$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft File: 7BeaWHQiKOMLffeXiCZYOHglW3g.mft (raw, json) Hash identifier: U/jJOjaBzQHvyfLGY+Pv6BqorHiqolGq4CL9sNDrWx8= Subject key identifier: 70:33:61:D1:AB:28:43:4B:E7:76:3F:94:75:C9:30:43:DB:0B:A7:48 Authority key identifier: EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78 Certificate issuer: /CN=A91AA95A/serialNumber=EC179A58742228E30B7DF7978826583878255B78 Certificate serial: 0D95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft Manifest number: 0D91 Signing time: Fri 18 Apr 2025 18:03:22 +0000 Manifest this update: Fri 18 Apr 2025 18:03:22 +0000 Manifest next update: Fri 25 Apr 2025 18:03:22 +0000 Files and hashes: 1: 7BeaWHQiKOMLffeXiCZYOHglW3g.crl (hash: 8zhF0r14A9sVYXsUx0Df0WgOdbxY6V2Wz62mgymOVXs=) 2: E64999C258D611ED86C99945C4F9AE02.roa (hash: DQ+JErFx/tRloLusNXusv2s1HWOBWc0JnN5N02SFoik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 18:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3477 (0xd95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA95A, serialNumber=EC179A58742228E30B7DF7978826583878255B78 Validity Not Before: Apr 18 18:03:22 2025 GMT Not After : Apr 25 18:03:22 2025 GMT Subject: CN=680293ea-638c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f1:aa:82:f6:6f:07:5c:70:0a:63:03:67:e0: 51:5e:ed:72:7b:d7:0a:78:8c:5a:ee:25:94:c0:ff: a0:a5:3d:32:7e:29:40:ca:33:2e:6d:f8:49:81:a2: b8:e6:70:27:6d:0b:1a:95:1a:0e:6f:7e:56:76:fe: 1b:f2:9f:27:20:16:d7:51:54:ba:72:8d:ef:c0:cf: 82:12:22:88:8b:64:86:7a:ad:5c:f3:fc:e4:c0:f9: 86:b7:18:f2:9f:94:b9:2b:2e:5c:42:81:15:e5:04: 13:c1:66:5d:5f:8c:54:df:0a:57:5b:d5:d4:06:9a: 09:3e:66:6c:b2:32:26:e9:a9:5a:2e:fe:c6:5b:39: eb:94:73:40:54:d0:3e:d5:8e:3c:94:5a:5d:27:95: 3c:a6:b5:9f:9b:49:f9:9a:92:5f:51:c2:98:f6:bc: 4d:e1:a5:e8:d1:49:18:3f:f7:da:76:00:2d:54:ba: 2d:a6:e0:e0:ab:36:e1:75:e2:2e:a2:43:ab:f1:6c: 72:4f:ad:fd:53:2f:6c:6c:06:38:58:60:14:17:76: 45:ec:62:83:32:3f:27:91:1a:e8:fc:cd:7e:4a:61: 2b:c9:65:12:1b:2a:4f:b7:61:4c:06:4e:d0:f6:3e: ff:76:50:d2:2b:84:3f:97:48:5c:65:b2:16:62:dd: 6b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:33:61:D1:AB:28:43:4B:E7:76:3F:94:75:C9:30:43:DB:0B:A7:48 X509v3 Authority Key Identifier: keyid:EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:6f:ad:95:7e:44:6f:9f:0e:f4:99:31:61:dc:33:fe:5c:7c: 1d:5d:e0:8e:c3:d1:51:29:49:8a:6c:26:5c:32:f5:f3:d6:6b: 71:8d:bd:51:01:27:ab:0a:85:f7:aa:68:f5:42:a4:fe:2d:94: 70:cc:fa:3f:7b:bb:09:f0:22:51:93:61:73:a9:fe:2e:0c:2e: c1:24:7a:a5:1c:e9:30:7c:d9:ee:b9:14:57:b2:eb:8b:ce:fa: d9:58:82:91:5e:14:25:50:2d:73:32:36:bb:6c:ec:75:ee:9d: 70:75:4b:28:98:8f:73:5c:e7:21:ce:de:74:80:a2:93:a2:9f: 7a:2f:3f:51:28:ed:ee:18:26:9a:01:ab:16:9b:1d:eb:f6:70: df:4c:c9:56:8f:7b:19:c3:8d:88:d2:b2:64:30:e3:86:4a:1b: 10:a8:dc:d9:11:bf:26:f4:d5:e9:05:3a:40:f2:64:38:13:ce: d1:49:9b:8d:cd:9b:a3:c6:50:28:4d:bb:5e:63:a7:ff:49:a2: e0:c2:d5:d9:ae:9f:9c:96:d5:17:b2:c4:26:6b:cc:8b:c8:8f: db:cd:7c:34:b4:f5:48:23:a6:ab:75:19:26:8f:79:e6:1d:08: f2:ac:8f:d9:06:23:ca:38:04:78:e9:6d:3e:c5:2f:9d:49:05: db:84:84:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE5NUExMTAvBgNVBAUTKEVDMTc5QTU4NzQyMjI4RTMwQjdERjc5Nzg4MjY1ODM4 NzgyNTVCNzgwHhcNMjUwNDE4MTgwMzIyWhcNMjUwNDI1MTgwMzIyWjAYMRYwFAYD VQQDEw02ODAyOTNlYS02MzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnvGqgvZvB1xwCmMDZ+BRXu1ye9cKeIxa7iWUwP+gpT0yfilAyjMubfhJgaK4 5nAnbQsalRoOb35Wdv4b8p8nIBbXUVS6co3vwM+CEiKIi2SGeq1c8/zkwPmGtxjy n5S5Ky5cQoEV5QQTwWZdX4xU3wpXW9XUBpoJPmZssjIm6alaLv7GWznrlHNAVNA+ 1Y48lFpdJ5U8prWfm0n5mpJfUcKY9rxN4aXo0UkYP/fadgAtVLotpuDgqzbhdeIu okOr8WxyT639Uy9sbAY4WGAUF3ZF7GKDMj8nkRro/M1+SmEryWUSGypPt2FMBk7Q 9j7/dlDSK4Q/l0hcZbIWYt1rHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHAzYdGr KENL53Y/lHXJMEPbC6dIMB8GA1UdIwQYMBaAFOwXmlh0IijjC333l4gmWDh4JVt4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTk1QS9CMEQxRDVGQ0JF NzQxMUU5OEY5NUZBNjRDNEY5QUUwMi83QmVhV0hRaUtPTUxmZmVYaUNaWU9IZ2xX M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdCZWFXSFFpS09NTGZmZVhpQ1pZT0hnbFczZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTk1QS9CMEQxRDVGQ0JFNzQxMUU5OEY5NUZBNjRDNEY5QUUwMi83QmVhV0hRaUtP TUxmZmVYaUNaWU9IZ2xXM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIb62VfkRvnw70mTFh3DP+XHwdXeCOw9FRKUmKbCZcMvXz1mtxjb1R ASerCoX3qmj1QqT+LZRwzPo/e7sJ8CJRk2Fzqf4uDC7BJHqlHOkwfNnuuRRXsuuL zvrZWIKRXhQlUC1zMja7bOx17p1wdUsomI9zXOchzt50gKKTop96Lz9RKO3uGCaa AasWmx3r9nDfTMlWj3sZw42I0rJkMOOGShsQqNzZEb8m9NXpBTpA8mQ4E87RSZuN zZujxlAoTbteY6f/SaLgwtXZrp+cltUXssQma8yLyI/bzXw0tPVII6ardRkmj3nm HQjyrI/ZBiPKOAR46W0+xS+dSQXbhISF -----END CERTIFICATE-----Generated at Sat Apr 19 07:54:39 2025 by rpki-client