$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft File: t7c-ibYhCBYJzWiasK73-vFIkmw.mft (raw, json) Hash identifier: D9B5KxVXjAljZv395HTFqRzjxjhlSTKS0mMCqL+DM00= Subject key identifier: 81:29:88:1B:03:AC:33:F8:69:2C:64:D1:40:26:5F:54:A7:A7:ED:C7 Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C Certificate issuer: /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Certificate serial: 262B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft Manifest number: 25A5 Signing time: Thu 24 Apr 2025 15:46:32 +0000 Manifest this update: Thu 24 Apr 2025 15:46:31 +0000 Manifest next update: Thu 01 May 2025 15:46:31 +0000 Files and hashes: 1: t7c-ibYhCBYJzWiasK73-vFIkmw.crl (hash: n/8bsCXyIsQBRbaADIlwVw0VeCmsmUMHwEUjnIuC3/Y=) 2: C9848396CD1711ED898C311FC4F9AE02.roa (hash: qiiCfqFkoE73eTUuEAWAlpV2z6GCWd7ckeeiGxi5A4g=) 3: AEEA3AE45BF611E984E25E54C4F9AE02.roa (hash: 8E9asmBCPDP2vspF6SfkqxDFa3zUOjR86wRCRSbANb0=) 4: BE402F16707F11EDBD17DD28C4F9AE02.roa (hash: OnnEcT/kT/2u+quSNu4e6UQE5EuukB+yT7k1rnta/B8=) 5: 4A479BB45A7911E998A6BE80C4F9AE02.roa (hash: 7w5j+dyzSy7t29HEAco9XLxp6MYZWlL3SdlWBrNw0GY=) 6: 1A982CC85A7C11E9A28B110DC4F9AE02.roa (hash: rA4hkIUyghNJGhY6y7qlDGe8Bvu+DeS8X5hf3GA24oo=) 7: 6223956A752011ED84F8CD3CC4F9AE02.roa (hash: qP1taxaDkzPIRlzYJOWEFK27iFdTzqw6PgRMtNqW7DY=) 8: 8F92939C46C711E9A5547325C4F9AE02.roa (hash: OMcalDpUDIv29WHDH5fBd3k9KPtvhZaxcTh0ykbSM4A=) 9: 3824883E72ED11EE812CE764C4F9AE02.roa (hash: SGtpHicj9fj12PvzOePuISsi6bvGYuZWMeMkAXSkEcc=) 10: BD9FC7C4707F11EDBD17DD28C4F9AE02.roa (hash: R4Hu6VZOII2INVF3IDAiNevmkDezpOVd/aGcqQwbfzw=) 11: FF145268EEAB11EFAD1FDC0CC4F9AE02.roa (hash: BUsQ5wBegaz/A2q7GTFIUHkDuT4PXl4dcLWVKVnr0mQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:46:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9771 (0x262b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1136, serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Validity Not Before: Apr 24 15:46:31 2025 GMT Not After : May 1 15:46:31 2025 GMT Subject: CN=680a5cd8-e861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d1:d5:7c:d8:5a:e1:ed:2d:c0:18:21:a6:e4: 36:00:98:4d:c7:11:77:7d:f1:fe:44:e8:1f:e9:72: 49:26:6b:f5:48:cf:01:dd:71:b7:1f:3c:f0:db:73: 80:36:7c:49:29:c0:35:ce:fe:4a:8c:78:62:00:5c: a8:10:c2:e5:25:78:44:97:a3:a5:1b:0d:44:8b:61: cd:1f:13:52:dc:3f:77:76:cf:99:82:2a:ad:4d:0c: 09:d3:d8:88:42:a2:7d:2a:1f:72:e6:c8:1c:7f:fa: 6b:0c:e6:99:e2:79:85:f8:ca:16:f9:c0:9d:99:7e: d2:64:64:d0:14:17:96:fa:21:63:27:3f:58:2f:33: aa:a2:db:c5:a1:1f:41:31:a4:21:b0:eb:b5:4b:48: bc:be:c1:7f:e3:25:bb:9f:96:de:4b:74:31:a7:6c: c4:27:08:d5:5b:6c:f4:30:79:04:13:4d:41:6f:53: 84:44:a8:e9:2c:01:f5:ef:43:74:17:36:ad:51:0b: fa:23:69:4c:65:30:20:6f:31:e8:5a:10:dd:97:9d: 35:cc:58:9e:d6:00:5f:06:aa:2d:ee:a6:8a:e9:2e: aa:f8:19:41:e7:eb:7a:40:c9:1d:1f:0a:2d:f4:3a: ea:c7:ff:16:6d:1b:cd:47:ec:b7:8e:ee:72:5b:6d: 16:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:29:88:1B:03:AC:33:F8:69:2C:64:D1:40:26:5F:54:A7:A7:ED:C7 X509v3 Authority Key Identifier: keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:fb:a3:5e:e8:71:6e:3b:89:08:bc:ee:86:af:df:da:91:07: 23:b0:f1:35:5d:eb:2a:e6:58:08:18:00:e3:05:82:e6:22:33: 08:24:98:cc:7e:c8:f4:49:35:02:fe:3e:35:0c:02:07:c1:de: ed:96:ae:d5:5d:cc:a7:d3:d0:a8:6a:5f:71:a6:ae:1a:47:df: fe:29:a4:55:d2:4f:f9:e9:9e:0b:2f:57:a1:fe:59:62:b3:5c: 66:59:56:92:70:82:8a:0e:11:91:13:dd:47:8b:fd:3b:a5:79: b4:fd:2a:5c:90:36:d7:f8:44:49:73:0c:e9:49:56:3d:63:f8: 1e:2b:df:ca:6f:90:ff:ae:6f:15:d7:93:90:bd:9c:a5:72:00: 8c:6f:78:d6:f3:58:8d:3f:9f:19:34:08:31:6e:a3:6e:63:be: 7c:f2:23:3c:e7:d4:8c:04:7c:d8:46:17:d9:76:32:e3:c1:70: 26:8f:29:77:aa:9a:7e:47:74:9b:b0:cc:d5:5c:89:00:c5:f3: 7c:4a:67:d7:5d:29:5b:67:ab:43:80:14:06:e3:40:ea:7e:c9: 78:fe:11:04:cb:6d:9c:fa:82:74:c8:f0:f1:f2:36:e4:9a:61: 56:a9:b2:f4:73:f3:cb:9f:ac:59:ee:39:5c:50:b1:3b:ff:49: f7:18:05:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMzYxMTAvBgNVBAUTKEI3QjczRTg5QjYyMTA4MTYwOUNENjg5QUIwQUVGN0ZB RjE0ODkyNkMwHhcNMjUwNDI0MTU0NjMxWhcNMjUwNTAxMTU0NjMxWjAYMRYwFAYD VQQDEw02ODBhNWNkOC1lODYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdHVfNha4e0twBghpuQ2AJhNxxF3ffH+ROgf6XJJJmv1SM8B3XG3Hzzw23OA NnxJKcA1zv5KjHhiAFyoEMLlJXhEl6OlGw1Ei2HNHxNS3D93ds+ZgiqtTQwJ09iI QqJ9Kh9y5sgcf/prDOaZ4nmF+MoW+cCdmX7SZGTQFBeW+iFjJz9YLzOqotvFoR9B MaQhsOu1S0i8vsF/4yW7n5beS3Qxp2zEJwjVW2z0MHkEE01Bb1OERKjpLAH170N0 FzatUQv6I2lMZTAgbzHoWhDdl501zFie1gBfBqot7qaK6S6q+BlB5+t6QMkdHwot 9Drqx/8WbRvNR+y3ju5yW20WYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIEpiBsD rDP4aSxk0UAmX1Snp+3HMB8GA1UdIwQYMBaAFLe3Pom2IQgWCc1omrCu9/rxSJJs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEzNi9DRjMyODFDODIx NUIxMUU1QTdCRjg5MEVDNEY5QUUwMi90N2MtaWJZaENCWUp6V2lhc0s3My12Rklr bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q3Yy1pYlloQ0JZSnpXaWFzSzczLXZGSWttdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTEzNi9DRjMyODFDODIxNUIxMUU1QTdCRjg5MEVDNEY5QUUwMi90N2MtaWJZaENC WUp6V2lhc0s3My12RklrbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAP+6Ne6HFuO4kIvO6Gr9/akQcjsPE1Xesq5lgIGADjBYLmIjMIJJjM fsj0STUC/j41DAIHwd7tlq7VXcyn09Coal9xpq4aR9/+KaRV0k/56Z4LL1eh/lli s1xmWVaScIKKDhGRE91Hi/07pXm0/SpckDbX+ERJcwzpSVY9Y/geK9/Kb5D/rm8V 15OQvZylcgCMb3jW81iNP58ZNAgxbqNuY7588iM859SMBHzYRhfZdjLjwXAmjyl3 qpp+R3SbsMzVXIkAxfN8SmfXXSlbZ6tDgBQG40Dqfsl4/hEEy22c+oJ0yPDx8jbk mmFWqbL0c/PLn6xZ7jlcULE7/0n3GAUM -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:47 2025 by rpki-client