$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft File: 7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft (raw, json) Hash identifier: ky3tFkOVw/cNdEgDFK+HxUd03qk28FyG09aubR6Gwlo= Subject key identifier: 93:F1:5F:C3:85:51:70:56:B5:81:C2:2C:11:A1:01:56:5A:C9:73:C3 Authority key identifier: EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C Certificate issuer: /CN=A91F9F87/serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C Certificate serial: 0B76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft Manifest number: 0B70 Signing time: Thu 24 Apr 2025 18:57:50 +0000 Manifest this update: Thu 24 Apr 2025 18:57:50 +0000 Manifest next update: Thu 01 May 2025 18:57:50 +0000 Files and hashes: 1: 7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl (hash: Axuq9EeVqX1d3W5q3fBv9Ys76WYuo92i195c/n4huN8=) 2: 001209082A2111EAB1BF9C2EC4F9AE02.roa (hash: vpJeDwiHWNxR3ZSraALkWmUoFKXJKlqfWZWB6I2fGis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2934 (0xb76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9F87, serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C Validity Not Before: Apr 24 18:57:50 2025 GMT Not After : May 1 18:57:50 2025 GMT Subject: CN=680a89ae-5855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f7:92:d7:6c:df:79:12:6a:1d:e4:92:3f:3a: fd:f3:ab:33:1b:c1:94:22:8e:20:80:ac:9b:0e:a5: 5e:d9:37:cc:6f:2b:a5:51:bf:28:97:95:87:73:c0: c5:ac:4f:ea:1c:77:8e:18:14:b3:ca:5d:72:c6:64: 7d:bd:df:ff:81:0d:c4:7f:80:6c:b7:fb:a0:96:d9: 46:b7:71:c8:cc:4d:a1:ef:43:fe:0a:f8:98:e7:cb: dc:64:fe:96:86:cc:d4:32:8e:23:e6:dc:72:22:d6: c9:05:7b:90:0e:50:e6:13:39:75:f8:d8:a4:78:fc: 9f:9a:5e:6c:5f:67:85:ae:8f:34:76:e3:53:2d:6c: df:e5:49:ed:5f:fc:bf:f2:02:8f:9e:fc:c5:75:3d: 94:e7:2f:1b:34:23:0e:22:cf:d3:5c:03:3d:92:a7: ab:ad:d6:43:79:92:a1:1a:60:e0:46:3d:f3:03:d6: ee:99:af:cf:82:1b:1b:48:c8:e4:3e:bd:a2:30:a4: 88:2e:c4:0a:a9:a4:89:e1:68:84:c3:0c:7f:76:e8: 8e:e1:3f:b2:ed:00:0a:ec:96:0e:82:3c:05:af:0e: 40:28:4b:87:2a:57:01:73:86:19:13:32:64:9a:cd: 57:aa:8e:26:a8:8b:ae:fa:73:45:2b:6b:8b:63:87: a6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F1:5F:C3:85:51:70:56:B5:81:C2:2C:11:A1:01:56:5A:C9:73:C3 X509v3 Authority Key Identifier: keyid:EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:84:3c:3f:f7:6b:fc:1f:25:07:16:87:22:1a:29:79:fe:fb: e1:0c:3f:ab:30:cd:72:13:63:a6:59:0b:70:66:5b:a7:75:e0: 71:33:68:78:7d:6c:2f:cb:78:02:47:ee:9a:28:7e:51:b5:c2: b1:bc:04:33:58:3f:63:3b:47:5d:d1:33:f9:ac:c1:01:d7:f4: 60:fd:2d:89:55:b9:50:2e:40:12:e1:83:73:21:b2:a2:2a:3c: 8d:14:eb:76:ae:0f:d0:99:ef:5f:e0:8f:56:4b:77:e0:77:cf: 1d:3b:84:d9:b5:5e:8f:d8:d4:a2:27:de:81:fd:33:0b:16:10: 61:4d:cf:7c:f5:91:3a:0a:4e:c1:e6:bb:b7:bc:74:e3:59:c2: 59:f2:9b:31:da:90:9c:0c:0a:8e:c3:74:bf:94:b8:b4:5b:39: 2d:52:ef:f9:fc:74:be:23:c4:cc:30:d8:89:a4:3d:94:f5:1f: 36:38:d0:48:77:d3:6c:f4:00:62:80:e8:81:16:11:9f:2b:8c: 8b:15:fa:7c:18:8a:86:8d:93:07:9e:af:d8:6d:08:fb:e6:67: 48:23:b6:d6:e1:a2:62:2d:9b:2e:14:3a:3a:8d:ec:08:b6:b3: 86:f4:a1:1a:82:5e:7a:53:23:9f:de:1b:4d:a9:75:cd:9d:cd: 1c:2e:c4:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGODcxMTAvBgNVBAUTKEVDQzFEQzgyODhGODQ1QTkxQzlGNkNDMTg3QTk5Qzk5 RDkwOThDMUMwHhcNMjUwNDI0MTg1NzUwWhcNMjUwNTAxMTg1NzUwWjAYMRYwFAYD VQQDEw02ODBhODlhZS01ODU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyveS12zfeRJqHeSSPzr986szG8GUIo4ggKybDqVe2TfMbyulUb8ol5WHc8DF rE/qHHeOGBSzyl1yxmR9vd//gQ3Ef4Bst/ugltlGt3HIzE2h70P+CviY58vcZP6W hszUMo4j5txyItbJBXuQDlDmEzl1+NikePyfml5sX2eFro80duNTLWzf5UntX/y/ 8gKPnvzFdT2U5y8bNCMOIs/TXAM9kqerrdZDeZKhGmDgRj3zA9buma/PghsbSMjk Pr2iMKSILsQKqaSJ4WiEwwx/duiO4T+y7QAK7JYOgjwFrw5AKEuHKlcBc4YZEzJk ms1Xqo4mqIuu+nNFK2uLY4emVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJPxX8OF UXBWtYHCLBGhAVZayXPDMB8GA1UdIwQYMBaAFOzB3IKI+EWpHJ9swYepnJnZCYwc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUY4Ny83MDI3QzI5QzJB MjAxMUVBQTExNTJDMkVDNEY5QUUwMi83TUhjZ29qNFJha2NuMnpCaDZtY21ka0pq QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdNSGNnb2o0UmFrY24yekJoNm1jbWRrSmpCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUY4Ny83MDI3QzI5QzJBMjAxMUVBQTExNTJDMkVDNEY5QUUwMi83TUhjZ29qNFJh a2NuMnpCaDZtY21ka0pqQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzhDw/92v8HyUHFociGil5/vvhDD+rMM1yE2OmWQtwZlundeBxM2h4 fWwvy3gCR+6aKH5RtcKxvAQzWD9jO0dd0TP5rMEB1/Rg/S2JVblQLkAS4YNzIbKi KjyNFOt2rg/Qme9f4I9WS3fgd88dO4TZtV6P2NSiJ96B/TMLFhBhTc989ZE6Ck7B 5ru3vHTjWcJZ8psx2pCcDAqOw3S/lLi0WzktUu/5/HS+I8TMMNiJpD2U9R82ONBI d9Ns9ABigOiBFhGfK4yLFfp8GIqGjZMHnq/YbQj75mdII7bW4aJiLZsuFDo6jewI trOG9KEagl56UyOf3htNqXXNnc0cLsRX -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:03 2025 by rpki-client