$ rpki-client -vvf rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/ePv82NUyv7urfXnFGnc46klMJrc.mft File: ePv82NUyv7urfXnFGnc46klMJrc.mft (raw, json) Hash identifier: xyz2yswH5M2tgv3CLfl1GLFM5ZXGLnvDF0Hxua5GbkY= Subject key identifier: 6C:ED:9E:CB:33:67:9C:8A:51:60:C8:FC:61:DF:1D:B9:8C:43:83:19 Authority key identifier: 78:FB:FC:D8:D5:32:BF:BB:AB:7D:79:C5:1A:77:38:EA:49:4C:26:B7 Certificate issuer: /CN=A91106C7/serialNumber=78FBFCD8D532BFBBAB7D79C51A7738EA494C26B7 Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ePv82NUyv7urfXnFGnc46klMJrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/ePv82NUyv7urfXnFGnc46klMJrc.mft Manifest number: 9C Signing time: Mon 21 Apr 2025 05:06:33 +0000 Manifest this update: Mon 21 Apr 2025 05:06:32 +0000 Manifest next update: Mon 28 Apr 2025 05:06:32 +0000 Files and hashes: 1: ePv82NUyv7urfXnFGnc46klMJrc.crl (hash: nMj3Fvv1LtGiPMb3eoRPJCtVWEoWeWMdDkag6dO5Ph8=) 2: 8862654086CF11EF901ED838C4F9AE02.roa (hash: FfPgO3eeUl8IdKgqCPYYQsbKqty7XuG6xdX4tJjDBxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/ePv82NUyv7urfXnFGnc46klMJrc.crl rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/ePv82NUyv7urfXnFGnc46klMJrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ePv82NUyv7urfXnFGnc46klMJrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 05:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91106C7, serialNumber=78FBFCD8D532BFBBAB7D79C51A7738EA494C26B7 Validity Not Before: Apr 21 05:06:32 2025 GMT Not After : Apr 28 05:06:32 2025 GMT Subject: CN=6805d258-36d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7b:82:34:76:b6:f5:62:88:43:5a:95:37:19: 85:f9:d5:bb:08:57:c8:3d:ee:f9:14:1e:89:8f:53: 55:f1:0e:a3:1d:d6:a4:23:7c:1f:0e:5b:8f:b0:a2: 74:e1:bc:a8:14:a6:c9:3f:7d:f5:4f:a2:f5:db:9e: 25:8e:c7:71:55:89:59:89:d9:bf:d4:3d:ac:9f:7e: e9:7b:69:51:84:e6:c0:f0:56:27:77:38:12:4f:1c: ea:07:6a:55:cf:13:03:93:4c:36:5f:27:63:59:c9: 73:d2:0c:16:f1:1a:19:f7:ea:b0:ca:c2:fc:b8:92: eb:7d:ec:f0:15:4b:61:d2:30:e2:48:a6:9f:73:90: 03:59:4b:ae:a9:51:68:99:fc:77:12:ae:35:57:f0: 21:83:e5:93:99:2d:7d:ed:c8:ad:ab:eb:6b:65:12: 4b:ba:33:a6:75:93:76:81:65:47:87:ea:9f:ca:8b: 62:59:d5:7f:d4:89:9d:54:db:bb:f4:14:fa:59:c8: e2:3e:01:b4:e5:7d:39:da:b0:04:51:e6:af:c3:8e: de:eb:4d:21:5c:ca:aa:a1:5c:b9:78:9f:05:a7:0d: 2b:90:f3:14:ed:57:93:0c:90:2b:96:43:2d:e0:55: 1c:a3:4a:17:10:79:e9:fe:f7:e6:44:60:b3:5b:2f: 48:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:ED:9E:CB:33:67:9C:8A:51:60:C8:FC:61:DF:1D:B9:8C:43:83:19 X509v3 Authority Key Identifier: keyid:78:FB:FC:D8:D5:32:BF:BB:AB:7D:79:C5:1A:77:38:EA:49:4C:26:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/ePv82NUyv7urfXnFGnc46klMJrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ePv82NUyv7urfXnFGnc46klMJrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/ePv82NUyv7urfXnFGnc46klMJrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:d9:5a:d9:7d:32:09:2a:9c:c9:94:69:c5:5c:bb:d3:5b:3c: 65:a4:8f:b3:75:d4:54:d4:77:c4:10:2f:de:c4:a5:f6:19:22: 8a:31:8e:b1:2d:93:fb:53:24:cc:64:e1:77:a1:81:52:97:07: 75:ab:d5:2e:4d:2a:9c:16:02:db:2a:3e:23:4c:4f:df:87:ec: 62:04:70:31:39:7a:94:8f:8a:3a:2d:24:53:52:2c:d5:d8:ea: 73:98:cf:77:6c:ff:5d:36:c4:c7:8a:28:0f:34:ae:a2:82:65: eb:1e:7e:d9:46:a8:75:ae:a8:e7:1c:e4:56:c2:52:ee:f7:45: 80:e3:68:35:97:6d:43:a8:32:26:24:da:34:93:85:bc:c8:85: dc:2a:ba:db:6a:b7:df:23:87:2b:22:72:f4:9a:67:20:94:e5: 7b:a4:1e:7b:09:b2:4c:1a:8e:95:ba:51:08:88:55:98:86:82: 17:e6:7e:39:65:80:a7:98:3b:74:14:78:fd:c0:a9:0b:6b:fb: be:55:ef:88:a5:4e:c7:a6:e8:ae:cf:e4:f5:c5:38:71:db:4e: fc:d2:40:a7:6c:b4:c3:87:36:02:71:e3:f5:22:9d:76:b9:35: 1c:71:41:1f:13:7d:e6:ef:e8:74:46:87:cf:c1:a2:4e:62:1e: e1:64:87:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA2QzcxMTAvBgNVBAUTKDc4RkJGQ0Q4RDUzMkJGQkJBQjdENzlDNTFBNzczOEVB NDk0QzI2QjcwHhcNMjUwNDIxMDUwNjMyWhcNMjUwNDI4MDUwNjMyWjAYMRYwFAYD VQQDEw02ODA1ZDI1OC0zNmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3uCNHa29WKIQ1qVNxmF+dW7CFfIPe75FB6Jj1NV8Q6jHdakI3wfDluPsKJ0 4byoFKbJP331T6L1254ljsdxVYlZidm/1D2sn37pe2lRhObA8FYndzgSTxzqB2pV zxMDk0w2XydjWclz0gwW8RoZ9+qwysL8uJLrfezwFUth0jDiSKafc5ADWUuuqVFo mfx3Eq41V/Ahg+WTmS197citq+trZRJLujOmdZN2gWVHh+qfyotiWdV/1ImdVNu7 9BT6WcjiPgG05X052rAEUeavw47e600hXMqqoVy5eJ8Fpw0rkPMU7VeTDJArlkMt 4FUco0oXEHnp/vfmRGCzWy9IoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGztnssz Z5yKUWDI/GHfHbmMQ4MZMB8GA1UdIwQYMBaAFHj7/NjVMr+7q315xRp3OOpJTCa3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDZDNy83N0I2OTQzNDMy MEUxMUVGQjZFMERBNzZDNEY5QUUwMi9lUHY4Mk5VeXY3dXJmWG5GR25jNDZrbE1K cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VQdjgyTlV5djd1cmZYbkZHbmM0NmtsTUpyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDZDNy83N0I2OTQzNDMyMEUxMUVGQjZFMERBNzZDNEY5QUUwMi9lUHY4Mk5VeXY3 dXJmWG5GR25jNDZrbE1KcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy2VrZfTIJKpzJlGnFXLvTWzxlpI+zddRU1HfEEC/exKX2GSKKMY6x LZP7UyTMZOF3oYFSlwd1q9UuTSqcFgLbKj4jTE/fh+xiBHAxOXqUj4o6LSRTUizV 2OpzmM93bP9dNsTHiigPNK6igmXrHn7ZRqh1rqjnHORWwlLu90WA42g1l21DqDIm JNo0k4W8yIXcKrrbarffI4crInL0mmcglOV7pB57CbJMGo6VulEIiFWYhoIX5n45 ZYCnmDt0FHj9wKkLa/u+Ve+IpU7Hpuiuz+T1xThx20780kCnbLTDhzYCceP1Ip12 uTUccUEfE33m7+h0RofPwaJOYh7hZIda -----END CERTIFICATE-----Generated at Tue Apr 22 14:21:52 2025 by rpki-client