$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft File: Y7ooHVb6T-blNbEl4W34AdEvgJk.mft (raw, json) Hash identifier: +qEJt72cuBpTsW6bXhG8O/5+P/LWEBlT9TVzFaZpGy8= Subject key identifier: DB:76:35:D9:50:69:D9:A4:BA:D8:8D:04:77:07:DE:EC:8B:CE:DB:3E Authority key identifier: 63:BA:28:1D:56:FA:4F:E6:E5:35:B1:25:E1:6D:F8:01:D1:2F:80:99 Certificate issuer: /CN=A91ECBD9/serialNumber=63BA281D56FA4FE6E535B125E16DF801D12F8099 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7ooHVb6T-blNbEl4W34AdEvgJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft Manifest number: 7C Signing time: Fri 25 Apr 2025 06:02:34 +0000 Manifest this update: Fri 25 Apr 2025 06:02:33 +0000 Manifest next update: Fri 02 May 2025 06:02:33 +0000 Files and hashes: 1: Y7ooHVb6T-blNbEl4W34AdEvgJk.crl (hash: ujuK+47cwPgM3orsDeAYizzNruWA/RZjWN2mJ1ZKL8s=) 2: 4E67247C681911EFA2640B43C4F9AE02.roa (hash: ucm8jiY7/TEfoe7vYt6Xy9WiiLrmTGt3Yko/V2TTwzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.crl rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7ooHVb6T-blNbEl4W34AdEvgJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECBD9, serialNumber=63BA281D56FA4FE6E535B125E16DF801D12F8099 Validity Not Before: Apr 25 06:02:33 2025 GMT Not After : May 2 06:02:33 2025 GMT Subject: CN=680b257a-d59f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bc:28:fe:ba:bc:5a:0b:05:60:75:12:a1:31: 2b:8e:aa:e4:47:3f:99:81:f7:b3:47:65:60:97:4b: 4e:c5:e1:79:b5:5e:f4:e6:99:37:63:38:e7:76:44: 4e:ed:03:27:68:90:13:0d:cd:19:a8:d4:5c:cb:20: c0:cd:ee:1a:d5:17:69:f5:30:83:ba:9a:7a:93:dd: 53:97:a0:b1:91:04:a2:da:ab:9f:02:68:14:5b:55: bc:82:77:ea:65:92:34:4c:55:b7:f9:6c:27:52:62: 64:73:b8:5d:62:59:0e:8f:32:aa:53:ce:77:1d:41: 1d:5d:cc:31:23:13:ce:f1:72:01:65:54:ce:e4:14: d7:0d:8f:92:14:8b:c6:5f:69:dd:5d:bd:dd:1b:a1: 22:7d:24:97:48:dc:1f:0e:bc:76:01:a2:aa:86:6c: 8e:ce:3f:92:25:44:0f:15:2c:84:64:65:13:fd:ba: 7a:e6:ef:f7:b4:95:da:3d:82:ea:f2:09:21:93:25: 56:1d:56:6e:9e:48:87:94:94:14:96:d9:df:af:9b: a8:c3:0e:4b:80:95:05:41:6e:a8:fd:11:08:b1:9d: 89:b4:4c:55:40:a2:da:dc:43:97:83:c9:1b:32:10: 9b:ed:94:48:a4:39:5d:f0:42:32:35:7c:71:db:71: ef:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:76:35:D9:50:69:D9:A4:BA:D8:8D:04:77:07:DE:EC:8B:CE:DB:3E X509v3 Authority Key Identifier: keyid:63:BA:28:1D:56:FA:4F:E6:E5:35:B1:25:E1:6D:F8:01:D1:2F:80:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7ooHVb6T-blNbEl4W34AdEvgJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:f1:94:a3:21:63:3b:8f:d6:d2:5c:f5:f3:7e:26:af:a7:6c: 1c:ee:af:35:a9:0d:56:79:da:cc:5c:34:38:ed:1f:67:94:a0: fe:fb:76:8e:30:8e:96:c6:3d:f0:fe:4c:b8:a7:b8:eb:b8:0b: 32:cc:bb:bd:62:e1:48:40:42:a2:d7:04:18:39:b4:75:76:d4: 6d:55:03:1b:9f:38:3b:a4:cd:6e:6a:9c:57:89:44:40:3b:44: a5:60:68:ce:aa:d5:bf:f3:72:b6:87:bf:06:76:05:09:47:2e: e1:4d:87:f8:77:ca:7c:3b:20:59:1d:68:a5:ab:ce:1b:a1:44: e3:18:92:90:31:89:92:8b:2b:d7:35:24:65:0a:6f:27:7a:4c: d9:cf:04:6c:d2:86:22:5a:0c:e6:b7:da:05:bb:2b:f3:9c:7b: a8:3d:b4:a1:d8:96:63:70:15:52:ff:a7:19:38:e0:71:20:60: 54:41:2a:d6:20:d2:6b:32:ad:da:1e:f7:e1:2c:47:b5:f6:23: 67:ea:0b:c0:cb:a2:92:c2:39:3f:20:e3:02:96:48:37:2d:62: 1d:93:e4:e7:95:09:c2:1a:91:1c:d0:f8:a1:90:f1:46:b9:f6: 8d:c3:f5:2a:b6:5b:d9:ff:0c:4e:eb:c9:2c:47:97:b3:70:b0: ce:88:9e:9e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF Q0JEOTExMC8GA1UEBRMoNjNCQTI4MUQ1NkZBNEZFNkU1MzVCMTI1RTE2REY4MDFE MTJGODA5OTAeFw0yNTA0MjUwNjAyMzNaFw0yNTA1MDIwNjAyMzNaMBgxFjAUBgNV BAMTDTY4MGIyNTdhLWQ1OWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCvCj+urxaCwVgdRKhMSuOquRHP5mB97NHZWCXS07F4Xm1XvTmmTdjOOd2RE7t AydokBMNzRmo1FzLIMDN7hrVF2n1MIO6mnqT3VOXoLGRBKLaq58CaBRbVbyCd+pl kjRMVbf5bCdSYmRzuF1iWQ6PMqpTzncdQR1dzDEjE87xcgFlVM7kFNcNj5IUi8Zf ad1dvd0boSJ9JJdI3B8OvHYBoqqGbI7OP5IlRA8VLIRkZRP9unrm7/e0ldo9gury CSGTJVYdVm6eSIeUlBSW2d+vm6jDDkuAlQVBbqj9EQixnYm0TFVAotrcQ5eDyRsy EJvtlEikOV3wQjI1fHHbce+bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU23Y12VBp 2aS62I0Edwfe7IvO2z4wHwYDVR0jBBgwFoAUY7ooHVb6T+blNbEl4W34AdEvgJkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDQkQ5L0UwNDZCMEI2Njgx ODExRUY5QTUzRTkxOEM0RjlBRTAyL1k3b29IVmI2VC1ibE5iRWw0VzM0QWRFdmdK ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWTdvb0hWYjZULWJsTmJFbDRXMzRBZEV2Z0prLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD QkQ5L0UwNDZCMEI2NjgxODExRUY5QTUzRTkxOEM0RjlBRTAyL1k3b29IVmI2VC1i bE5iRWw0VzM0QWRFdmdKay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFLxlKMhYzuP1tJc9fN+Jq+nbBzurzWpDVZ52sxcNDjtH2eUoP77do4w jpbGPfD+TLinuOu4CzLMu71i4UhAQqLXBBg5tHV21G1VAxufODukzW5qnFeJREA7 RKVgaM6q1b/zcraHvwZ2BQlHLuFNh/h3ynw7IFkdaKWrzhuhROMYkpAxiZKLK9c1 JGUKbyd6TNnPBGzShiJaDOa32gW7K/Oce6g9tKHYlmNwFVL/pxk44HEgYFRBKtYg 0msyrdoe9+EsR7X2I2fqC8DLopLCOT8g4wKWSDctYh2T5OeVCcIakRzQ+KGQ8Ua5 9o3D9Sq2W9n/DE7rySxHl7NwsM6Inp4= -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:38 2025 by rpki-client