$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft File: 07sK_xlZ4CkmxzdUiny-QQ25CWs.mft (raw, json) Hash identifier: vgXUvTWxOjcX6czoUPnXvYw85toA8EjHn1EJtvI7A58= Subject key identifier: 55:81:A6:1E:B0:BD:93:D6:3C:C7:59:7B:08:FC:29:68:0E:E9:4D:1B Authority key identifier: D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B Certificate issuer: /CN=A9155A79/serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B Certificate serial: 01AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft Manifest number: 01A6 Signing time: Sun 11 May 2025 02:16:12 +0000 Manifest this update: Sun 11 May 2025 02:16:12 +0000 Manifest next update: Sun 18 May 2025 02:16:12 +0000 Files and hashes: 1: 07sK_xlZ4CkmxzdUiny-QQ25CWs.crl (hash: 9tSRcM9DsFd2Eqv0DKdoe15WZC7EKnjysIlS1rVt3qA=) 2: A534BB46BDC611EE902E692DC4F9AE02.roa (hash: Wygmj2JKO4aGkrYbl9Bny2rS0iiXkwLAfqO4thXRj+k=) 3: 9A745DF6BDC611EE9C87EF29C4F9AE02.roa (hash: zelXEh8AZUnkEzzh5nIKoVPZYcm1u2v7VkQCFQEcMjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:16:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155A79, serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B Validity Not Before: May 11 02:16:12 2025 GMT Not After : May 18 02:16:12 2025 GMT Subject: CN=6820086c-3cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2c:8b:0d:9a:b3:ac:80:1b:f6:9a:e2:63:b3: 6e:75:53:19:d8:ef:02:db:5d:f2:83:5a:9a:10:cc: 30:4e:cb:35:77:a7:2d:5d:0b:f3:23:0d:4e:d7:d7: 22:1a:c0:04:f1:10:3e:21:16:4c:fa:60:c3:39:9c: 69:50:ca:9a:67:73:3d:d8:02:6a:5a:14:23:6e:c4: 0e:6b:bb:ef:07:b4:6c:e2:68:29:a8:a3:81:a9:f5: 99:dd:da:18:8a:d6:2a:1f:4f:65:4a:a3:da:54:84: 7f:4f:d1:f2:5d:50:cf:d2:a6:51:64:0d:bc:7b:f9: 0f:78:cd:42:3a:08:1c:16:86:06:6b:d0:0b:56:96: da:82:27:23:3b:48:46:5a:8c:8c:33:ed:61:53:fc: 10:33:4a:68:5e:0c:b0:f2:88:7f:a1:9e:39:7a:1a: d4:85:a6:4b:98:73:5d:e0:d8:06:63:72:04:31:10: f5:a3:de:39:eb:1f:08:7b:7f:f3:7a:08:8a:9f:fe: db:68:bd:6f:66:a3:34:0c:76:3a:26:35:5f:e9:9c: 6b:6d:cc:a5:b0:a0:4c:d9:a9:35:67:d5:bf:45:50: 1a:0b:01:d0:37:0a:2d:d5:ca:31:eb:46:51:b5:da: a7:2d:eb:21:3b:d6:63:49:3b:f1:3d:a1:b1:19:f4: 51:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:81:A6:1E:B0:BD:93:D6:3C:C7:59:7B:08:FC:29:68:0E:E9:4D:1B X509v3 Authority Key Identifier: keyid:D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:2c:7a:b6:d1:62:92:1d:af:0f:da:80:ce:6d:ef:99:13:cb: 48:ea:69:64:87:51:f0:4d:25:71:82:8c:e9:bd:6d:84:02:37: c1:2a:52:58:13:83:cd:66:a8:1e:74:5a:bf:d3:b5:d8:b2:6a: 23:6d:29:ff:89:f8:e1:3c:84:53:a6:8e:e5:64:34:c3:66:bb: 91:21:a8:35:cc:8b:a4:48:ab:50:98:68:10:3a:2c:e7:74:7e: 82:c6:bd:04:91:32:26:32:8d:a6:a9:bc:74:c5:ee:b9:33:7c: 78:c0:aa:1b:90:d7:98:40:0a:ee:3f:a5:56:9a:85:6f:66:8b: 44:96:fc:ff:1c:f0:91:f4:c5:91:1d:28:8f:6b:b8:11:c2:9d: 4c:20:e5:6d:2e:e5:8a:36:be:cb:38:2f:10:8e:c3:a5:88:ee: a1:0b:b3:29:89:93:10:7b:08:6d:7b:70:36:9f:d6:5d:da:67: 72:08:f1:60:13:a4:68:24:06:1a:b0:8c:ca:d8:03:b8:b4:b1: 49:f1:74:df:83:5b:fa:9e:2f:0f:6f:94:ae:25:d3:66:de:4d: 87:53:7d:22:69:bc:f7:0e:3a:83:99:b2:48:f1:0f:40:eb:a0: 67:14:25:0f:3a:ec:f8:01:00:36:81:1f:5b:48:40:ef:67:1a: 4d:98:b8:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVBNzkxMTAvBgNVBAUTKEQzQkIwQUZGMTk1OUUwMjkyNkM3Mzc1NDhBN0NCRTQx MERCOTA5NkIwHhcNMjUwNTExMDIxNjEyWhcNMjUwNTE4MDIxNjEyWjAYMRYwFAYD VQQDEw02ODIwMDg2Yy0zY2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyyLDZqzrIAb9priY7NudVMZ2O8C213yg1qaEMwwTss1d6ctXQvzIw1O19ci GsAE8RA+IRZM+mDDOZxpUMqaZ3M92AJqWhQjbsQOa7vvB7Rs4mgpqKOBqfWZ3doY itYqH09lSqPaVIR/T9HyXVDP0qZRZA28e/kPeM1COggcFoYGa9ALVpbagicjO0hG WoyMM+1hU/wQM0poXgyw8oh/oZ45ehrUhaZLmHNd4NgGY3IEMRD1o9456x8Ie3/z egiKn/7baL1vZqM0DHY6JjVf6ZxrbcylsKBM2ak1Z9W/RVAaCwHQNwot1cox60ZR tdqnLeshO9ZjSTvxPaGxGfRRdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFWBph6w vZPWPMdZewj8KWgO6U0bMB8GA1UdIwQYMBaAFNO7Cv8ZWeApJsc3VIp8vkENuQlr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUE3OS8xQjVDMUY0MEIw RjIxMUVEOERDQkVCODJDNEY5QUUwMi8wN3NLX3hsWjRDa214emRVaW55LVFRMjVD V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA3c0tfeGxaNENrbXh6ZFVpbnktUVEyNUNXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUE3OS8xQjVDMUY0MEIwRjIxMUVEOERDQkVCODJDNEY5QUUwMi8wN3NLX3hsWjRD a214emRVaW55LVFRMjVDV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATLHq20WKSHa8P2oDObe+ZE8tI6mlkh1HwTSVxgozpvW2EAjfBKlJY E4PNZqgedFq/07XYsmojbSn/ifjhPIRTpo7lZDTDZruRIag1zIukSKtQmGgQOizn dH6Cxr0EkTImMo2mqbx0xe65M3x4wKobkNeYQAruP6VWmoVvZotElvz/HPCR9MWR HSiPa7gRwp1MIOVtLuWKNr7LOC8QjsOliO6hC7MpiZMQewhte3A2n9Zd2mdyCPFg E6RoJAYasIzK2AO4tLFJ8XTfg1v6ni8Pb5SuJdNm3k2HU30iabz3DjqDmbJI8Q9A 66BnFCUPOuz4AQA2gR9bSEDvZxpNmLiT -----END CERTIFICATE-----Generated at Tue May 13 00:34:32 2025 by rpki-client