$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft File: fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft (raw, json) Hash identifier: syE1Nol/7t2O5IlhankMeZLmh/okqvGwet6Li1zUNnk= Subject key identifier: 18:F6:7C:51:EC:26:FD:71:61:0A:4E:42:49:8B:7D:25:97:80:46:E1 Authority key identifier: 7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B Certificate issuer: /CN=A91CFCF8/serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B Certificate serial: 03DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft Manifest number: 03C7 Signing time: Fri 25 Apr 2025 00:28:08 +0000 Manifest this update: Fri 25 Apr 2025 00:28:08 +0000 Manifest next update: Fri 02 May 2025 00:28:07 +0000 Files and hashes: 1: fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl (hash: G8URXZUfo4/n8MyNphvFgS0OHjW6g99gUdOLPQCnw6M=) 2: 13A285FAB19A11EF8A0E4356C4F9AE02.roa (hash: 0AdbgXl2PM0dKWxojYYhrZuTuIt1BCoahGNDArgAJi4=) 3: C76E25524B1711EE8CE6C778C4F9AE02.roa (hash: HsErDDItwf5JjFC0N3vp/RvWt4W7KbQd/xCB8B2lvo4=) 4: 844FB44036A211EEAE901A49C4F9AE02.roa (hash: GNVfwfyUifybt9+TxmCqpnk4LFqX/6GaqA3Bsi9KVRs=) 5: DC32812203E911F099ED6083C4F9AE02.roa (hash: J4XsQqIXXNrH3AjPKCK2loEl+rnRQyBlEzKkOSyTXKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:28:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 991 (0x3df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFCF8, serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B Validity Not Before: Apr 25 00:28:08 2025 GMT Not After : May 2 00:28:07 2025 GMT Subject: CN=680ad718-46ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:15:6b:7f:42:d8:9c:42:83:77:54:08:e1:8c: f1:40:7d:48:d4:3f:46:96:b0:a4:57:0a:49:1e:ff: d7:53:02:14:8c:3f:d1:cc:07:7a:50:9c:b5:e7:32: 1e:fe:82:b0:eb:49:43:d2:42:98:85:1e:90:bd:a0: a8:b3:7e:62:3b:4b:27:bd:4a:9c:93:ab:80:bc:6a: 62:42:d8:6d:2a:06:94:09:21:2c:01:27:ad:65:16: f1:b6:46:f0:20:ee:99:f3:de:3d:da:4b:66:e9:eb: 5a:51:7c:69:d8:22:c0:06:74:72:1e:9a:d0:f4:07: 53:69:44:d1:23:e3:98:4a:72:8b:8f:c1:24:0d:46: 4a:6e:c1:fa:62:98:f0:2c:08:ae:2e:c7:7a:96:22: fb:b3:cf:2a:48:e8:6b:01:d4:3d:ee:e8:ad:7e:52: 96:58:27:38:c0:d2:d5:10:5f:40:8a:5f:dd:e2:9e: 51:b1:5b:fe:bd:b3:77:79:0e:2f:88:aa:c6:1e:69: cc:7d:97:5e:a8:f2:ae:5b:f1:f5:8b:4e:ef:96:34: d5:6c:21:85:35:38:51:c9:e1:af:31:5f:bd:da:49: ae:0e:c7:a4:1c:97:9d:64:a5:5c:b5:5d:08:1f:bb: d2:56:3b:e1:ee:91:06:4d:70:b0:b8:11:5e:40:7f: 1b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F6:7C:51:EC:26:FD:71:61:0A:4E:42:49:8B:7D:25:97:80:46:E1 X509v3 Authority Key Identifier: keyid:7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:d3:47:69:50:12:56:dd:46:d7:0a:e2:f5:b2:21:18:1d:61: 9e:75:9a:ec:87:c4:b2:8f:28:3d:04:0d:f2:75:f8:8c:60:6a: 6c:2e:23:77:5e:c4:01:b6:5a:66:c0:c9:dd:7d:fb:fb:32:85: 5c:78:18:ea:6a:49:ee:49:e9:f0:d6:9a:6d:2a:b0:d0:20:9b: f6:71:4d:37:9f:bd:59:50:7d:d9:45:de:34:1f:0f:f3:58:34: 1e:13:9a:8f:22:2d:9e:d1:4a:f7:b7:de:17:68:35:7e:f9:57: 22:0c:40:1d:60:dd:8e:39:29:6f:b9:3f:e9:16:af:dd:20:5c: 63:ba:bf:c7:d6:c4:0f:b6:00:b7:ee:5a:5c:12:31:28:85:bc: 97:d3:b0:56:76:1c:81:62:ea:0c:54:37:98:bf:40:5e:48:38: b8:d2:54:29:fa:85:b4:87:bf:f5:47:ca:20:3a:47:53:9a:50: d3:f2:82:6e:71:58:09:e5:ec:40:89:da:76:81:58:b7:12:98: 50:b4:99:b4:44:31:b7:53:17:80:1a:16:ba:fe:e0:9a:d1:27: 42:7f:55:d6:f2:13:86:0f:43:08:3a:ea:68:1c:9e:ef:07:d2: e4:2e:50:9f:16:aa:1a:31:a4:2d:a3:97:4c:8b:22:86:58:cc: d3:76:22:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDRjgxMTAvBgNVBAUTKDdDNUUwRERDNEY1ODY5NzQ3QjJBMzU4QzlCN0MwRjMx RThEOEREOEIwHhcNMjUwNDI1MDAyODA4WhcNMjUwNTAyMDAyODA3WjAYMRYwFAYD VQQDEw02ODBhZDcxOC00NmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhVrf0LYnEKDd1QI4YzxQH1I1D9GlrCkVwpJHv/XUwIUjD/RzAd6UJy15zIe /oKw60lD0kKYhR6QvaCos35iO0snvUqck6uAvGpiQthtKgaUCSEsASetZRbxtkbw IO6Z89492ktm6etaUXxp2CLABnRyHprQ9AdTaUTRI+OYSnKLj8EkDUZKbsH6Ypjw LAiuLsd6liL7s88qSOhrAdQ97uitflKWWCc4wNLVEF9Ail/d4p5RsVv+vbN3eQ4v iKrGHmnMfZdeqPKuW/H1i07vljTVbCGFNThRyeGvMV+92kmuDsekHJedZKVctV0I H7vSVjvh7pEGTXCwuBFeQH8bxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBj2fFHs Jv1xYQpOQkmLfSWXgEbhMB8GA1UdIwQYMBaAFHxeDdxPWGl0eyo1jJt8DzHo2N2L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkNGOC8wNUU0QzJEMjhC MDIxMUVDODVGMkQwNzRDNEY5QUUwMi9mRjROM0U5WWFYUjdLaldNbTN3UE1lalkz WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGNE4zRTlZYVhSN0tqV01tM3dQTWVqWTNZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkNGOC8wNUU0QzJEMjhCMDIxMUVDODVGMkQwNzRDNEY5QUUwMi9mRjROM0U5WWFY UjdLaldNbTN3UE1lalkzWXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk00dpUBJW3UbXCuL1siEYHWGedZrsh8Syjyg9BA3ydfiMYGpsLiN3 XsQBtlpmwMndffv7MoVceBjqaknuSenw1pptKrDQIJv2cU03n71ZUH3ZRd40Hw/z WDQeE5qPIi2e0Ur3t94XaDV++VciDEAdYN2OOSlvuT/pFq/dIFxjur/H1sQPtgC3 7lpcEjEohbyX07BWdhyBYuoMVDeYv0BeSDi40lQp+oW0h7/1R8ogOkdTmlDT8oJu cVgJ5exAidp2gVi3EphQtJm0RDG3UxeAGha6/uCa0SdCf1XW8hOGD0MIOupoHJ7v B9LkLlCfFqoaMaQto5dMiyKGWMzTdiKa -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:29 2025 by rpki-client