$ rpki-client -vvf rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft File: 7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft (raw, json) Hash identifier: y7We9+dQPehYOxjVcXp61bs7A7ChisEgByKEu8Fwc+Y= Subject key identifier: 08:85:97:A5:BD:79:FD:80:F3:5F:AD:39:35:25:42:C6:50:61:BF:85 Authority key identifier: EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7 Certificate issuer: /CN=A915D64F/serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7 Certificate serial: 09D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft Manifest number: 09CC Signing time: Thu 08 May 2025 19:52:23 +0000 Manifest this update: Thu 08 May 2025 19:52:23 +0000 Manifest next update: Thu 15 May 2025 19:52:23 +0000 Files and hashes: 1: 7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl (hash: 3i8KCxUBo/3yhU7y4/S4AuzkVz7jeBhBLvvabNARW08=) 2: 2F7EAF12932411EB97630343C4F9AE02.roa (hash: taEGqA6seasVUG8wh6upIg7VNN7tLKDnm912bRHf+NY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 19:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2514 (0x9d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D64F, serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7 Validity Not Before: May 8 19:52:23 2025 GMT Not After : May 15 19:52:23 2025 GMT Subject: CN=681d0b77-335a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:72:41:a2:63:da:00:c9:75:94:2c:a6:6a:55: 4a:c9:21:24:16:e1:a9:c1:a0:a5:10:2c:00:f8:b8: 4d:bc:25:fa:bc:af:98:fa:d1:8b:53:a0:f7:51:0b: f0:e7:79:09:e4:f5:d7:f8:34:6f:1f:d9:53:0d:13: 9c:ab:6b:b3:69:58:9b:c6:c9:13:32:c3:e5:8b:a3: 29:02:5d:a3:ca:df:57:b1:65:5a:8e:09:17:63:9a: e9:39:ed:8f:61:56:d4:a0:46:ce:11:02:a8:b2:93: 14:f5:f6:e3:48:34:d2:97:ed:b7:85:46:f8:c1:36: ad:cc:4b:5f:99:cc:82:6b:a0:7f:a1:b5:18:3f:53: b3:31:78:64:a8:b0:b9:2b:84:ba:c2:51:9c:27:f2: 72:59:ef:58:c1:a6:c3:ec:e3:4a:e0:fb:6a:99:0b: a4:4e:e4:6f:a4:01:fd:08:65:5d:f3:0b:cf:4c:db: f6:35:45:b1:5f:d1:ee:22:30:d3:d1:b7:3a:d6:83: 13:5e:fb:9e:3e:91:3b:79:4e:bf:3c:ad:77:81:59: cd:d3:75:63:5a:bc:db:4b:ec:45:4e:33:bc:73:fc: 40:04:3c:11:06:b0:e3:34:06:59:03:75:7b:65:f9: bf:c6:83:1a:6e:ee:2e:52:48:08:e6:58:11:32:83: da:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:85:97:A5:BD:79:FD:80:F3:5F:AD:39:35:25:42:C6:50:61:BF:85 X509v3 Authority Key Identifier: keyid:EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:48:43:82:a6:13:8a:18:70:04:f6:1e:bd:8b:e0:60:d6:11: d2:df:ad:42:e2:73:65:6b:37:d6:ea:00:5b:ce:ba:bd:b3:8c: 1e:5c:2b:20:98:f7:08:3d:51:9e:38:c3:d4:af:f3:fc:ad:f0: 3c:bd:88:5e:68:de:0c:67:db:a3:ab:19:22:2a:89:69:0f:7e: d1:a0:04:db:10:6a:27:fe:dc:d7:5c:6b:13:41:85:f7:c2:b2: 35:b4:01:43:18:1e:e8:93:85:50:7a:09:99:d9:91:c7:94:5e: 7e:a0:b5:5c:ae:93:c4:98:e6:57:92:e5:2f:91:9d:77:1c:00: 6c:07:fb:fa:0f:6f:87:72:dd:43:17:e6:a9:b9:f0:d6:85:f3: 93:4d:cc:8e:41:9c:97:e7:38:a5:86:1a:aa:35:69:fb:00:d1: 0d:e5:59:ea:d8:64:29:38:32:d8:2e:88:2a:1d:91:bf:c8:6c: 71:04:1d:21:bb:d8:27:a3:26:4c:31:7b:fa:56:56:04:4f:b0: 95:6a:ef:13:53:df:83:47:0b:77:7e:ef:78:c0:19:b4:30:52: eb:30:2c:de:9a:bb:38:c2:14:3a:86:3f:6f:1e:47:b6:1b:bf: e3:9a:d6:4a:df:ae:ff:f3:9b:b5:e9:f0:19:86:91:d7:cc:5f: 1e:0f:51:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2NEYxMTAvBgNVBAUTKEVDNzA1QjJBRDZGQjEzRkQ2RkM0MjE0Qjk3NzI3MDQx MTNFNjY4RDcwHhcNMjUwNTA4MTk1MjIzWhcNMjUwNTE1MTk1MjIzWjAYMRYwFAYD VQQDEw02ODFkMGI3Ny0zMzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5nJBomPaAMl1lCymalVKySEkFuGpwaClECwA+LhNvCX6vK+Y+tGLU6D3UQvw 53kJ5PXX+DRvH9lTDROcq2uzaVibxskTMsPli6MpAl2jyt9XsWVajgkXY5rpOe2P YVbUoEbOEQKospMU9fbjSDTSl+23hUb4wTatzEtfmcyCa6B/obUYP1OzMXhkqLC5 K4S6wlGcJ/JyWe9YwabD7ONK4PtqmQukTuRvpAH9CGVd8wvPTNv2NUWxX9HuIjDT 0bc61oMTXvuePpE7eU6/PK13gVnN03VjWrzbS+xFTjO8c/xABDwRBrDjNAZZA3V7 Zfm/xoMabu4uUkgI5lgRMoPa0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAiFl6W9 ef2A81+tOTUlQsZQYb+FMB8GA1UdIwQYMBaAFOxwWyrW+xP9b8QhS5dycEET5mjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY0Ri9GMTE1QjY3MjdE RUQxMUVBOUE1Q0NDNEJDNEY5QUUwMi83SEJiS3RiN0VfMXZ4Q0ZMbDNKd1FSUG1h TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdIQmJLdGI3RV8xdnhDRkxsM0p3UVJQbWFOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDY0Ri9GMTE1QjY3MjdERUQxMUVBOUE1Q0NDNEJDNEY5QUUwMi83SEJiS3RiN0Vf MXZ4Q0ZMbDNKd1FSUG1hTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnSEOCphOKGHAE9h69i+Bg1hHS361C4nNlazfW6gBbzrq9s4weXCsg mPcIPVGeOMPUr/P8rfA8vYheaN4MZ9ujqxkiKolpD37RoATbEGon/tzXXGsTQYX3 wrI1tAFDGB7ok4VQegmZ2ZHHlF5+oLVcrpPEmOZXkuUvkZ13HABsB/v6D2+Hct1D F+apufDWhfOTTcyOQZyX5zilhhqqNWn7ANEN5Vnq2GQpODLYLogqHZG/yGxxBB0h u9gnoyZMMXv6VlYET7CVau8TU9+DRwt3fu94wBm0MFLrMCzemrs4whQ6hj9vHke2 G7/jmtZK367/85u16fAZhpHXzF8eD1GL -----END CERTIFICATE-----Generated at Fri May 9 02:46:05 2025 by rpki-client