$ rpki-client -vvf rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft File: m0YBtrC3j7j-njkzSoG1pd1ZVik.mft (raw, json) Hash identifier: IfewwoIS9irvC19D/ncT2bgcAP9dNQTHtERhQM7a304= Subject key identifier: 25:FA:1B:96:5E:D9:D4:21:1F:38:59:1F:2B:F6:77:05:6D:86:37:57 Authority key identifier: 9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29 Certificate issuer: /CN=A9157BF7/serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629 Certificate serial: 07D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft Manifest number: 07B1 Signing time: Wed 14 May 2025 21:16:29 +0000 Manifest this update: Wed 14 May 2025 21:16:28 +0000 Manifest next update: Wed 21 May 2025 21:16:28 +0000 Files and hashes: 1: m0YBtrC3j7j-njkzSoG1pd1ZVik.crl (hash: 4RGdXPHaExLhuuLX6iScQuKWJ1oTwwDiuOgiP0WnAKc=) 2: 1F88812AAD5311EBA93CEB69C4F9AE02.roa (hash: JxqBCjBT9K2ryaUj1ZqNSpK/pt6W0FIjzbMts6xP/O4=) 3: 1F046D5EAD5311EBA93CEB69C4F9AE02.roa (hash: QsOZtg7wgKPEMzZpQNjN0cwc1dkJJaHe5vPoUHzDi2E=) 4: 2B67707C449911EC873EEE33C4F9AE02.roa (hash: dfHP081F3AjgTxtk/Kol9IWl1ohuGadWFkcTnhyHleE=) 5: 1E69B82CAD5311EBA93CEB69C4F9AE02.roa (hash: BiwvJd+dCFyWKlGsVpLMc1ZbpjUFsliw37pP+lj/D+c=) 6: 202D8382AD5311EBA93CEB69C4F9AE02.roa (hash: 9CVFCRxGd96rDHgxt1WsX71RS0A2IwtDONeOpXumo3o=) 7: F4DFF910CB0311EC817AED0BC4F9AE02.roa (hash: 3EaaIhegA520f9Jq9jn6VCkgAQsJfc5446BLnaSLsuo=) 8: 1DC10D94AD5311EBA93CEB69C4F9AE02.roa (hash: lLU3brsFcJmxfza+HPsqiH2/FCfohQp/aB2RU3YA2bQ=) 9: 20BC506CAD5311EBA93CEB69C4F9AE02.roa (hash: FAebLgMlFuIn+Jv3/Kno5dJ1sOWIko5p1IcZ8bmbDwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 21:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2007 (0x7d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157BF7, serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629 Validity Not Before: May 14 21:16:28 2025 GMT Not After : May 21 21:16:28 2025 GMT Subject: CN=6825082c-aea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4f:f4:90:95:2d:87:34:64:ee:b4:39:cf:10: 7c:77:8f:83:d5:7d:78:1c:26:d8:76:13:50:b3:6c: 3d:3f:64:fe:a8:3f:b3:e3:f1:8f:b1:f9:87:18:c5: c5:08:44:b8:17:43:42:e4:dc:f1:95:ff:cf:d1:90: 63:d6:be:9e:90:7f:19:b1:33:bb:9a:45:9e:e8:8f: 2c:ad:53:c8:89:e0:0a:24:35:da:2e:50:91:35:64: a5:be:79:7c:32:9d:8b:24:cc:c5:d1:f9:64:c9:67: 36:ac:c5:55:27:54:9d:57:3c:e7:57:33:e4:5d:42: 26:21:04:f5:7b:c5:82:fe:b0:7a:dc:44:cc:4b:d1: be:8e:e8:7f:2f:93:69:da:51:37:78:1c:69:1c:1f: de:71:06:41:ee:9a:d1:05:91:ea:7c:e7:4d:3b:8c: 88:fa:8d:fe:65:29:f7:5d:61:48:54:89:c3:7f:64: 2f:fb:d4:b3:36:3a:8f:4a:1b:39:4f:82:a0:21:4c: db:90:16:40:5c:c5:66:04:84:55:b6:79:90:1e:e7: a2:f0:12:85:32:36:3d:25:3f:a7:fd:95:ea:07:b4: c3:68:6f:dd:14:4c:d5:9b:10:de:3d:ac:5e:bb:2b: fe:2c:6b:74:c3:0d:9a:cc:8d:51:66:95:82:0e:b4: 18:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:FA:1B:96:5E:D9:D4:21:1F:38:59:1F:2B:F6:77:05:6D:86:37:57 X509v3 Authority Key Identifier: keyid:9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:c8:11:71:7b:27:70:86:ec:0a:cc:58:47:bf:b0:f6:39:8a: 15:f9:ca:da:7a:ca:54:5f:45:bf:d5:9a:05:0b:49:55:04:ef: f2:a1:27:38:ba:7f:33:60:0f:c5:84:f8:57:7f:f8:59:f0:5a: 94:b0:d3:de:e4:ec:d8:81:6f:4e:a6:ef:99:3b:2d:91:8e:31: d3:70:06:78:7b:9a:d7:9d:bb:90:6c:93:f7:d5:1b:91:99:72: 8d:ce:02:84:15:01:f3:21:f4:ca:33:49:94:41:07:55:68:74: 0c:f7:5a:91:4b:5f:75:1e:20:77:41:f3:ea:1e:6f:70:33:2f: e7:c0:13:70:5b:14:64:6d:a1:86:63:bf:d3:55:9d:4d:05:83: a3:d8:83:7a:7f:d7:a5:bf:0c:88:69:5a:ee:3d:34:45:c2:59: 37:ca:89:3a:68:9d:ef:60:ea:af:92:f4:b9:5c:4f:9a:ff:d0: 07:c1:b5:58:62:b1:37:ae:2f:a3:af:35:77:a0:f7:80:5e:dc: 71:ec:b3:b2:55:8b:20:3f:5e:70:c8:15:2a:f3:ba:b2:f9:7d: d2:4a:0e:ce:f6:16:c6:ec:77:a1:46:97:47:5f:2b:59:2a:8b: 8f:a8:84:66:d5:d4:48:88:32:dc:20:86:aa:c2:ae:f6:40:aa: 2d:37:bc:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCRjcxMTAvBgNVBAUTKDlCNDYwMUI2QjBCNzhGQjhGRTlFMzkzMzRBODFCNUE1 REQ1OTU2MjkwHhcNMjUwNTE0MjExNjI4WhcNMjUwNTIxMjExNjI4WjAYMRYwFAYD VQQDEw02ODI1MDgyYy1hZWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0/0kJUthzRk7rQ5zxB8d4+D1X14HCbYdhNQs2w9P2T+qD+z4/GPsfmHGMXF CES4F0NC5Nzxlf/P0ZBj1r6ekH8ZsTO7mkWe6I8srVPIieAKJDXaLlCRNWSlvnl8 Mp2LJMzF0flkyWc2rMVVJ1SdVzznVzPkXUImIQT1e8WC/rB63ETMS9G+juh/L5Np 2lE3eBxpHB/ecQZB7prRBZHqfOdNO4yI+o3+ZSn3XWFIVInDf2Qv+9SzNjqPShs5 T4KgIUzbkBZAXMVmBIRVtnmQHuei8BKFMjY9JT+n/ZXqB7TDaG/dFEzVmxDePaxe uyv+LGt0ww2azI1RZpWCDrQYdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCX6G5Ze 2dQhHzhZHyv2dwVthjdXMB8GA1UdIwQYMBaAFJtGAbawt4+4/p45M0qBtaXdWVYp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0JGNy9BRDJBQzcyRUZC RUExMUVBQTBBQzMzMUFDNEY5QUUwMi9tMFlCdHJDM2o3ai1uamt6U29HMXBkMVpW aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20wWUJ0ckMzajdqLW5qa3pTb0cxcGQxWlZpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0JGNy9BRDJBQzcyRUZCRUExMUVBQTBBQzMzMUFDNEY5QUUwMi9tMFlCdHJDM2o3 ai1uamt6U29HMXBkMVpWaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxyBFxeydwhuwKzFhHv7D2OYoV+craespUX0W/1ZoFC0lVBO/yoSc4 un8zYA/FhPhXf/hZ8FqUsNPe5OzYgW9Opu+ZOy2RjjHTcAZ4e5rXnbuQbJP31RuR mXKNzgKEFQHzIfTKM0mUQQdVaHQM91qRS191HiB3QfPqHm9wMy/nwBNwWxRkbaGG Y7/TVZ1NBYOj2IN6f9elvwyIaVruPTRFwlk3yok6aJ3vYOqvkvS5XE+a/9AHwbVY YrE3ri+jrzV3oPeAXtxx7LOyVYsgP15wyBUq87qy+X3SSg7O9hbG7HehRpdHXytZ KouPqIRm1dRIiDLcIIaqwq72QKotN7xF -----END CERTIFICATE-----Generated at Thu May 15 06:42:12 2025 by rpki-client