$ rpki-client -vvf rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft File: 7f5wbJSbXs8du-Rg29BO_nweEos.mft (raw, json) Hash identifier: aycSKBdvuirFnGL3bFPWTnpXFPQRszTnwtbOgk8VLmw= Subject key identifier: F8:34:C2:A9:48:EA:DE:44:33:D6:FE:E6:64:4E:96:99:48:AA:97:B8 Authority key identifier: ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B Certificate issuer: /CN=A9170EED/serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft Manifest number: 77 Signing time: Tue 13 May 2025 06:00:54 +0000 Manifest this update: Tue 13 May 2025 06:00:54 +0000 Manifest next update: Tue 20 May 2025 06:00:54 +0000 Files and hashes: 1: 7f5wbJSbXs8du-Rg29BO_nweEos.crl (hash: VMyacIesx5lGwt4C0PI711P1ofsI+i9PPv6Rph8oCNI=) 2: A647525E853B11EFB513D149C4F9AE02.roa (hash: NVZ/4pC5x+KRkn1xpv0XuIrsdCyF6l6g38IM7lDAhYA=) 3: 4A6837A4CE0C11EF8EFFF140C4F9AE02.roa (hash: HwJfMTQ7jgg3uM77Aihq1iVX6drdh4vJBA8hbyppq9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170EED, serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B Validity Not Before: May 13 06:00:54 2025 GMT Not After : May 20 06:00:54 2025 GMT Subject: CN=6822e016-d23c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:40:4c:3c:4c:33:6b:6d:b4:1e:78:48:22:61: 44:a5:5b:f9:0a:8c:1a:48:c7:5f:aa:c9:59:f9:17: 03:d0:99:83:30:b8:41:15:25:96:77:2f:1e:34:26: 16:06:e2:de:b7:af:13:86:b3:8f:b6:e4:1e:c8:45: 7d:db:49:41:20:0f:0c:98:7e:37:c1:ad:19:86:76: e9:c6:c4:fa:d8:e4:9e:25:9f:a9:1d:31:6e:45:47: 56:8e:39:5c:90:7d:16:08:9a:69:ed:c0:cd:3c:25: 31:ea:3a:42:fa:fe:51:32:3f:6e:17:6a:45:2a:77: aa:11:f0:41:58:c6:3f:81:11:40:37:32:19:81:b2: 6b:d3:12:b3:31:96:38:79:c2:22:23:ac:f9:1e:a4: 0f:25:00:df:b3:85:8b:7d:56:73:ac:0e:15:7d:6a: 57:ce:c8:dd:94:7d:b2:9e:31:93:3e:67:a4:ad:ea: 92:50:32:61:a9:43:2c:af:89:9e:8f:a2:f3:6a:ff: 5b:65:0b:8d:1e:53:c1:1e:b3:2d:c0:29:13:72:23: 0a:20:2d:78:45:12:d2:3f:a8:a9:a7:4c:a2:f0:db: 6a:1e:15:b5:8a:52:4a:18:2f:9c:dc:13:bd:f6:a3: 93:61:42:1b:95:33:d3:e8:e9:89:45:ac:93:4f:7d: 17:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:34:C2:A9:48:EA:DE:44:33:D6:FE:E6:64:4E:96:99:48:AA:97:B8 X509v3 Authority Key Identifier: keyid:ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:85:9e:b3:56:26:91:45:88:69:c8:8f:3a:d7:0b:2f:23:33: d9:ff:37:a9:6e:c4:41:9b:1b:99:7e:e5:67:94:93:c6:b6:b8: 32:e6:23:d7:f5:ab:73:79:d7:00:87:73:53:29:5d:d9:92:bf: ea:c3:8d:cd:22:f3:1c:58:f0:4b:8b:84:a7:d7:a2:99:3e:ba: 8b:4b:61:ba:f1:1a:a3:50:5c:fe:56:c7:46:a9:de:1e:c5:90: 91:b9:58:62:46:fe:75:85:51:35:58:93:12:5e:73:b9:f8:20: c9:a9:36:08:84:58:4e:8c:28:0e:59:ca:4a:ff:17:42:a2:94: f2:89:c2:45:df:fe:4e:60:84:2a:d5:dd:cb:a2:e7:05:bf:60: e7:3c:33:51:36:8a:f6:9f:4f:c0:89:65:d9:18:30:df:7c:13: 23:dd:a4:41:22:16:2b:8d:9c:36:92:92:9b:ed:17:bc:85:7d: 0f:60:c1:5d:96:2a:ff:04:92:d4:bd:00:df:14:a6:55:a6:5e: 85:36:70:57:2a:9a:98:a9:bd:e1:0c:52:30:c6:cc:cb:19:e7: d2:0d:dd:cf:fb:8c:4b:ff:47:b0:9e:bb:bc:00:fc:e4:ec:53: dd:46:9a:1d:e7:08:5e:05:d8:67:e1:82:da:82:42:6c:08:bf: c9:84:5b:89 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MEVFRDExMC8GA1UEBRMoRURGRTcwNkM5NDlCNUVDRjFEQkJFNDYwREJEMDRFRkU3 QzFFMTI4QjAeFw0yNTA1MTMwNjAwNTRaFw0yNTA1MjAwNjAwNTRaMBgxFjAUBgNV BAMTDTY4MjJlMDE2LWQyM2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6QEw8TDNrbbQeeEgiYUSlW/kKjBpIx1+qyVn5FwPQmYMwuEEVJZZ3Lx40JhYG 4t63rxOGs4+25B7IRX3bSUEgDwyYfjfBrRmGdunGxPrY5J4ln6kdMW5FR1aOOVyQ fRYImmntwM08JTHqOkL6/lEyP24XakUqd6oR8EFYxj+BEUA3MhmBsmvTErMxljh5 wiIjrPkepA8lAN+zhYt9VnOsDhV9alfOyN2UfbKeMZM+Z6St6pJQMmGpQyyviZ6P ovNq/1tlC40eU8Eesy3AKRNyIwogLXhFEtI/qKmnTKLw22oeFbWKUkoYL5zcE732 o5NhQhuVM9Po6YlFrJNPfRcnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+DTCqUjq 3kQz1v7mZE6WmUiql7gwHwYDVR0jBBgwFoAU7f5wbJSbXs8du+Rg29BO/nweEosw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwRUVELzNGRjM5NDBFODUz QjExRUZBMzA3MjM0OUM0RjlBRTAyLzdmNXdiSlNiWHM4ZHUtUmcyOUJPX253ZUVv cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN2Y1d2JKU2JYczhkdS1SZzI5Qk9fbndlRW9zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw RUVELzNGRjM5NDBFODUzQjExRUZBMzA3MjM0OUM0RjlBRTAyLzdmNXdiSlNiWHM4 ZHUtUmcyOUJPX253ZUVvcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH+FnrNWJpFFiGnIjzrXCy8jM9n/N6luxEGbG5l+5WeUk8a2uDLmI9f1 q3N51wCHc1MpXdmSv+rDjc0i8xxY8EuLhKfXopk+uotLYbrxGqNQXP5Wx0ap3h7F kJG5WGJG/nWFUTVYkxJec7n4IMmpNgiEWE6MKA5Zykr/F0KilPKJwkXf/k5ghCrV 3cui5wW/YOc8M1E2ivafT8CJZdkYMN98EyPdpEEiFiuNnDaSkpvtF7yFfQ9gwV2W Kv8EktS9AN8UplWmXoU2cFcqmpipveEMUjDGzMsZ59IN3c/7jEv/R7Ceu7wA/OTs U91Gmh3nCF4F2GfhgtqCQmwIv8mEW4k= -----END CERTIFICATE-----Generated at Tue May 13 18:57:34 2025 by rpki-client