$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft File: r7CNb36XeFtvMRce-C4xux0G4uM.mft (raw, json) Hash identifier: 5xhTNZTbK+6W5gJgxR4j2MvY+tWcCLf1PTnAlX3hffg= Subject key identifier: 30:D3:25:C7:8C:A0:A9:6D:EB:82:D7:08:DB:F6:FB:40:CA:49:28:46 Authority key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 Certificate issuer: /CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Certificate serial: 1469 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft Manifest number: 144D Signing time: Mon 28 Apr 2025 17:08:54 +0000 Manifest this update: Mon 28 Apr 2025 17:08:53 +0000 Manifest next update: Mon 05 May 2025 17:08:53 +0000 Files and hashes: 1: r7CNb36XeFtvMRce-C4xux0G4uM.crl (hash: SV4xpAR38FNLECLPNHaJcOC6fKCN8PRcFx06fnlV/xM=) 2: 4EED8CBE029911EF96760924C4F9AE02.roa (hash: nVELww+GgEMji9swA1+nobEPfsSUHSJgjMoFUJZQMqM=) 3: CC2A0136F58C11EEB142585CC4F9AE02.roa (hash: LcIUX4YJ29+aJV1+YxaPbbSzmp98riAGflfyDE/z+VQ=) 4: A0375A56964511EF9481CA74C4F9AE02.roa (hash: kEtEyPhK0r3E14+zMjIhhxmIsJuQscWu62026oNy4Ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:08:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5225 (0x1469) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B15, serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Validity Not Before: Apr 28 17:08:53 2025 GMT Not After : May 5 17:08:53 2025 GMT Subject: CN=680fb625-6dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8d:83:6d:0f:98:46:62:f2:2f:39:fc:84:82: 81:14:23:9c:42:3f:04:e6:13:8d:cf:16:8c:f7:8f: 7f:ab:37:02:2c:0f:3b:f5:1d:42:ae:dc:37:3f:2b: 12:7b:cc:5f:12:c5:68:36:aa:79:46:73:ad:db:f4: 46:d0:f7:6c:81:b0:5b:fc:0b:cd:bd:1f:78:93:b1: 51:8b:90:ac:87:55:29:43:87:a1:a6:e5:1b:82:23: 32:9c:57:ce:c6:aa:29:58:3c:2a:7e:75:a3:f9:04: 90:9d:73:ae:0b:3b:51:9f:9a:9c:85:17:be:98:ae: f2:d2:41:78:70:4e:1a:83:ea:51:2e:f6:d1:64:fe: bf:3a:d7:68:28:6d:76:4b:5f:1d:9f:69:12:63:2e: ca:02:d4:ae:b9:16:da:31:f9:6e:56:05:e6:60:7e: d2:84:74:70:64:0c:62:d6:a7:83:b8:c4:dd:52:96: f8:39:fb:9a:bc:14:95:37:11:70:8c:aa:08:4a:fc: c8:44:7d:d4:4e:58:ab:1a:94:3b:f9:82:e3:06:50: b5:2d:76:9b:2c:42:e3:18:23:6e:34:05:d7:c8:f0: d9:04:15:1b:ae:42:ea:ae:47:77:61:40:cf:54:6b: b0:99:94:70:84:2b:61:ce:19:c3:e9:b6:15:8c:d3: 44:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D3:25:C7:8C:A0:A9:6D:EB:82:D7:08:DB:F6:FB:40:CA:49:28:46 X509v3 Authority Key Identifier: keyid:AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:80:e6:e2:54:e0:80:a6:2e:4a:ee:21:d5:5f:6b:c7:06:56: b5:3d:7a:7f:c5:62:db:66:84:9a:f3:9e:9c:3d:b7:5a:15:7f: f7:9f:ac:18:9d:c4:72:81:1f:67:b3:16:92:fd:eb:07:00:b2: 1e:6a:de:5a:f5:72:d5:43:77:59:ff:db:30:66:69:92:66:2b: 3e:56:19:ad:8c:ab:b5:3e:59:91:e0:bb:e4:38:68:b6:1e:46: b9:44:49:37:d3:01:5f:aa:cb:0b:e7:5f:a8:e3:e5:80:58:94: 5c:1c:34:9f:16:5e:f5:88:ac:60:6e:ba:a3:c5:d8:00:47:e7: 88:82:9d:88:6e:6d:8c:41:24:db:19:81:3a:74:1e:9b:b8:0e: 65:16:45:01:fd:7c:f5:e7:4c:d3:a4:e0:51:8a:c3:a7:ec:92: 1a:5c:24:e3:b4:a3:5a:59:66:7d:67:22:04:37:30:74:70:e2: 61:3b:70:7c:cc:39:e2:33:5a:4d:fe:9c:4c:09:21:f8:52:ca: dd:e0:5f:3a:2e:d5:65:e1:4a:e4:60:d5:bd:c6:88:20:c7:ae: 8c:cd:b7:0d:7a:8e:94:05:51:06:62:a0:e7:bc:8a:e8:65:dd: 19:44:9d:9c:25:61:9b:fd:62:f6:94:bd:a2:29:f5:19:53:ba: 06:a0:55:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCMTUxMTAvBgNVBAUTKEFGQjA4RDZGN0U5Nzc4NUI2RjMxMTcxRUY4MkUzMUJC MUQwNkUyRTMwHhcNMjUwNDI4MTcwODUzWhcNMjUwNTA1MTcwODUzWjAYMRYwFAYD VQQDEw02ODBmYjYyNS02ZGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArI2DbQ+YRmLyLzn8hIKBFCOcQj8E5hONzxaM949/qzcCLA879R1Crtw3PysS e8xfEsVoNqp5RnOt2/RG0PdsgbBb/AvNvR94k7FRi5Csh1UpQ4ehpuUbgiMynFfO xqopWDwqfnWj+QSQnXOuCztRn5qchRe+mK7y0kF4cE4ag+pRLvbRZP6/OtdoKG12 S18dn2kSYy7KAtSuuRbaMfluVgXmYH7ShHRwZAxi1qeDuMTdUpb4OfuavBSVNxFw jKoISvzIRH3UTlirGpQ7+YLjBlC1LXabLELjGCNuNAXXyPDZBBUbrkLqrkd3YUDP VGuwmZRwhCthzhnD6bYVjNNEVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDTJceM oKlt64LXCNv2+0DKSShGMB8GA1UdIwQYMBaAFK+wjW9+l3hbbzEXHvguMbsdBuLj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS9GQUY2RkQ3ODcx RTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVGdHZNUmNlLUM0eHV4MEc0 dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3Q05iMzZYZUZ0dk1SY2UtQzR4dXgwRzR1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0IxNS9GQUY2RkQ3ODcxRTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVG dHZNUmNlLUM0eHV4MEc0dU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXgObiVOCApi5K7iHVX2vHBla1PXp/xWLbZoSa856cPbdaFX/3n6wY ncRygR9nsxaS/esHALIeat5a9XLVQ3dZ/9swZmmSZis+VhmtjKu1PlmR4LvkOGi2 Hka5REk30wFfqssL51+o4+WAWJRcHDSfFl71iKxgbrqjxdgAR+eIgp2Ibm2MQSTb GYE6dB6buA5lFkUB/Xz150zTpOBRisOn7JIaXCTjtKNaWWZ9ZyIENzB0cOJhO3B8 zDniM1pN/pxMCSH4Usrd4F86LtVl4UrkYNW9xoggx66MzbcNeo6UBVEGYqDnvIro Zd0ZRJ2cJWGb/WL2lL2iKfUZU7oGoFWE -----END CERTIFICATE-----Generated at Tue Apr 29 10:34:44 2025 by rpki-client