$ rpki-client -vvf rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft File: V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft (raw, json) Hash identifier: 473tHflUOUWcHn7Fd78tMkhpo3d9YaZSEfgogGw66CU= Subject key identifier: 89:D9:D0:01:CC:78:1E:B7:CB:6D:68:EB:4A:1D:01:0F:5F:BF:43:35 Authority key identifier: 57:B5:83:2B:49:00:18:19:CA:E1:CC:B9:2C:DB:1C:B4:68:87:E0:9C Certificate issuer: /CN=A91955D9/serialNumber=57B5832B49001819CAE1CCB92CDB1CB46887E09C Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V7WDK0kAGBnK4cy5LNsctGiH4Jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft Manifest number: 58 Signing time: Fri 25 Apr 2025 06:12:50 +0000 Manifest this update: Fri 25 Apr 2025 06:12:50 +0000 Manifest next update: Fri 02 May 2025 06:12:50 +0000 Files and hashes: 1: V7WDK0kAGBnK4cy5LNsctGiH4Jw.crl (hash: J7OI3jD7gaZd2sQz+NrjFlS988pBo2M+t+0GVkpXR+o=) 2: ED2089981ABE11F0879B2E80C4F9AE02.roa (hash: jmrYvJ8GEI8+siZatf4yD9ngIoXz13ZfYtk6A1hasTM=) 3: E6D570D01AAA11F0B3A50837C4F9AE02.roa (hash: QzRVaTFf9pu2xxGurP9Q30GZ9igtp8IuCH6GvGGcJP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.crl rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V7WDK0kAGBnK4cy5LNsctGiH4Jw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:12:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91955D9, serialNumber=57B5832B49001819CAE1CCB92CDB1CB46887E09C Validity Not Before: Apr 25 06:12:50 2025 GMT Not After : May 2 06:12:50 2025 GMT Subject: CN=680b27e2-faf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b1:4c:a4:82:30:a1:07:46:55:1e:0f:76:77: aa:8a:80:1a:00:bd:68:d0:c7:ad:39:f8:77:c2:09: 0d:0b:c3:01:3f:96:30:fa:df:a3:da:df:d2:fe:cc: ad:1a:30:8b:86:e6:5c:5b:e0:8a:11:ae:98:6e:39: 0d:ad:63:3b:14:6d:aa:8e:13:ab:5a:32:70:1b:57: eb:86:6b:d9:3f:25:30:99:ad:cd:de:93:10:a8:9b: c5:0d:bf:63:4b:66:bc:3f:2b:cf:b5:c0:01:20:3a: 21:38:ce:0e:68:03:6d:b5:2c:4f:05:a5:c2:c0:6e: d0:db:30:99:d3:25:8a:a4:97:4f:bd:16:a0:3d:47: 52:89:e6:56:89:10:a2:40:2b:3a:de:d3:2e:56:b0: b5:af:9e:c0:7e:70:ca:b2:4e:1e:ea:8d:22:b3:5f: 7f:10:b7:8e:24:4d:8b:d4:fc:2e:e7:59:ab:d0:8e: 22:f5:aa:b2:e7:bc:02:86:4d:98:20:07:6d:e7:60: 38:49:8f:84:18:5b:2a:42:54:86:64:84:f1:2d:14: 72:98:7c:38:63:19:6a:3d:71:90:f5:0e:f2:1d:c3: 3a:65:d6:e0:68:d7:89:a6:e5:d2:b2:64:92:bb:81: d5:e1:9f:bb:2f:49:59:a3:7b:20:9e:09:9e:a6:fa: e0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D9:D0:01:CC:78:1E:B7:CB:6D:68:EB:4A:1D:01:0F:5F:BF:43:35 X509v3 Authority Key Identifier: keyid:57:B5:83:2B:49:00:18:19:CA:E1:CC:B9:2C:DB:1C:B4:68:87:E0:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V7WDK0kAGBnK4cy5LNsctGiH4Jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:cd:aa:d9:2d:ff:ac:00:13:0f:15:0e:9f:c1:ad:b1:68:90: 07:22:8a:13:78:95:86:c1:a8:31:3c:f9:bb:26:af:1c:24:86: 75:b9:e2:ab:74:e0:b8:48:ed:48:ea:47:61:5a:d9:27:aa:78: 3f:e7:49:95:07:77:3c:96:8a:9e:9f:01:2d:3b:f9:b8:10:aa: f8:74:1b:33:ea:c5:fc:a4:b6:88:e2:21:ad:4a:eb:23:77:cc: 5a:bc:a6:ac:53:ad:1a:a7:59:56:18:52:0e:a9:7e:dd:65:3b: d6:cc:54:d1:e4:ba:cf:56:ec:61:fd:0b:03:b1:dd:32:93:a3: 57:c3:17:3c:16:8f:b0:8a:23:fc:40:bb:56:9b:5d:32:a0:34: ce:97:f8:3b:43:a0:05:e6:d3:76:37:2d:de:8f:66:fa:7e:f7: 77:55:25:fe:29:d3:5b:53:3f:a2:4e:0c:f6:0c:73:58:94:e2: 1e:75:b4:ac:ac:2d:07:ec:b5:7f:c9:12:11:4a:58:da:5a:38: de:73:21:db:c0:6c:6c:14:c4:7a:14:b8:61:87:3c:a0:4f:46: 5a:cc:63:1d:7e:dc:63:a1:b2:e2:d9:ec:40:21:a3:aa:5f:67: 37:12:d8:bf:7c:1d:3c:cf:f3:fa:e2:cd:79:3d:5a:76:57:df: 27:e6:d5:9d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NTVEOTExMC8GA1UEBRMoNTdCNTgzMkI0OTAwMTgxOUNBRTFDQ0I5MkNEQjFDQjQ2 ODg3RTA5QzAeFw0yNTA0MjUwNjEyNTBaFw0yNTA1MDIwNjEyNTBaMBgxFjAUBgNV BAMTDTY4MGIyN2UyLWZhZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtsUykgjChB0ZVHg92d6qKgBoAvWjQx605+HfCCQ0LwwE/ljD636Pa39L+zK0a MIuG5lxb4IoRrphuOQ2tYzsUbaqOE6taMnAbV+uGa9k/JTCZrc3ekxCom8UNv2NL Zrw/K8+1wAEgOiE4zg5oA221LE8FpcLAbtDbMJnTJYqkl0+9FqA9R1KJ5laJEKJA Kzre0y5WsLWvnsB+cMqyTh7qjSKzX38Qt44kTYvU/C7nWavQjiL1qrLnvAKGTZgg B23nYDhJj4QYWypCVIZkhPEtFHKYfDhjGWo9cZD1DvIdwzpl1uBo14mm5dKyZJK7 gdXhn7svSVmjeyCeCZ6m+uA7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUidnQAcx4 HrfLbWjrSh0BD1+/QzUwHwYDVR0jBBgwFoAUV7WDK0kAGBnK4cy5LNsctGiH4Jww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1NUQ5L0M1NEYyMjQ2QTI4 NTExRUZCNjZCMTgxMUM0RjlBRTAyL1Y3V0RLMGtBR0JuSzRjeTVMTnNjdEdpSDRK dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVjdXREswa0FHQm5LNGN5NUxOc2N0R2lINEp3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1 NUQ5L0M1NEYyMjQ2QTI4NTExRUZCNjZCMTgxMUM0RjlBRTAyL1Y3V0RLMGtBR0Ju SzRjeTVMTnNjdEdpSDRKdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABrNqtkt/6wAEw8VDp/BrbFokAciihN4lYbBqDE8+bsmrxwkhnW54qt0 4LhI7UjqR2Fa2SeqeD/nSZUHdzyWip6fAS07+bgQqvh0GzPqxfyktojiIa1K6yN3 zFq8pqxTrRqnWVYYUg6pft1lO9bMVNHkus9W7GH9CwOx3TKTo1fDFzwWj7CKI/xA u1abXTKgNM6X+DtDoAXm03Y3Ld6PZvp+93dVJf4p01tTP6JODPYMc1iU4h51tKys LQfstX/JEhFKWNpaON5zIdvAbGwUxHoUuGGHPKBPRlrMYx1+3GOhsuLZ7EAho6pf ZzcS2L98HTzP8/rizXk9WnZX3yfm1Z0= -----END CERTIFICATE-----Generated at Sat Apr 26 12:32:59 2025 by rpki-client