rpki-client -vvf rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft File: C7z952hnW5lPKiMRTDUUEiAVVbg.mft (raw, json) Hash identifier: /ykU8EjfAgi31+VKAEsG7sUhdUDhhxZuB7hPJzM1Vik= Subject key identifier: BB:73:4A:01:ED:3E:B0:FD:FB:63:E0:7B:6E:97:E6:4E:22:D6:5B:18 Authority key identifier: 0B:BC:FD:E7:68:67:5B:99:4F:2A:23:11:4C:35:14:12:20:15:55:B8 Certificate issuer: /CN=A9123193/serialNumber=0BBCFDE768675B994F2A23114C351412201555B8 Certificate serial: 0729 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft Manifest number: 071E Signing time: Fri 16 May 2025 22:09:08 +0000 Manifest this update: Fri 16 May 2025 22:09:08 +0000 Manifest next update: Fri 23 May 2025 22:09:08 +0000 Files and hashes: 1: C7z952hnW5lPKiMRTDUUEiAVVbg.crl (hash: fIrMXWwAVA3IvjTWnByB9TGmKMwm3mpebOpG/6r/ct4=) 2: 31BF0C48D8DE11EDBACEEE7FC4F9AE02.roa (hash: 9esbbGrIEshCzgVAuh0Un9LyG8pst2lzVqe8bmApqT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.crl rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 22:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1833 (0x729) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123193, serialNumber=0BBCFDE768675B994F2A23114C351412201555B8 Validity Not Before: May 16 22:09:08 2025 GMT Not After : May 23 22:09:08 2025 GMT Subject: CN=6827b784-d224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:02:c3:2e:d9:ed:47:a9:c9:10:df:87:1f:72: b5:83:9c:8e:a9:25:e3:98:58:13:0f:08:56:44:10: 94:79:0a:09:85:b3:a4:70:7f:ca:cb:76:a6:0e:62: 11:85:64:af:56:f4:ce:d6:b2:21:5b:5e:b7:af:9a: f1:2c:89:d0:49:63:43:90:24:33:be:81:12:54:be: 9c:6a:cb:27:d0:ef:62:75:4e:bc:3e:b0:0e:48:d1: 9c:1b:99:75:5a:45:af:77:0d:f6:53:22:48:31:c0: af:1c:7a:10:43:74:53:7f:bf:9d:0e:24:5b:e3:fc: f4:b3:33:8d:2d:20:95:87:d9:ed:d4:d3:e1:5c:1a: c6:09:33:43:32:7d:71:a4:e8:1e:46:b4:da:82:bc: 5e:b2:09:be:e4:fd:eb:e6:f8:e3:d3:5e:6e:cb:4d: 33:3b:1a:73:63:ba:c5:b4:db:ab:f3:75:2a:f5:06: 1e:93:0b:42:bd:42:b6:06:7c:ec:bc:b7:b9:15:2a: f3:8f:ab:34:fd:d0:28:f8:51:ef:27:5d:65:d5:4b: 7a:ed:c7:b6:1b:b8:2a:5e:18:c1:05:be:c6:08:91: ca:75:0f:e8:0d:56:3a:f0:d1:0e:28:3f:d6:58:48: 1e:ec:83:05:1c:e9:24:7c:2a:89:1d:a8:76:09:2c: 25:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:73:4A:01:ED:3E:B0:FD:FB:63:E0:7B:6E:97:E6:4E:22:D6:5B:18 X509v3 Authority Key Identifier: keyid:0B:BC:FD:E7:68:67:5B:99:4F:2A:23:11:4C:35:14:12:20:15:55:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:45:f5:00:95:2d:e7:de:7c:2a:97:76:80:e1:27:f7:93:98: 0f:a7:5c:b5:05:0a:45:8f:90:50:54:6e:d2:2b:c4:c0:a6:02: 50:d1:3c:ce:71:4b:35:58:42:14:06:8b:a3:1d:8e:66:ea:b7: 94:58:01:3d:17:03:67:a7:19:92:c4:b6:93:2e:1d:c6:7a:6e: 5c:bd:19:02:71:7e:80:ad:30:00:ed:a0:68:4b:cc:61:a0:04: 04:f5:b1:34:4d:72:46:45:16:73:8d:29:8a:2c:48:4d:e6:e6: 13:1c:e4:2c:a4:f3:1e:d6:8e:5c:1f:af:d7:1d:3a:e9:e1:20: 34:b6:3f:23:48:93:e3:e0:ef:be:80:68:16:d8:70:ad:b6:5c: 5a:27:3f:ff:90:47:67:a0:68:e9:17:d3:46:3e:c1:e2:da:ea: 94:d3:88:46:c6:35:6a:40:90:ed:95:6d:ef:6f:c7:0e:be:da: 0b:8f:2f:b1:d8:91:10:51:57:25:85:8b:19:12:1a:01:e5:8f: 9a:27:c3:1b:a5:bc:7d:54:26:cc:6b:7f:33:21:c1:e9:24:e1: b9:27:d8:4b:9d:15:b6:06:f8:c9:0f:b3:0f:e5:13:69:73:c1: a8:ef:be:be:bf:f3:e5:9e:ae:e0:ac:50:ef:72:15:51:4a:a1: d7:9c:2e:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMxOTMxMTAvBgNVBAUTKDBCQkNGREU3Njg2NzVCOTk0RjJBMjMxMTRDMzUxNDEy MjAxNTU1QjgwHhcNMjUwNTE2MjIwOTA4WhcNMjUwNTIzMjIwOTA4WjAYMRYwFAYD VQQDEw02ODI3Yjc4NC1kMjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApwLDLtntR6nJEN+HH3K1g5yOqSXjmFgTDwhWRBCUeQoJhbOkcH/Ky3amDmIR hWSvVvTO1rIhW163r5rxLInQSWNDkCQzvoESVL6cassn0O9idU68PrAOSNGcG5l1 WkWvdw32UyJIMcCvHHoQQ3RTf7+dDiRb4/z0szONLSCVh9nt1NPhXBrGCTNDMn1x pOgeRrTagrxesgm+5P3r5vjj015uy00zOxpzY7rFtNur83Uq9QYekwtCvUK2Bnzs vLe5FSrzj6s0/dAo+FHvJ11l1Ut67ce2G7gqXhjBBb7GCJHKdQ/oDVY68NEOKD/W WEge7IMFHOkkfCqJHah2CSwluQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLtzSgHt PrD9+2Pge26X5k4i1lsYMB8GA1UdIwQYMBaAFAu8/edoZ1uZTyojEUw1FBIgFVW4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzE5My9DQThBNEIzQzM5 RDkxMUVCQTc4MUZBNTdDNEY5QUUwMi9DN3o5NTJoblc1bFBLaU1SVERVVUVpQVZW YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M3ejk1MmhuVzVsUEtpTVJURFVVRWlBVlZiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzE5My9DQThBNEIzQzM5RDkxMUVCQTc4MUZBNTdDNEY5QUUwMi9DN3o5NTJoblc1 bFBLaU1SVERVVUVpQVZWYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBORfUAlS3n3nwql3aA4Sf3k5gPp1y1BQpFj5BQVG7SK8TApgJQ0TzO cUs1WEIUBoujHY5m6reUWAE9FwNnpxmSxLaTLh3Gem5cvRkCcX6ArTAA7aBoS8xh oAQE9bE0TXJGRRZzjSmKLEhN5uYTHOQspPMe1o5cH6/XHTrp4SA0tj8jSJPj4O++ gGgW2HCttlxaJz//kEdnoGjpF9NGPsHi2uqU04hGxjVqQJDtlW3vb8cOvtoLjy+x 2JEQUVclhYsZEhoB5Y+aJ8Mbpbx9VCbMa38zIcHpJOG5J9hLnRW2BvjJD7MP5RNp c8Go776+v/Plnq7grFDvchVRSqHXnC7o -----END CERTIFICATE-----Generated at Sat May 17 07:25:58 2025 by rpki-client