$ rpki-client -vvf rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft File: 7dKmloaGUlbJsP3da3FJZtU3jzM.mft (raw, json) Hash identifier: KL+he+rqLugfBYZCT0PMLBXsVnB+5QbBMcEckclm/Mg= Subject key identifier: 84:B8:96:F8:26:C0:CA:4F:AB:87:13:84:F5:0A:5A:D3:56:32:0F:45 Authority key identifier: ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33 Certificate issuer: /CN=A912D3CB/serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33 Certificate serial: 0A46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft Manifest number: 0A31 Signing time: Fri 04 Apr 2025 19:56:12 +0000 Manifest this update: Fri 04 Apr 2025 19:56:11 +0000 Manifest next update: Fri 11 Apr 2025 19:56:11 +0000 Files and hashes: 1: 7dKmloaGUlbJsP3da3FJZtU3jzM.crl (hash: gU/HWWq/1WGRKalJ/mlJv3yA5dsVAYm7ej1unNrHFNw=) 2: 923B6404466B11EE8B37E13CC4F9AE02.roa (hash: horX5P75gumDA8WyF+ghzmHcSe0CjNBHMfSInHVl7ao=) 3: C2E32E34466B11EE988B243DC4F9AE02.roa (hash: hBn0Qcv2Wj2OFO1BXPRpxsQ8U4zswJ2i/kTyMm1Zr1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:56:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2630 (0xa46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D3CB Validity Not Before: Apr 4 19:56:11 2025 GMT Not After : Apr 11 19:56:11 2025 GMT Subject: CN=67f0395b-3598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d4:a3:c7:eb:0b:5a:db:89:78:66:4d:57:b8: 30:c2:64:f5:31:97:52:75:da:35:d5:b0:c0:7e:17: 8d:7a:9f:78:55:69:4a:3c:26:1b:4f:16:14:63:be: e6:13:54:91:0a:37:fd:2d:62:29:35:30:26:0a:3e: 84:db:4f:e1:e3:23:83:3e:18:d6:c7:a9:75:28:6c: 62:8d:8b:ed:00:0f:73:b6:44:a9:8a:01:95:30:2b: 72:a1:c4:35:be:ff:8b:8d:30:a1:27:88:dd:aa:0c: a8:41:38:57:5e:33:e6:19:84:a6:ee:41:33:2f:b8: e1:c4:0d:5e:0d:7e:6c:63:c9:69:66:d4:7c:34:b0: 7a:65:e7:6e:70:04:24:64:ca:ef:ee:84:21:f6:e3: 0b:85:49:f9:bc:05:f8:1e:6a:66:29:c9:fc:3e:ea: d1:9a:26:cd:d7:f4:c7:f9:14:4e:4d:e9:6f:37:4f: 0c:d6:df:17:e2:0a:6a:e8:b3:03:68:5a:13:8a:48: e0:34:e8:50:41:7d:2b:33:31:2e:0e:e4:db:7a:95: 37:30:b6:57:6b:26:cb:b2:24:32:fb:77:17:d1:22: 73:ec:57:14:6f:f8:8c:9f:39:a5:ac:98:48:97:14: 72:d3:9f:b5:31:35:8b:61:88:28:eb:2f:83:6c:f0: fb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B8:96:F8:26:C0:CA:4F:AB:87:13:84:F5:0A:5A:D3:56:32:0F:45 X509v3 Authority Key Identifier: keyid:ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:bf:3e:d2:3d:46:0d:5f:d2:fb:35:92:c3:0e:d5:ed:65:e6: 68:94:d1:a0:e7:34:77:93:d0:c8:28:87:60:71:88:54:0c:22: 45:91:d5:c1:1e:09:8f:58:a9:ff:a0:16:85:4c:74:85:ac:c8: 65:20:2d:95:11:1b:6f:0a:2f:c2:2f:40:28:38:71:6c:13:5a: 96:fc:c6:c1:c9:69:f2:2a:1e:ad:31:7d:eb:69:ff:35:c0:6c: d8:6c:67:c6:5e:b7:d8:19:a8:b8:02:e3:bb:8e:95:6c:ce:29: 65:68:6c:ac:18:08:1f:be:09:f0:5a:80:b5:74:2b:98:ee:45: 32:09:ef:2d:1b:ad:26:a3:5e:d5:1a:9d:6c:ff:7a:85:37:97: 77:5d:a6:c0:63:e6:4b:8a:44:a7:ad:9a:69:ac:af:e9:a8:20: 1a:1f:f6:e4:81:20:2c:37:2a:b5:ed:fb:ff:42:c8:16:65:86: 83:7f:91:5a:97:4d:43:2a:e0:f4:76:22:b0:d8:f4:f1:8f:f6: f7:04:63:da:8a:22:49:bf:f8:c0:d3:db:44:68:bb:b0:d5:ef: cd:81:96:5c:1c:85:8b:cb:12:a5:1a:aa:63:3a:9a:0c:d5:44: 08:22:46:2c:4e:7c:b8:90:96:46:c3:38:26:99:49:4a:4e:88: c3:de:3b:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQzQ0IxMTAvBgNVBAUTKEVERDJBNjk2ODY4NjUyNTZDOUIwRkRERDZCNzE0OTY2 RDUzNzhGMzMwHhcNMjUwNDA0MTk1NjExWhcNMjUwNDExMTk1NjExWjAYMRYwFAYD VQQDEw02N2YwMzk1Yi0zNTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqdSjx+sLWtuJeGZNV7gwwmT1MZdSddo11bDAfheNep94VWlKPCYbTxYUY77m E1SRCjf9LWIpNTAmCj6E20/h4yODPhjWx6l1KGxijYvtAA9ztkSpigGVMCtyocQ1 vv+LjTChJ4jdqgyoQThXXjPmGYSm7kEzL7jhxA1eDX5sY8lpZtR8NLB6ZeducAQk ZMrv7oQh9uMLhUn5vAX4HmpmKcn8PurRmibN1/TH+RROTelvN08M1t8X4gpq6LMD aFoTikjgNOhQQX0rMzEuDuTbepU3MLZXaybLsiQy+3cX0SJz7FcUb/iMnzmlrJhI lxRy05+1MTWLYYgo6y+DbPD7gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIS4lvgm wMpPq4cThPUKWtNWMg9FMB8GA1UdIwQYMBaAFO3SppaGhlJWybD93WtxSWbVN48z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDNDQi9BOUE0MzlGQzY5 QjIxMUVBOTc3OURENDhDNEY5QUUwMi83ZEttbG9hR1VsYkpzUDNkYTNGSlp0VTNq ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdkS21sb2FHVWxiSnNQM2RhM0ZKWnRVM2p6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDNDQi9BOUE0MzlGQzY5QjIxMUVBOTc3OURENDhDNEY5QUUwMi83ZEttbG9hR1Vs YkpzUDNkYTNGSlp0VTNqek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmvz7SPUYNX9L7NZLDDtXtZeZolNGg5zR3k9DIKIdgcYhUDCJFkdXB HgmPWKn/oBaFTHSFrMhlIC2VERtvCi/CL0AoOHFsE1qW/MbByWnyKh6tMX3raf81 wGzYbGfGXrfYGai4AuO7jpVszillaGysGAgfvgnwWoC1dCuY7kUyCe8tG60mo17V Gp1s/3qFN5d3XabAY+ZLikSnrZpprK/pqCAaH/bkgSAsNyq17fv/QsgWZYaDf5Fa l01DKuD0diKw2PTxj/b3BGPaiiJJv/jA09tEaLuw1e/NgZZcHIWLyxKlGqpjOpoM 1UQIIkYsTny4kJZGwzgmmUlKTojD3jvf -----END CERTIFICATE-----Generated at Sat Apr 5 21:00:46 2025 by rpki-client