$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft File: 7BeaWHQiKOMLffeXiCZYOHglW3g.mft (raw, json) Hash identifier: EnU8M8kyDjApiYLYk7TtmKZft08k8+tnZCadomOhjcc= Subject key identifier: ED:14:8A:66:19:0B:2B:1B:46:74:75:D6:7A:49:EE:88:92:F4:4D:74 Authority key identifier: EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78 Certificate issuer: /CN=A91AA95A/serialNumber=EC179A58742228E30B7DF7978826583878255B78 Certificate serial: 0D9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft Manifest number: 0D97 Signing time: Wed 30 Apr 2025 17:50:21 +0000 Manifest this update: Wed 30 Apr 2025 17:50:21 +0000 Manifest next update: Wed 07 May 2025 17:50:21 +0000 Files and hashes: 1: 7BeaWHQiKOMLffeXiCZYOHglW3g.crl (hash: vfnZflJqsJT8XJtgs5F4mC1ZWb9qtRgZa4nhMt8Sz64=) 2: E64999C258D611ED86C99945C4F9AE02.roa (hash: DQ+JErFx/tRloLusNXusv2s1HWOBWc0JnN5N02SFoik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 17:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3483 (0xd9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA95A, serialNumber=EC179A58742228E30B7DF7978826583878255B78 Validity Not Before: Apr 30 17:50:21 2025 GMT Not After : May 7 17:50:21 2025 GMT Subject: CN=681262dd-eed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ab:64:99:ce:78:68:90:d4:71:0b:e6:c6:86: 27:a5:f9:ab:14:16:41:01:86:c0:98:a6:fb:29:43: e3:79:18:e2:a3:6d:30:58:26:d7:97:5b:57:0a:da: d7:5b:6b:1d:64:79:a1:0d:89:90:4b:a6:1d:fe:46: 86:7d:7c:4c:88:03:e5:82:53:a2:b4:6a:ce:6c:04: 90:5c:95:21:1b:a6:1e:ea:0c:c1:36:1a:25:9f:a1: 44:f4:74:75:ca:33:38:12:15:d7:68:6f:96:5b:7e: e7:12:0a:46:4a:03:b1:08:d0:6a:9a:6a:31:ec:7b: 83:92:cd:71:dd:51:22:d9:82:5a:ed:31:09:d8:ab: cf:28:f7:01:3c:ff:5a:39:6e:a9:4d:27:08:1a:2f: 66:23:ae:9c:56:64:ad:77:a5:3c:4a:87:f1:8f:fc: 40:b9:9a:bc:e6:a0:77:a8:dd:67:5b:44:1b:73:a5: 9b:2f:60:c9:1b:c4:1c:9a:f9:b3:61:43:09:c6:9e: 35:e4:e8:47:d3:dd:21:70:7f:05:52:7d:7e:9d:91: bc:45:3a:13:a3:e3:60:05:bb:08:d0:dc:39:72:81: 7c:4c:cc:e4:4f:8c:91:59:1c:74:c8:04:72:39:fe: 08:4f:2d:a3:af:7d:1d:97:a4:b9:a5:e4:d7:3b:15: c3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:14:8A:66:19:0B:2B:1B:46:74:75:D6:7A:49:EE:88:92:F4:4D:74 X509v3 Authority Key Identifier: keyid:EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:08:fb:ab:d5:d3:22:9b:e3:85:3f:49:dc:a4:fb:68:b9:d1: 78:b4:30:21:0f:e4:bb:4f:86:64:ed:17:8a:77:f3:01:6b:40: de:51:44:aa:76:f4:6e:dd:a2:f5:6e:3b:e7:f5:68:4d:a5:a9: a7:f4:e9:72:8b:71:11:be:d4:75:c0:68:ca:bc:a9:98:cd:5b: 4d:ef:67:f1:10:32:19:7c:d3:f8:7a:59:02:10:d4:6e:aa:4a: 6b:f9:d2:e8:b3:df:5e:cd:db:c9:ee:0b:71:73:63:07:44:a6: da:a3:22:43:6b:e3:69:3e:85:20:94:4a:f3:1b:cd:07:79:bc: c4:a4:17:d9:28:43:aa:06:b9:05:be:0f:40:0e:c2:74:77:49: b1:76:dc:ab:30:07:5d:3d:c9:90:da:fd:9d:a9:83:46:b0:f4: cd:d9:cc:bd:ff:7d:2f:98:45:68:64:07:51:f2:db:89:d3:47: 4a:2c:65:28:ae:d6:66:0f:94:9a:34:ca:8a:ab:29:4e:51:3b: ca:f1:ab:93:7e:77:4a:f0:89:11:5d:99:07:03:33:e3:6f:6d: 04:43:ac:cb:6e:3c:cf:5c:f4:59:88:d8:40:11:86:aa:57:69: e9:06:a4:96:2a:2c:7d:b4:77:a9:fb:94:1d:0f:b3:8e:ba:d3: ae:ca:16:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE5NUExMTAvBgNVBAUTKEVDMTc5QTU4NzQyMjI4RTMwQjdERjc5Nzg4MjY1ODM4 NzgyNTVCNzgwHhcNMjUwNDMwMTc1MDIxWhcNMjUwNTA3MTc1MDIxWjAYMRYwFAYD VQQDEw02ODEyNjJkZC1lZWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA56tkmc54aJDUcQvmxoYnpfmrFBZBAYbAmKb7KUPjeRjio20wWCbXl1tXCtrX W2sdZHmhDYmQS6Yd/kaGfXxMiAPlglOitGrObASQXJUhG6Ye6gzBNholn6FE9HR1 yjM4EhXXaG+WW37nEgpGSgOxCNBqmmox7HuDks1x3VEi2YJa7TEJ2KvPKPcBPP9a OW6pTScIGi9mI66cVmStd6U8Sofxj/xAuZq85qB3qN1nW0Qbc6WbL2DJG8Qcmvmz YUMJxp415OhH090hcH8FUn1+nZG8RToTo+NgBbsI0Nw5coF8TMzkT4yRWRx0yARy Of4ITy2jr30dl6S5peTXOxXDewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0UimYZ CysbRnR11npJ7oiS9E10MB8GA1UdIwQYMBaAFOwXmlh0IijjC333l4gmWDh4JVt4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTk1QS9CMEQxRDVGQ0JF NzQxMUU5OEY5NUZBNjRDNEY5QUUwMi83QmVhV0hRaUtPTUxmZmVYaUNaWU9IZ2xX M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdCZWFXSFFpS09NTGZmZVhpQ1pZT0hnbFczZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTk1QS9CMEQxRDVGQ0JFNzQxMUU5OEY5NUZBNjRDNEY5QUUwMi83QmVhV0hRaUtP TUxmZmVYaUNaWU9IZ2xXM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgCPur1dMim+OFP0ncpPtoudF4tDAhD+S7T4Zk7ReKd/MBa0DeUUSq dvRu3aL1bjvn9WhNpamn9Olyi3ERvtR1wGjKvKmYzVtN72fxEDIZfNP4elkCENRu qkpr+dLos99ezdvJ7gtxc2MHRKbaoyJDa+NpPoUglErzG80HebzEpBfZKEOqBrkF vg9ADsJ0d0mxdtyrMAddPcmQ2v2dqYNGsPTN2cy9/30vmEVoZAdR8tuJ00dKLGUo rtZmD5SaNMqKqylOUTvK8auTfndK8IkRXZkHAzPjb20EQ6zLbjzPXPRZiNhAEYaq V2npBqSWKix9tHep+5QdD7OOutOuyhZd -----END CERTIFICATE-----Generated at Thu May 1 17:45:10 2025 by rpki-client