$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft File: 7EhKUeRjuYr44bAq4ilVoTIvH3U.mft (raw, json) Hash identifier: h9dSAz2t0Y0kiw4L8PU6A4uZPlHC9yY9peiTI605VSw= Subject key identifier: C2:DB:CE:4E:3A:2F:E2:60:C1:14:75:E6:6F:9F:A7:17:71:7B:39:39 Authority key identifier: EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75 Certificate issuer: /CN=A91F48F2/serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75 Certificate serial: 34B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft Manifest number: 3492 Signing time: Thu 24 Apr 2025 15:16:14 +0000 Manifest this update: Thu 24 Apr 2025 15:16:14 +0000 Manifest next update: Thu 01 May 2025 15:16:14 +0000 Files and hashes: 1: 7EhKUeRjuYr44bAq4ilVoTIvH3U.crl (hash: efbrTfOEp5H/tl4YMxnNtdTQ4opEINtHg0jkFkOBxj8=) 2: 10704342B82811EFBBBB8612C4F9AE02.roa (hash: 8QIAuYOy9f6b5zSvfVedJi6THJS0SwovP5/GRdELmd4=) 3: 650B909C903B11EF924F0B86C4F9AE02.roa (hash: l9dH5Yk/IsrZlDMhS/m7QsOx2yvq3McTRworcFa7eFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13489 (0x34b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F48F2, serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75 Validity Not Before: Apr 24 15:16:14 2025 GMT Not After : May 1 15:16:14 2025 GMT Subject: CN=680a55be-61a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:28:46:b6:d5:cd:37:a8:1c:b4:47:b4:0b:4f: 8b:68:2c:5e:d2:97:88:ce:1b:a2:60:0a:65:7a:c1: 21:6b:c4:9c:e1:09:b5:24:09:3f:82:0f:7e:e0:64: 56:47:16:0d:f7:0e:27:82:57:82:af:8c:f9:d6:44: cb:49:6e:bb:59:86:f2:b3:54:eb:3d:e2:85:32:7b: 49:e1:ab:03:9c:ba:bc:79:ed:1d:5e:08:1f:ee:cf: 80:9b:02:7f:2f:7e:ee:f6:56:bc:c1:91:27:1d:84: a2:62:5e:3b:59:31:4f:a5:26:53:0f:58:b7:91:2a: a5:83:29:af:bc:66:2c:86:fc:80:08:b7:ad:e0:c1: 44:c1:44:2e:46:44:e7:07:75:69:7f:da:6f:b3:73: 55:41:a3:82:bb:42:af:b6:7e:c3:14:4b:82:2b:f7: 8b:5a:80:31:c3:50:15:46:80:0f:53:5f:3d:84:d2: 6a:bf:3f:04:61:51:f4:be:b5:9b:96:2c:b2:50:9a: 45:9d:a0:a3:4a:f9:8b:54:9d:2e:33:ff:cb:5b:4f: ac:fb:e5:a0:be:3a:90:92:28:f3:5f:99:0c:fe:1e: f9:2c:68:85:0c:6d:d6:06:bb:8d:77:e5:54:48:a6: 64:44:45:84:e4:2c:84:ca:82:60:6f:a8:06:3e:ce: d8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DB:CE:4E:3A:2F:E2:60:C1:14:75:E6:6F:9F:A7:17:71:7B:39:39 X509v3 Authority Key Identifier: keyid:EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:e0:45:50:2e:0f:74:c1:fe:f4:23:41:cf:dd:d2:55:02:fd: 15:7d:d0:8e:17:63:1a:40:e5:e7:94:25:c8:95:e5:1d:ae:48: 6a:06:e5:11:91:03:f9:03:a4:f3:46:98:04:cb:4d:6d:8a:76: 33:40:bb:36:f7:52:07:d0:6d:f8:ce:e3:cc:98:16:25:0a:98: f8:f2:c6:fe:a9:0e:12:e1:6f:34:97:09:6c:6a:a2:f6:b6:6d: dd:8f:87:31:bf:fa:cb:8e:4b:45:6d:80:a6:4b:59:bf:f5:84: 98:b7:05:0f:d6:9e:b0:54:15:d8:df:9e:56:d0:c7:bf:be:62: 5e:4d:20:dd:d7:28:fb:69:ff:81:cb:85:13:c3:34:22:a4:0d: 32:76:5d:f0:b4:28:5c:f3:e2:13:8e:0f:06:dd:d1:e3:d8:9e: 7e:ca:6f:05:dc:a7:e1:a6:ab:ee:a5:e3:40:26:3a:e6:57:68: f4:47:76:30:f0:3a:10:26:d3:31:ae:76:40:96:9d:d6:aa:f0: f5:4f:e7:7e:40:cf:64:c1:01:ae:b1:e4:ab:1b:10:59:4a:ae: 10:6c:d8:64:15:e7:61:88:ab:4f:27:59:03:64:c1:c3:8f:ff: c6:30:cf:01:b5:12:65:c5:c2:b5:99:af:91:36:1b:b5:f5:4a: 65:51:80:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ4RjIxMTAvBgNVBAUTKEVDNDg0QTUxRTQ2M0I5OEFGOEUxQjAyQUUyMjk1NUEx MzIyRjFGNzUwHhcNMjUwNDI0MTUxNjE0WhcNMjUwNTAxMTUxNjE0WjAYMRYwFAYD VQQDEw02ODBhNTViZS02MWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwihGttXNN6gctEe0C0+LaCxe0peIzhuiYAplesEha8Sc4Qm1JAk/gg9+4GRW RxYN9w4ngleCr4z51kTLSW67WYbys1TrPeKFMntJ4asDnLq8ee0dXggf7s+AmwJ/ L37u9la8wZEnHYSiYl47WTFPpSZTD1i3kSqlgymvvGYshvyACLet4MFEwUQuRkTn B3Vpf9pvs3NVQaOCu0Kvtn7DFEuCK/eLWoAxw1AVRoAPU189hNJqvz8EYVH0vrWb liyyUJpFnaCjSvmLVJ0uM//LW0+s++WgvjqQkijzX5kM/h75LGiFDG3WBruNd+VU SKZkREWE5CyEyoJgb6gGPs7YOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLbzk46 L+JgwRR15m+fpxdxezk5MB8GA1UdIwQYMBaAFOxISlHkY7mK+OGwKuIpVaEyLx91 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMi80NkQwOTE5ODFE QTkxMUUyOUNGRDNFQTQwOEIwMkNEMi83RWhLVWVSanVZcjQ0YkFxNGlsVm9USXZI M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFaEtVZVJqdVlyNDRiQXE0aWxWb1RJdkgzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDhGMi80NkQwOTE5ODFEQTkxMUUyOUNGRDNFQTQwOEIwMkNEMi83RWhLVWVSanVZ cjQ0YkFxNGlsVm9USXZIM1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe4EVQLg90wf70I0HP3dJVAv0VfdCOF2MaQOXnlCXIleUdrkhqBuUR kQP5A6TzRpgEy01tinYzQLs291IH0G34zuPMmBYlCpj48sb+qQ4S4W80lwlsaqL2 tm3dj4cxv/rLjktFbYCmS1m/9YSYtwUP1p6wVBXY355W0Me/vmJeTSDd1yj7af+B y4UTwzQipA0ydl3wtChc8+ITjg8G3dHj2J5+ym8F3KfhpqvupeNAJjrmV2j0R3Yw 8DoQJtMxrnZAlp3WqvD1T+d+QM9kwQGuseSrGxBZSq4QbNhkFedhiKtPJ1kDZMHD j//GMM8BtRJlxcK1ma+RNhu19UplUYCQ -----END CERTIFICATE-----Generated at Sat Apr 26 13:00:38 2025 by rpki-client