$ rpki-client -vvf rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft File: 7grUN1-fCpi3ptnvqKUlFY2BcJE.mft (raw, json) Hash identifier: 3QFCxUo6d9fPQa1s0mmbvI2S4ckcDfaiV2/6iijvZMk= Subject key identifier: C3:FB:F7:58:AE:F6:C1:F7:EE:E0:49:84:4C:32:63:8E:EF:03:1F:EB Authority key identifier: EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91 Certificate issuer: /CN=A9193BF8/serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091 Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft Manifest number: 016D Signing time: Sat 29 Mar 2025 03:22:32 +0000 Manifest this update: Sat 29 Mar 2025 03:22:32 +0000 Manifest next update: Sat 05 Apr 2025 03:22:32 +0000 Files and hashes: 1: 7grUN1-fCpi3ptnvqKUlFY2BcJE.crl (hash: vynXji8oTyMvFAZrV2wteMlLj7CG9/2Wem95+ZH0RyU=) 2: B983A684E01811ED8385DA62C4F9AE02.roa (hash: XNf/2Q6uWI444vIMmSBl+gGmGXhm3xu89mz5NFyHmH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193BF8 Validity Not Before: Mar 29 03:22:32 2025 GMT Not After : Apr 5 03:22:32 2025 GMT Subject: CN=67e76778-df1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:70:26:7a:47:a1:07:ba:34:f9:93:0d:74:6d: b9:b6:d5:d2:70:ea:3b:2d:cf:9e:a3:a6:d2:69:4c: fa:e2:0c:e6:15:6d:41:1e:4e:03:7b:64:14:12:c0: 82:6b:50:44:86:a4:e3:c6:80:90:02:36:21:06:b1: f8:a0:c0:74:fd:1f:b7:67:4a:c1:ad:56:35:64:1b: 6f:97:5d:8a:b1:61:2d:b3:af:2a:49:f8:ab:60:0d: c5:2d:96:cb:51:88:8c:30:da:22:8b:b8:41:5d:c1: 5e:b2:7c:cf:69:0a:91:a9:33:6f:8d:06:22:3f:fe: d3:c8:ae:cc:04:ab:de:1b:02:cf:5e:ec:76:b9:f3: c4:98:cd:7f:d2:1b:da:71:e8:5d:52:3b:1b:b4:b2: 3a:e1:12:08:a0:85:8d:aa:75:eb:e5:23:05:a1:37: ac:12:88:d2:4a:57:c8:90:5f:77:77:52:dd:0a:99: 67:e9:0b:09:00:a0:2c:57:69:4e:f6:80:62:2d:0a: 4a:c1:20:8f:4f:a5:b4:14:43:78:9e:c1:a0:1f:21: ad:41:ba:89:45:a1:f9:22:bc:b5:07:1a:e7:41:6a: 5e:c7:15:bd:cf:ad:07:ad:02:29:5f:df:58:18:7d: f8:89:60:2c:7a:01:5c:c7:46:40:fb:aa:c5:aa:95: 09:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FB:F7:58:AE:F6:C1:F7:EE:E0:49:84:4C:32:63:8E:EF:03:1F:EB X509v3 Authority Key Identifier: keyid:EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:6f:5d:4f:67:db:f0:69:04:55:43:9c:27:b6:2b:50:b2:2f: db:33:f7:5c:db:bb:c6:db:e4:cc:89:93:33:79:da:fc:05:90: f2:60:83:03:5d:45:9a:40:49:b5:57:3d:0f:e5:60:46:95:12: 2e:4a:23:25:c1:ff:43:37:f7:ba:59:7b:8a:0f:13:9d:a4:1a: b6:1e:19:d6:fb:17:ed:bb:a4:7d:fd:ae:84:ac:7d:60:b9:3a: 7b:1c:03:d8:78:f3:5a:6d:28:b8:d0:19:17:da:9c:30:58:bd: 62:66:c7:44:28:66:b5:15:0a:01:54:cf:7f:5e:7c:5d:f7:52: 27:eb:d3:d6:8e:94:67:8c:98:4c:22:76:c1:05:5f:8d:ff:8d: cc:ec:fb:87:d8:1f:c7:1d:80:e4:88:5b:df:88:30:7c:56:20: 6a:9f:75:cf:56:12:5d:e5:e7:97:3c:5e:a1:9d:b0:03:8b:dd: e6:21:44:fb:1e:b7:c9:fc:79:22:46:c0:9d:4f:3c:00:8f:4a: 05:48:16:03:ef:80:d5:21:0a:e8:2b:ce:2c:7f:76:a0:27:f7: f2:c3:98:fa:df:23:48:10:49:18:11:ca:fe:74:37:41:a0:4d: 6b:c6:a2:94:5f:87:40:29:e6:1f:f0:d6:a9:5d:bc:96:19:0f: 68:9f:81:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNCRjgxMTAvBgNVBAUTKEVFMEFENDM3NUY5RjBBOThCN0E2RDlFRkE4QTUyNTE1 OEQ4MTcwOTEwHhcNMjUwMzI5MDMyMjMyWhcNMjUwNDA1MDMyMjMyWjAYMRYwFAYD VQQDEw02N2U3Njc3OC1kZjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHAmekehB7o0+ZMNdG25ttXScOo7Lc+eo6bSaUz64gzmFW1BHk4De2QUEsCC a1BEhqTjxoCQAjYhBrH4oMB0/R+3Z0rBrVY1ZBtvl12KsWEts68qSfirYA3FLZbL UYiMMNoii7hBXcFesnzPaQqRqTNvjQYiP/7TyK7MBKveGwLPXux2ufPEmM1/0hva cehdUjsbtLI64RIIoIWNqnXr5SMFoTesEojSSlfIkF93d1LdCpln6QsJAKAsV2lO 9oBiLQpKwSCPT6W0FEN4nsGgHyGtQbqJRaH5Iry1BxrnQWpexxW9z60HrQIpX99Y GH34iWAsegFcx0ZA+6rFqpUJaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMP791iu 9sH37uBJhEwyY47vAx/rMB8GA1UdIwQYMBaAFO4K1DdfnwqYt6bZ76ilJRWNgXCR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0JGOC9BQzI5NERFOEUw MTUxMUVEQjE2NjY5NjFDNEY5QUUwMi83Z3JVTjEtZkNwaTNwdG52cUtVbEZZMkJj SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdnclVOMS1mQ3BpM3B0bnZxS1VsRlkyQmNKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0JGOC9BQzI5NERFOEUwMTUxMUVEQjE2NjY5NjFDNEY5QUUwMi83Z3JVTjEtZkNw aTNwdG52cUtVbEZZMkJjSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIb11PZ9vwaQRVQ5wntitQsi/bM/dc27vG2+TMiZMzedr8BZDyYIMD XUWaQEm1Vz0P5WBGlRIuSiMlwf9DN/e6WXuKDxOdpBq2HhnW+xftu6R9/a6ErH1g uTp7HAPYePNabSi40BkX2pwwWL1iZsdEKGa1FQoBVM9/Xnxd91In69PWjpRnjJhM InbBBV+N/43M7PuH2B/HHYDkiFvfiDB8ViBqn3XPVhJd5eeXPF6hnbADi93mIUT7 HrfJ/HkiRsCdTzwAj0oFSBYD74DVIQroK84sf3agJ/fyw5j63yNIEEkYEcr+dDdB oE1rxqKUX4dAKeYf8NapXbyWGQ9on4HQ -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:45 2025 by rpki-client