$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft File: N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft (raw, json) Hash identifier: Zkc314+ZwIIwsZj0MGdbBJk5c38SeZe16zcSPcDpy7s= Subject key identifier: E4:F0:78:62:06:06:AE:5D:7B:C6:FD:56:01:35:AD:CE:12:03:36:36 Authority key identifier: 37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A Certificate issuer: /CN=A91FDA40/serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A Certificate serial: 019D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft Manifest number: 0196 Signing time: Fri 25 Apr 2025 02:37:09 +0000 Manifest this update: Fri 25 Apr 2025 02:37:08 +0000 Manifest next update: Fri 02 May 2025 02:37:08 +0000 Files and hashes: 1: N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl (hash: g9wFfLP96myvoeURDnQern3g1fXYMugPfIR42FlzQPs=) 2: A24D0F54140C11EFBC640B71C4F9AE02.roa (hash: iTyxeo6fdLY6zYqk38GBrAnxGbLRbpbsfA4HbHTb8W0=) 3: 545EDE9C140911EF8520A25BC4F9AE02.roa (hash: f/RigGqDQyE5cV9YFdD69wWLUqqtBXkgZ1bqVEllexY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDA40, serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A Validity Not Before: Apr 25 02:37:08 2025 GMT Not After : May 2 02:37:08 2025 GMT Subject: CN=680af555-17e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e8:28:c1:6f:fc:46:fd:bf:7c:60:d4:33:67: ba:a0:0a:a4:20:2d:7d:0b:73:61:dd:59:01:9c:f5: 1a:6d:4a:88:ea:1f:22:a8:07:32:90:81:8d:fe:f4: e9:37:f9:cd:9e:b7:8a:fc:7b:2a:29:06:aa:e7:21: d8:dc:be:2e:1a:02:3f:44:09:24:a2:22:2a:49:51: 42:8c:df:d4:30:c5:cf:d1:44:8f:9f:69:21:75:14: de:6a:3c:01:3a:e8:d3:ca:dd:62:cd:67:36:cd:d9: 91:7f:94:32:03:02:ff:ac:7c:af:23:1d:1b:80:63: 30:aa:48:95:01:27:0e:ac:10:be:b1:69:8d:77:56: c5:f7:4b:be:b1:10:10:a5:73:95:1e:33:46:d8:d3: 60:bb:a2:ae:c1:4d:37:9e:34:17:79:16:f7:ca:d5: ea:d5:e4:2b:f2:cf:d8:aa:4c:da:32:7f:90:80:b8: 03:38:c4:4f:03:0a:a8:99:39:ff:c9:fb:6a:62:e6: 02:91:dc:e3:f6:e8:81:1b:d9:92:bf:0b:bc:bc:43: b3:8f:fc:60:6d:6e:a1:7c:99:91:eb:3f:b4:1f:c0: 20:9a:94:35:5f:72:9e:5c:5c:91:63:0d:36:15:63: ff:bd:8d:28:e8:6b:ea:16:6c:df:8e:cd:53:29:5a: c7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F0:78:62:06:06:AE:5D:7B:C6:FD:56:01:35:AD:CE:12:03:36:36 X509v3 Authority Key Identifier: keyid:37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:46:1f:ab:54:c6:02:80:35:d0:90:85:02:71:61:a1:81:7a: d1:89:dc:b7:bf:ab:dd:0e:26:a4:5a:93:76:a2:d8:ea:87:4c: 19:eb:21:2f:25:84:97:b6:e4:90:f3:87:f3:06:1c:78:df:6d: 95:8b:f2:a2:29:b8:7f:74:09:ea:b4:23:a1:a8:5a:c8:58:d3: 92:8a:7b:a2:2d:d4:4b:76:d7:32:e7:99:9b:d8:f3:f1:81:47: fb:a8:6c:48:c5:35:d7:64:37:b0:0f:8a:e2:5a:f1:f8:0f:4c: d5:2f:0c:40:f1:66:54:2a:c1:f7:04:c3:ea:0e:ec:32:b6:6a: 43:42:07:22:79:03:71:ef:5a:fd:7c:21:c0:b0:0f:1c:62:73: e1:2a:59:02:88:1e:09:0b:d5:60:00:3a:0c:d3:d9:17:1c:f2: dd:e6:3e:e2:f4:69:64:65:2c:9a:cc:0c:77:34:f8:7c:20:c9: fe:7e:fb:4b:da:4f:de:b7:a3:d1:97:3d:c7:de:91:aa:43:9d: 35:8c:c1:24:30:f5:4b:c5:aa:f3:1a:41:5b:58:d8:83:48:d2: 65:f9:cf:9b:1a:d6:c5:f9:57:b8:49:f6:6c:73:b3:86:c8:fd: 8d:48:b2:ac:3e:cb:b4:80:0a:85:86:04:98:14:35:cb:3f:63: bc:9a:cf:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBNDAxMTAvBgNVBAUTKDM3QjYyQTc3MjUxQzUyQTA0QjMzQjgyRDJFRDAyMDRD OTI3QTQyOUEwHhcNMjUwNDI1MDIzNzA4WhcNMjUwNTAyMDIzNzA4WjAYMRYwFAYD VQQDEw02ODBhZjU1NS0xN2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAougowW/8Rv2/fGDUM2e6oAqkIC19C3Nh3VkBnPUabUqI6h8iqAcykIGN/vTp N/nNnreK/HsqKQaq5yHY3L4uGgI/RAkkoiIqSVFCjN/UMMXP0USPn2khdRTeajwB OujTyt1izWc2zdmRf5QyAwL/rHyvIx0bgGMwqkiVAScOrBC+sWmNd1bF90u+sRAQ pXOVHjNG2NNgu6KuwU03njQXeRb3ytXq1eQr8s/YqkzaMn+QgLgDOMRPAwqomTn/ yftqYuYCkdzj9uiBG9mSvwu8vEOzj/xgbW6hfJmR6z+0H8AgmpQ1X3KeXFyRYw02 FWP/vY0o6GvqFmzfjs1TKVrHlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOTweGIG Bq5de8b9VgE1rc4SAzY2MB8GA1UdIwQYMBaAFDe2KnclHFKgSzO4LS7QIEySekKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREE0MC85NkYwRDcwQ0JC REExMUVEODg3OEVGNDdDNEY5QUUwMi9ON1lxZHlVY1VxQkxNN2d0THRBZ1RKSjZR cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL043WXFkeVVjVXFCTE03Z3RMdEFnVEpKNlFwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REE0MC85NkYwRDcwQ0JCREExMUVEODg3OEVGNDdDNEY5QUUwMi9ON1lxZHlVY1Vx QkxNN2d0THRBZ1RKSjZRcG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTRh+rVMYCgDXQkIUCcWGhgXrRidy3v6vdDiakWpN2otjqh0wZ6yEv JYSXtuSQ84fzBhx4322Vi/KiKbh/dAnqtCOhqFrIWNOSinuiLdRLdtcy55mb2PPx gUf7qGxIxTXXZDewD4riWvH4D0zVLwxA8WZUKsH3BMPqDuwytmpDQgcieQNx71r9 fCHAsA8cYnPhKlkCiB4JC9VgADoM09kXHPLd5j7i9GlkZSyazAx3NPh8IMn+fvtL 2k/et6PRlz3H3pGqQ501jMEkMPVLxarzGkFbWNiDSNJl+c+bGtbF+Ve4SfZsc7OG yP2NSLKsPsu0gAqFhgSYFDXLP2O8ms9J -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:24 2025 by rpki-client