$ rpki-client -vvf rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft File: V7aHJ0szGe2QcblmFY-birZK5vc.mft (raw, json) Hash identifier: roKWWg2JfhosoVEc/Qg1gdcZUAmJts+sN4lZp9nwKxE= Subject key identifier: C7:35:BB:28:6E:24:6F:4C:49:F9:3D:78:36:19:CA:B4:BA:56:33:98 Authority key identifier: 57:B6:87:27:4B:33:19:ED:90:71:B9:66:15:8F:9B:8A:B6:4A:E6:F7 Certificate issuer: /CN=A91B527E/serialNumber=57B687274B3319ED9071B966158F9B8AB64AE6F7 Certificate serial: 2780 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft Manifest number: 2779 Signing time: Thu 24 Apr 2025 15:39:46 +0000 Manifest this update: Thu 24 Apr 2025 15:39:45 +0000 Manifest next update: Thu 01 May 2025 15:39:45 +0000 Files and hashes: 1: V7aHJ0szGe2QcblmFY-birZK5vc.crl (hash: TwqI8A7QUBH5f4QEEea1VbLwrqFGugCt63F5ooirVdM=) 2: C22BA9D094E411EA9076F758C4F9AE02.roa (hash: IgwhRGzkUSBDQMKcII70Dlgk2iFbA7Ss/RSC/5v2m40=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.crl rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10112 (0x2780) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B527E, serialNumber=57B687274B3319ED9071B966158F9B8AB64AE6F7 Validity Not Before: Apr 24 15:39:45 2025 GMT Not After : May 1 15:39:45 2025 GMT Subject: CN=680a5b42-1d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3d:24:14:94:8b:d2:3e:47:c5:01:65:c4:0e: 2a:ee:4a:46:ae:2a:9b:58:97:15:df:18:45:57:8a: 36:e5:42:1f:91:97:0f:22:b2:f0:d8:b4:4f:34:22: 2d:89:7d:23:05:c9:47:72:ce:de:f2:13:68:bb:4e: 2a:25:53:9a:4c:a8:1c:4c:43:ae:21:b1:c9:f4:a1: 2d:31:64:40:52:c8:12:3c:40:0b:bd:8f:18:e2:57: 88:8f:1a:ba:ee:e0:a5:dd:25:26:47:ea:7a:34:3d: 28:d0:0e:41:51:ee:99:82:dc:01:22:3e:b6:b4:7c: fa:0e:3d:5b:7e:9d:dc:34:7f:12:bf:98:d8:94:54: d5:d4:f8:36:1c:d4:b4:d2:fd:1b:e7:8a:a4:8d:02: 30:e0:c1:93:70:f6:3b:ac:ce:ea:77:be:74:43:10: 42:f5:07:d1:5f:cc:66:78:bd:49:f6:c8:b3:db:d0: 5b:e5:d0:5a:c5:f6:8c:1a:7b:20:97:20:dc:cb:c8: e2:cf:b6:2d:ec:5e:b1:82:0c:da:82:f0:10:ba:9e: 2d:49:a4:fb:73:7b:ac:6f:0f:33:ee:a5:b4:d9:35: af:a5:fd:39:98:86:35:c3:80:3a:e0:c1:93:6b:0e: c4:65:1d:28:b7:0c:21:30:3e:88:f3:33:70:7d:cb: fa:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:35:BB:28:6E:24:6F:4C:49:F9:3D:78:36:19:CA:B4:BA:56:33:98 X509v3 Authority Key Identifier: keyid:57:B6:87:27:4B:33:19:ED:90:71:B9:66:15:8F:9B:8A:B6:4A:E6:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:7d:00:fc:91:d7:57:3b:44:e8:6f:87:b9:99:97:a5:e9:23: 5c:20:41:7d:72:3e:23:7b:bb:f3:0d:e2:b5:30:00:38:fc:fe: 8e:28:62:d3:e9:60:d1:44:88:d1:a9:ca:ff:55:64:b4:fe:47: 46:18:40:61:ec:d8:1c:0e:46:24:3c:93:ae:49:92:cc:32:5f: 32:3b:5e:02:d2:73:ab:0c:25:46:a6:62:d7:60:64:9d:0d:69: 17:95:7e:7c:ea:89:31:b4:6f:70:2e:42:cc:b1:0b:db:ff:f5: b7:05:25:17:1f:2e:53:04:cb:d8:a7:11:c0:be:70:bc:fb:a8: 10:1d:70:96:a7:05:ec:74:4c:af:ac:01:ab:c5:be:b1:1a:19: 81:fe:f0:02:75:7b:60:39:12:8f:64:f0:19:5e:12:ac:e0:8a: 7c:21:fb:7c:03:8f:11:cb:12:a2:3d:3e:6b:19:38:24:ad:98: 75:9a:0d:ce:f8:50:5c:76:3a:27:ff:ae:5d:66:39:9a:97:93: 23:78:4e:42:fa:3c:cd:39:20:c1:a8:12:ea:27:18:b0:1b:f2: f4:4f:a0:dc:83:4f:49:44:ce:d4:02:fd:02:d4:79:78:86:47: 4d:46:cf:0c:fc:f4:8d:13:8e:eb:95:be:40:47:f9:f5:03:21: 31:be:eb:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUyN0UxMTAvBgNVBAUTKDU3QjY4NzI3NEIzMzE5RUQ5MDcxQjk2NjE1OEY5QjhB QjY0QUU2RjcwHhcNMjUwNDI0MTUzOTQ1WhcNMjUwNTAxMTUzOTQ1WjAYMRYwFAYD VQQDEw02ODBhNWI0Mi0xZDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsD0kFJSL0j5HxQFlxA4q7kpGriqbWJcV3xhFV4o25UIfkZcPIrLw2LRPNCIt iX0jBclHcs7e8hNou04qJVOaTKgcTEOuIbHJ9KEtMWRAUsgSPEALvY8Y4leIjxq6 7uCl3SUmR+p6ND0o0A5BUe6ZgtwBIj62tHz6Dj1bfp3cNH8Sv5jYlFTV1Pg2HNS0 0v0b54qkjQIw4MGTcPY7rM7qd750QxBC9QfRX8xmeL1J9siz29Bb5dBaxfaMGnsg lyDcy8jiz7Yt7F6xggzagvAQup4tSaT7c3usbw8z7qW02TWvpf05mIY1w4A64MGT aw7EZR0otwwhMD6I8zNwfcv6CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMc1uyhu JG9MSfk9eDYZyrS6VjOYMB8GA1UdIwQYMBaAFFe2hydLMxntkHG5ZhWPm4q2Sub3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTI3RS9FOEE4OENCQUFC NzIxMUU0QjhCQkI4MUNDNEY5QUUwMi9WN2FISjBzekdlMlFjYmxtRlktYmlyWks1 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Y3YUhKMHN6R2UyUWNibG1GWS1iaXJaSzV2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTI3RS9FOEE4OENCQUFCNzIxMUU0QjhCQkI4MUNDNEY5QUUwMi9WN2FISjBzekdl MlFjYmxtRlktYmlyWks1dmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdfQD8kddXO0Tob4e5mZel6SNcIEF9cj4je7vzDeK1MAA4/P6OKGLT 6WDRRIjRqcr/VWS0/kdGGEBh7NgcDkYkPJOuSZLMMl8yO14C0nOrDCVGpmLXYGSd DWkXlX586okxtG9wLkLMsQvb//W3BSUXHy5TBMvYpxHAvnC8+6gQHXCWpwXsdEyv rAGrxb6xGhmB/vACdXtgORKPZPAZXhKs4Ip8Ift8A48RyxKiPT5rGTgkrZh1mg3O +FBcdjon/65dZjmal5MjeE5C+jzNOSDBqBLqJxiwG/L0T6Dcg09JRM7UAv0C1Hl4 hkdNRs8M/PSNE47rlb5AR/n1AyExvuvX -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:13 2025 by rpki-client