$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft File: -E-7QV2aRUM2Lt9yZfU34s_5-CA.mft (raw, json) Hash identifier: lZa8+D+Kk9vAecv3sxocO8Bs1fWt6TEKRhr1jv12TRw= Subject key identifier: 21:AD:5A:A1:27:C4:5A:B9:5B:D0:0F:32:D1:DB:28:D7:96:26:B6:7E Authority key identifier: F8:4F:BB:41:5D:9A:45:43:36:2E:DF:72:65:F5:37:E2:CF:F9:F8:20 Certificate issuer: /CN=A91BCDC6/serialNumber=F84FBB415D9A4543362EDF7265F537E2CFF9F820 Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft Manifest number: 0114 Signing time: Fri 25 Apr 2025 03:57:12 +0000 Manifest this update: Fri 25 Apr 2025 03:57:11 +0000 Manifest next update: Fri 02 May 2025 03:57:11 +0000 Files and hashes: 1: -E-7QV2aRUM2Lt9yZfU34s_5-CA.crl (hash: HuiL52qJRd8EVo4z04krl+5giKKaEBP+Waoe8MRAH0M=) 2: 254E9F807D4A11EEABBD1328C4F9AE02.roa (hash: D3pmccxd7HAcoRpNwl+DNJm+TOWT+mbBNl5xHiUaFnU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.crl rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:57:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCDC6, serialNumber=F84FBB415D9A4543362EDF7265F537E2CFF9F820 Validity Not Before: Apr 25 03:57:11 2025 GMT Not After : May 2 03:57:11 2025 GMT Subject: CN=680b0818-cb2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ee:df:b1:70:20:8b:eb:2c:44:82:05:c5:3b: fe:ff:03:f0:58:2b:75:29:de:a0:77:db:c9:c8:00: d7:61:38:ad:f7:e0:b3:9e:72:f3:5f:09:da:aa:25: b2:0b:bc:25:c8:46:ee:fb:d4:26:5c:89:18:c8:0e: 27:68:a3:40:62:ee:6a:be:62:00:8b:57:89:88:3c: bb:74:1c:96:d2:66:b0:20:06:6c:a6:e9:34:13:82: dc:b0:da:06:36:94:ff:0a:80:85:ee:41:87:03:1a: 62:df:66:d1:79:02:de:60:e9:24:37:91:e6:dc:e9: f0:5e:c6:77:67:aa:b3:26:0f:6e:9b:75:64:14:48: 53:4b:07:e6:f1:6f:55:fd:26:e7:8e:dc:e6:78:11: 14:86:27:e5:40:77:fd:87:c5:cd:c9:6d:c2:04:df: bf:41:d1:85:ea:a5:0a:a8:55:a6:10:98:73:c3:bf: 3e:f9:da:1c:bf:29:32:c7:9d:56:08:c3:10:bb:90: 5e:e7:ff:07:39:b3:e8:a2:0d:98:1a:87:6d:9e:92: d0:76:b6:1c:a0:0d:30:38:22:d2:b4:42:e0:11:60: 71:21:57:a8:b4:cc:09:6b:41:ac:c9:62:c8:de:2d: 3f:f9:f5:c1:4c:b7:60:8b:e6:45:32:44:af:96:4b: 8a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:AD:5A:A1:27:C4:5A:B9:5B:D0:0F:32:D1:DB:28:D7:96:26:B6:7E X509v3 Authority Key Identifier: keyid:F8:4F:BB:41:5D:9A:45:43:36:2E:DF:72:65:F5:37:E2:CF:F9:F8:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:6e:41:f3:10:05:a0:7e:7d:de:49:38:18:df:90:f0:d7:d7: cd:6b:cf:02:fe:76:4a:e3:64:9a:a6:23:94:91:d4:e8:44:dd: 7a:c0:af:56:0a:f3:ef:ba:e8:65:66:b3:ad:7c:4b:c8:e2:1e: 48:e9:52:f9:0b:21:7c:08:a7:b2:f1:54:47:c8:c1:70:74:ee: 91:16:c0:4f:30:cb:d7:06:82:7b:d3:29:01:11:39:69:11:c0: 67:77:aa:b6:8b:95:50:f0:93:af:95:0a:4f:aa:11:17:0d:63: 35:a0:b4:eb:c2:54:63:3a:5f:50:8b:30:e0:08:7e:4c:b5:b7: 82:57:5e:2a:61:c3:3e:55:b0:c2:0c:3a:58:62:74:5f:7b:25: ce:1f:70:b8:dc:df:8b:17:7c:96:90:35:2e:b6:a3:04:13:45: e4:3f:18:01:28:69:5e:ea:8b:b4:d7:45:13:5f:94:2e:25:77: 38:4b:49:ca:3e:c0:95:4f:99:ee:5e:98:4b:16:37:b2:76:a7: ab:6e:9b:9f:6e:40:19:8f:0c:ac:24:74:56:46:98:88:ff:16: 59:4a:40:61:6e:bd:e7:c6:ed:47:e8:52:d8:e6:b4:f9:96:a1: c4:fb:6b:78:cf:d9:8e:6f:b1:92:70:58:00:9b:19:e4:0a:fe: b1:16:dc:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNEQzYxMTAvBgNVBAUTKEY4NEZCQjQxNUQ5QTQ1NDMzNjJFREY3MjY1RjUzN0Uy Q0ZGOUY4MjAwHhcNMjUwNDI1MDM1NzExWhcNMjUwNTAyMDM1NzExWjAYMRYwFAYD VQQDEw02ODBiMDgxOC1jYjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0e7fsXAgi+ssRIIFxTv+/wPwWCt1Kd6gd9vJyADXYTit9+CznnLzXwnaqiWy C7wlyEbu+9QmXIkYyA4naKNAYu5qvmIAi1eJiDy7dByW0mawIAZspuk0E4LcsNoG NpT/CoCF7kGHAxpi32bReQLeYOkkN5Hm3OnwXsZ3Z6qzJg9um3VkFEhTSwfm8W9V /SbnjtzmeBEUhiflQHf9h8XNyW3CBN+/QdGF6qUKqFWmEJhzw78++docvykyx51W CMMQu5Be5/8HObPoog2YGodtnpLQdrYcoA0wOCLStELgEWBxIVeotMwJa0GsyWLI 3i0/+fXBTLdgi+ZFMkSvlkuKnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGtWqEn xFq5W9APMtHbKNeWJrZ+MB8GA1UdIwQYMBaAFPhPu0FdmkVDNi7fcmX1N+LP+fgg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0RDNi84MDEyOEVDODdE NDkxMUVFQjlDNkRDMjZDNEY5QUUwMi8tRS03UVYyYVJVTTJMdDl5WmZVMzRzXzUt Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1FLTdRVjJhUlVNMkx0OXlaZlUzNHNfNS1DQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0RDNi84MDEyOEVDODdENDkxMUVFQjlDNkRDMjZDNEY5QUUwMi8tRS03UVYyYVJV TTJMdDl5WmZVMzRzXzUtQ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwbkHzEAWgfn3eSTgY35Dw19fNa88C/nZK42SapiOUkdToRN16wK9W CvPvuuhlZrOtfEvI4h5I6VL5CyF8CKey8VRHyMFwdO6RFsBPMMvXBoJ70ykBETlp EcBnd6q2i5VQ8JOvlQpPqhEXDWM1oLTrwlRjOl9QizDgCH5MtbeCV14qYcM+VbDC DDpYYnRfeyXOH3C43N+LF3yWkDUutqMEE0XkPxgBKGle6ou010UTX5QuJXc4S0nK PsCVT5nuXphLFjeydqerbpufbkAZjwysJHRWRpiI/xZZSkBhbr3nxu1H6FLY5rT5 lqHE+2t4z9mOb7GScFgAmxnkCv6xFty/ -----END CERTIFICATE-----Generated at Sat Apr 26 03:42:19 2025 by rpki-client