$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft File: o7CyBZyzB2t17aMkt2UH08KVUoM.mft (raw, json) Hash identifier: y3AjI647wlRRbDnt3t3+tQ1z/s1TOAhfSrT5PhbuweM= Subject key identifier: E7:77:E7:C0:CA:F2:FB:A2:E7:B5:2E:A3:E1:F9:06:A8:8F:C4:12:BA Authority key identifier: A3:B0:B2:05:9C:B3:07:6B:75:ED:A3:24:B7:65:07:D3:C2:95:52:83 Certificate issuer: /CN=A91C2AAE/serialNumber=A3B0B2059CB3076B75EDA324B76507D3C2955283 Certificate serial: 0A11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft Manifest number: 0A0B Signing time: Thu 24 Apr 2025 19:43:35 +0000 Manifest this update: Thu 24 Apr 2025 19:43:34 +0000 Manifest next update: Thu 01 May 2025 19:43:34 +0000 Files and hashes: 1: o7CyBZyzB2t17aMkt2UH08KVUoM.crl (hash: WCni9z74uTVuo37kQZWZmhxZk99/ZQVD2TUkp5UflwY=) 2: 11502BAC719111EAAC505266C4F9AE02.roa (hash: RDM7Lb5HfvMFUtS/P2rwwBWdJyjHtFv0PrhdCwgVU6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.crl rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2577 (0xa11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2AAE, serialNumber=A3B0B2059CB3076B75EDA324B76507D3C2955283 Validity Not Before: Apr 24 19:43:34 2025 GMT Not After : May 1 19:43:34 2025 GMT Subject: CN=680a9466-1253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e7:34:d6:9d:f4:fc:62:9a:d9:68:30:cd:e4: 0d:7f:5d:f6:c2:00:31:56:84:19:b3:bd:82:81:02: 72:22:65:1e:5e:08:c1:db:2e:c4:7b:5d:41:1c:62: b1:4d:f8:0b:35:ba:9d:54:02:50:c6:ce:f3:a7:f9: 60:7e:c0:f9:a5:5d:36:7f:bd:c7:25:21:8f:e0:d3: 54:59:b8:81:9e:5e:f3:96:bc:12:3b:7e:86:4d:3e: d2:63:a8:b6:4b:aa:7a:dd:dc:7e:eb:aa:22:5b:fa: f8:2f:ed:55:ad:9d:3a:48:81:07:7c:96:63:b6:97: db:44:56:17:5c:dd:b8:09:bd:4b:94:e7:92:9e:62: 46:44:ae:a4:1e:77:68:17:94:6f:f4:26:2b:f3:b7: 8d:27:f5:80:da:4f:a2:4a:37:74:4f:65:30:c5:21: 0d:d7:8b:ea:64:12:dc:07:36:38:54:ef:30:d0:47: c7:d6:3f:8b:75:b2:a5:02:07:6b:c0:27:e4:39:31: ab:fb:1e:1b:2d:24:e7:b5:69:92:23:1b:3d:80:77: 6e:86:aa:0b:d2:86:0a:2e:26:c2:c8:f7:3c:87:3f: 33:b8:4a:b9:64:31:64:ae:20:dd:ee:69:45:21:a0: a4:c7:ef:1f:3f:85:76:18:ac:6d:31:df:39:74:7c: 5f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:77:E7:C0:CA:F2:FB:A2:E7:B5:2E:A3:E1:F9:06:A8:8F:C4:12:BA X509v3 Authority Key Identifier: keyid:A3:B0:B2:05:9C:B3:07:6B:75:ED:A3:24:B7:65:07:D3:C2:95:52:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:96:b1:c3:34:b6:87:51:7f:e1:ae:36:57:1d:e1:a2:fe:5e: 82:86:8e:cb:e6:5f:b4:6c:5c:1c:25:f0:0d:50:ce:82:80:ef: b8:6e:75:93:1a:1f:4a:5c:e8:3e:10:1e:73:1f:d6:4a:d7:5c: 1d:87:24:18:39:2a:fd:a2:ff:71:b1:78:af:44:8f:76:db:1b: 29:13:72:15:d4:5c:b6:cd:f1:8c:8b:7f:44:14:56:7b:36:65: 53:fd:a2:5e:17:06:d3:03:8b:20:8e:97:9e:28:c7:fc:84:dc: 2b:69:05:51:81:43:df:87:69:2f:7c:97:76:21:6c:15:86:01: 6e:50:c1:8c:9a:02:d9:e6:d6:33:87:bf:48:e7:5a:bc:e2:7d: b0:d5:82:c5:73:e5:da:17:66:01:38:a8:1d:43:af:7f:d8:a6: a4:99:8c:fd:3e:a6:69:ad:72:ec:2e:71:80:84:c9:40:27:b4: 90:c2:d0:be:1d:7c:40:2e:e6:d8:58:bd:5e:3e:d3:17:d9:03: d4:5d:08:28:71:09:17:17:ec:f3:62:48:7f:8e:cd:b5:e1:1f: 60:d6:ca:30:0f:78:1f:21:f1:39:6d:f2:4d:76:e7:27:35:47: b0:ee:cb:93:9e:2d:2d:75:c6:9a:22:66:55:c8:69:64:aa:d0: cc:12:a8:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJBQUUxMTAvBgNVBAUTKEEzQjBCMjA1OUNCMzA3NkI3NUVEQTMyNEI3NjUwN0Qz QzI5NTUyODMwHhcNMjUwNDI0MTk0MzM0WhcNMjUwNTAxMTk0MzM0WjAYMRYwFAYD VQQDEw02ODBhOTQ2Ni0xMjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsuc01p30/GKa2WgwzeQNf132wgAxVoQZs72CgQJyImUeXgjB2y7Ee11BHGKx TfgLNbqdVAJQxs7zp/lgfsD5pV02f73HJSGP4NNUWbiBnl7zlrwSO36GTT7SY6i2 S6p63dx+66oiW/r4L+1VrZ06SIEHfJZjtpfbRFYXXN24Cb1LlOeSnmJGRK6kHndo F5Rv9CYr87eNJ/WA2k+iSjd0T2UwxSEN14vqZBLcBzY4VO8w0EfH1j+LdbKlAgdr wCfkOTGr+x4bLSTntWmSIxs9gHduhqoL0oYKLibCyPc8hz8zuEq5ZDFkriDd7mlF IaCkx+8fP4V2GKxtMd85dHxf3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOd358DK 8vui57Uuo+H5BqiPxBK6MB8GA1UdIwQYMBaAFKOwsgWcswdrde2jJLdlB9PClVKD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkFBRS81NzUzN0Q1RTcw NDUxMUVBOEE5NDFEMUFDNEY5QUUwMi9vN0N5Qlp5ekIydDE3YU1rdDJVSDA4S1ZV b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL283Q3lCWnl6QjJ0MTdhTWt0MlVIMDhLVlVvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkFBRS81NzUzN0Q1RTcwNDUxMUVBOEE5NDFEMUFDNEY5QUUwMi9vN0N5Qlp5ekIy dDE3YU1rdDJVSDA4S1ZVb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAlrHDNLaHUX/hrjZXHeGi/l6Cho7L5l+0bFwcJfANUM6CgO+4bnWT Gh9KXOg+EB5zH9ZK11wdhyQYOSr9ov9xsXivRI922xspE3IV1Fy2zfGMi39EFFZ7 NmVT/aJeFwbTA4sgjpeeKMf8hNwraQVRgUPfh2kvfJd2IWwVhgFuUMGMmgLZ5tYz h79I51q84n2w1YLFc+XaF2YBOKgdQ69/2KakmYz9PqZprXLsLnGAhMlAJ7SQwtC+ HXxALubYWL1ePtMX2QPUXQgocQkXF+zzYkh/js214R9g1sowD3gfIfE5bfJNducn NUew7suTni0tdcaaImZVyGlkqtDMEqgI -----END CERTIFICATE-----Generated at Sat Apr 26 04:27:09 2025 by rpki-client