$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft File: 7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft (raw, json) Hash identifier: osxRC7Tyo+ANdxE7JJcBCyqsmbwH6uVzmt4Awo80fuk= Subject key identifier: E4:33:F8:B8:F4:6E:DF:C2:20:44:C1:B2:BA:E1:26:EF:58:AE:F4:F9 Authority key identifier: EC:67:8D:E0:D7:BC:F8:39:D9:98:A0:FC:E5:C9:EB:75:FF:C8:67:3D Certificate issuer: /CN=A91A55C9/serialNumber=EC678DE0D7BCF839D998A0FCE5C9EB75FFC8673D Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft Manifest number: E2 Signing time: Fri 25 Apr 2025 04:31:46 +0000 Manifest this update: Fri 25 Apr 2025 04:31:45 +0000 Manifest next update: Fri 02 May 2025 04:31:45 +0000 Files and hashes: 1: 7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl (hash: NGX6Wkes4fzyTIiEA9cvu1AyGVOBI63vSUaOLTx+lS8=) 2: 9DDCAB1AC9EC11EE9644540FC4F9AE02.roa (hash: u6J6SPSNjElCImZDre2hX9rdBiRV9plYfnlpPbtxhQc=) 3: 9E40D11CC9EC11EE9644540FC4F9AE02.roa (hash: hR3HemTX8sPR//njNhfSediG0DqzFMWVKhRmgOL4nRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:31:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55C9, serialNumber=EC678DE0D7BCF839D998A0FCE5C9EB75FFC8673D Validity Not Before: Apr 25 04:31:45 2025 GMT Not After : May 2 04:31:45 2025 GMT Subject: CN=680b1032-8ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e8:dd:23:a0:21:87:3b:06:7b:33:70:dc:65: 50:17:5f:46:c6:88:b9:73:6f:56:7b:a9:1f:e8:3c: d4:cc:80:0e:14:e5:2c:a0:2b:5e:3d:e5:93:a3:b6: 62:83:87:62:70:7b:69:ab:24:5f:2b:65:e6:80:3d: ed:43:65:55:2e:36:ff:5a:a6:67:3f:80:de:77:81: 16:35:b0:98:b5:51:f9:b3:24:e9:42:6e:6f:a0:8c: f6:3d:46:75:39:61:8c:81:fd:a3:63:78:62:c2:35: 6a:23:cb:09:f0:a0:07:b4:4f:2c:ee:94:70:27:fe: 52:52:e0:4e:23:19:e2:a7:44:63:be:7a:e7:69:a9: be:d5:2f:5b:bf:f4:d0:70:1f:71:f9:47:9d:aa:e1: ef:df:a5:1c:9f:47:7a:87:ba:f8:ca:04:98:df:3b: 70:98:ff:22:a9:b0:17:10:c8:83:ba:46:23:17:82: 03:1b:89:eb:de:e2:dc:5a:da:1f:9d:3c:91:14:91: 7c:e1:0b:f4:28:72:a6:86:89:6b:e8:1b:9e:65:10: 04:69:5c:ad:a9:82:5b:d1:0c:d2:f5:bf:66:e2:03: b1:a0:07:53:ec:cd:08:a4:13:fe:16:7a:d7:82:03: 48:64:fc:45:95:76:2a:42:8c:64:6a:4d:14:aa:ab: 8e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:33:F8:B8:F4:6E:DF:C2:20:44:C1:B2:BA:E1:26:EF:58:AE:F4:F9 X509v3 Authority Key Identifier: keyid:EC:67:8D:E0:D7:BC:F8:39:D9:98:A0:FC:E5:C9:EB:75:FF:C8:67:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:a6:1e:9d:3a:ec:bb:c3:a2:27:08:3b:75:e1:9b:33:48:66: d6:5a:df:dc:2d:89:ba:bf:b9:d8:9c:8e:28:bc:a9:9f:4f:65: 36:1e:bf:19:c6:32:c0:01:8e:9e:38:56:92:33:e1:c6:0f:58: 04:a0:e2:a4:6a:54:7b:dc:6d:01:b4:75:0b:d3:aa:cf:c2:96: 5c:6d:31:e3:ac:a3:06:50:57:f3:cd:9b:67:fe:2c:b8:ff:81: 0e:12:1a:e9:da:a9:7d:f8:5e:e2:0d:a7:31:e7:0a:11:e6:96: e6:49:35:e2:45:f1:f3:59:4d:05:4c:92:b2:4f:00:0b:ee:ae: 27:95:cd:2c:b6:66:8c:92:e1:d4:2d:65:6f:98:41:50:05:3f: cc:3e:a0:d3:28:f3:ca:7f:00:f6:53:8e:e8:23:33:b6:e7:fd: da:90:c8:e8:87:83:57:43:cb:2c:c9:48:c6:94:e2:b0:25:7d: ae:33:2a:37:b5:e1:68:49:a0:51:d8:55:25:1c:1f:2d:2b:7c: 37:96:4a:88:de:6e:d4:7b:dc:fb:fe:68:c0:47:b6:1e:8a:96: a0:69:34:f4:76:ef:3d:58:81:ca:0e:f6:da:7b:e7:ee:90:59: 78:49:32:6f:2d:bf:4e:ee:97:59:56:b9:d6:5f:1c:9f:eb:b0: b8:15:32:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1QzkxMTAvBgNVBAUTKEVDNjc4REUwRDdCQ0Y4MzlEOTk4QTBGQ0U1QzlFQjc1 RkZDODY3M0QwHhcNMjUwNDI1MDQzMTQ1WhcNMjUwNTAyMDQzMTQ1WjAYMRYwFAYD VQQDEw02ODBiMTAzMi04ZmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsujdI6AhhzsGezNw3GVQF19Gxoi5c29We6kf6DzUzIAOFOUsoCtePeWTo7Zi g4dicHtpqyRfK2XmgD3tQ2VVLjb/WqZnP4Ded4EWNbCYtVH5syTpQm5voIz2PUZ1 OWGMgf2jY3hiwjVqI8sJ8KAHtE8s7pRwJ/5SUuBOIxnip0Rjvnrnaam+1S9bv/TQ cB9x+UedquHv36Ucn0d6h7r4ygSY3ztwmP8iqbAXEMiDukYjF4IDG4nr3uLcWtof nTyRFJF84Qv0KHKmholr6BueZRAEaVytqYJb0QzS9b9m4gOxoAdT7M0IpBP+FnrX ggNIZPxFlXYqQoxkak0UqquOWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQz+Lj0 bt/CIETBsrrhJu9YrvT5MB8GA1UdIwQYMBaAFOxnjeDXvPg52Zig/OXJ63X/yGc9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVDOS83RTJGMTI2OEM5 RUIxMUVFOEI4NTdCMENDNEY5QUUwMi83R2VONE5lOC1EblptS0Q4NWNucmRmX0la ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdHZU40TmU4LURuWm1LRDg1Y25yZGZfSVp6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTVDOS83RTJGMTI2OEM5RUIxMUVFOEI4NTdCMENDNEY5QUUwMi83R2VONE5lOC1E blptS0Q4NWNucmRmX0laejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiph6dOuy7w6InCDt14ZszSGbWWt/cLYm6v7nYnI4ovKmfT2U2Hr8Z xjLAAY6eOFaSM+HGD1gEoOKkalR73G0BtHUL06rPwpZcbTHjrKMGUFfzzZtn/iy4 /4EOEhrp2ql9+F7iDacx5woR5pbmSTXiRfHzWU0FTJKyTwAL7q4nlc0stmaMkuHU LWVvmEFQBT/MPqDTKPPKfwD2U47oIzO25/3akMjoh4NXQ8ssyUjGlOKwJX2uMyo3 teFoSaBR2FUlHB8tK3w3lkqI3m7Ue9z7/mjAR7YeipagaTT0du89WIHKDvbae+fu kFl4STJvLb9O7pdZVrnWXxyf67C4FTJP -----END CERTIFICATE-----Generated at Sat Apr 26 12:53:41 2025 by rpki-client