$ rpki-client -vvf rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.mft File: rFX7db_jQ-SUh9hRwBOcE2TK6c4.mft (raw, json) Hash identifier: /rmBJxayW/RZteAp8v3es5WV8vCRkmTkyo8gvlU9QIY= Subject key identifier: 9E:DB:D9:E9:85:0C:07:2B:B7:ED:E2:A8:84:E6:E8:D9:AD:90:C0:FC Authority key identifier: AC:55:FB:75:BF:E3:43:E4:94:87:D8:51:C0:13:9C:13:64:CA:E9:CE Certificate issuer: /CN=A91A799E/serialNumber=AC55FB75BFE343E49487D851C0139C1364CAE9CE Certificate serial: 0651 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFX7db_jQ-SUh9hRwBOcE2TK6c4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.mft Manifest number: 0647 Signing time: Fri 28 Mar 2025 22:46:27 +0000 Manifest this update: Fri 28 Mar 2025 22:46:27 +0000 Manifest next update: Fri 04 Apr 2025 22:46:27 +0000 Files and hashes: 1: rFX7db_jQ-SUh9hRwBOcE2TK6c4.crl (hash: lyiQ4/Nk8HVb3LoLi3E5CDKlSOzJRsb+2fC4Vqfoer4=) 2: 6AC62B967FD711EBA2ECB43BC4F9AE02.roa (hash: gL2nII9XEbxnadb0waQYWcnam9MRSvEB52poepWih4w=) 3: 517F49AA822611EB8990276EC4F9AE02.roa (hash: CVEUO3oD78hdPnE1F9V5H7s7rSJsTEHJ4Ohcr53z470=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.crl rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFX7db_jQ-SUh9hRwBOcE2TK6c4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:46:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1617 (0x651) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A799E Validity Not Before: Mar 28 22:46:27 2025 GMT Not After : Apr 4 22:46:27 2025 GMT Subject: CN=67e726c3-db55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a3:1c:14:58:46:2c:95:56:f7:74:73:52:b7: 59:56:5a:72:ea:e3:b0:a5:4d:dc:89:8f:8d:0a:f4: ee:f4:8d:16:08:3b:47:f1:d3:c2:78:0f:86:80:d8: 27:74:bf:b3:aa:75:d9:d0:1e:4d:8c:a0:09:f8:69: b8:81:e6:cf:2d:f0:42:7b:43:79:0a:49:e7:be:ae: 0a:83:50:f8:84:2d:6c:ef:86:5d:ac:c7:74:bf:fd: 3f:35:12:27:4a:83:28:27:0a:07:fe:8b:a9:24:ca: 87:e8:91:e6:bd:ba:25:02:3b:94:0f:9c:5e:d7:b5: 7f:bd:5e:e2:62:12:08:87:c2:65:1a:96:2c:78:a9: 57:3c:f9:31:fa:fd:e5:25:37:82:40:fc:9a:b9:c6: 88:be:20:10:b9:35:6f:06:80:2c:c3:4b:bc:12:ef: 0b:a8:4c:9c:4b:3e:91:03:5e:00:e7:c4:d0:25:9c: f5:b4:13:b9:62:38:75:3f:9d:1c:f5:ba:ef:70:c8: 74:96:bf:b3:c8:dc:6d:59:2a:68:93:00:8e:2d:e0: 25:71:ad:ed:52:21:0d:8b:16:59:8c:13:b1:86:30: a7:36:04:ba:8b:0d:3f:13:66:e5:ae:65:df:7c:a1: cb:bb:37:0d:1f:43:43:a4:ed:e9:32:88:24:db:84: 13:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:DB:D9:E9:85:0C:07:2B:B7:ED:E2:A8:84:E6:E8:D9:AD:90:C0:FC X509v3 Authority Key Identifier: keyid:AC:55:FB:75:BF:E3:43:E4:94:87:D8:51:C0:13:9C:13:64:CA:E9:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFX7db_jQ-SUh9hRwBOcE2TK6c4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:3b:74:3b:11:b9:e2:fb:8e:82:1e:ea:00:46:44:4b:fe:c7: 9a:b6:fa:8f:4b:ca:66:8b:0e:46:a8:91:d0:e7:2b:a1:83:97: a5:89:43:6a:89:df:e8:2f:0c:95:65:c9:2b:3e:4c:12:46:88: 27:90:d3:cf:59:37:3e:ff:83:a5:7d:ed:3f:0d:74:06:54:cb: 27:b2:9e:47:1e:f8:e4:47:0a:d9:a9:fc:bd:b3:6c:db:23:43: f8:20:24:a6:e6:d4:8b:4a:f7:8e:33:f5:b9:b6:00:9c:42:3e: f2:f5:39:cb:a4:a9:29:22:ea:39:86:79:0d:7b:47:d9:3a:32: a9:c0:c4:00:bc:2a:29:e1:33:a2:43:e9:2c:69:d6:e1:69:a1: b6:1d:a8:4b:c5:78:2b:7b:44:1e:46:c4:59:86:40:3d:cc:2f: 3e:16:ea:3f:87:d1:aa:4a:f2:50:9a:22:ff:8f:4e:a5:91:12: 79:d1:7d:81:14:aa:d1:b4:ad:56:3e:2c:03:72:13:8b:54:4f: 97:8d:65:f4:62:9c:76:fe:64:86:ce:e9:58:36:fb:a8:60:90: 5c:dd:e0:e6:12:c2:50:85:72:e2:3a:23:f5:cd:d4:fa:92:04: 08:bd:38:28:3a:29:96:b1:fd:30:5d:dc:35:ea:aa:6d:76:c8: 77:a3:78:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc5OUUxMTAvBgNVBAUTKEFDNTVGQjc1QkZFMzQzRTQ5NDg3RDg1MUMwMTM5QzEz NjRDQUU5Q0UwHhcNMjUwMzI4MjI0NjI3WhcNMjUwNDA0MjI0NjI3WjAYMRYwFAYD VQQDEw02N2U3MjZjMy1kYjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqMcFFhGLJVW93RzUrdZVlpy6uOwpU3ciY+NCvTu9I0WCDtH8dPCeA+GgNgn dL+zqnXZ0B5NjKAJ+Gm4gebPLfBCe0N5Cknnvq4Kg1D4hC1s74ZdrMd0v/0/NRIn SoMoJwoH/oupJMqH6JHmvbolAjuUD5xe17V/vV7iYhIIh8JlGpYseKlXPPkx+v3l JTeCQPyaucaIviAQuTVvBoAsw0u8Eu8LqEycSz6RA14A58TQJZz1tBO5Yjh1P50c 9brvcMh0lr+zyNxtWSpokwCOLeAlca3tUiENixZZjBOxhjCnNgS6iw0/E2blrmXf fKHLuzcNH0NDpO3pMogk24QTzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7b2emF DAcrt+3iqITm6NmtkMD8MB8GA1UdIwQYMBaAFKxV+3W/40PklIfYUcATnBNkyunO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzk5RS8yNTVDRTgzNDdG RDYxMUVCOUZEMTIzM0JDNEY5QUUwMi9yRlg3ZGJfalEtU1VoOWhSd0JPY0UyVEs2 YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JGWDdkYl9qUS1TVWg5aFJ3Qk9jRTJUSzZjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzk5RS8yNTVDRTgzNDdGRDYxMUVCOUZEMTIzM0JDNEY5QUUwMi9yRlg3ZGJfalEt U1VoOWhSd0JPY0UyVEs2YzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPO3Q7Ebni+46CHuoARkRL/seatvqPS8pmiw5GqJHQ5yuhg5eliUNq id/oLwyVZckrPkwSRognkNPPWTc+/4Olfe0/DXQGVMsnsp5HHvjkRwrZqfy9s2zb I0P4ICSm5tSLSveOM/W5tgCcQj7y9TnLpKkpIuo5hnkNe0fZOjKpwMQAvCop4TOi Q+ksadbhaaG2HahLxXgre0QeRsRZhkA9zC8+Fuo/h9GqSvJQmiL/j06lkRJ50X2B FKrRtK1WPiwDchOLVE+XjWX0Ypx2/mSGzulYNvuoYJBc3eDmEsJQhXLiOiP1zdT6 kgQIvTgoOimWsf0wXdw16qptdsh3o3hQ -----END CERTIFICATE-----Generated at Fri Apr 4 21:53:56 2025 by rpki-client