$ rpki-client -vvf rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft File: 7ZIUoK3iNSkzeSFihbucXj4PXW8.mft (raw, json) Hash identifier: eKqSMgkh2dN2DP9VzoHqCiFgf/ocJiQlvHU4afm4Z4c= Subject key identifier: 8F:90:9D:59:9B:2D:10:B0:41:67:70:92:9D:E6:EE:56:8A:28:6B:3B Authority key identifier: ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F Certificate issuer: /CN=A9183587/serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F Certificate serial: 032C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft Manifest number: 0326 Signing time: Sun 11 May 2025 00:41:50 +0000 Manifest this update: Sun 11 May 2025 00:41:49 +0000 Manifest next update: Sun 18 May 2025 00:41:49 +0000 Files and hashes: 1: 7ZIUoK3iNSkzeSFihbucXj4PXW8.crl (hash: tYwWL/uzwxSYCMh7rAKXbllGFFyjgRN5yFiXCyfu4Po=) 2: E9CDE63CD56811EFB4A0C533C4F9AE02.roa (hash: z4vQqgZhpqZXS+GtFlO73cYGprnonSTGtg6l7U/hdMg=) 3: 632E90B0C6C811ECA5A9AB33C4F9AE02.roa (hash: m3FNoE8x/APaB37yvI31cS5HnGrXCqQFoxWPhTaz/1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:41:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 812 (0x32c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183587, serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F Validity Not Before: May 11 00:41:49 2025 GMT Not After : May 18 00:41:49 2025 GMT Subject: CN=681ff24e-0adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:87:1a:29:9b:7e:b6:2a:cb:00:23:38:7e:ab: bd:ce:3b:79:a6:04:a9:1a:4a:1b:ef:e5:8e:89:d1: c9:91:47:70:af:21:6f:12:cf:fd:77:c8:1d:39:56: 96:b8:a9:e9:dd:2e:83:2d:ba:3b:80:ad:67:11:c9: 13:a2:21:2d:5d:5d:b0:d2:5e:83:d9:33:62:f8:0b: 53:00:12:cd:73:53:2f:86:8b:cf:ae:bd:3c:94:80: 56:6f:24:50:93:50:8e:78:bf:e3:4e:35:5a:77:d7: 96:32:41:90:28:74:42:ee:a0:5a:83:44:96:a5:b2: 98:c9:33:41:1d:9e:85:ee:c7:0b:43:dc:00:22:84: 47:48:de:00:5f:e8:ea:df:b7:5e:ba:e8:2f:77:c1: 21:63:a9:af:e7:04:fa:78:3e:02:fc:7d:39:01:00: 4a:cf:85:45:d9:e6:22:a3:2f:a3:d0:1b:eb:c2:9a: 7d:56:4e:4e:fe:1b:26:fe:ef:9a:cc:a3:c3:ca:57: 36:72:e9:b9:76:5f:69:53:2e:3d:70:66:34:a2:d7: 6e:d6:4d:4c:bc:58:0e:c9:ca:25:ad:1d:36:f6:bf: ac:1d:f1:c0:a7:60:04:6c:59:28:63:fe:ba:4e:26: bc:8a:5e:1e:06:c3:c7:02:d9:e3:3e:0c:d7:59:3a: 73:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:90:9D:59:9B:2D:10:B0:41:67:70:92:9D:E6:EE:56:8A:28:6B:3B X509v3 Authority Key Identifier: keyid:ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:e8:b2:38:c3:1f:2e:14:e3:da:48:8e:f3:22:f0:39:5e:f2: 2d:be:10:f7:fe:49:e7:58:20:d6:4d:b9:4d:22:ea:7d:37:b6: 10:bb:5b:8f:49:86:d2:e4:88:ef:e1:24:b2:ae:dc:4f:38:f2: de:b7:f2:94:ac:2c:75:82:f9:17:4a:39:2e:23:1b:73:39:0a: 8e:3f:83:09:52:a1:0b:8b:de:a9:2d:2a:65:00:f4:05:fd:4a: ff:91:18:10:d2:31:d4:4e:2e:77:85:74:41:55:d5:42:da:a1: bf:fb:f0:ac:ab:12:16:3e:98:9b:20:0d:8c:8d:27:52:d6:0c: c0:62:8c:5b:6f:e4:b6:30:65:4c:01:a3:80:03:af:74:eb:ad: 5a:7c:c5:c3:dd:ec:55:64:7e:18:fc:72:db:69:34:26:a8:2d: f2:0b:28:1e:f1:8c:0f:a2:bd:f6:fc:c6:42:53:f4:a6:95:ac: 03:27:c8:ad:37:6f:28:19:8d:18:37:e9:ab:0b:07:cf:47:d2: e1:38:2e:c6:16:80:3f:45:56:b1:ae:f7:55:43:67:55:89:2c: 59:5a:cd:02:60:c3:c1:14:27:bb:17:7e:b1:cc:a2:ba:19:9d: ac:8d:a5:e2:f9:d3:b0:40:4d:a2:48:12:d8:1d:85:b2:df:a2: f9:37:c6:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM1ODcxMTAvBgNVBAUTKEVEOTIxNEEwQURFMjM1MjkzMzc5MjE2Mjg1QkI5QzVF M0UwRjVENkYwHhcNMjUwNTExMDA0MTQ5WhcNMjUwNTE4MDA0MTQ5WjAYMRYwFAYD VQQDEw02ODFmZjI0ZS0wYWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4caKZt+tirLACM4fqu9zjt5pgSpGkob7+WOidHJkUdwryFvEs/9d8gdOVaW uKnp3S6DLbo7gK1nEckToiEtXV2w0l6D2TNi+AtTABLNc1MvhovPrr08lIBWbyRQ k1COeL/jTjVad9eWMkGQKHRC7qBag0SWpbKYyTNBHZ6F7scLQ9wAIoRHSN4AX+jq 37deuugvd8EhY6mv5wT6eD4C/H05AQBKz4VF2eYioy+j0Bvrwpp9Vk5O/hsm/u+a zKPDylc2cum5dl9pUy49cGY0otdu1k1MvFgOycolrR029r+sHfHAp2AEbFkoY/66 Tia8il4eBsPHAtnjPgzXWTpz5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+QnVmb LRCwQWdwkp3m7laKKGs7MB8GA1UdIwQYMBaAFO2SFKCt4jUpM3khYoW7nF4+D11v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzU4Ny8xQTY5NzlFMkM2 MDcxMUVDOUVDQjVFNjdDNEY5QUUwMi83WklVb0szaU5Ta3plU0ZpaGJ1Y1hqNFBY VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdaSVVvSzNpTlNremVTRmloYnVjWGo0UFhXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzU4Ny8xQTY5NzlFMkM2MDcxMUVDOUVDQjVFNjdDNEY5QUUwMi83WklVb0szaU5T a3plU0ZpaGJ1Y1hqNFBYVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDA6LI4wx8uFOPaSI7zIvA5XvItvhD3/knnWCDWTblNIup9N7YQu1uP SYbS5Ijv4SSyrtxPOPLet/KUrCx1gvkXSjkuIxtzOQqOP4MJUqELi96pLSplAPQF /Ur/kRgQ0jHUTi53hXRBVdVC2qG/+/CsqxIWPpibIA2MjSdS1gzAYoxbb+S2MGVM AaOAA690661afMXD3exVZH4Y/HLbaTQmqC3yCyge8YwPor32/MZCU/SmlawDJ8it N28oGY0YN+mrCwfPR9LhOC7GFoA/RVaxrvdVQ2dViSxZWs0CYMPBFCe7F36xzKK6 GZ2sjaXi+dOwQE2iSBLYHYWy36L5N8aU -----END CERTIFICATE-----Generated at Sun May 11 19:11:35 2025 by rpki-client