$ rpki-client -vvf rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft File: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft (raw, json) Hash identifier: hRkbF4TrVPPgrwZpfzppMami4EP8T4+DZr6LNiCVebY= Subject key identifier: 1E:65:B2:E4:9E:59:E1:BF:53:B4:29:D3:06:69:D9:CE:28:33:87:0E Authority key identifier: ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 Certificate issuer: /CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Certificate serial: 09EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft Manifest number: 09B7 Signing time: Fri 16 May 2025 20:24:34 +0000 Manifest this update: Fri 16 May 2025 20:24:33 +0000 Manifest next update: Fri 23 May 2025 20:24:33 +0000 Files and hashes: 1: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl (hash: gPl89SJOtfN2TSHZGET45QcYBptNSopJHIVYNySeVNI=) 2: D411F96C532E11EFB0B63E60C4F9AE02.roa (hash: 838b7qHkfNcVQ+dG+2+ikVBrip48qajejDAv66Es7Do=) 3: 0A627D5653AD11EF94BC7F0BC4F9AE02.roa (hash: lHubJpI54TUZB9ErKrK2Uh2G0dB2IBaNDMotiEzD5Do=) 4: A2120E06FD7F11EFA8C89755C4F9AE02.roa (hash: t6q2fLRleWOAh29sMouXev7NxP/StSGtuqhQ1bcdSrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 20:24:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2543 (0x9ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146944, serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Validity Not Before: May 16 20:24:33 2025 GMT Not After : May 23 20:24:33 2025 GMT Subject: CN=68279f01-9de8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:36:a1:15:c3:17:7f:96:1e:09:29:a3:03:ee: 96:c4:86:04:22:37:5d:72:8c:aa:f3:01:cb:f5:a8: 02:da:d3:8d:ea:54:a1:9e:80:d3:c5:e3:5d:ec:1c: 90:fc:e4:2f:bf:70:85:9a:d2:be:fc:05:99:25:13: 87:12:62:34:2c:07:61:6a:ac:15:12:d9:20:a4:95: 23:cc:96:0f:ab:4a:38:1a:b1:16:7a:46:af:d3:c7: a6:9e:c9:fe:aa:8c:56:33:36:cd:2b:3d:56:bf:49: 84:48:47:ca:ed:f7:37:9f:92:fe:0d:01:a5:98:f5: fd:94:43:37:bb:ee:6a:31:2a:d4:d5:60:7b:98:e6: eb:05:ea:ec:23:e3:84:1b:b6:e4:8b:d4:f4:77:03: 50:a6:eb:a0:33:de:39:1b:e1:54:e1:12:9f:09:23: be:60:be:91:98:ac:78:11:e7:c9:e3:55:04:b0:58: f4:d8:6f:f8:1c:a1:e9:73:b2:c2:f0:ee:36:d5:55: 5c:6b:8e:b8:7e:d8:62:0d:a8:22:ca:88:9d:6a:60: 8c:dc:c0:4a:e7:97:f9:3e:ac:c2:c4:d8:37:13:1c: 83:3c:c1:d3:f5:be:f5:a7:9e:fb:9e:b8:2c:5f:2a: b8:61:51:c3:85:5c:f9:6b:ed:01:1a:f9:99:16:fe: 4f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:65:B2:E4:9E:59:E1:BF:53:B4:29:D3:06:69:D9:CE:28:33:87:0E X509v3 Authority Key Identifier: keyid:ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:96:9d:02:1f:50:94:15:11:9d:11:f1:50:5a:95:25:14:1c: d9:2d:e3:be:08:5a:96:28:37:b8:cd:dc:6a:67:96:f1:17:ba: 73:d7:c4:0b:52:0c:d0:da:96:d3:b6:10:67:a4:92:0d:a7:cb: 8a:f5:18:04:a3:86:ee:42:6c:14:f9:0d:a5:71:f3:19:a9:fe: d5:fd:ef:f9:bd:f0:1d:4f:68:ea:76:51:fd:72:a0:68:fe:54: 44:ed:89:fc:b3:04:57:55:1b:84:f9:c7:4b:10:57:5c:99:d0: 57:78:aa:0a:b8:be:f1:a3:96:d2:77:96:8f:5e:99:3f:29:60: 20:e4:4b:d9:f9:9a:d6:50:df:5b:b3:19:d8:03:46:7a:28:b1: 78:56:fe:31:38:e4:88:fd:5a:62:3e:44:16:9a:d5:70:81:9b: 4a:21:1c:8f:39:ad:64:70:37:0b:0c:48:c8:d0:bf:53:a4:b4: 1a:1b:5c:91:f7:eb:3c:a8:0e:b5:c5:77:66:65:da:99:d1:f6: c6:b5:70:0a:92:af:b8:40:c9:05:8e:dc:d2:e8:ed:a9:73:c6: b1:7f:14:da:86:9c:e0:45:f9:cb:3c:3c:a1:d8:98:cb:d2:c0: 17:bd:7e:23:40:64:45:e8:6f:1b:6b:74:2b:1c:eb:09:41:8e: 81:20:9d:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY5NDQxMTAvBgNVBAUTKEVEMUY5NThDQjYwNEI1NzZFODIyMTRCNENGM0NDMEZF NjIwRUY5RjQwHhcNMjUwNTE2MjAyNDMzWhcNMjUwNTIzMjAyNDMzWjAYMRYwFAYD VQQDEw02ODI3OWYwMS05ZGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjahFcMXf5YeCSmjA+6WxIYEIjddcoyq8wHL9agC2tON6lShnoDTxeNd7ByQ /OQvv3CFmtK+/AWZJROHEmI0LAdhaqwVEtkgpJUjzJYPq0o4GrEWekav08emnsn+ qoxWMzbNKz1Wv0mESEfK7fc3n5L+DQGlmPX9lEM3u+5qMSrU1WB7mObrBersI+OE G7bki9T0dwNQpuugM945G+FU4RKfCSO+YL6RmKx4EefJ41UEsFj02G/4HKHpc7LC 8O421VVca464fthiDagiyoidamCM3MBK55f5PqzCxNg3ExyDPMHT9b71p577nrgs Xyq4YVHDhVz5a+0BGvmZFv5PmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5lsuSe WeG/U7Qp0wZp2c4oM4cOMB8GA1UdIwQYMBaAFO0flYy2BLV26CIUtM88wP5iDvn0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Njk0NC80M0JEMUM2RThF OTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRYYm9JaFMwenp6QV9tSU8t ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdSLVZqTFlFdFhib0loUzB6enpBX21JTy1mUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Njk0NC80M0JEMUM2RThFOTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRY Ym9JaFMwenp6QV9tSU8tZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZlp0CH1CUFRGdEfFQWpUlFBzZLeO+CFqWKDe4zdxqZ5bxF7pz18QL UgzQ2pbTthBnpJINp8uK9RgEo4buQmwU+Q2lcfMZqf7V/e/5vfAdT2jqdlH9cqBo /lRE7Yn8swRXVRuE+cdLEFdcmdBXeKoKuL7xo5bSd5aPXpk/KWAg5EvZ+ZrWUN9b sxnYA0Z6KLF4Vv4xOOSI/VpiPkQWmtVwgZtKIRyPOa1kcDcLDEjI0L9TpLQaG1yR 9+s8qA61xXdmZdqZ0fbGtXAKkq+4QMkFjtzS6O2pc8axfxTahpzgRfnLPDyh2JjL 0sAXvX4jQGRF6G8ba3QrHOsJQY6BIJ1k -----END CERTIFICATE-----Generated at Sat May 17 06:16:21 2025 by rpki-client