$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft File: r7CNb36XeFtvMRce-C4xux0G4uM.mft (raw, json) Hash identifier: n/+qbCFW0FLEV0Bzcp2/7Sq34OcHKE6dPd7zn1/X5QQ= Subject key identifier: 14:8B:ED:CE:5A:F4:3A:F2:2F:6A:0E:2C:5E:7A:E0:86:60:42:3E:8D Authority key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 Certificate issuer: /CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Certificate serial: 1467 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft Manifest number: 144B Signing time: Thu 24 Apr 2025 16:56:04 +0000 Manifest this update: Thu 24 Apr 2025 16:56:03 +0000 Manifest next update: Thu 01 May 2025 16:56:03 +0000 Files and hashes: 1: r7CNb36XeFtvMRce-C4xux0G4uM.crl (hash: I1JPLuELMU46jPuuEbh5PcxA/auneK59UCVDkCGarqc=) 2: 4EED8CBE029911EF96760924C4F9AE02.roa (hash: nVELww+GgEMji9swA1+nobEPfsSUHSJgjMoFUJZQMqM=) 3: CC2A0136F58C11EEB142585CC4F9AE02.roa (hash: LcIUX4YJ29+aJV1+YxaPbbSzmp98riAGflfyDE/z+VQ=) 4: A0375A56964511EF9481CA74C4F9AE02.roa (hash: kEtEyPhK0r3E14+zMjIhhxmIsJuQscWu62026oNy4Ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:56:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5223 (0x1467) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B15, serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Validity Not Before: Apr 24 16:56:03 2025 GMT Not After : May 1 16:56:03 2025 GMT Subject: CN=680a6d23-0326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b8:35:26:61:8d:a8:92:34:73:90:59:14:6d: 93:70:f3:10:76:7c:14:65:84:7b:59:7e:6a:93:58: eb:3e:4d:df:52:f1:f1:b0:c4:8f:f5:d3:fb:da:eb: 41:bd:8d:d8:7d:a1:50:ee:f5:fb:28:8a:a4:34:fe: fb:54:f5:66:9e:4e:7f:cc:50:9f:98:36:15:0f:95: 55:d5:23:80:5d:3b:90:dc:c2:05:05:b4:45:20:2d: 14:dc:fe:d4:49:6b:44:41:83:b7:86:03:cd:c7:a5: e2:05:9c:63:13:9a:54:5c:86:c6:65:23:3d:ec:37: 2f:c4:f4:dc:02:65:73:54:26:63:96:15:6f:2e:56: 64:84:15:a1:25:76:f6:76:85:3d:64:18:41:cc:bf: 06:b4:1c:c6:10:1b:a3:25:a6:c6:19:b5:bb:11:ed: d1:69:e4:3e:1a:2f:cb:62:ca:21:c0:70:ab:2e:6b: fd:fa:1d:fe:13:39:06:3c:47:b8:bc:4c:98:f4:0c: 8f:fb:d1:07:a3:f4:83:e7:32:20:1d:cb:15:aa:4d: a9:12:44:e7:68:54:48:36:99:03:bf:aa:c0:31:d6: 93:9b:a3:45:53:cc:d0:08:d0:c0:eb:d5:33:3f:cd: a1:4f:62:2f:33:dc:1a:fd:76:d9:21:c8:36:48:98: c3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8B:ED:CE:5A:F4:3A:F2:2F:6A:0E:2C:5E:7A:E0:86:60:42:3E:8D X509v3 Authority Key Identifier: keyid:AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:2c:27:e1:05:dc:fc:3e:c7:e8:1b:ab:42:bf:14:55:8c:7e: a2:1b:43:c1:cc:93:33:dd:5d:ad:10:a8:bc:b6:05:00:ea:8a: 01:be:c1:a9:c0:83:71:95:67:79:5e:7b:db:b3:a3:aa:0e:b9: 2b:c1:46:fe:5f:df:ea:50:19:7a:d0:3c:24:c3:e8:50:f0:d9: dd:54:06:de:12:68:c7:9b:f2:0c:71:ca:2e:92:4e:8b:88:f2: 4d:ff:12:1f:17:a6:40:22:f2:ff:c0:a4:d9:3c:6d:32:a8:c9: 8f:f8:20:53:12:bf:d9:12:65:a5:70:6a:77:3f:cf:63:45:3f: 60:98:f8:b1:fe:c7:79:ee:26:c6:53:27:51:34:2b:a6:f6:c9: 86:de:67:fc:19:9e:76:2e:e1:1c:9b:92:48:62:8b:7a:3e:57: 00:f1:67:7c:2b:42:2c:ab:f0:d9:50:2b:6b:3c:5a:0a:b7:93: ea:a7:10:ac:b1:8b:58:d4:eb:8f:e4:d7:57:b7:8f:d8:d3:12: 3d:54:e0:57:85:f9:96:89:a0:52:24:8d:81:65:bd:12:16:30: 6d:bf:57:5f:e0:67:a6:67:8c:84:fb:e5:ab:f5:4a:d3:e1:78: c2:a1:85:a3:69:f9:e8:02:e3:b7:e9:6d:22:43:d2:66:d4:b7: a9:39:e6:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCMTUxMTAvBgNVBAUTKEFGQjA4RDZGN0U5Nzc4NUI2RjMxMTcxRUY4MkUzMUJC MUQwNkUyRTMwHhcNMjUwNDI0MTY1NjAzWhcNMjUwNTAxMTY1NjAzWjAYMRYwFAYD VQQDEw02ODBhNmQyMy0wMzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7g1JmGNqJI0c5BZFG2TcPMQdnwUZYR7WX5qk1jrPk3fUvHxsMSP9dP72utB vY3YfaFQ7vX7KIqkNP77VPVmnk5/zFCfmDYVD5VV1SOAXTuQ3MIFBbRFIC0U3P7U SWtEQYO3hgPNx6XiBZxjE5pUXIbGZSM97DcvxPTcAmVzVCZjlhVvLlZkhBWhJXb2 doU9ZBhBzL8GtBzGEBujJabGGbW7Ee3RaeQ+Gi/LYsohwHCrLmv9+h3+EzkGPEe4 vEyY9AyP+9EHo/SD5zIgHcsVqk2pEkTnaFRINpkDv6rAMdaTm6NFU8zQCNDA69Uz P82hT2IvM9wa/XbZIcg2SJjDFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSL7c5a 9DryL2oOLF564IZgQj6NMB8GA1UdIwQYMBaAFK+wjW9+l3hbbzEXHvguMbsdBuLj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS9GQUY2RkQ3ODcx RTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVGdHZNUmNlLUM0eHV4MEc0 dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3Q05iMzZYZUZ0dk1SY2UtQzR4dXgwRzR1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0IxNS9GQUY2RkQ3ODcxRTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVG dHZNUmNlLUM0eHV4MEc0dU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvLCfhBdz8PsfoG6tCvxRVjH6iG0PBzJMz3V2tEKi8tgUA6ooBvsGp wINxlWd5Xnvbs6OqDrkrwUb+X9/qUBl60Dwkw+hQ8NndVAbeEmjHm/IMccoukk6L iPJN/xIfF6ZAIvL/wKTZPG0yqMmP+CBTEr/ZEmWlcGp3P89jRT9gmPix/sd57ibG UydRNCum9smG3mf8GZ52LuEcm5JIYot6PlcA8Wd8K0Isq/DZUCtrPFoKt5PqpxCs sYtY1OuP5NdXt4/Y0xI9VOBXhfmWiaBSJI2BZb0SFjBtv1df4GemZ4yE++Wr9UrT 4XjCoYWjafnoAuO36W0iQ9Jm1LepOebn -----END CERTIFICATE-----Generated at Sat Apr 26 16:32:53 2025 by rpki-client