$ rpki-client -vvf rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft File: 7ErjVswCMimNPNn9IEE1Z9u3_CU.mft (raw, json) Hash identifier: 05HeUoQs/cR+UjqYxDTBasQEaSmTzsmLb2GK82mQLp0= Subject key identifier: 0A:CA:92:C6:F3:B4:F4:66:3C:FE:A1:75:36:CF:89:13:F8:FB:6A:9E Authority key identifier: EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25 Certificate issuer: /CN=A91830A5/serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25 Certificate serial: 0454 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft Manifest number: 0449 Signing time: Sat 29 Mar 2025 00:32:07 +0000 Manifest this update: Sat 29 Mar 2025 00:32:07 +0000 Manifest next update: Sat 05 Apr 2025 00:32:07 +0000 Files and hashes: 1: 7ErjVswCMimNPNn9IEE1Z9u3_CU.crl (hash: l1SmZbeaKNQl5xwO3SHb5pPAAoBOKp5Sal2CRGH+MEs=) 2: 10854F3E516B11EC86C3243EC4F9AE02.roa (hash: 75+qcslrpbStlF9MBXstO6Kxv6zf8gOrBw7RkBWwZKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.crl rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1108 (0x454) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91830A5 Validity Not Before: Mar 29 00:32:07 2025 GMT Not After : Apr 5 00:32:07 2025 GMT Subject: CN=67e73f87-7b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:46:26:fd:f9:73:1a:05:d3:e7:c4:5d:6d:c6: 98:f4:d0:6a:f2:9d:15:f0:7c:a3:68:2b:6f:b7:c1: d8:59:de:69:34:d8:2f:f4:8d:cd:ef:23:f6:f8:b7: 7f:e6:4c:36:62:db:e6:3f:45:da:bb:a0:3b:39:0c: 26:5b:52:54:3e:3a:9c:0a:a2:f9:0d:d6:d8:b6:87: 2b:53:82:09:d0:75:57:25:ff:d2:d3:7b:03:8e:3f: 0c:ed:7a:92:f0:64:a1:3c:2a:31:ce:f3:18:9b:7c: 06:9e:5e:27:66:95:ed:43:72:be:61:8c:0a:33:67: 66:a4:ae:2b:bf:03:41:b0:e5:c0:4a:79:29:dd:d9: 74:4d:41:1c:de:9e:61:b1:1f:56:6e:fd:0c:42:cf: b3:17:e7:f1:c8:39:e4:a2:d0:00:3f:70:8a:c7:1a: 17:62:6b:da:26:93:ea:e1:74:74:d4:f5:5c:98:8f: 32:db:67:af:ba:2f:1c:6a:69:00:54:05:fa:0d:bc: 7f:43:42:8e:ab:82:1f:3b:9b:af:9f:57:44:a9:26: 1e:2c:1c:98:7c:16:02:b4:61:61:9b:07:ae:10:2e: ad:85:ae:cb:e0:e7:8a:54:29:c1:af:54:08:ca:5e: 27:15:05:ae:fa:55:8c:f2:a7:0b:a0:cf:c2:af:73: b0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:CA:92:C6:F3:B4:F4:66:3C:FE:A1:75:36:CF:89:13:F8:FB:6A:9E X509v3 Authority Key Identifier: keyid:EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:14:c0:fe:b8:8b:75:b9:5d:8a:9d:49:71:36:11:33:77:3d: bc:ed:cd:43:5c:06:6b:ac:a1:2d:1c:1e:69:58:ea:bc:b4:e2: 15:0c:86:53:fc:dc:f3:a9:39:01:01:9e:18:9a:9b:45:f5:86: f2:ae:2d:94:91:56:79:aa:74:cc:26:e9:b4:df:3a:62:1b:c1: a3:48:0f:d8:31:a0:43:cf:a6:8c:ad:5a:f4:15:5a:cc:86:74: 3f:b4:f5:a9:d4:2c:10:f9:87:2d:19:fe:8b:8b:3e:9a:33:ee: a4:22:ed:e9:b9:bb:85:0a:ea:80:2c:99:64:a6:15:ea:38:eb: d0:53:0e:47:d0:b5:0a:6e:76:86:b3:02:eb:dd:8d:07:c8:d5: 7d:fd:13:45:b3:98:39:66:04:aa:cb:34:bc:8f:73:1e:04:02: 2c:d8:a2:39:52:e9:52:7e:49:48:44:1c:95:f4:14:ae:ec:98: 05:d9:90:1d:13:32:a5:2b:e2:67:2d:8c:34:17:0d:f0:de:da: c1:7f:68:a3:aa:ed:c3:c7:73:eb:a6:be:24:e0:cb:fc:d3:86: cc:6c:55:e9:a2:ff:ed:32:31:6f:22:04:0b:32:5e:22:1e:25: 9f:66:c1:78:38:50:b9:30:e5:b6:5c:93:3a:6d:b9:66:37:d5: da:3b:47:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODMwQTUxMTAvBgNVBAUTKEVDNEFFMzU2Q0MwMjMyMjk4RDNDRDlGRDIwNDEzNTY3 REJCN0ZDMjUwHhcNMjUwMzI5MDAzMjA3WhcNMjUwNDA1MDAzMjA3WjAYMRYwFAYD VQQDEw02N2U3M2Y4Ny03YjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0Ym/flzGgXT58RdbcaY9NBq8p0V8HyjaCtvt8HYWd5pNNgv9I3N7yP2+Ld/ 5kw2YtvmP0Xau6A7OQwmW1JUPjqcCqL5DdbYtocrU4IJ0HVXJf/S03sDjj8M7XqS 8GShPCoxzvMYm3wGnl4nZpXtQ3K+YYwKM2dmpK4rvwNBsOXASnkp3dl0TUEc3p5h sR9Wbv0MQs+zF+fxyDnkotAAP3CKxxoXYmvaJpPq4XR01PVcmI8y22evui8camkA VAX6Dbx/Q0KOq4IfO5uvn1dEqSYeLByYfBYCtGFhmweuEC6tha7L4OeKVCnBr1QI yl4nFQWu+lWM8qcLoM/Cr3OwsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArKksbz tPRmPP6hdTbPiRP4+2qeMB8GA1UdIwQYMBaAFOxK41bMAjIpjTzZ/SBBNWfbt/wl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzBBNS9EODI0MThGRTUx NjYxMUVDQUQ1NjU4NjdDNEY5QUUwMi83RXJqVnN3Q01pbU5QTm45SUVFMVo5dTNf Q1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFcmpWc3dDTWltTlBObjlJRUUxWjl1M19DVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzBBNS9EODI0MThGRTUxNjYxMUVDQUQ1NjU4NjdDNEY5QUUwMi83RXJqVnN3Q01p bU5QTm45SUVFMVo5dTNfQ1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACFMD+uIt1uV2KnUlxNhEzdz287c1DXAZrrKEtHB5pWOq8tOIVDIZT /NzzqTkBAZ4YmptF9Ybyri2UkVZ5qnTMJum03zpiG8GjSA/YMaBDz6aMrVr0FVrM hnQ/tPWp1CwQ+YctGf6Liz6aM+6kIu3pubuFCuqALJlkphXqOOvQUw5H0LUKbnaG swLr3Y0HyNV9/RNFs5g5ZgSqyzS8j3MeBAIs2KI5UulSfklIRByV9BSu7JgF2ZAd EzKlK+JnLYw0Fw3w3trBf2ijqu3Dx3Prpr4k4Mv804bMbFXpov/tMjFvIgQLMl4i HiWfZsF4OFC5MOW2XJM6bblmN9XaO0eV -----END CERTIFICATE-----Generated at Fri Apr 4 18:04:17 2025 by rpki-client