$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft File: PfG7945KTnVEGahIyf0My9LmpFg.mft (raw, json) Hash identifier: q54vaPOTyj4YqMhBfvOdlz+ubrXUbTq/+OU7/QOY5Ho= Subject key identifier: 35:55:54:EC:E7:EF:30:F6:DB:F2:6D:BF:3A:E4:CE:4A:7A:FB:C3:D9 Authority key identifier: 3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 Certificate issuer: /CN=A91C1052/serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Certificate serial: 01C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft Manifest number: 01C0 Signing time: Fri 25 Apr 2025 02:13:32 +0000 Manifest this update: Fri 25 Apr 2025 02:13:32 +0000 Manifest next update: Fri 02 May 2025 02:13:32 +0000 Files and hashes: 1: PfG7945KTnVEGahIyf0My9LmpFg.crl (hash: t/QFu8WPfj4QWHJ27OHlBM0RNIu4gNDr84v16SE8zIY=) 2: 74A3C1988E8311ED903ADA1CC4F9AE02.roa (hash: tRn5pXPKK2uEloHBe0GH9yfzRyq3HlL5LYvlAIQdS38=) 3: D6E2AAC0772911ED95084884C4F9AE02.roa (hash: dJsLSVlZN9Pxyi6rXrFH13Jbq2ezDlbcKNiOzrGi8Nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1052, serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Validity Not Before: Apr 25 02:13:32 2025 GMT Not After : May 2 02:13:32 2025 GMT Subject: CN=680aefcc-979d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:aa:27:9f:fe:34:9e:ce:96:25:22:42:67:bf: e1:c6:44:a2:80:66:0d:f7:c3:4e:f5:eb:81:82:8c: 60:20:42:74:20:34:a8:90:ed:38:58:4c:4f:fc:d3: fb:73:08:a0:36:e8:94:e4:40:1a:84:e2:23:38:b0: 34:b3:df:01:d2:a2:42:fd:d7:d0:dd:66:51:41:98: 44:3c:91:c0:33:2e:c0:8e:67:3f:47:26:d6:44:97: b7:ff:be:5e:5a:83:9e:61:3a:28:b5:bc:44:a1:cf: e4:5f:8a:ab:d1:00:ae:08:e8:f0:a6:39:32:8c:69: bc:51:3e:b4:a2:15:92:e9:84:0e:3d:d2:50:b4:47: 1f:fa:e8:7b:d6:84:ef:21:19:61:d6:4a:57:c3:35: 60:b8:74:af:a5:6b:c9:ea:2b:07:bd:3d:30:6d:09: e6:e3:e6:1a:79:9e:6a:8f:18:76:67:6b:fe:ff:66: 03:ca:84:ad:b2:15:9f:ef:90:62:87:4a:0a:43:83: d1:3d:63:cf:24:67:84:3a:26:cd:76:22:01:90:0b: fb:7a:ae:3e:07:8c:32:50:64:62:6e:8a:e9:b0:30: 5a:d6:98:57:18:dc:98:84:d3:ac:82:8d:b0:8a:2b: 96:30:e7:22:3f:be:07:f1:28:bf:ea:59:63:d0:ae: 8b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:55:54:EC:E7:EF:30:F6:DB:F2:6D:BF:3A:E4:CE:4A:7A:FB:C3:D9 X509v3 Authority Key Identifier: keyid:3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:e2:f4:9a:86:43:8f:51:0e:57:ce:33:82:ec:80:9e:5d:42: 0d:d9:c7:de:48:da:2b:83:81:c3:88:12:9b:6e:a4:87:a1:a8: f1:aa:68:ea:47:cc:94:1c:f3:9a:a9:3e:ff:c5:c0:d2:90:58: f7:0b:15:10:15:ff:74:94:9b:ac:93:da:26:ca:eb:6e:3f:96: 10:e9:a8:60:f8:b5:63:bf:31:d6:90:89:fb:59:33:c8:38:bc: ef:84:09:b2:c2:44:fe:ea:64:d7:7c:7c:97:dd:57:23:29:45: d9:3e:9b:23:ba:1e:b3:b2:53:8d:86:f7:cb:a1:ce:b6:4b:bf: 5e:2c:45:01:e1:82:28:c1:44:f1:93:8c:47:0c:18:fe:25:a0: 46:3c:6d:a4:bb:ff:81:95:8d:4b:bc:b7:06:a7:06:3c:4c:d6: 5c:17:9c:e5:98:b6:cd:80:5f:ad:04:8a:4e:da:19:3b:6d:99: ff:63:ec:cc:b3:d1:a2:95:53:db:78:c5:58:ce:a3:62:1e:87: 4d:2c:71:ce:a5:fb:5d:b4:db:ae:53:7c:65:99:eb:92:5e:b1: 0b:67:50:d1:96:81:80:19:fc:bc:e3:55:9f:0f:b8:2e:1e:1b: db:39:69:c4:13:55:3d:dd:77:45:ed:9b:da:93:24:e2:e6:60: e5:0b:fa:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwNTIxMTAvBgNVBAUTKDNERjFCQkY3OEU0QTRFNzU0NDE5QTg0OEM5RkQwQ0NC RDJFNkE0NTgwHhcNMjUwNDI1MDIxMzMyWhcNMjUwNTAyMDIxMzMyWjAYMRYwFAYD VQQDEw02ODBhZWZjYy05NzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyaonn/40ns6WJSJCZ7/hxkSigGYN98NO9euBgoxgIEJ0IDSokO04WExP/NP7 cwigNuiU5EAahOIjOLA0s98B0qJC/dfQ3WZRQZhEPJHAMy7Ajmc/RybWRJe3/75e WoOeYTootbxEoc/kX4qr0QCuCOjwpjkyjGm8UT60ohWS6YQOPdJQtEcf+uh71oTv IRlh1kpXwzVguHSvpWvJ6isHvT0wbQnm4+YaeZ5qjxh2Z2v+/2YDyoStshWf75Bi h0oKQ4PRPWPPJGeEOibNdiIBkAv7eq4+B4wyUGRiborpsDBa1phXGNyYhNOsgo2w iiuWMOciP74H8Si/6llj0K6L8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVVVOzn 7zD22/Jtvzrkzkp6+8PZMB8GA1UdIwQYMBaAFD3xu/eOSk51RBmoSMn9DMvS5qRY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTA1Mi84MDZGQjI3Njc3 MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1RuVkVHYWhJeWYwTXk5TG1w RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BmRzc5NDVLVG5WRUdhaEl5ZjBNeTlMbXBGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTA1Mi84MDZGQjI3Njc3MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1Ru VkVHYWhJeWYwTXk5TG1wRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB04vSahkOPUQ5XzjOC7ICeXUIN2cfeSNorg4HDiBKbbqSHoajxqmjq R8yUHPOaqT7/xcDSkFj3CxUQFf90lJusk9omyutuP5YQ6ahg+LVjvzHWkIn7WTPI OLzvhAmywkT+6mTXfHyX3VcjKUXZPpsjuh6zslONhvfLoc62S79eLEUB4YIowUTx k4xHDBj+JaBGPG2ku/+BlY1LvLcGpwY8TNZcF5zlmLbNgF+tBIpO2hk7bZn/Y+zM s9GilVPbeMVYzqNiHodNLHHOpftdtNuuU3xlmeuSXrELZ1DRloGAGfy841WfD7gu HhvbOWnEE1U93XdF7ZvakyTi5mDlC/pO -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:20 2025 by rpki-client