$ rpki-client -vvf rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft File: B-7MRCaowz1FkLzaEtl1DEkEhX0.mft (raw, json) Hash identifier: 2ScgBcbyTXDc+y04G5aAISEbVyZIMY0fagemEHxNOMY= Subject key identifier: 83:01:72:DA:F9:3A:5D:35:1E:EB:F9:7E:B3:E4:00:87:8E:E4:5D:20 Authority key identifier: 07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D Certificate issuer: /CN=A914C90B/serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft Manifest number: CE Signing time: Fri 25 Apr 2025 04:44:15 +0000 Manifest this update: Fri 25 Apr 2025 04:44:14 +0000 Manifest next update: Fri 02 May 2025 04:44:14 +0000 Files and hashes: 1: B-7MRCaowz1FkLzaEtl1DEkEhX0.crl (hash: queI6/BUrkc/TpFThinglYohnJU2gY3KjnyWXTdho2k=) 2: 52BD65B4E7D511EE8C353D2AC4F9AE02.roa (hash: v7bT+lzlhBzHYXIgxw7CXDLlyYjEfCYhNYxtpgDCkMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C90B, serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D Validity Not Before: Apr 25 04:44:14 2025 GMT Not After : May 2 04:44:14 2025 GMT Subject: CN=680b131e-1a0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:cc:0b:96:81:3f:e4:eb:1d:7a:55:73:b6:be: 42:5b:ff:71:b4:8e:ff:c9:38:2e:be:7a:ee:32:a2: b4:0f:f6:80:a8:9d:4f:c7:8a:93:a3:fb:18:12:37: cf:d1:9c:13:39:c8:c3:61:35:a7:36:dd:56:8f:38: 1e:28:b7:0e:47:ea:32:af:0a:65:31:1b:dd:a0:81: 98:ec:78:3d:37:b0:e3:29:82:a9:dc:01:de:4a:95: b2:52:3b:c6:21:46:ca:a0:88:bc:0c:c1:15:c7:32: 86:16:46:5a:57:59:ef:1d:fd:9b:8f:9d:41:9c:70: b8:81:45:54:f4:b1:07:12:fe:14:25:0b:4c:e8:1c: 19:20:0a:5b:21:93:f0:4f:8a:8d:39:49:a2:69:c0: e7:e2:1d:43:ec:03:ed:84:e6:43:05:2c:a5:ad:3b: d8:54:d8:7e:02:c2:5c:53:2c:5b:81:33:c4:ba:ad: a2:7b:69:1f:44:fc:4b:03:36:34:0d:64:33:ab:74: 8c:56:ba:f0:11:cc:1b:3b:9a:18:43:60:03:2f:e6: 06:cf:06:b9:0c:c8:60:98:e6:51:2e:b5:96:f3:95: 3e:29:97:6d:74:8f:6e:b0:b5:db:9c:42:9e:12:fe: 71:ee:1b:dc:23:1a:38:5b:c0:96:94:57:f6:ad:25: 3c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:01:72:DA:F9:3A:5D:35:1E:EB:F9:7E:B3:E4:00:87:8E:E4:5D:20 X509v3 Authority Key Identifier: keyid:07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:4f:a8:34:a4:42:33:6a:42:85:59:26:bb:01:b6:ff:f9:51: 0c:34:09:fa:87:9e:77:42:38:7c:5d:94:77:85:29:16:7f:99: 64:c8:db:05:38:a1:59:a7:15:db:b9:55:6d:80:20:9a:b6:1d: 29:58:ca:72:02:64:ec:3f:14:af:4a:d6:0c:5c:8a:5b:02:31: c0:19:bd:97:a6:e7:cb:6a:4d:4e:cd:21:bb:7c:30:5a:e1:0b: 9e:d1:b0:16:91:bc:5c:21:a1:4b:ca:d0:ca:c8:4c:8e:19:2f: e1:2f:23:90:c4:66:e5:ab:82:a7:df:72:90:16:f8:a7:7d:f3: 5d:da:3f:0f:13:a5:74:e5:23:22:b6:32:d7:6b:68:02:78:c8: 6d:c1:e4:17:d8:7c:c0:b7:76:cd:5d:d4:6f:11:13:e7:ef:52: 25:7e:4f:e0:02:15:ec:85:75:92:75:84:ff:db:d2:1e:ac:a6: bb:89:4e:82:33:c2:f5:59:6a:3b:25:09:5d:78:79:75:f2:09: 9c:35:e3:26:b3:5d:5a:e9:7a:1e:8b:2e:02:aa:b3:20:4b:27: c3:62:73:29:de:a4:e5:e2:ee:13:2b:9f:85:d0:81:bc:c2:1b: 06:07:68:4e:24:ad:f9:45:0c:ff:1a:81:54:9d:0d:95:25:5f: 57:ee:13:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM5MEIxMTAvBgNVBAUTKDA3RUVDQzQ0MjZBOEMzM0Q0NTkwQkNEQTEyRDk3NTBD NDkwNDg1N0QwHhcNMjUwNDI1MDQ0NDE0WhcNMjUwNTAyMDQ0NDE0WjAYMRYwFAYD VQQDEw02ODBiMTMxZS0xYTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3cwLloE/5OsdelVztr5CW/9xtI7/yTguvnruMqK0D/aAqJ1Px4qTo/sYEjfP 0ZwTOcjDYTWnNt1WjzgeKLcOR+oyrwplMRvdoIGY7Hg9N7DjKYKp3AHeSpWyUjvG IUbKoIi8DMEVxzKGFkZaV1nvHf2bj51BnHC4gUVU9LEHEv4UJQtM6BwZIApbIZPw T4qNOUmiacDn4h1D7APthOZDBSylrTvYVNh+AsJcUyxbgTPEuq2ie2kfRPxLAzY0 DWQzq3SMVrrwEcwbO5oYQ2ADL+YGzwa5DMhgmOZRLrWW85U+KZdtdI9usLXbnEKe Ev5x7hvcIxo4W8CWlFf2rSU8SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMBctr5 Ol01Huv5frPkAIeO5F0gMB8GA1UdIwQYMBaAFAfuzEQmqMM9RZC82hLZdQxJBIV9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzkwQi85Mjg0MjcwMkU3 MTAxMUVFQTlEQkMyNTJDNEY5QUUwMi9CLTdNUkNhb3d6MUZrTHphRXRsMURFa0Vo WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ItN01SQ2Fvd3oxRmtMemFFdGwxREVrRWhYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzkwQi85Mjg0MjcwMkU3MTAxMUVFQTlEQkMyNTJDNEY5QUUwMi9CLTdNUkNhb3d6 MUZrTHphRXRsMURFa0VoWDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpT6g0pEIzakKFWSa7Abb/+VEMNAn6h553Qjh8XZR3hSkWf5lkyNsF OKFZpxXbuVVtgCCath0pWMpyAmTsPxSvStYMXIpbAjHAGb2XpufLak1OzSG7fDBa 4Que0bAWkbxcIaFLytDKyEyOGS/hLyOQxGblq4Kn33KQFvinffNd2j8PE6V05SMi tjLXa2gCeMhtweQX2HzAt3bNXdRvERPn71Ilfk/gAhXshXWSdYT/29IerKa7iU6C M8L1WWo7JQldeHl18gmcNeMms11a6Xoeiy4CqrMgSyfDYnMp3qTl4u4TK5+F0IG8 whsGB2hOJK35RQz/GoFUnQ2VJV9X7hOd -----END CERTIFICATE-----Generated at Sat Apr 26 14:28:57 2025 by rpki-client