$ rpki-client -vvf rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft File: r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft (raw, json) Hash identifier: FyhESXNCfYYW2DJXx+xlMeMWi9s52XR33TkUGqstWz4= Subject key identifier: 85:2D:E7:7A:D6:17:78:5C:27:D2:F0:D0:4B:62:FF:44:4E:A2:31:C3 Authority key identifier: AF:B8:FF:E1:E8:68:62:96:B9:96:C6:3A:A9:02:EA:9C:12:8F:48:FE Certificate issuer: /CN=A912BA82/serialNumber=AFB8FFE1E8686296B996C63AA902EA9C128F48FE Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft Manifest number: E7 Signing time: Fri 09 May 2025 04:27:56 +0000 Manifest this update: Fri 09 May 2025 04:27:56 +0000 Manifest next update: Fri 16 May 2025 04:27:56 +0000 Files and hashes: 1: r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl (hash: Nc1nfM6hNq/NNR9+UZfn6Qmb/rO3KAs/ydApkxJGVJA=) 2: 4BFDDACCEB3311EE9D65C57DC4F9AE02.roa (hash: JbXYoZCeV73k0ydVhueXLAHh7xzomEgWbLFpEGgJxiE=) 3: 6198218AEB3311EEA75DE77DC4F9AE02.roa (hash: br9VY1Ap5bODWGjIwXH93XykBR4wm+eKQRXiepCLuxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 04:27:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BA82, serialNumber=AFB8FFE1E8686296B996C63AA902EA9C128F48FE Validity Not Before: May 9 04:27:56 2025 GMT Not After : May 16 04:27:56 2025 GMT Subject: CN=681d844c-7de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a1:0f:5b:25:c7:b4:5a:b8:b0:8a:a8:e2:1e: 92:c3:dc:50:4c:1a:75:d9:df:79:a1:90:31:9b:05: 25:8f:7f:a5:42:f6:3b:47:c5:de:4d:45:c2:9a:0a: 7b:ea:1b:3c:fd:6e:45:75:b3:ac:d2:56:74:ab:22: 5c:60:7b:f9:c8:19:ec:2f:5f:a5:34:7a:1c:ab:0a: 85:ae:81:3c:bd:87:94:c8:25:04:17:b2:c2:5d:98: e5:88:16:84:03:ff:67:dc:3d:18:c4:e6:2e:bc:72: dd:36:7f:15:96:c4:b3:3c:16:d6:fa:1a:09:af:c6: 07:77:19:fd:77:7d:7f:94:1b:f9:0e:7a:99:5e:a3: fa:8a:57:6b:2f:4c:2a:7b:41:09:f7:db:e5:4f:7a: 9f:6e:fc:74:5d:c4:43:2b:10:8f:fd:ff:c8:33:3c: 13:46:9e:c9:13:f2:fe:c6:11:47:a4:0b:33:6f:3f: 15:0e:66:fe:a9:81:1e:a1:1f:ab:f9:dc:f8:7f:ca: 25:2b:0f:c1:cf:4c:2f:da:11:c0:f0:71:e5:a2:ed: cc:e7:3c:68:04:4e:46:ea:b6:90:80:bf:1c:38:03: fb:9b:68:9a:ca:4f:5e:82:d9:2a:f4:69:6f:22:c1: 05:f2:79:08:cd:38:7e:b0:8d:b6:dd:76:df:19:5d: d3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:2D:E7:7A:D6:17:78:5C:27:D2:F0:D0:4B:62:FF:44:4E:A2:31:C3 X509v3 Authority Key Identifier: keyid:AF:B8:FF:E1:E8:68:62:96:B9:96:C6:3A:A9:02:EA:9C:12:8F:48:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c2:ee:cc:4b:e7:c1:97:ae:cf:7f:24:7d:e8:75:4c:c0:97: 4b:3e:c0:95:a4:b0:13:24:28:83:c5:34:6a:18:c3:42:d1:9b: cf:92:2a:97:b1:b8:3f:8b:fc:e6:35:6b:c8:fd:cc:b3:5e:f9: 2e:10:08:7c:9d:e6:24:1b:7f:62:56:43:cb:63:0d:94:28:61: d4:c8:bc:53:25:d0:bf:b2:a6:a6:93:97:83:13:e7:d9:12:1d: 72:41:72:90:2b:77:79:99:c6:71:4c:64:90:e6:cd:ab:8f:e3: ef:6b:65:37:12:65:d7:66:ca:a8:d2:aa:2d:98:69:65:5a:fa: 49:67:44:aa:50:51:90:9a:a1:3d:67:9e:4f:35:ae:4c:af:00: 9c:18:21:ae:37:48:2a:17:7f:b3:49:b1:db:b2:0c:f2:79:24: b1:ec:57:6e:76:7e:46:f0:08:61:69:ce:0d:4d:86:e2:19:57: 94:c1:f4:a3:31:c7:55:c7:7a:51:87:c8:ef:c2:62:ca:61:2e: 03:4c:eb:bc:5e:c2:b6:55:cd:d9:4e:9b:db:35:f5:9f:54:5c: 34:c8:da:e4:75:09:15:a2:02:ff:8d:bd:4e:b7:50:ad:ac:f3: e1:36:03:46:8c:73:5d:44:0e:38:88:5e:a7:7a:25:aa:f9:b5: 6b:58:c6:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJBODIxMTAvBgNVBAUTKEFGQjhGRkUxRTg2ODYyOTZCOTk2QzYzQUE5MDJFQTlD MTI4RjQ4RkUwHhcNMjUwNTA5MDQyNzU2WhcNMjUwNTE2MDQyNzU2WjAYMRYwFAYD VQQDEw02ODFkODQ0Yy03ZGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0qEPWyXHtFq4sIqo4h6Sw9xQTBp12d95oZAxmwUlj3+lQvY7R8XeTUXCmgp7 6hs8/W5FdbOs0lZ0qyJcYHv5yBnsL1+lNHocqwqFroE8vYeUyCUEF7LCXZjliBaE A/9n3D0YxOYuvHLdNn8VlsSzPBbW+hoJr8YHdxn9d31/lBv5DnqZXqP6ildrL0wq e0EJ99vlT3qfbvx0XcRDKxCP/f/IMzwTRp7JE/L+xhFHpAszbz8VDmb+qYEeoR+r +dz4f8olKw/Bz0wv2hHA8HHlou3M5zxoBE5G6raQgL8cOAP7m2iayk9egtkq9Glv IsEF8nkIzTh+sI223XbfGV3TaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUt53rW F3hcJ9Lw0Eti/0ROojHDMB8GA1UdIwQYMBaAFK+4/+HoaGKWuZbGOqkC6pwSj0j+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkE4Mi9GQkREQUMyNENF NUExMUVFOEMzQkQwM0FDNEY5QUUwMi9yN2pfNGVob1lwYTVsc1k2cVFMcW5CS1BT UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3al80ZWhvWXBhNWxzWTZxUUxxbkJLUFNQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkE4Mi9GQkREQUMyNENFNUExMUVFOEMzQkQwM0FDNEY5QUUwMi9yN2pfNGVob1lw YTVsc1k2cVFMcW5CS1BTUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMwu7MS+fBl67PfyR96HVMwJdLPsCVpLATJCiDxTRqGMNC0ZvPkiqX sbg/i/zmNWvI/cyzXvkuEAh8neYkG39iVkPLYw2UKGHUyLxTJdC/sqamk5eDE+fZ Eh1yQXKQK3d5mcZxTGSQ5s2rj+Pva2U3EmXXZsqo0qotmGllWvpJZ0SqUFGQmqE9 Z55PNa5MrwCcGCGuN0gqF3+zSbHbsgzyeSSx7Fdudn5G8Ahhac4NTYbiGVeUwfSj McdVx3pRh8jvwmLKYS4DTOu8XsK2Vc3ZTpvbNfWfVFw0yNrkdQkVogL/jb1Ot1Ct rPPhNgNGjHNdRA44iF6neiWq+bVrWMYI -----END CERTIFICATE-----Generated at Sat May 10 15:14:16 2025 by rpki-client