$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft File: E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft (raw, json) Hash identifier: 0KggTWce7W6wAplL+GLi5lAfgurO6zQLyxuo9GZ7EOg= Subject key identifier: B5:27:B7:F6:72:3D:69:B5:18:85:D7:F5:4E:36:97:BE:3C:00:B6:A5 Authority key identifier: 13:B2:7F:D4:62:48:F4:A7:33:D9:24:65:1C:94:0C:B7:F1:A3:06:09 Certificate issuer: /CN=A91FFEDB/serialNumber=13B27FD46248F4A733D924651C940CB7F1A30609 Certificate serial: 01D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft Manifest number: 01D6 Signing time: Fri 25 Apr 2025 01:59:14 +0000 Manifest this update: Fri 25 Apr 2025 01:59:14 +0000 Manifest next update: Fri 02 May 2025 01:59:14 +0000 Files and hashes: 1: E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl (hash: eEOKGVdj8IyxlHtECRw/kYOpbz4LkicIYGn+Fj88/bM=) 2: 26BE1334558F11EDB3A5ED4FC4F9AE02.roa (hash: SUpV5MPTH/BMBi71c7spbVUHkBTzCZVpxBmfHqDrVmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:59:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFEDB, serialNumber=13B27FD46248F4A733D924651C940CB7F1A30609 Validity Not Before: Apr 25 01:59:14 2025 GMT Not After : May 2 01:59:14 2025 GMT Subject: CN=680aec72-eb9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1c:d9:48:9a:52:7f:9e:c3:a5:4e:0c:fd:c0: f7:4e:69:77:96:97:1c:88:20:ea:21:ac:91:33:ee: 0b:d8:77:0b:48:f8:20:d5:cd:f2:41:51:86:57:83: 69:13:a9:58:b1:5d:c3:9d:41:17:ec:e8:0a:f6:f1: 18:2c:f7:1f:17:9f:79:a0:e7:83:50:96:31:18:73: 9c:30:6f:9f:90:13:80:82:0d:59:91:2d:be:85:0d: 31:1a:97:6f:e9:90:b6:60:51:46:7f:84:c4:4c:d3: 7c:90:73:61:fe:10:dd:91:11:f8:49:a3:b7:0d:1f: 9b:d7:7b:45:f2:e2:15:07:98:90:60:af:a7:64:e0: ec:0b:4c:6c:43:ea:29:86:44:ed:27:01:5f:8a:3e: 1d:5e:0c:98:25:ef:52:fa:d9:11:9e:cf:51:77:4e: d8:a1:b6:63:6d:8d:d2:ec:b2:3d:b1:ba:24:9b:02: c4:ed:cc:f6:9d:3d:c7:cb:52:e8:07:6a:54:99:42: 6d:ab:56:b6:0f:b8:98:de:52:d2:f6:80:f1:82:70: 8c:5f:12:4c:2c:86:31:ac:2b:d4:7a:ec:6e:ac:9a: e9:c8:87:c1:dc:91:7f:ea:15:cf:36:8c:46:f0:ff: 98:64:69:0d:a0:56:b3:d6:ee:2b:34:05:9f:3c:31: ad:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:27:B7:F6:72:3D:69:B5:18:85:D7:F5:4E:36:97:BE:3C:00:B6:A5 X509v3 Authority Key Identifier: keyid:13:B2:7F:D4:62:48:F4:A7:33:D9:24:65:1C:94:0C:B7:F1:A3:06:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:83:7d:e3:43:4e:e4:49:da:71:74:39:26:e1:37:99:ef:3e: cb:9f:f1:cc:24:e3:71:fd:07:c2:82:4e:c0:b2:f3:16:7c:2b: df:c0:0e:b8:49:fb:76:32:6d:6f:cd:2d:c1:77:be:52:93:d1: 82:2f:95:29:e9:f8:9d:e4:3c:10:11:81:5d:4f:d2:f2:4a:59: cd:d6:b7:71:cf:30:2d:43:af:a3:c5:58:c9:ff:fc:9d:6c:91: b6:ac:e3:12:45:d1:cb:2b:7a:c8:17:96:23:8b:4c:ea:17:aa: 14:64:c7:f5:c1:5b:eb:6b:3b:47:f8:f0:05:a9:1c:88:4c:ec: 91:f1:76:d0:15:9a:7e:87:b7:aa:97:b5:07:82:58:a9:bb:58: b3:ff:03:89:89:39:53:84:b3:8c:c9:98:88:5a:e1:38:30:90: 3a:56:11:ee:91:60:18:12:e1:6a:9f:52:c4:ae:db:c3:45:56: ca:fe:20:65:e3:95:69:80:69:73:ba:a6:c6:05:11:e6:0e:32: 20:12:dd:35:58:31:eb:32:24:49:8f:6b:58:72:b0:a9:10:68: e8:32:14:ca:de:b0:8f:b6:0c:5d:28:29:e3:8f:27:fa:8d:e3: 2b:6c:08:a0:2f:12:27:41:ad:c4:bb:79:f7:da:a5:a7:7d:89: e7:a2:b5:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZFREIxMTAvBgNVBAUTKDEzQjI3RkQ0NjI0OEY0QTczM0Q5MjQ2NTFDOTQwQ0I3 RjFBMzA2MDkwHhcNMjUwNDI1MDE1OTE0WhcNMjUwNTAyMDE1OTE0WjAYMRYwFAYD VQQDEw02ODBhZWM3Mi1lYjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRzZSJpSf57DpU4M/cD3Tml3lpcciCDqIayRM+4L2HcLSPgg1c3yQVGGV4Np E6lYsV3DnUEX7OgK9vEYLPcfF595oOeDUJYxGHOcMG+fkBOAgg1ZkS2+hQ0xGpdv 6ZC2YFFGf4TETNN8kHNh/hDdkRH4SaO3DR+b13tF8uIVB5iQYK+nZODsC0xsQ+op hkTtJwFfij4dXgyYJe9S+tkRns9Rd07YobZjbY3S7LI9sbokmwLE7cz2nT3Hy1Lo B2pUmUJtq1a2D7iY3lLS9oDxgnCMXxJMLIYxrCvUeuxurJrpyIfB3JF/6hXPNoxG 8P+YZGkNoFaz1u4rNAWfPDGtkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUnt/Zy PWm1GIXX9U42l748ALalMB8GA1UdIwQYMBaAFBOyf9RiSPSnM9kkZRyUDLfxowYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkVEQi8zRUY3RTlCQzU1 MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9FN0pfMUdKSTlLY3oyU1JsSEpRTXRfR2pC Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U3Sl8xR0pJOUtjejJTUmxISlFNdF9HakJnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkVEQi8zRUY3RTlCQzU1MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9FN0pfMUdKSTlL Y3oyU1JsSEpRTXRfR2pCZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCg33jQ07kSdpxdDkm4TeZ7z7Ln/HMJONx/QfCgk7AsvMWfCvfwA64 Sft2Mm1vzS3Bd75Sk9GCL5Up6fid5DwQEYFdT9LySlnN1rdxzzAtQ6+jxVjJ//yd bJG2rOMSRdHLK3rIF5Yji0zqF6oUZMf1wVvraztH+PAFqRyITOyR8XbQFZp+h7eq l7UHglipu1iz/wOJiTlThLOMyZiIWuE4MJA6VhHukWAYEuFqn1LErtvDRVbK/iBl 45VpgGlzuqbGBRHmDjIgEt01WDHrMiRJj2tYcrCpEGjoMhTK3rCPtgxdKCnjjyf6 jeMrbAigLxInQa3Eu3n32qWnfYnnorVQ -----END CERTIFICATE-----Generated at Sat Apr 26 14:05:15 2025 by rpki-client