$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft File: E7lMrVWeIPuzDgiXoUBmaydArx4.mft (raw, json) Hash identifier: o3N87AagcJQdT/35Lqk9LE43vdwuIrWmTS8akKnRXUg= Subject key identifier: 81:2F:6E:2D:DC:D4:2B:31:54:98:A1:E1:2E:1D:12:C8:D7:28:FB:18 Authority key identifier: 13:B9:4C:AD:55:9E:20:FB:B3:0E:08:97:A1:40:66:6B:27:40:AF:1E Certificate issuer: /CN=A91A7CA3/serialNumber=13B94CAD559E20FBB30E0897A140666B2740AF1E Certificate serial: 0468 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft Manifest number: 0460 Signing time: Thu 24 Apr 2025 23:56:00 +0000 Manifest this update: Thu 24 Apr 2025 23:56:00 +0000 Manifest next update: Thu 01 May 2025 23:56:00 +0000 Files and hashes: 1: E7lMrVWeIPuzDgiXoUBmaydArx4.crl (hash: UUw2eY9sUoQz5sohp+Hyg0vZYNAIeLQ5blsn0Au4hMQ=) 2: B092FF78479111ECA77ED34DC4F9AE02.roa (hash: N6UdB/vsoDQh8PeESm7VPxFgrUH9sp1ez29ivoqCJVw=) 3: AFFF3716479111ECA77ED34DC4F9AE02.roa (hash: u4T6c6+EeGnanbuuwAq6FQjgSX9l5ijgis5wFYw/MM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.crl rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:55:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1128 (0x468) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7CA3, serialNumber=13B94CAD559E20FBB30E0897A140666B2740AF1E Validity Not Before: Apr 24 23:56:00 2025 GMT Not After : May 1 23:56:00 2025 GMT Subject: CN=680acf90-f9e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:17:40:69:e5:69:02:6a:e0:35:73:a8:cd:8c: 92:96:1c:8b:0b:f8:5c:00:d4:04:33:64:27:ab:ca: 22:09:1f:f6:7f:e7:01:68:46:e8:d1:48:da:54:ec: 36:e7:b4:a7:b1:85:86:f0:4b:d2:02:a2:f8:a3:23: fe:d0:b9:83:53:c8:6f:93:aa:42:e6:03:24:c4:f4: be:b1:fc:a7:5a:61:53:cd:2b:5a:d2:c2:98:83:ff: 8e:41:87:76:34:3e:78:8d:f2:56:57:75:46:4f:aa: 13:39:7b:e1:27:db:d8:ad:60:d0:4b:f0:8f:8c:2a: 20:3a:34:14:23:59:2e:97:8c:92:bd:61:e9:8c:3b: 5f:fb:f9:aa:13:df:6b:ea:eb:57:77:bc:ae:ec:f4: fa:38:cd:cc:38:b2:b5:fc:e4:d3:af:d3:32:bd:b2: e2:30:e1:73:06:e9:8a:a4:8b:ad:a0:61:df:fd:b7: 8e:87:7e:42:a1:30:50:61:47:80:7e:c6:72:cf:b7: e6:2b:23:85:e7:5f:a2:8f:6f:e3:f0:83:bc:a6:06: 44:97:9e:7e:c3:f9:30:8e:90:20:a5:97:4d:e8:0a: 19:4a:ce:6b:7f:73:65:f4:77:10:9d:60:2c:5c:f6: 36:15:88:71:4b:b3:ba:2b:97:2f:b3:3d:47:ef:1a: ed:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:2F:6E:2D:DC:D4:2B:31:54:98:A1:E1:2E:1D:12:C8:D7:28:FB:18 X509v3 Authority Key Identifier: keyid:13:B9:4C:AD:55:9E:20:FB:B3:0E:08:97:A1:40:66:6B:27:40:AF:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:27:0b:cc:1a:71:1e:0a:7c:da:9e:b2:97:3c:31:7c:2a:f7: 8d:b9:eb:1f:52:d9:94:3e:95:f6:96:62:08:0e:77:28:ff:c0: fa:93:c2:0b:96:32:13:3b:7b:02:94:8e:69:32:85:c5:5f:81: e8:8b:60:b1:5c:ae:60:39:44:88:8b:ca:ea:4e:dc:ba:9d:b4: 7b:86:03:fc:94:82:8a:61:40:3e:30:26:30:fa:6c:e6:d7:6d: 9b:60:3d:50:5d:50:9c:5c:7c:ca:e2:2d:e1:2a:f9:53:9e:85: a1:75:00:c7:b4:21:26:13:01:45:2d:d8:a5:88:6e:73:77:dd: 99:89:be:03:e4:e3:b2:0d:a3:fb:b8:a1:e0:88:ad:a7:39:90: 6f:98:bc:50:45:73:4c:00:77:9f:96:e0:29:5a:61:5b:96:2c: cd:a2:e6:91:cf:2b:2d:cd:f2:8b:f7:fd:02:d5:da:5e:4d:49: 07:72:80:13:b7:81:21:1c:e5:14:e7:60:1c:7a:95:f4:16:53: f5:51:3f:07:cc:4f:6c:59:d6:6b:10:90:4a:5f:03:18:b8:70: 26:c7:e3:9a:dd:e6:0b:05:f2:e2:78:17:f1:5d:d7:3c:d0:47: 1d:34:77:45:41:7a:a5:09:74:c0:43:98:58:b1:a7:69:82:8b: 89:6d:ee:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdDQTMxMTAvBgNVBAUTKDEzQjk0Q0FENTU5RTIwRkJCMzBFMDg5N0ExNDA2NjZC Mjc0MEFGMUUwHhcNMjUwNDI0MjM1NjAwWhcNMjUwNTAxMjM1NjAwWjAYMRYwFAYD VQQDEw02ODBhY2Y5MC1mOWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhdAaeVpAmrgNXOozYySlhyLC/hcANQEM2Qnq8oiCR/2f+cBaEbo0UjaVOw2 57SnsYWG8EvSAqL4oyP+0LmDU8hvk6pC5gMkxPS+sfynWmFTzSta0sKYg/+OQYd2 ND54jfJWV3VGT6oTOXvhJ9vYrWDQS/CPjCogOjQUI1kul4ySvWHpjDtf+/mqE99r 6utXd7yu7PT6OM3MOLK1/OTTr9MyvbLiMOFzBumKpIutoGHf/beOh35CoTBQYUeA fsZyz7fmKyOF51+ij2/j8IO8pgZEl55+w/kwjpAgpZdN6AoZSs5rf3Nl9HcQnWAs XPY2FYhxS7O6K5cvsz1H7xrtVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIEvbi3c 1CsxVJih4S4dEsjXKPsYMB8GA1UdIwQYMBaAFBO5TK1VniD7sw4Il6FAZmsnQK8e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0NBMy80MUI5MTBBODQ3 OEYxMUVDOUI1NjIyMkFDNEY5QUUwMi9FN2xNclZXZUlQdXpEZ2lYb1VCbWF5ZEFy eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U3bE1yVldlSVB1ekRnaVhvVUJtYXlkQXJ4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0NBMy80MUI5MTBBODQ3OEYxMUVDOUI1NjIyMkFDNEY5QUUwMi9FN2xNclZXZUlQ dXpEZ2lYb1VCbWF5ZEFyeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUJwvMGnEeCnzanrKXPDF8KveNuesfUtmUPpX2lmIIDnco/8D6k8IL ljITO3sClI5pMoXFX4Hoi2CxXK5gOUSIi8rqTty6nbR7hgP8lIKKYUA+MCYw+mzm 122bYD1QXVCcXHzK4i3hKvlTnoWhdQDHtCEmEwFFLdiliG5zd92Zib4D5OOyDaP7 uKHgiK2nOZBvmLxQRXNMAHefluApWmFblizNouaRzystzfKL9/0C1dpeTUkHcoAT t4EhHOUU52AcepX0FlP1UT8HzE9sWdZrEJBKXwMYuHAmx+Oa3eYLBfLieBfxXdc8 0EcdNHdFQXqlCXTAQ5hYsadpgouJbe7R -----END CERTIFICATE-----Generated at Sat Apr 26 05:20:55 2025 by rpki-client