$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft File: c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft (raw, json) Hash identifier: TVR0v/2xX7vY3Ut9jcTWSYZFmyLju//dwOMDWPyp/Gk= Subject key identifier: B7:0E:52:41:92:DF:30:BE:F3:52:DC:BC:B4:0B:AA:14:98:31:CD:82 Authority key identifier: 73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2 Certificate issuer: /CN=A91B2492/serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2 Certificate serial: 0B1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft Manifest number: 0B15 Signing time: Thu 24 Apr 2025 19:08:13 +0000 Manifest this update: Thu 24 Apr 2025 19:08:12 +0000 Manifest next update: Thu 01 May 2025 19:08:12 +0000 Files and hashes: 1: c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl (hash: bzB+EX0+/RyTX6Pis3in6xlul6VrUbCTq055okrxiN0=) 2: C8436A008D7B11EDB7EB7F37C4F9AE02.roa (hash: yUzUPNwrnnqA9y2QcEn+ohx6QfzL71Dl4zwJAGApA/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:08:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2846 (0xb1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2492, serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2 Validity Not Before: Apr 24 19:08:12 2025 GMT Not After : May 1 19:08:12 2025 GMT Subject: CN=680a8c1c-9982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b9:25:72:78:e8:aa:df:0e:c3:14:1d:fa:f3: 88:86:13:73:52:01:7e:9f:56:1e:af:30:e7:d6:b5: 2d:60:99:c6:54:33:c4:2c:d8:17:95:98:70:ac:cf: 0b:21:65:8b:21:43:91:80:59:75:03:a8:be:93:73: 20:35:d4:2a:26:68:5a:0e:06:68:50:9d:0e:7b:98: a3:9b:da:cb:ef:9f:14:19:8b:07:73:80:5b:b5:67: fa:c1:e2:c3:ef:1e:71:3a:15:99:61:03:d6:03:0d: f8:b8:52:e6:49:f2:5b:5a:b1:a8:3c:f9:a3:00:2b: 93:1c:b5:7f:2c:7c:0d:9c:d7:39:19:fb:42:cd:b9: bf:62:b0:bd:92:73:eb:31:09:6b:9c:19:a5:45:b8: cf:1b:96:b3:b1:e9:34:75:04:53:82:95:8b:3d:3f: 03:07:c9:d1:c5:28:7e:36:c8:e0:5d:ea:a1:93:47: 0d:db:40:92:59:54:ad:96:ae:07:7d:c5:bb:dd:74: 9c:5b:9b:c6:8d:70:31:d1:4a:02:d6:c8:f1:df:39: 60:e1:45:28:f5:c5:6e:1d:a5:c8:0c:52:85:cb:e3: bb:af:6f:b9:0e:c9:0f:e0:f2:dc:d6:ed:8c:00:67: 14:0b:f8:ac:c4:a4:07:9b:19:e2:13:f5:7b:3a:72: 71:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0E:52:41:92:DF:30:BE:F3:52:DC:BC:B4:0B:AA:14:98:31:CD:82 X509v3 Authority Key Identifier: keyid:73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:cf:f2:02:3e:81:81:58:15:da:2c:e0:35:f0:3d:73:e8:16: 21:9e:80:af:a8:d4:54:b2:29:23:a9:9c:91:a7:1e:05:2e:5e: 98:a6:04:bb:ad:e7:d5:d1:8c:aa:aa:10:87:fb:ec:60:54:8c: 7f:08:1a:c3:a0:a5:7c:b8:65:a6:64:53:de:83:ce:10:32:c7: 06:b8:64:0f:9f:14:cb:10:93:47:0e:c9:69:71:22:19:04:5c: d8:27:22:ef:3f:8f:3e:02:42:32:6f:b4:f8:e2:a1:ea:61:fb: bb:76:15:0c:d6:03:bf:5a:a7:68:da:76:31:7d:f8:f4:32:93: c2:d9:bf:9f:1b:91:a9:ee:24:4a:13:65:3f:14:69:a2:cd:7e: 7e:77:e0:b9:25:5f:21:b6:4f:83:07:fd:fe:24:b3:aa:87:fd: 38:d9:09:96:48:65:5e:92:4f:d5:a9:cb:e4:e1:91:b9:e3:ef: 45:3c:7a:32:71:9c:86:f5:4e:3d:23:d2:79:7f:69:9c:6e:bb: 74:2f:8c:d9:f6:c6:8e:bc:9b:8e:f3:43:e6:09:f3:a0:02:d6: 4b:75:f4:2d:69:70:12:ff:00:6f:20:1f:72:9d:ba:34:5b:52: 16:d0:d8:e1:a2:7f:39:0d:ce:07:9c:53:65:3c:5e:68:ca:e7: 17:9c:ce:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI0OTIxMTAvBgNVBAUTKDczQjU2MURGM0E1ODk3NkY3RkFEOTk3QTlCQThERTVG Njc2RENGQjIwHhcNMjUwNDI0MTkwODEyWhcNMjUwNTAxMTkwODEyWjAYMRYwFAYD VQQDEw02ODBhOGMxYy05OTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrklcnjoqt8OwxQd+vOIhhNzUgF+n1YerzDn1rUtYJnGVDPELNgXlZhwrM8L IWWLIUORgFl1A6i+k3MgNdQqJmhaDgZoUJ0Oe5ijm9rL758UGYsHc4BbtWf6weLD 7x5xOhWZYQPWAw34uFLmSfJbWrGoPPmjACuTHLV/LHwNnNc5GftCzbm/YrC9knPr MQlrnBmlRbjPG5azsek0dQRTgpWLPT8DB8nRxSh+NsjgXeqhk0cN20CSWVStlq4H fcW73XScW5vGjXAx0UoC1sjx3zlg4UUo9cVuHaXIDFKFy+O7r2+5DskP4PLc1u2M AGcUC/isxKQHmxniE/V7OnJxNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcOUkGS 3zC+81LcvLQLqhSYMc2CMB8GA1UdIwQYMBaAFHO1Yd86WJdvf62Zepuo3l9nbc+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjQ5Mi9EQUQ1MTBENDND QjUxMUVBQjgyQ0NDNkNDNEY5QUUwMi9jN1ZoM3pwWWwyOV9yWmw2bTZqZVgyZHR6 N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3VmgzenBZbDI5X3JabDZtNmplWDJkdHo3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjQ5Mi9EQUQ1MTBENDNDQjUxMUVBQjgyQ0NDNkNDNEY5QUUwMi9jN1ZoM3pwWWwy OV9yWmw2bTZqZVgyZHR6N0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzz/ICPoGBWBXaLOA18D1z6BYhnoCvqNRUsikjqZyRpx4FLl6YpgS7 refV0YyqqhCH++xgVIx/CBrDoKV8uGWmZFPeg84QMscGuGQPnxTLEJNHDslpcSIZ BFzYJyLvP48+AkIyb7T44qHqYfu7dhUM1gO/Wqdo2nYxffj0MpPC2b+fG5Gp7iRK E2U/FGmizX5+d+C5JV8htk+DB/3+JLOqh/042QmWSGVekk/Vqcvk4ZG54+9FPHoy cZyG9U49I9J5f2mcbrt0L4zZ9saOvJuO80PmCfOgAtZLdfQtaXAS/wBvIB9ynbo0 W1IW0Njhon85Dc4HnFNlPF5oyucXnM6j -----END CERTIFICATE-----Generated at Sat Apr 26 13:02:28 2025 by rpki-client