$ rpki-client -vvf rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft File: _7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft (raw, json) Hash identifier: X4zEtDyrEZtFJEYU/+x/CEdN3bDIajkqsup5VGIZbBg= Subject key identifier: FC:69:CC:45:4A:83:47:17:9F:CC:97:7E:EB:51:09:09:20:6A:09:01 Authority key identifier: FF:BC:2D:41:CD:D9:5F:FC:F8:A7:7E:52:91:9E:2E:6D:1B:AF:02:DF Certificate issuer: /CN=A91168FD/serialNumber=FFBC2D41CDD95FFCF8A77E52919E2E6D1BAF02DF Certificate serial: 2156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft Manifest number: 214D Signing time: Thu 24 Apr 2025 15:56:28 +0000 Manifest this update: Thu 24 Apr 2025 15:56:28 +0000 Manifest next update: Thu 01 May 2025 15:56:28 +0000 Files and hashes: 1: _7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl (hash: GnyqNIliH+GaV06V2wooT1TZhzlqBHLWj/6g/zJ9UU4=) 2: D07411B6661211ECBCD61A65C4F9AE02.roa (hash: /mOiRGW1T9qa7YdW+2kPvRZkQyewAraUry397iZAYjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8534 (0x2156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168FD, serialNumber=FFBC2D41CDD95FFCF8A77E52919E2E6D1BAF02DF Validity Not Before: Apr 24 15:56:28 2025 GMT Not After : May 1 15:56:28 2025 GMT Subject: CN=680a5f2c-054f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7a:89:59:5c:5d:cd:a1:25:98:30:cb:3e:d7: b5:29:86:c9:a0:f7:60:dd:c3:7c:57:01:61:b0:71: a9:2d:5e:15:64:37:d2:20:52:1f:9f:2a:40:31:80: e9:8a:16:48:3c:15:51:df:0c:21:b9:11:86:91:21: 00:fe:a5:36:a5:df:73:bc:48:18:2d:18:ca:ce:c4: ab:7e:a9:c0:9b:1b:93:61:35:de:3f:1a:d2:c5:c6: 7d:e8:e3:2b:9a:33:20:a4:73:a1:8c:13:72:02:23: 51:61:6d:e9:e0:20:f3:c4:94:1a:f0:c6:0f:4e:c8: 12:74:28:3e:c2:50:5a:96:c1:7c:ab:4e:0a:16:14: b7:6a:f0:60:56:1d:d2:a3:fd:df:cd:42:d2:46:41: b2:2a:3f:3c:98:53:12:d6:0f:c3:f9:b5:3d:58:0a: d0:5f:5b:64:a0:a7:17:77:91:0a:4e:f6:76:a8:71: 8f:f4:be:df:66:cc:19:a6:b5:0c:3e:36:b4:16:f1: 08:a0:58:0e:da:b0:a2:2b:64:84:44:1f:8a:ea:55: 6a:bc:41:74:d8:21:47:f0:5c:66:cc:a9:9d:33:8e: 65:98:29:c6:f0:90:8a:8a:79:fa:a4:f7:7d:56:ac: fe:46:f1:cc:28:eb:e8:28:c0:88:c7:be:e3:a9:58: d5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:69:CC:45:4A:83:47:17:9F:CC:97:7E:EB:51:09:09:20:6A:09:01 X509v3 Authority Key Identifier: keyid:FF:BC:2D:41:CD:D9:5F:FC:F8:A7:7E:52:91:9E:2E:6D:1B:AF:02:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:c2:9c:87:5a:b8:89:fb:e3:10:f1:3e:7a:c9:b5:31:80:66: 20:83:d4:e9:8f:d3:65:ed:b8:b4:b8:c7:91:6f:ab:4c:28:87: 27:ef:2e:07:e1:e6:4e:ad:8d:d2:ca:d5:91:ac:91:5a:7b:d0: ac:b2:aa:ad:c0:06:2b:64:ad:ca:7d:33:bd:44:1c:91:b1:30: c2:e6:c1:99:58:9c:86:a3:52:1d:cd:1a:f8:c7:f0:94:97:29: d3:12:cf:0e:ca:3c:08:c7:96:aa:98:8b:f5:17:1a:22:9b:96: 8e:58:49:c1:f9:e2:b8:54:7c:ef:7b:32:45:25:f6:11:e7:14: 76:32:5d:84:7c:48:2f:e5:cb:8b:37:27:1e:e8:73:c5:3f:0e: 46:b8:9d:71:fa:d6:35:a8:dd:ee:a2:c5:6f:08:85:5c:e5:11: ba:10:fe:99:44:78:10:e7:80:48:d8:54:88:2b:16:63:7d:1f: a0:18:9d:da:46:ef:07:ec:38:f6:b4:d6:54:33:bc:b4:33:b5: 86:a4:9c:f1:81:2b:f3:69:70:92:83:2f:22:e9:90:84:61:d1: e4:f3:98:0e:5f:23:c9:2b:ce:7e:26:be:9d:5c:51:10:38:42: 64:3d:21:46:fe:17:ae:ad:cc:ba:f7:94:56:29:88:55:54:e0: cd:34:16:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4RkQxMTAvBgNVBAUTKEZGQkMyRDQxQ0REOTVGRkNGOEE3N0U1MjkxOUUyRTZE MUJBRjAyREYwHhcNMjUwNDI0MTU1NjI4WhcNMjUwNTAxMTU1NjI4WjAYMRYwFAYD VQQDEw02ODBhNWYyYy0wNTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1HqJWVxdzaElmDDLPte1KYbJoPdg3cN8VwFhsHGpLV4VZDfSIFIfnypAMYDp ihZIPBVR3wwhuRGGkSEA/qU2pd9zvEgYLRjKzsSrfqnAmxuTYTXePxrSxcZ96OMr mjMgpHOhjBNyAiNRYW3p4CDzxJQa8MYPTsgSdCg+wlBalsF8q04KFhS3avBgVh3S o/3fzULSRkGyKj88mFMS1g/D+bU9WArQX1tkoKcXd5EKTvZ2qHGP9L7fZswZprUM Pja0FvEIoFgO2rCiK2SERB+K6lVqvEF02CFH8FxmzKmdM45lmCnG8JCKinn6pPd9 Vqz+RvHMKOvoKMCIx77jqVjV8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPxpzEVK g0cXn8yXfutRCQkgagkBMB8GA1UdIwQYMBaAFP+8LUHN2V/8+Kd+UpGeLm0brwLf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhGRC85QTc5OTY0NEUx MTExMUU1QUIwMTc3MjdDNEY5QUUwMi9fN3d0UWMzWlhfejRwMzVTa1o0dWJSdXZB dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL183d3RRYzNaWF96NHAzNVNrWjR1YlJ1dkF0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjhGRC85QTc5OTY0NEUxMTExMUU1QUIwMTc3MjdDNEY5QUUwMi9fN3d0UWMzWlhf ejRwMzVTa1o0dWJSdXZBdDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4wpyHWriJ++MQ8T56ybUxgGYgg9Tpj9Nl7bi0uMeRb6tMKIcn7y4H 4eZOrY3SytWRrJFae9CssqqtwAYrZK3KfTO9RByRsTDC5sGZWJyGo1IdzRr4x/CU lynTEs8OyjwIx5aqmIv1Fxoim5aOWEnB+eK4VHzvezJFJfYR5xR2Ml2EfEgv5cuL Nyce6HPFPw5GuJ1x+tY1qN3uosVvCIVc5RG6EP6ZRHgQ54BI2FSIKxZjfR+gGJ3a Ru8H7Dj2tNZUM7y0M7WGpJzxgSvzaXCSgy8i6ZCEYdHk85gOXyPJK85+Jr6dXFEQ OEJkPSFG/heurcy695RWKYhVVODNNBZX -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:38 2025 by rpki-client