$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft File: h7_uyP-fsmiAINtZpiLBOhXlryA.mft (raw, json) Hash identifier: DCLPjC28utF/oZBK5MKgm9DuRwS2UYjFtM3Z6T50elk= Subject key identifier: A7:26:E4:AB:99:DD:F2:04:F4:72:DE:70:4F:9A:85:15:22:83:66:6D Authority key identifier: 87:BF:EE:C8:FF:9F:B2:68:80:20:DB:59:A6:22:C1:3A:15:E5:AF:20 Certificate issuer: /CN=A9132B7A/serialNumber=87BFEEC8FF9FB2688020DB59A622C13A15E5AF20 Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft Manifest number: 0134 Signing time: Thu 15 May 2025 03:56:39 +0000 Manifest this update: Thu 15 May 2025 03:56:39 +0000 Manifest next update: Thu 22 May 2025 03:56:39 +0000 Files and hashes: 1: h7_uyP-fsmiAINtZpiLBOhXlryA.crl (hash: OK9RlpsbQH5pQLW/vwGmX4cBcIqA1uQ6cfr8WFVh23M=) 2: 28382F96644E11EEA1DCB653C4F9AE02.roa (hash: tkC94LIcazFbktBOOWxjViOTNkAmC8Zs4gf9iesOvuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.crl rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B7A, serialNumber=87BFEEC8FF9FB2688020DB59A622C13A15E5AF20 Validity Not Before: May 15 03:56:39 2025 GMT Not After : May 22 03:56:39 2025 GMT Subject: CN=682565f7-81a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bd:c1:7f:25:bd:ff:92:2b:6a:44:3c:7b:23: 54:37:8c:82:44:f4:fd:36:d9:f0:0d:b3:28:31:86: 3a:d8:59:89:15:d4:af:7a:d0:6b:9e:a4:17:91:b7: ac:b0:dd:4f:9a:f5:5c:d7:e3:59:cf:c1:ce:3d:88: b9:bf:0d:29:6f:62:d9:03:c1:8d:2e:78:c7:91:b2: 3e:d0:45:c4:2f:a1:ba:90:87:32:6e:44:92:97:4d: ef:15:ac:77:2a:b7:74:27:29:2c:35:46:32:99:7f: ac:db:28:a5:d5:8f:c4:32:e6:41:7f:35:3d:35:6b: 23:a0:27:53:eb:de:92:ab:e9:6b:c0:13:1a:40:2a: 6c:e3:8c:a0:e7:fd:55:85:cf:ee:f3:cf:dd:aa:b3: 41:ae:12:43:a3:07:26:3d:de:a5:de:66:c6:53:ab: e9:8a:d8:79:e2:c2:28:bd:14:ec:08:da:98:b8:c6: 83:15:76:a1:38:16:16:b7:a3:98:93:0e:6c:8c:f0: ce:89:a9:e0:05:13:d8:41:4e:76:c6:3e:ae:1f:00: e4:22:e5:7c:ed:2e:84:67:77:27:75:8c:70:b1:df: 2c:b4:fd:4e:1f:25:6f:5f:4a:cd:ce:46:d3:36:84: 57:3a:02:4d:fc:2d:7d:fb:ac:fa:15:ce:5b:20:07: 64:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:26:E4:AB:99:DD:F2:04:F4:72:DE:70:4F:9A:85:15:22:83:66:6D X509v3 Authority Key Identifier: keyid:87:BF:EE:C8:FF:9F:B2:68:80:20:DB:59:A6:22:C1:3A:15:E5:AF:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:1c:e5:34:5a:51:7a:ef:df:9c:2d:8a:2e:08:5a:49:f1:72: 4f:15:53:6c:d5:03:dc:3a:b9:28:40:2d:0f:82:7a:70:b7:ec: c0:be:74:1f:28:be:cf:b3:86:4b:d8:d0:06:98:1c:64:a6:55: dd:01:1d:61:5d:6a:fe:95:cf:4b:e4:f3:0d:de:f1:a2:9c:10: 1f:b3:3e:c4:ce:1d:d7:b8:b2:0f:04:65:b4:9b:a2:07:17:9d: 3c:7a:96:13:1f:48:fd:4a:9f:cf:e2:a0:c7:08:34:5f:d0:72: 27:26:ef:60:cb:7d:aa:45:8a:90:5e:19:66:61:12:1c:b4:49: b0:dc:90:2f:d1:df:e2:f5:15:d6:eb:48:74:51:53:b5:8e:bd: b0:5b:1c:8c:b4:16:fe:4d:fe:4c:48:19:42:51:d9:1d:06:99: 76:10:7d:04:db:b9:71:e7:74:9f:10:07:3a:c4:ad:09:58:48: 5e:be:9a:f1:b1:29:f0:41:99:11:6c:02:e6:06:26:e8:04:78: 32:5e:87:08:c6:bd:2d:ed:78:84:b4:d6:fe:53:e2:f2:5a:ae: 3d:be:c8:95:74:ed:ce:b5:ab:2b:23:1b:be:a3:96:88:91:49: e3:3d:9a:e4:ff:bb:0f:de:eb:45:a4:99:76:df:ae:a0:18:f9: 8d:a8:d3:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCN0ExMTAvBgNVBAUTKDg3QkZFRUM4RkY5RkIyNjg4MDIwREI1OUE2MjJDMTNB MTVFNUFGMjAwHhcNMjUwNTE1MDM1NjM5WhcNMjUwNTIyMDM1NjM5WjAYMRYwFAYD VQQDEw02ODI1NjVmNy04MWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsr3BfyW9/5IrakQ8eyNUN4yCRPT9NtnwDbMoMYY62FmJFdSvetBrnqQXkbes sN1PmvVc1+NZz8HOPYi5vw0pb2LZA8GNLnjHkbI+0EXEL6G6kIcybkSSl03vFax3 Krd0JyksNUYymX+s2yil1Y/EMuZBfzU9NWsjoCdT696Sq+lrwBMaQCps44yg5/1V hc/u88/dqrNBrhJDowcmPd6l3mbGU6vpith54sIovRTsCNqYuMaDFXahOBYWt6OY kw5sjPDOiangBRPYQU52xj6uHwDkIuV87S6EZ3cndYxwsd8stP1OHyVvX0rNzkbT NoRXOgJN/C19+6z6Fc5bIAdkkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcm5KuZ 3fIE9HLecE+ahRUig2ZtMB8GA1UdIwQYMBaAFIe/7sj/n7JogCDbWaYiwToV5a8g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkI3QS8wNkExOTYwMjY0 NEQxMUVFODRENDAzNEZDNEY5QUUwMi9oN191eVAtZnNtaUFJTnRacGlMQk9oWGxy eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3X3V5UC1mc21pQUlOdFpwaUxCT2hYbHJ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkI3QS8wNkExOTYwMjY0NEQxMUVFODRENDAzNEZDNEY5QUUwMi9oN191eVAtZnNt aUFJTnRacGlMQk9oWGxyeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDVHOU0WlF679+cLYouCFpJ8XJPFVNs1QPcOrkoQC0Pgnpwt+zAvnQf KL7Ps4ZL2NAGmBxkplXdAR1hXWr+lc9L5PMN3vGinBAfsz7Ezh3XuLIPBGW0m6IH F508epYTH0j9Sp/P4qDHCDRf0HInJu9gy32qRYqQXhlmYRIctEmw3JAv0d/i9RXW 60h0UVO1jr2wWxyMtBb+Tf5MSBlCUdkdBpl2EH0E27lx53SfEAc6xK0JWEhevprx sSnwQZkRbALmBiboBHgyXocIxr0t7XiEtNb+U+LyWq49vsiVdO3OtasrIxu+o5aI kUnjPZrk/7sP3utFpJl2366gGPmNqNMf -----END CERTIFICATE-----Generated at Thu May 15 21:37:08 2025 by rpki-client