$ rpki-client -vvf rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft File: 7ulOOvQOrIyjbcMuSeREbs-zNQU.mft (raw, json) Hash identifier: hKteOcptUoEyD06WOjaogyJfVzjHGIz9PRwe3LsxvNQ= Subject key identifier: D3:95:0F:6B:D7:1F:06:8E:24:47:5D:08:4C:64:59:4D:28:37:23:2C Authority key identifier: EE:E9:4E:3A:F4:0E:AC:8C:A3:6D:C3:2E:49:E4:44:6E:CF:B3:35:05 Certificate issuer: /CN=A9161FF7/serialNumber=EEE94E3AF40EAC8CA36DC32E49E4446ECFB33505 Certificate serial: 121B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft Manifest number: 120D Signing time: Fri 16 May 2025 17:22:56 +0000 Manifest this update: Fri 16 May 2025 17:22:55 +0000 Manifest next update: Fri 23 May 2025 17:22:55 +0000 Files and hashes: 1: 7ulOOvQOrIyjbcMuSeREbs-zNQU.crl (hash: VtE+Y/m2EzBcu+vh1md6C8Zl5SRu9lh1gjN0RCvhLLo=) 2: 44A110AE77F311EEBFBD3064C4F9AE02.roa (hash: nLUHgXDw/FqHMkpa6OTKWrgVqXi50zS8nf/fSNtv6d4=) 3: 43CDA63877F311EEBFBD3064C4F9AE02.roa (hash: DAhhlDd0WQ6jBratV7Sxl4UrRGi+wYN1gX4H3UsXhbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.crl rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 17:22:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4635 (0x121b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161FF7, serialNumber=EEE94E3AF40EAC8CA36DC32E49E4446ECFB33505 Validity Not Before: May 16 17:22:55 2025 GMT Not After : May 23 17:22:55 2025 GMT Subject: CN=6827746f-8c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:05:b7:07:7f:10:8b:cf:ff:9e:27:76:e2:1f: ec:7c:45:31:d5:f6:4b:27:2e:90:81:37:a8:2e:16: 23:2b:94:2a:0d:14:6f:d8:1f:90:73:d3:cb:7c:fb: d8:89:a1:39:2b:18:d7:59:ce:53:f4:c6:e3:9e:9a: c0:14:0c:52:ae:c9:5d:6b:5f:94:e8:78:60:25:2f: 76:eb:8e:f6:63:8a:12:29:d3:4c:f9:43:88:e4:e5: 6d:18:92:c0:ad:76:c9:65:01:24:47:bb:ee:e0:66: ac:9c:18:57:cd:17:4a:68:20:f2:d1:99:db:27:1d: bc:bb:25:ec:58:1d:61:1a:a5:e4:88:cf:e4:d9:01: 3f:b6:a7:e4:3a:3c:0a:1b:6f:13:91:24:d7:fd:8f: 67:ec:6c:9c:17:ae:64:4d:f7:a6:41:b7:90:ea:c6: 0c:c1:41:e6:27:89:38:f5:18:10:61:ac:7a:6d:ac: 75:d1:a9:c8:c5:19:04:b1:b7:bc:b9:11:16:9e:4c: e9:4b:e6:e1:3d:2f:42:ee:ef:0d:5b:0d:12:f0:66: 2f:2d:85:0e:5b:c5:10:44:80:5e:38:3f:7f:ce:59: d7:8c:da:23:de:96:61:a7:05:5c:a8:bc:ca:75:bd: 50:ca:3e:fd:95:75:89:fd:80:b0:53:4f:98:fb:2a: 8a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:95:0F:6B:D7:1F:06:8E:24:47:5D:08:4C:64:59:4D:28:37:23:2C X509v3 Authority Key Identifier: keyid:EE:E9:4E:3A:F4:0E:AC:8C:A3:6D:C3:2E:49:E4:44:6E:CF:B3:35:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:07:e8:2c:34:8f:c7:82:51:57:b8:b5:55:a0:91:b7:15:59: 63:7e:5b:6f:86:4f:7d:66:3b:19:d7:f1:67:5a:3e:bc:5b:29: 25:0e:61:05:d1:21:c6:f4:67:6a:bd:d8:ea:9d:86:14:a8:c5: 6f:90:da:ca:19:af:1f:83:f4:53:b3:ce:ee:70:a0:bd:cd:31: 2a:7f:b8:1a:e2:c4:d8:76:3d:f2:60:e4:4f:92:83:b2:0d:a2: fb:1d:e7:6e:b4:bd:47:a0:26:80:46:f8:25:45:31:08:6f:de: ce:3d:a8:c4:04:db:ea:cb:64:39:99:5e:c0:59:48:44:22:4a: 0d:f6:96:bb:ed:a7:13:b1:d6:76:cd:26:ee:cc:a8:7e:22:51: 56:b2:4a:37:ca:f1:21:54:c7:82:5d:73:a2:af:f9:bd:13:23: 58:63:5a:ae:96:89:7b:9c:e5:8b:df:d3:c2:7a:bd:37:ac:87: a7:84:e7:9c:50:c8:7d:f0:00:14:74:1b:ba:7a:67:a1:3b:36: 99:cc:a1:df:db:33:39:65:47:b0:89:1c:9f:b4:09:c7:c7:22: c7:4f:96:12:bf:83:dd:cc:7b:66:b8:52:47:78:82:f6:c6:1d: 23:7f:39:f5:30:10:b4:6c:63:da:01:1a:87:bd:58:ed:eb:07: c6:98:65:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFGRjcxMTAvBgNVBAUTKEVFRTk0RTNBRjQwRUFDOENBMzZEQzMyRTQ5RTQ0NDZF Q0ZCMzM1MDUwHhcNMjUwNTE2MTcyMjU1WhcNMjUwNTIzMTcyMjU1WjAYMRYwFAYD VQQDEw02ODI3NzQ2Zi04YzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApAW3B38Qi8//nid24h/sfEUx1fZLJy6QgTeoLhYjK5QqDRRv2B+Qc9PLfPvY iaE5KxjXWc5T9MbjnprAFAxSrslda1+U6HhgJS926472Y4oSKdNM+UOI5OVtGJLA rXbJZQEkR7vu4GasnBhXzRdKaCDy0ZnbJx28uyXsWB1hGqXkiM/k2QE/tqfkOjwK G28TkSTX/Y9n7GycF65kTfemQbeQ6sYMwUHmJ4k49RgQYax6bax10anIxRkEsbe8 uREWnkzpS+bhPS9C7u8NWw0S8GYvLYUOW8UQRIBeOD9/zlnXjNoj3pZhpwVcqLzK db1Qyj79lXWJ/YCwU0+Y+yqKnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOVD2vX HwaOJEddCExkWU0oNyMsMB8GA1UdIwQYMBaAFO7pTjr0DqyMo23DLknkRG7PszUF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUZGNy8yMTg2MkM2NEUw QzAxMUU4OUU5QkZFMTVDNEY5QUUwMi83dWxPT3ZRT3JJeWpiY011U2VSRWJzLXpO UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd1bE9PdlFPckl5amJjTXVTZVJFYnMtek5RVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUZGNy8yMTg2MkM2NEUwQzAxMUU4OUU5QkZFMTVDNEY5QUUwMi83dWxPT3ZRT3JJ eWpiY011U2VSRWJzLXpOUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNB+gsNI/HglFXuLVVoJG3FVljfltvhk99ZjsZ1/FnWj68WyklDmEF 0SHG9GdqvdjqnYYUqMVvkNrKGa8fg/RTs87ucKC9zTEqf7ga4sTYdj3yYORPkoOy DaL7HedutL1HoCaARvglRTEIb97OPajEBNvqy2Q5mV7AWUhEIkoN9pa77acTsdZ2 zSbuzKh+IlFWsko3yvEhVMeCXXOir/m9EyNYY1qulol7nOWL39PCer03rIenhOec UMh98AAUdBu6emehOzaZzKHf2zM5ZUewiRyftAnHxyLHT5YSv4PdzHtmuFJHeIL2 xh0jfzn1MBC0bGPaARqHvVjt6wfGmGVl -----END CERTIFICATE-----Generated at Sat May 17 11:40:12 2025 by rpki-client