$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft File: 7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json) Hash identifier: ExYJZD2oMX+Z0Bu23dEw+Agc0NAJKi8VWSxGLtsnRO8= Subject key identifier: 0E:6A:CE:93:2A:57:3B:9B:DC:FC:1A:E7:1A:CA:8C:06:E4:C9:E5:E8 Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40 Certificate issuer: /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40 Certificate serial: 01BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft Manifest number: 01B5 Signing time: Thu 03 Apr 2025 02:31:39 +0000 Manifest this update: Thu 03 Apr 2025 02:31:39 +0000 Manifest next update: Thu 10 Apr 2025 02:31:39 +0000 Files and hashes: 1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: vEG6NjG57+y7qCCIyPI2XOxY1hT56Etz0slerHG7fa4=) 2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: bI9ehsJkdKReP7tO6LRGZVdy5KgC9pIKmuFrjzQkdWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A93B6 Validity Not Before: Apr 3 02:31:39 2025 GMT Not After : Apr 10 02:31:39 2025 GMT Subject: CN=67edf30b-fe8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a0:4e:1d:9a:bb:26:31:a1:cb:11:1e:c2:49: 77:40:18:0a:c6:f5:1b:52:80:9d:79:e6:bb:16:00: cf:bc:c5:13:53:29:2c:2c:ff:75:59:62:c3:1e:9e: 09:dc:6e:60:bb:95:85:0e:bb:a5:05:cf:d6:88:e7: 63:00:8e:28:d6:43:09:6d:44:92:a4:f9:52:9f:8a: d7:83:26:0b:74:8e:0c:c0:4a:92:88:ad:cd:90:0c: 24:e0:2f:c9:b7:72:47:70:53:58:de:00:11:7f:7c: 82:f1:ab:ba:a5:72:3b:d6:d4:ea:51:99:b0:23:a1: 3d:42:4c:ad:c1:41:34:a6:b6:f2:18:cf:9e:88:45: 8f:79:c2:6e:f6:48:96:5c:01:8d:fc:44:e7:d9:c5: 20:87:28:54:cf:19:7b:f6:2a:80:a4:a1:1a:c5:cc: ee:87:e0:2d:4f:59:5a:df:8e:f2:58:25:1c:1c:20: 2d:31:b7:f0:33:42:75:6b:80:80:46:67:b0:22:0e: 93:e4:2d:cc:63:6b:d7:31:d7:b0:0f:d1:28:2f:ef: 16:1e:69:f0:2a:b2:22:19:13:3d:f6:c1:4a:0b:1d: e6:d4:62:84:d4:6d:07:67:dc:37:97:02:b1:51:e4: 12:f9:e2:f1:4e:b8:43:bd:3a:ec:43:d7:6f:1e:d6: b1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:6A:CE:93:2A:57:3B:9B:DC:FC:1A:E7:1A:CA:8C:06:E4:C9:E5:E8 X509v3 Authority Key Identifier: keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:b7:df:55:84:4f:68:68:2f:67:92:94:4d:34:c5:fe:cb:4a: 34:b9:15:ec:52:06:a8:9e:fc:b1:44:fa:62:79:01:4d:ef:ba: 14:35:08:99:08:2f:c9:05:e7:70:27:48:54:43:c3:a4:b6:b5: dd:55:d9:1c:e9:d0:19:60:c0:63:7a:f0:12:ad:fb:08:d6:68: 7e:85:be:b5:12:58:ea:d6:72:57:54:0d:eb:f7:6a:a7:3d:b2: 81:69:8b:ab:a2:4e:c2:20:4c:35:31:78:d8:9a:a7:b1:50:23: 7c:f5:d4:d9:ff:9a:97:2f:a1:0c:7a:97:d9:a5:5f:56:81:76: af:00:97:4a:95:98:cd:a3:d1:d9:7f:0b:af:45:98:7d:90:5d: 6c:23:71:21:31:e2:ed:2e:05:aa:1d:58:82:16:10:23:d2:5e: 3e:fa:0a:f0:af:74:3f:98:6b:f3:e4:9a:d6:b3:af:54:78:bb: 04:a0:3a:21:0f:74:4a:24:a4:f0:b7:bf:a7:32:8a:74:01:74: 73:ed:6e:e2:35:8d:4f:0e:bf:ef:b5:e4:5a:0b:12:9b:0d:eb: 9b:a9:6b:f1:92:47:09:87:d1:03:e0:c9:64:f8:ce:67:28:48: 58:f1:a2:82:97:b8:f3:84:7a:06:ad:ff:6d:c9:fb:54:7b:20: 33:82:02:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkzQjYxMTAvBgNVBAUTKEVERkQxNERCNkZEM0IwMkE3OTM1REFBRDQ3RkMwMjlG M0E3MDRDNDAwHhcNMjUwNDAzMDIzMTM5WhcNMjUwNDEwMDIzMTM5WjAYMRYwFAYD VQQDEw02N2VkZjMwYi1mZThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqBOHZq7JjGhyxEewkl3QBgKxvUbUoCdeea7FgDPvMUTUyksLP91WWLDHp4J 3G5gu5WFDrulBc/WiOdjAI4o1kMJbUSSpPlSn4rXgyYLdI4MwEqSiK3NkAwk4C/J t3JHcFNY3gARf3yC8au6pXI71tTqUZmwI6E9QkytwUE0prbyGM+eiEWPecJu9kiW XAGN/ETn2cUghyhUzxl79iqApKEaxczuh+AtT1la347yWCUcHCAtMbfwM0J1a4CA RmewIg6T5C3MY2vXMdewD9EoL+8WHmnwKrIiGRM99sFKCx3m1GKE1G0HZ9w3lwKx UeQS+eLxTrhDvTrsQ9dvHtaxeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5qzpMq Vzub3Pwa5xrKjAbkyeXoMB8GA1UdIwQYMBaAFO39FNtv07AqeTXarUf8Ap86cExA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTNCNi83MEJDRkNFMDdD NTcxMUVEQTgxMDc4NjZDNEY5QUUwMi83ZjBVMjJfVHNDcDVOZHF0Ul93Q256cHdU RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdmMFUyMl9Uc0NwNU5kcXRSX3dDbnpwd1RFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTNCNi83MEJDRkNFMDdDNTcxMUVEQTgxMDc4NjZDNEY5QUUwMi83ZjBVMjJfVHND cDVOZHF0Ul93Q256cHdURUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCt99VhE9oaC9nkpRNNMX+y0o0uRXsUgaonvyxRPpieQFN77oUNQiZ CC/JBedwJ0hUQ8OktrXdVdkc6dAZYMBjevASrfsI1mh+hb61Eljq1nJXVA3r92qn PbKBaYurok7CIEw1MXjYmqexUCN89dTZ/5qXL6EMepfZpV9WgXavAJdKlZjNo9HZ fwuvRZh9kF1sI3EhMeLtLgWqHViCFhAj0l4++grwr3Q/mGvz5JrWs69UeLsEoDoh D3RKJKTwt7+nMop0AXRz7W7iNY1PDr/vteRaCxKbDeubqWvxkkcJh9ED4Mlk+M5n KEhY8aKCl7jzhHoGrf9tyftUeyAzggJv -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:48 2025 by rpki-client