$ rpki-client -vvf rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft File: 7unhDCkeVsgtdwcgELDlgAg_5yk.mft (raw, json) Hash identifier: TykaIt5iI2eTbbTDFgjZ6zuEMMQmpU2EmB7nUZXi97A= Subject key identifier: 88:F7:E0:48:B4:61:69:74:6C:13:18:99:C6:37:99:5A:A0:8E:D9:08 Authority key identifier: EE:E9:E1:0C:29:1E:56:C8:2D:77:07:20:10:B0:E5:80:08:3F:E7:29 Certificate issuer: /CN=A91E82F0/serialNumber=EEE9E10C291E56C82D77072010B0E580083FE729 Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft Manifest number: 010F Signing time: Fri 25 Apr 2025 03:58:31 +0000 Manifest this update: Fri 25 Apr 2025 03:58:30 +0000 Manifest next update: Fri 02 May 2025 03:58:30 +0000 Files and hashes: 1: 7unhDCkeVsgtdwcgELDlgAg_5yk.crl (hash: Y3mEvWOyerraeKdfLn6gq7cG3MrAQ1g5Q410BmJ1MSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.crl rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E82F0, serialNumber=EEE9E10C291E56C82D77072010B0E580083FE729 Validity Not Before: Apr 25 03:58:30 2025 GMT Not After : May 2 03:58:30 2025 GMT Subject: CN=680b0866-0bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f4:75:2c:b4:14:f1:73:3e:dc:06:1f:a9:e6: 90:ec:28:e2:c4:0d:ce:ae:aa:a0:05:47:af:6e:7b: ba:43:41:d6:3a:4c:4b:3c:d7:ef:69:1e:48:82:d6: 9b:4a:aa:03:28:1e:f8:e7:0a:00:78:71:20:12:ca: d3:63:c9:8e:fb:c4:3c:93:aa:61:7c:fd:fb:4a:53: 6d:2f:f0:d5:28:08:8b:33:21:ce:b8:84:e5:93:12: e8:2e:77:02:f4:e3:0b:be:5b:a1:6a:33:2c:53:e6: 85:8e:18:30:5c:cd:a7:51:4b:c5:df:0d:39:e2:91: 0b:9d:e9:7a:8a:93:1d:07:57:b1:50:7b:fb:9b:2b: 04:82:37:97:85:ad:19:1e:f6:f8:21:5b:ea:f5:80: 19:61:d6:3e:95:72:d6:54:e3:62:ab:c6:f8:13:2e: bf:19:1b:e8:99:75:c7:c7:a4:aa:77:ba:53:84:76: ac:ec:88:b5:f8:f0:7b:0f:7e:56:68:af:99:08:95: 4e:d3:08:56:6b:5d:6c:76:ae:f0:77:d5:78:56:7c: d4:39:a5:0a:3e:42:44:c3:2b:bf:6e:c1:bb:90:e2: c3:fe:a4:f5:7f:ec:e6:a8:9b:be:57:d0:79:1c:49: 1b:5e:16:b9:e2:a7:3b:99:d9:80:c0:82:32:27:65: b3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F7:E0:48:B4:61:69:74:6C:13:18:99:C6:37:99:5A:A0:8E:D9:08 X509v3 Authority Key Identifier: keyid:EE:E9:E1:0C:29:1E:56:C8:2D:77:07:20:10:B0:E5:80:08:3F:E7:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:5a:22:7f:68:3f:91:12:fe:e8:79:cc:ca:4d:3d:8d:8a:9d: 64:28:63:60:55:b1:ac:fa:51:29:71:65:a1:84:3f:3e:b1:84: 1f:52:c1:dd:fb:75:3f:55:81:38:d0:5b:bd:08:0a:c7:57:df: 55:d9:7e:b7:63:71:34:cb:0d:54:60:da:76:77:80:7d:7b:b2: 0f:4c:cd:c4:44:04:63:87:71:70:e2:a9:12:c1:26:ac:d7:97: 67:ed:2a:03:e9:ab:cb:db:be:98:22:2a:a6:b1:4f:9c:77:0c: e0:c9:19:f8:c7:4b:40:28:e2:23:4e:bc:97:3f:53:27:5b:f7: b3:b0:25:9f:e4:d9:71:c7:d4:ea:85:5a:4f:d6:98:1d:7c:98: cc:93:88:eb:47:35:6f:e0:cd:c5:8c:95:b9:ed:dc:21:86:b4: 67:57:f2:c1:7f:60:c6:33:3a:35:8d:c1:9a:97:41:00:c4:24: 61:1c:83:58:0f:32:9f:1f:3d:16:a2:06:f7:c6:ed:7b:50:e7: ab:58:3e:a0:13:79:08:ba:77:64:52:85:9d:2a:80:d1:57:fb: 59:d4:c3:03:22:c7:66:5d:a9:f1:ac:7e:65:6f:5c:cb:6d:40: 8b:da:ee:94:d3:b8:a9:bd:1f:ce:eb:ff:bf:4f:c2:1d:c6:a6: 7a:db:93:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgyRjAxMTAvBgNVBAUTKEVFRTlFMTBDMjkxRTU2QzgyRDc3MDcyMDEwQjBFNTgw MDgzRkU3MjkwHhcNMjUwNDI1MDM1ODMwWhcNMjUwNTAyMDM1ODMwWjAYMRYwFAYD VQQDEw02ODBiMDg2Ni0wYmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAofR1LLQU8XM+3AYfqeaQ7CjixA3OrqqgBUevbnu6Q0HWOkxLPNfvaR5Igtab SqoDKB745woAeHEgEsrTY8mO+8Q8k6phfP37SlNtL/DVKAiLMyHOuITlkxLoLncC 9OMLvluhajMsU+aFjhgwXM2nUUvF3w054pELnel6ipMdB1exUHv7mysEgjeXha0Z Hvb4IVvq9YAZYdY+lXLWVONiq8b4Ey6/GRvomXXHx6Sqd7pThHas7Ii1+PB7D35W aK+ZCJVO0whWa11sdq7wd9V4VnzUOaUKPkJEwyu/bsG7kOLD/qT1f+zmqJu+V9B5 HEkbXha54qc7mdmAwIIyJ2WzuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIj34Ei0 YWl0bBMYmcY3mVqgjtkIMB8GA1UdIwQYMBaAFO7p4QwpHlbILXcHIBCw5YAIP+cp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODJGMC81QzU3RTVDMDgy ODMxMUVFOTBDODgxNkFDNEY5QUUwMi83dW5oRENrZVZzZ3Rkd2NnRUxEbGdBZ181 eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd1bmhEQ2tlVnNndGR3Y2dFTERsZ0FnXzV5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODJGMC81QzU3RTVDMDgyODMxMUVFOTBDODgxNkFDNEY5QUUwMi83dW5oRENrZVZz Z3Rkd2NnRUxEbGdBZ181eWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcWiJ/aD+REv7oeczKTT2Nip1kKGNgVbGs+lEpcWWhhD8+sYQfUsHd +3U/VYE40Fu9CArHV99V2X63Y3E0yw1UYNp2d4B9e7IPTM3ERARjh3Fw4qkSwSas 15dn7SoD6avL276YIiqmsU+cdwzgyRn4x0tAKOIjTryXP1MnW/ezsCWf5Nlxx9Tq hVpP1pgdfJjMk4jrRzVv4M3FjJW57dwhhrRnV/LBf2DGMzo1jcGal0EAxCRhHINY DzKfHz0Wogb3xu17UOerWD6gE3kIundkUoWdKoDRV/tZ1MMDIsdmXanxrH5lb1zL bUCL2u6U07ipvR/O6/+/T8IdxqZ625M9 -----END CERTIFICATE-----Generated at Sat Apr 26 14:13:00 2025 by rpki-client