$ rpki-client -vvf rpki.apnic.net/member_repository/A9127AE0/DD6587AC0F4C11EAA014267BC4F9AE02/7VXfoOxp2WS4W4bXi0AFHeoSlnM.mft File: 7VXfoOxp2WS4W4bXi0AFHeoSlnM.mft (raw, json) Hash identifier: 0gpU+QKDoR0bD4Uyd59Ip+wk/I8kQdN70INMZdSt3Rw= Subject key identifier: 26:09:1B:7C:37:0A:9C:06:F1:2D:B9:68:28:AC:B2:B9:36:29:C8:B4 Authority key identifier: ED:55:DF:A0:EC:69:D9:64:B8:5B:86:D7:8B:40:05:1D:EA:12:96:73 Certificate issuer: /CN=A9127AE0/serialNumber=ED55DFA0EC69D964B85B86D78B40051DEA129673 Certificate serial: 0C0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VXfoOxp2WS4W4bXi0AFHeoSlnM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127AE0/DD6587AC0F4C11EAA014267BC4F9AE02/7VXfoOxp2WS4W4bXi0AFHeoSlnM.mft Manifest number: 0C05 Signing time: Sun 04 May 2025 18:32:58 +0000 Manifest this update: Sun 04 May 2025 18:32:58 +0000 Manifest next update: Sun 11 May 2025 18:32:58 +0000 Files and hashes: 1: 7VXfoOxp2WS4W4bXi0AFHeoSlnM.crl (hash: v8uDIcISkSLtjiqDDyGAHmIWCHk1CZsSvND9nlnTDkE=) 2: 6DB16BB40F4D11EAA6E7A17BC4F9AE02.roa (hash: fS0hvzQx5VOp/GPOlj0QCeoy3XoReYfGYf/82xIaZFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127AE0/DD6587AC0F4C11EAA014267BC4F9AE02/7VXfoOxp2WS4W4bXi0AFHeoSlnM.crl rsync://rpki.apnic.net/member_repository/A9127AE0/DD6587AC0F4C11EAA014267BC4F9AE02/7VXfoOxp2WS4W4bXi0AFHeoSlnM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VXfoOxp2WS4W4bXi0AFHeoSlnM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 18:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3086 (0xc0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127AE0, serialNumber=ED55DFA0EC69D964B85B86D78B40051DEA129673 Validity Not Before: May 4 18:32:58 2025 GMT Not After : May 11 18:32:58 2025 GMT Subject: CN=6817b2da-99e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ca:54:1b:88:f4:dc:88:d5:98:e5:36:ef:98: 8d:10:78:01:0f:05:d9:99:7f:58:ca:0e:43:9e:18: e3:8c:07:a4:39:c3:a7:cc:cd:1d:79:c9:2c:77:ec: f9:5e:69:f9:be:5b:76:c7:76:4c:7e:00:7e:0b:1b: 5e:82:fb:69:a7:c1:80:16:32:1f:ed:36:9b:0a:38: cc:71:ce:d8:0c:23:e5:66:e9:e5:40:1c:9a:62:8a: 0f:96:1f:fb:5f:81:d3:03:ed:47:65:d0:79:0c:1e: 9b:4a:02:dd:f6:eb:39:5b:2c:29:b2:2d:6f:19:16: 87:7d:c1:e6:08:21:7d:d3:49:dc:ff:2a:a0:fc:6f: 15:55:f2:50:80:82:e9:a0:57:5a:d3:91:5a:fc:fc: e1:27:a1:0a:28:79:38:a7:a9:0c:c8:64:a3:74:fb: bb:c4:c4:26:3e:19:51:db:b3:bb:17:be:1e:ea:69: a5:ec:f5:56:9e:a9:83:18:44:08:7b:b2:06:ee:f1: bb:6a:14:f1:2b:37:1b:de:f5:fa:92:ac:44:f0:e3: 7d:1e:1c:0a:1d:29:73:f3:f5:f3:5c:c2:02:f8:6b: 1a:76:a4:06:76:6e:8e:4c:17:da:9a:60:9b:60:ad: 22:c9:cd:00:33:65:3d:f1:37:4d:b1:a7:ab:ee:db: bc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:09:1B:7C:37:0A:9C:06:F1:2D:B9:68:28:AC:B2:B9:36:29:C8:B4 X509v3 Authority Key Identifier: keyid:ED:55:DF:A0:EC:69:D9:64:B8:5B:86:D7:8B:40:05:1D:EA:12:96:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127AE0/DD6587AC0F4C11EAA014267BC4F9AE02/7VXfoOxp2WS4W4bXi0AFHeoSlnM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VXfoOxp2WS4W4bXi0AFHeoSlnM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127AE0/DD6587AC0F4C11EAA014267BC4F9AE02/7VXfoOxp2WS4W4bXi0AFHeoSlnM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:9f:79:56:47:ff:49:b6:81:13:ec:04:07:9b:46:99:32:0d: 23:0b:4e:49:78:30:b4:44:87:fc:c7:6a:b9:75:47:7e:2d:98: ee:1c:36:fc:23:e1:0d:4b:c3:98:0a:c1:9c:70:41:ef:54:20: 01:15:cf:73:57:6e:7d:fc:fe:47:7c:ed:a0:8a:b5:85:49:84: dc:9e:24:e6:12:83:0e:a4:92:45:4a:3f:d5:62:96:8e:d3:12: 71:b5:0a:a7:04:4e:b6:dd:45:ac:6f:19:e5:62:e6:b2:a4:19: 68:f1:fd:59:0a:45:8f:7e:0b:58:1c:0c:53:eb:2a:91:39:9b: c1:54:c8:00:a1:b2:6a:10:ec:59:24:b7:5a:50:b5:fa:1f:8f: 7a:f4:f9:0f:b2:13:64:3d:47:5f:87:49:63:0b:3e:ab:da:e4: 2f:69:c0:61:e6:8d:14:52:9f:ff:d3:45:78:dd:f1:78:f0:9c: 81:fa:33:b2:e9:15:2f:d7:c4:b5:6b:d5:74:d7:6b:ca:86:e1: cb:0d:57:77:20:5a:01:20:59:d1:e0:8b:6a:04:d8:97:81:de: b9:a5:15:90:df:2a:df:09:cf:77:d8:7c:2c:95:49:f4:bc:35: d6:79:fb:fe:3a:33:cf:7e:de:2b:1b:89:e4:55:30:85:65:99: cb:b1:5c:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdBRTAxMTAvBgNVBAUTKEVENTVERkEwRUM2OUQ5NjRCODVCODZENzhCNDAwNTFE RUExMjk2NzMwHhcNMjUwNTA0MTgzMjU4WhcNMjUwNTExMTgzMjU4WjAYMRYwFAYD VQQDEw02ODE3YjJkYS05OWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkcpUG4j03IjVmOU275iNEHgBDwXZmX9Yyg5DnhjjjAekOcOnzM0decksd+z5 Xmn5vlt2x3ZMfgB+Cxtegvtpp8GAFjIf7TabCjjMcc7YDCPlZunlQByaYooPlh/7 X4HTA+1HZdB5DB6bSgLd9us5Wywpsi1vGRaHfcHmCCF900nc/yqg/G8VVfJQgILp oFda05Fa/PzhJ6EKKHk4p6kMyGSjdPu7xMQmPhlR27O7F74e6mml7PVWnqmDGEQI e7IG7vG7ahTxKzcb3vX6kqxE8ON9HhwKHSlz8/XzXMIC+GsadqQGdm6OTBfammCb YK0iyc0AM2U98TdNsaer7tu8oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCYJG3w3 CpwG8S25aCissrk2Kci0MB8GA1UdIwQYMBaAFO1V36DsadlkuFuG14tABR3qEpZz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0FFMC9ERDY1ODdBQzBG NEMxMUVBQTAxNDI2N0JDNEY5QUUwMi83Vlhmb094cDJXUzRXNGJYaTBBRkhlb1Ns bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdWWGZvT3hwMldTNFc0YlhpMEFGSGVvU2xuTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0FFMC9ERDY1ODdBQzBGNEMxMUVBQTAxNDI2N0JDNEY5QUUwMi83Vlhmb094cDJX UzRXNGJYaTBBRkhlb1Nsbk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsn3lWR/9JtoET7AQHm0aZMg0jC05JeDC0RIf8x2q5dUd+LZjuHDb8 I+ENS8OYCsGccEHvVCABFc9zV259/P5HfO2girWFSYTcniTmEoMOpJJFSj/VYpaO 0xJxtQqnBE623UWsbxnlYuaypBlo8f1ZCkWPfgtYHAxT6yqROZvBVMgAobJqEOxZ JLdaULX6H4969PkPshNkPUdfh0ljCz6r2uQvacBh5o0UUp//00V43fF48JyB+jOy 6RUv18S1a9V012vKhuHLDVd3IFoBIFnR4ItqBNiXgd65pRWQ3yrfCc932HwslUn0 vDXWefv+OjPPft4rG4nkVTCFZZnLsVx7 -----END CERTIFICATE-----Generated at Mon May 5 03:27:12 2025 by rpki-client