$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft File: 7DQrlR3sel8OPnf5LMsf-yHhmlg.mft (raw, json) Hash identifier: 8e/t8/1xk1tKU8YLIZae1geQ2afWputCGcCDWFEt1z0= Subject key identifier: BF:1E:8F:C9:BF:7F:98:B5:38:7C:AC:50:A4:8C:58:E3:29:78:A8:BC Authority key identifier: EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 Certificate issuer: /CN=A91D40A4/serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Certificate serial: 03BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft Manifest number: 03B4 Signing time: Fri 25 Apr 2025 00:27:52 +0000 Manifest this update: Fri 25 Apr 2025 00:27:51 +0000 Manifest next update: Fri 02 May 2025 00:27:51 +0000 Files and hashes: 1: 7DQrlR3sel8OPnf5LMsf-yHhmlg.crl (hash: vp1zscRVI09Ymk3Wl06cl/iqs9RbGkya2iin6npgR2k=) 2: 873831CC8A7E11EC8FD93687C4F9AE02.roa (hash: cu8wLYBxbGfRWUV9Ye7bg1eRpOLSnTYKjsEY2WUidXM=) 3: 867F3CF88A7E11EC8FD93687C4F9AE02.roa (hash: EDOt0WGEdnT9+FI7T0IrxIQR/uJ+FjweoW8YpKMKOQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:27:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 956 (0x3bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D40A4, serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Validity Not Before: Apr 25 00:27:51 2025 GMT Not After : May 2 00:27:51 2025 GMT Subject: CN=680ad707-d868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:be:a1:8f:97:e2:cc:d8:e3:ce:8f:00:ee:ce: 7c:3b:f6:f5:c5:fb:db:14:1d:92:6f:6b:b4:75:01: ee:c6:f2:f5:09:29:e6:2c:38:08:dc:38:74:f2:8a: 99:d6:cd:84:ec:c0:47:fd:b9:09:e3:7e:25:c1:dc: 6a:e0:0e:a6:a0:78:2f:c9:19:98:56:1a:c4:9f:dc: 91:f3:82:72:1e:51:78:a3:af:ff:63:2b:07:8c:67: b6:93:e7:42:4e:2b:45:45:c9:f4:be:76:6d:2a:61: d2:af:20:9a:5c:a3:17:b3:79:77:37:70:50:1f:1e: 0c:b6:01:4a:8e:8e:cc:cd:a1:d7:70:71:43:31:a0: d7:57:6d:13:a5:e2:da:1c:99:1e:3f:7b:d6:b3:15: aa:58:aa:df:84:bb:a6:6a:d6:32:74:e1:fb:c4:9d: 25:c8:6c:43:d3:bb:7d:9e:1c:77:a4:c8:02:fc:84: 64:ef:32:1b:d8:f3:28:68:b5:dd:af:5c:c4:1c:1c: 81:21:b7:15:41:58:dc:ee:44:4e:22:c3:13:c9:71: db:3c:f4:fd:41:f6:05:99:9e:6c:bc:d6:ef:bc:54: 9e:50:f5:29:58:2a:69:d7:58:ac:20:2c:49:24:2c: f8:38:fa:a7:37:32:d3:91:df:06:65:b2:f0:ca:d4: cc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1E:8F:C9:BF:7F:98:B5:38:7C:AC:50:A4:8C:58:E3:29:78:A8:BC X509v3 Authority Key Identifier: keyid:EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:79:8a:94:d2:6a:a4:c4:65:60:e5:dc:ea:1f:b9:d5:81:0f: be:e2:e7:d5:a3:84:89:56:af:00:95:93:e4:f2:d7:fb:05:27: a3:ae:14:57:e3:da:b4:b5:af:55:60:3d:7e:ae:5d:a1:64:53: a1:f0:12:25:94:e0:e9:7e:be:22:0d:49:52:fb:7d:4e:33:fb: 42:88:c2:e3:d6:21:86:08:f4:26:3c:e6:a6:16:d2:d7:07:5f: d6:33:55:ee:38:2b:a5:64:1f:9d:18:cd:6d:69:31:ce:92:05: a9:84:22:0c:7d:a2:9e:c0:70:da:fa:5a:d9:d1:4e:54:f5:90: c8:d5:e3:ba:9e:cc:50:3e:91:4a:7d:2c:26:ac:04:e3:6d:99: 7e:dc:b3:13:5f:19:17:47:a1:de:4d:d6:c5:b5:c9:cf:67:e9: 1a:36:54:88:93:9f:68:02:b7:34:9c:49:22:e9:85:d8:71:9d: c8:da:78:c3:8f:8a:79:b1:83:d5:42:49:16:58:7d:56:2c:05: 7f:58:51:54:f1:05:f4:87:6b:fb:e9:82:2f:9f:47:b5:c0:fe: 05:c3:79:93:71:04:84:3d:d7:66:ab:d7:4f:38:c2:3b:07:58: 12:bc:02:18:e3:cd:e1:c3:2f:35:48:40:d2:cb:a8:f6:d1:b7: b3:0e:4f:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQwQTQxMTAvBgNVBAUTKEVDMzQyQjk1MURFQzdBNUYwRTNFNzdGOTJDQ0IxRkZC MjFFMTlBNTgwHhcNMjUwNDI1MDAyNzUxWhcNMjUwNTAyMDAyNzUxWjAYMRYwFAYD VQQDEw02ODBhZDcwNy1kODY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt76hj5fizNjjzo8A7s58O/b1xfvbFB2Sb2u0dQHuxvL1CSnmLDgI3Dh08oqZ 1s2E7MBH/bkJ434lwdxq4A6moHgvyRmYVhrEn9yR84JyHlF4o6//YysHjGe2k+dC TitFRcn0vnZtKmHSryCaXKMXs3l3N3BQHx4MtgFKjo7MzaHXcHFDMaDXV20TpeLa HJkeP3vWsxWqWKrfhLumatYydOH7xJ0lyGxD07t9nhx3pMgC/IRk7zIb2PMoaLXd r1zEHByBIbcVQVjc7kROIsMTyXHbPPT9QfYFmZ5svNbvvFSeUPUpWCpp11isICxJ JCz4OPqnNzLTkd8GZbLwytTMWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8ej8m/ f5i1OHysUKSMWOMpeKi8MB8GA1UdIwQYMBaAFOw0K5Ud7HpfDj53+SzLH/sh4ZpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDBBNC8yOUY0QkFGQzhB N0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2VsOE9QbmY1TE1zZi15SGht bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEUXJsUjNzZWw4T1BuZjVMTXNmLXlIaG1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDBBNC8yOUY0QkFGQzhBN0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2Vs OE9QbmY1TE1zZi15SGhtbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCReYqU0mqkxGVg5dzqH7nVgQ++4ufVo4SJVq8AlZPk8tf7BSejrhRX 49q0ta9VYD1+rl2hZFOh8BIllODpfr4iDUlS+31OM/tCiMLj1iGGCPQmPOamFtLX B1/WM1XuOCulZB+dGM1taTHOkgWphCIMfaKewHDa+lrZ0U5U9ZDI1eO6nsxQPpFK fSwmrATjbZl+3LMTXxkXR6HeTdbFtcnPZ+kaNlSIk59oArc0nEki6YXYcZ3I2njD j4p5sYPVQkkWWH1WLAV/WFFU8QX0h2v76YIvn0e1wP4Fw3mTcQSEPddmq9dPOMI7 B1gSvAIY483hwy81SEDSy6j20bezDk+q -----END CERTIFICATE-----Generated at Sat Apr 26 14:01:34 2025 by rpki-client