$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft File: cleSPWdwxWeJGbB8vPqK-LnFBT8.mft (raw, json) Hash identifier: QbOUeTshoumQYEm4nR8M1y2jyqXFWSjxsMRwgj+aDIg= Subject key identifier: 62:F2:E5:1B:D8:17:BA:8A:07:95:E8:F3:E5:0E:88:4B:27:2C:4E:37 Authority key identifier: 72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F Certificate issuer: /CN=A91C7175/serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft Manifest number: 7A Signing time: Fri 25 Apr 2025 05:42:45 +0000 Manifest this update: Fri 25 Apr 2025 05:42:45 +0000 Manifest next update: Fri 02 May 2025 05:42:45 +0000 Files and hashes: 1: cleSPWdwxWeJGbB8vPqK-LnFBT8.crl (hash: y2moIZ0JiXwJdx0gyg/xZVB0dSDFrL8eiWmMxP6czYg=) 2: 65783A3A68FE11EFB904E587C4F9AE02.roa (hash: W9AbIPs04msR2L8j2qpbp6FWBUlEN2nJFHSFxYkcZYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7175, serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F Validity Not Before: Apr 25 05:42:45 2025 GMT Not After : May 2 05:42:45 2025 GMT Subject: CN=680b20d5-dc05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6b:c8:b5:8a:f7:ed:a3:22:34:5b:92:eb:5d: fb:7f:18:45:c4:85:ef:4a:67:bc:3d:2d:94:0d:ff: b0:28:12:e0:cd:20:c0:de:cf:a5:37:5d:44:53:a4: d5:48:18:84:83:25:df:d6:fd:0b:74:3e:dc:55:df: fd:25:8c:9f:d9:ac:d0:24:41:2d:7f:78:08:f6:10: 93:15:8e:9e:51:29:23:0a:86:f7:86:62:ef:52:90: 44:75:9d:1e:aa:df:e0:88:f0:4b:08:17:a7:6f:66: 05:53:44:62:04:e0:e7:e8:50:34:9c:a2:a0:23:52: 78:ea:cc:5e:3b:f6:16:ca:2a:d5:89:07:ba:af:df: 03:32:3d:b5:1c:11:fd:2d:21:3c:67:d2:8b:f8:e7: 75:2f:10:45:a7:1b:65:fc:95:f5:2a:78:bf:50:52: 6b:29:a6:48:f2:85:3b:72:f0:1c:35:96:3a:57:65: cd:67:83:ac:ad:11:46:d5:0a:8e:7d:df:0e:1a:33: e8:fa:23:58:58:ac:1b:df:f8:04:a0:72:1b:5d:64: a5:e3:d2:50:d8:c9:7d:34:d6:cc:e1:88:71:5f:4b: bd:a9:4a:f5:09:3f:68:43:bf:53:27:0e:03:7c:84: 26:b7:f8:ab:16:bb:00:d3:8a:62:1c:c1:f0:35:13: 87:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F2:E5:1B:D8:17:BA:8A:07:95:E8:F3:E5:0E:88:4B:27:2C:4E:37 X509v3 Authority Key Identifier: keyid:72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:d7:6c:27:d5:84:c6:2b:a4:27:ce:da:31:ca:1e:e2:a9:43: 29:c1:32:5d:35:9a:35:c2:a3:b1:39:64:e4:f4:d1:21:15:d0: 74:ec:01:6a:18:c7:d5:4c:4b:57:15:a2:6d:56:2c:b2:2c:c0: 4c:30:1c:5c:f4:5d:7e:9b:ac:ca:03:b2:de:ce:e5:1c:a1:cb: b7:6c:c5:44:ed:6a:e3:12:2e:07:fb:f8:f8:1f:87:03:f1:4a: 85:34:80:88:14:dc:89:4f:b3:94:72:f5:10:b0:7d:f6:b3:2d: 93:1d:2b:e4:4c:70:96:65:ee:b9:be:25:57:71:ba:7f:c9:1c: 56:02:36:39:54:90:ab:c3:0f:0a:ba:53:46:65:d8:85:ec:62: 2e:b8:9d:90:a7:f3:9c:50:ba:9f:b3:29:34:6c:af:0e:ce:34: 95:a3:35:6d:79:de:27:64:0e:10:8e:85:fc:30:a2:f2:f2:f8: 85:c1:06:aa:cd:9a:d8:03:d7:c2:43:68:3a:f2:f8:fb:db:56: 02:a8:e2:57:84:0d:78:6a:59:43:0b:b7:66:9a:00:25:93:a8: 6a:24:57:6d:c4:86:90:cc:e5:8e:aa:e9:01:0e:7c:9d:0c:3f: 19:81:81:3a:7d:93:82:fe:ad:18:1c:20:36:71:7d:c9:31:72: f7:3f:a0:82 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzE3NTExMC8GA1UEBRMoNzI1NzkyM0Q2NzcwQzU2Nzg5MTlCMDdDQkNGQThBRjhC OUM1MDUzRjAeFw0yNTA0MjUwNTQyNDVaFw0yNTA1MDIwNTQyNDVaMBgxFjAUBgNV BAMTDTY4MGIyMGQ1LWRjMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWa8i1ivftoyI0W5LrXft/GEXEhe9KZ7w9LZQN/7AoEuDNIMDez6U3XURTpNVI GISDJd/W/Qt0PtxV3/0ljJ/ZrNAkQS1/eAj2EJMVjp5RKSMKhveGYu9SkER1nR6q 3+CI8EsIF6dvZgVTRGIE4OfoUDScoqAjUnjqzF479hbKKtWJB7qv3wMyPbUcEf0t ITxn0ov453UvEEWnG2X8lfUqeL9QUmsppkjyhTty8Bw1ljpXZc1ng6ytEUbVCo59 3w4aM+j6I1hYrBvf+ASgchtdZKXj0lDYyX001szhiHFfS72pSvUJP2hDv1MnDgN8 hCa3+KsWuwDTimIcwfA1E4dtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYvLlG9gX uooHlejz5Q6ISycsTjcwHwYDVR0jBBgwFoAUcleSPWdwxWeJGbB8vPqK+LnFBT8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3MTc1L0U5QTA5MkI4NjhG RDExRUZBOTUwMDE4N0M0RjlBRTAyL2NsZVNQV2R3eFdlSkdiQjh2UHFLLUxuRkJU OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvY2xlU1BXZHd4V2VKR2JCOHZQcUstTG5GQlQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 MTc1L0U5QTA5MkI4NjhGRDExRUZBOTUwMDE4N0M0RjlBRTAyL2NsZVNQV2R3eFdl SkdiQjh2UHFLLUxuRkJUOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADfXbCfVhMYrpCfO2jHKHuKpQynBMl01mjXCo7E5ZOT00SEV0HTsAWoY x9VMS1cVom1WLLIswEwwHFz0XX6brMoDst7O5Ryhy7dsxUTtauMSLgf7+PgfhwPx SoU0gIgU3IlPs5Ry9RCwffazLZMdK+RMcJZl7rm+JVdxun/JHFYCNjlUkKvDDwq6 U0Zl2IXsYi64nZCn85xQup+zKTRsrw7ONJWjNW153idkDhCOhfwwovLy+IXBBqrN mtgD18JDaDry+PvbVgKo4leEDXhqWUMLt2aaACWTqGokV23EhpDM5Y6q6QEOfJ0M PxmBgTp9k4L+rRgcIDZxfckxcvc/oII= -----END CERTIFICATE-----Generated at Sat Apr 26 18:14:15 2025 by rpki-client