$ rpki-client -vvf rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft File: 7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft (raw, json) Hash identifier: bjOPVkxWN2Ut4JuT+syTen3YLmOtswsKnlp3qI2BfmY= Subject key identifier: CD:3F:1A:3E:BD:61:6C:D3:46:CA:82:62:4C:F6:BF:E6:14:08:AA:73 Authority key identifier: EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6 Certificate issuer: /CN=A91982B6/serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft Manifest number: 3A Signing time: Fri 25 Apr 2025 06:30:34 +0000 Manifest this update: Fri 25 Apr 2025 06:30:34 +0000 Manifest next update: Fri 02 May 2025 06:30:34 +0000 Files and hashes: 1: 7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl (hash: cRPq3up9jxjDiEo7dxGWXI0DKK6GAw6b1wvUoXwFbgo=) 2: 739C8BDECB5A11EFBEE64062C4F9AE02.roa (hash: WVqv1JuSt8hSNNolUiV5z8//m1vJSnq0q+Q8Ooe/S0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91982B6, serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6 Validity Not Before: Apr 25 06:30:34 2025 GMT Not After : May 2 06:30:34 2025 GMT Subject: CN=680b2c0a-ee90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:28:ee:bb:4f:78:29:fc:bd:14:38:ba:96:75: b2:b5:7d:1b:8a:31:10:d6:8b:d5:1d:8e:dc:8f:d9: 21:71:05:1c:44:1a:3d:42:84:ad:61:76:53:01:6b: a6:35:61:e8:2a:7e:71:80:ed:af:1c:58:0e:55:17: 53:a2:a4:03:a1:86:d1:c7:bb:92:f7:9b:73:4e:c7: c8:db:46:ce:52:37:f9:17:7b:cb:09:97:60:d9:da: 50:52:ee:a9:86:2a:a6:b3:ed:c1:a8:4a:1a:95:b2: a7:6d:16:05:1f:61:e3:20:a4:81:ad:79:b9:e0:25: db:e2:0d:75:93:11:6d:e2:32:18:af:a2:d2:36:15: 11:d5:33:38:04:4d:46:d6:e2:fa:4b:94:7b:8a:90: c8:1f:9f:a6:49:b2:ea:06:7a:81:82:7b:de:fd:4f: 49:f8:fd:cd:7d:c5:f2:41:41:38:fd:61:48:aa:9e: 30:c1:e1:73:56:0a:73:c0:be:5e:2d:a2:2b:13:5f: f6:3e:a2:0a:81:04:02:51:4d:46:d0:5c:d4:66:5f: b8:85:1f:04:40:4c:9c:ef:8e:1c:bf:e3:82:70:66: 3d:26:d1:58:8f:f9:1d:56:b8:5b:14:5a:8b:7b:83: 02:2b:c6:d4:76:75:af:c7:d5:55:8a:b8:6d:21:a7: d2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:3F:1A:3E:BD:61:6C:D3:46:CA:82:62:4C:F6:BF:E6:14:08:AA:73 X509v3 Authority Key Identifier: keyid:EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:4a:10:5f:08:16:bd:00:43:39:ef:01:f8:97:1f:06:c3:6b: 1a:ef:54:bb:fa:dc:e9:0e:22:cb:26:c0:8b:74:d2:92:e9:87: 46:6f:96:47:a3:d6:37:cd:0d:9c:c2:fd:e7:a5:da:e1:93:5b: b8:73:be:12:ef:4e:6f:0f:d3:fb:c3:a5:fa:a2:9d:a1:7c:43: 15:4c:ed:84:2e:59:2c:c5:2b:94:61:9f:c7:38:92:b5:e9:3d: 92:44:84:f9:ab:aa:19:70:1b:58:c8:ea:33:d1:d3:42:99:5e: 80:f0:b2:bc:bd:c5:34:9f:1d:13:4a:3e:7a:23:49:ab:94:0e: 93:0f:e2:25:9e:4d:a6:9d:c4:00:33:cb:d1:c3:ae:b6:e5:9b: 4d:b6:8d:cd:72:70:57:3e:9d:a4:2b:a8:2b:89:34:45:ae:cc: bc:5f:0e:82:eb:1b:ab:79:82:98:98:2e:c7:c2:58:40:27:78: d0:4f:a8:28:75:77:4e:c4:36:d7:03:09:4e:23:62:2d:f4:51: f9:ff:18:79:d0:f4:83:bc:ed:98:85:0e:16:2b:0c:40:83:5e: c0:b3:2a:95:f0:57:bb:3a:6b:26:68:aa:ee:b0:82:90:de:80: 4e:14:46:42:ff:aa:55:f9:a9:d8:cb:4b:26:75:04:2b:fa:b1: ed:15:40:a1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 ODJCNjExMC8GA1UEBRMoRUM2NzkxNjkxNzdCOUUxMzFEMERBQTAxMzk4RDcwMDM5 ODI3RDFGNjAeFw0yNTA0MjUwNjMwMzRaFw0yNTA1MDIwNjMwMzRaMBgxFjAUBgNV BAMTDTY4MGIyYzBhLWVlOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8KO67T3gp/L0UOLqWdbK1fRuKMRDWi9UdjtyP2SFxBRxEGj1ChK1hdlMBa6Y1 YegqfnGA7a8cWA5VF1OipAOhhtHHu5L3m3NOx8jbRs5SN/kXe8sJl2DZ2lBS7qmG Kqaz7cGoShqVsqdtFgUfYeMgpIGtebngJdviDXWTEW3iMhivotI2FRHVMzgETUbW 4vpLlHuKkMgfn6ZJsuoGeoGCe979T0n4/c19xfJBQTj9YUiqnjDB4XNWCnPAvl4t oisTX/Y+ogqBBAJRTUbQXNRmX7iFHwRATJzvjhy/44JwZj0m0ViP+R1WuFsUWot7 gwIrxtR2da/H1VWKuG0hp9I5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzT8aPr1h bNNGyoJiTPa/5hQIqnMwHwYDVR0jBBgwFoAU7GeRaRd7nhMdDaoBOY1wA5gn0fYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4MkI2L0U2NEIwM0I0Q0I1 OTExRUY4NjkxNUI2MUM0RjlBRTAyLzdHZVJhUmQ3bmhNZERhb0JPWTF3QTVnbjBm WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN0dlUmFSZDduaE1kRGFvQk9ZMXdBNWduMGZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 MkI2L0U2NEIwM0I0Q0I1OTExRUY4NjkxNUI2MUM0RjlBRTAyLzdHZVJhUmQ3bmhN ZERhb0JPWTF3QTVnbjBmWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHRKEF8IFr0AQznvAfiXHwbDaxrvVLv63OkOIssmwIt00pLph0Zvlkej 1jfNDZzC/eel2uGTW7hzvhLvTm8P0/vDpfqinaF8QxVM7YQuWSzFK5Rhn8c4krXp PZJEhPmrqhlwG1jI6jPR00KZXoDwsry9xTSfHRNKPnojSauUDpMP4iWeTaadxAAz y9HDrrblm022jc1ycFc+naQrqCuJNEWuzLxfDoLrG6t5gpiYLsfCWEAneNBPqCh1 d07ENtcDCU4jYi30Ufn/GHnQ9IO87ZiFDhYrDECDXsCzKpXwV7s6ayZoqu6wgpDe gE4URkL/qlX5qdjLSyZ1BCv6se0VQKE= -----END CERTIFICATE-----Generated at Sat Apr 26 04:38:47 2025 by rpki-client