$ rpki-client -vvf rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft File: 07chXhZgoZ79Lncvm6envcbuDSg.mft (raw, json) Hash identifier: NN5+DT9vykYbDDMHhjjVwZMW3aKtZyfnQLeFd88+TwM= Subject key identifier: C8:04:CE:36:ED:83:14:AB:37:98:54:5D:52:CE:AA:C2:36:41:A2:0D Authority key identifier: D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28 Certificate issuer: /CN=A912BBC9/serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28 Certificate serial: 0927 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft Manifest number: 090B Signing time: Tue 06 May 2025 20:16:44 +0000 Manifest this update: Tue 06 May 2025 20:16:43 +0000 Manifest next update: Tue 13 May 2025 20:16:43 +0000 Files and hashes: 1: 07chXhZgoZ79Lncvm6envcbuDSg.crl (hash: CK+3GzzlphFGhhxOuBs+sT5FV10pV95CUN/mbLSwxYE=) 2: 42B13940C3C011EE86C2C317C4F9AE02.roa (hash: LGFMxkvmdVELBOkg0tqQjRMiBrTGNLnJnZeQEwD+enQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 20:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2343 (0x927) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BBC9, serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28 Validity Not Before: May 6 20:16:43 2025 GMT Not After : May 13 20:16:43 2025 GMT Subject: CN=681a6e2b-2e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7e:23:99:87:19:53:79:16:eb:c6:2a:d6:70: 73:a0:4e:32:0a:86:0b:c4:04:be:d9:d7:68:1e:46: 35:30:db:22:ed:a8:6d:18:12:a9:6d:b8:fb:65:c7: de:c9:0d:58:ff:ae:ad:0c:32:36:9c:bf:3f:78:bd: 4d:97:4a:8e:78:c3:03:f6:62:57:45:60:fb:e3:db: 38:59:3b:8b:de:00:88:5e:de:35:1f:cf:fe:06:be: bc:91:f0:ae:6d:76:0f:23:f8:7e:d0:a1:15:d6:99: 9c:03:30:4a:7f:69:93:ed:e7:b5:ad:d6:e3:ea:d7: 35:2a:a0:45:38:03:1a:72:9f:f2:bc:f1:04:8e:12: be:19:06:a9:d1:e8:4d:ec:ae:be:f6:e6:e1:45:ee: fa:43:40:03:cb:d7:52:a7:60:73:d1:da:35:ff:52: 35:ff:3f:77:b8:68:7d:37:36:ef:fd:de:4a:7d:55: a9:18:21:98:47:ed:e2:cd:9c:6d:b1:03:32:0e:3e: 08:81:fc:ac:73:c9:17:54:4d:13:60:a6:11:6f:bd: bc:89:08:d5:93:32:ca:03:fb:e1:94:3f:43:de:01: 2e:f5:c1:e2:87:b6:ab:1d:a4:f9:cc:0c:fa:2f:c8: a6:0f:ce:0a:01:be:d9:db:46:8b:04:14:0e:6b:f6: 31:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:04:CE:36:ED:83:14:AB:37:98:54:5D:52:CE:AA:C2:36:41:A2:0D X509v3 Authority Key Identifier: keyid:D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:79:db:fc:1d:81:73:e1:ea:86:51:5b:08:43:2b:c5:be:f5: be:26:b4:ae:a5:33:8c:95:f9:79:d1:c4:73:88:b4:cd:f8:e2: ac:1f:b8:4e:a8:eb:c8:3a:cd:ca:36:bd:ee:4f:13:df:fa:89: 3a:ef:32:40:e1:a8:95:81:80:3b:1a:fe:a5:ad:e4:81:b5:38: 5b:d0:91:7c:5b:f5:a6:7d:0c:d8:96:6a:a2:d2:bc:4a:f8:fd: 16:2a:9a:46:90:90:6c:b1:b6:c7:47:f8:ce:80:62:74:27:26: 03:6f:bb:f8:e1:74:e5:ef:c9:57:74:7c:17:9b:68:ba:70:40: d9:89:70:b2:e6:41:d6:e0:6b:7a:93:20:4d:69:c0:d3:f6:60: df:b1:77:d1:b7:00:3b:41:ef:f3:7c:f7:85:f9:2e:a8:ee:9e: c5:26:6a:c4:4d:1a:ce:0a:7a:8e:7d:37:7e:cd:d3:97:ab:ef: 38:dc:a5:b0:48:f8:a4:66:b8:d6:ce:67:af:52:12:01:1a:df: 12:f0:08:11:3e:a8:31:0f:ae:27:f4:08:1c:55:9b:18:9e:bf: 9e:8b:94:65:05:09:b6:7e:41:30:1c:0e:79:84:d1:6c:07:f3: 75:98:00:d5:79:b0:b5:37:15:65:1e:3e:8e:34:2a:44:8d:37: 7a:84:56:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJCQzkxMTAvBgNVBAUTKEQzQjcyMTVFMTY2MEExOUVGRDJFNzcyRjlCQTdBN0JE QzZFRTBEMjgwHhcNMjUwNTA2MjAxNjQzWhcNMjUwNTEzMjAxNjQzWjAYMRYwFAYD VQQDEw02ODFhNmUyYi0yZTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAun4jmYcZU3kW68Yq1nBzoE4yCoYLxAS+2ddoHkY1MNsi7ahtGBKpbbj7Zcfe yQ1Y/66tDDI2nL8/eL1Nl0qOeMMD9mJXRWD749s4WTuL3gCIXt41H8/+Br68kfCu bXYPI/h+0KEV1pmcAzBKf2mT7ee1rdbj6tc1KqBFOAMacp/yvPEEjhK+GQap0ehN 7K6+9ubhRe76Q0ADy9dSp2Bz0do1/1I1/z93uGh9Nzbv/d5KfVWpGCGYR+3izZxt sQMyDj4Igfysc8kXVE0TYKYRb728iQjVkzLKA/vhlD9D3gEu9cHih7arHaT5zAz6 L8imD84KAb7Z20aLBBQOa/YxKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMgEzjbt gxSrN5hUXVLOqsI2QaINMB8GA1UdIwQYMBaAFNO3IV4WYKGe/S53L5unp73G7g0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkJDOS84M0ZGOUZFQ0FB ODExMUVBQjQyQTA0MzNDNEY5QUUwMi8wN2NoWGhaZ29aNzlMbmN2bTZlbnZjYnVE U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA3Y2hYaFpnb1o3OUxuY3ZtNmVudmNidURTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkJDOS84M0ZGOUZFQ0FBODExMUVBQjQyQTA0MzNDNEY5QUUwMi8wN2NoWGhaZ29a NzlMbmN2bTZlbnZjYnVEU2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaedv8HYFz4eqGUVsIQyvFvvW+JrSupTOMlfl50cRziLTN+OKsH7hO qOvIOs3KNr3uTxPf+ok67zJA4aiVgYA7Gv6lreSBtThb0JF8W/WmfQzYlmqi0rxK +P0WKppGkJBssbbHR/jOgGJ0JyYDb7v44XTl78lXdHwXm2i6cEDZiXCy5kHW4Gt6 kyBNacDT9mDfsXfRtwA7Qe/zfPeF+S6o7p7FJmrETRrOCnqOfTd+zdOXq+843KWw SPikZrjWzmevUhIBGt8S8AgRPqgxD64n9AgcVZsYnr+ei5RlBQm2fkEwHA55hNFs B/N1mADVebC1NxVlHj6ONCpEjTd6hFaw -----END CERTIFICATE-----Generated at Wed May 7 10:31:23 2025 by rpki-client