$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft File: f7FuQPo8p3_OJMTJpGRWg8OeihE.mft (raw, json) Hash identifier: RVLW0X4BzP1yRdmnOIKv8PXxqPimoCQSDiWWm8BNAlc= Subject key identifier: 9C:EB:A9:DB:9E:DE:51:A8:60:14:3E:8E:2E:45:AB:DB:4E:F2:D4:04 Authority key identifier: 7F:B1:6E:40:FA:3C:A7:7F:CE:24:C4:C9:A4:64:56:83:C3:9E:8A:11 Certificate issuer: /CN=A91AF83D/serialNumber=7FB16E40FA3CA77FCE24C4C9A4645683C39E8A11 Certificate serial: 0188 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft Manifest number: 0185 Signing time: Tue 15 Apr 2025 02:36:39 +0000 Manifest this update: Tue 15 Apr 2025 02:36:38 +0000 Manifest next update: Tue 22 Apr 2025 02:36:38 +0000 Files and hashes: 1: f7FuQPo8p3_OJMTJpGRWg8OeihE.crl (hash: 1d0X0GdoO/huBvxVLIiSNRXOHVTFzGt38ZEQA2q4H1E=) 2: AB3814CEC85411EDAE5D9322C4F9AE02.roa (hash: hP+l6tFfGRtL/s3PVotLK1C45PriZjz7pB5mLcbuaqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.crl rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 02:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 392 (0x188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF83D, serialNumber=7FB16E40FA3CA77FCE24C4C9A4645683C39E8A11 Validity Not Before: Apr 15 02:36:38 2025 GMT Not After : Apr 22 02:36:38 2025 GMT Subject: CN=67fdc637-45ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:01:d4:e8:6e:2f:0d:7f:b3:cf:f4:c6:96:00: cc:85:b5:a6:95:58:27:e9:1a:c9:b7:c1:b6:cf:bf: 90:42:7e:3b:97:a4:84:b4:f7:fd:a2:db:c9:80:8f: 58:30:41:de:cf:6e:ef:66:68:d1:ad:4a:f4:c8:4d: 8e:7c:84:dd:74:e4:d3:39:53:ee:80:49:d5:a3:27: e4:79:68:f2:db:05:6f:23:a7:4d:53:ca:95:60:95: 2b:45:4c:86:13:d4:87:ea:ae:43:8b:37:7a:35:44: a6:ed:91:57:bd:c3:62:06:5f:95:61:cc:90:64:8a: fe:bb:e8:82:86:a9:51:cf:a8:8d:2c:c2:6d:8b:09: 59:c9:3e:15:17:65:62:dc:2a:3a:47:ab:e9:e7:b8: 34:6f:3f:68:95:37:e6:da:dc:5f:0e:f7:92:43:2d: 6c:c8:4e:85:1e:ec:73:e0:eb:10:8a:3a:31:22:c1: d1:22:4a:58:41:c8:f4:fe:0c:14:6b:78:96:e3:f9: d9:9e:2f:cc:7b:82:8a:d6:e9:ef:fa:c5:e5:09:f0: 3f:1d:57:52:4f:02:de:64:4e:bc:0b:32:6b:38:52: b3:2f:5f:b3:f6:33:4e:bb:27:43:19:2c:71:4d:1e: a7:fb:cc:ca:27:1a:a8:dc:59:7c:b5:d3:9d:0a:e6: 79:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:EB:A9:DB:9E:DE:51:A8:60:14:3E:8E:2E:45:AB:DB:4E:F2:D4:04 X509v3 Authority Key Identifier: keyid:7F:B1:6E:40:FA:3C:A7:7F:CE:24:C4:C9:A4:64:56:83:C3:9E:8A:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:4a:a4:97:2f:65:4c:9f:63:44:99:6b:c5:8d:dc:c1:05:37: dc:3b:5c:3f:4f:aa:80:e9:c2:73:9e:92:c6:88:2d:23:26:03: 5d:ed:5f:8b:11:60:10:3d:a0:2e:58:e5:bd:6a:7d:46:10:84: 27:41:d3:01:6f:15:07:5b:30:67:b4:86:07:27:a6:ea:c6:8e: 76:11:86:6a:f3:4f:d7:bc:54:34:f0:cf:9d:cc:65:75:6f:08: c0:d0:13:25:ae:90:85:93:cb:87:d4:6f:4b:19:cf:19:75:13: 3b:64:9f:12:4f:05:ec:58:de:9b:d7:f5:28:a9:b4:b4:9f:26: 53:ce:60:65:8e:58:34:a0:e4:f5:0a:06:fc:8e:b5:07:7c:1e: 28:ba:f5:75:d7:43:44:6f:38:73:d1:3b:2c:e7:39:03:9b:61: 24:e3:bc:19:6c:4e:33:9f:20:d6:df:d0:86:0d:29:a9:ed:58: ce:63:25:0e:82:58:f8:67:a3:b3:55:6e:38:92:03:69:3e:10: 43:44:fa:36:d1:4d:8f:84:4c:cf:35:44:a4:61:d2:9e:e4:da: d0:7f:4d:87:ad:09:df:dc:8f:ad:68:b9:3c:08:f4:88:c7:cf: e4:ac:73:7e:77:5c:52:22:c8:4b:6a:c7:f5:86:80:52:07:fb: 00:d7:8f:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY4M0QxMTAvBgNVBAUTKDdGQjE2RTQwRkEzQ0E3N0ZDRTI0QzRDOUE0NjQ1Njgz QzM5RThBMTEwHhcNMjUwNDE1MDIzNjM4WhcNMjUwNDIyMDIzNjM4WjAYMRYwFAYD VQQDEw02N2ZkYzYzNy00NWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2QHU6G4vDX+zz/TGlgDMhbWmlVgn6RrJt8G2z7+QQn47l6SEtPf9otvJgI9Y MEHez27vZmjRrUr0yE2OfITddOTTOVPugEnVoyfkeWjy2wVvI6dNU8qVYJUrRUyG E9SH6q5Dizd6NUSm7ZFXvcNiBl+VYcyQZIr+u+iChqlRz6iNLMJtiwlZyT4VF2Vi 3Co6R6vp57g0bz9olTfm2txfDveSQy1syE6FHuxz4OsQijoxIsHRIkpYQcj0/gwU a3iW4/nZni/Me4KK1unv+sXlCfA/HVdSTwLeZE68CzJrOFKzL1+z9jNOuydDGSxx TR6n+8zKJxqo3Fl8tdOdCuZ5zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzrqdue 3lGoYBQ+ji5Fq9tO8tQEMB8GA1UdIwQYMBaAFH+xbkD6PKd/ziTEyaRkVoPDnooR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjgzRC9BM0Q1MkZCOEM4 NTAxMUVEQUY1QkJBODdDNEY5QUUwMi9mN0Z1UVBvOHAzX09KTVRKcEdSV2c4T2Vp aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y3RnVRUG84cDNfT0pNVEpwR1JXZzhPZWloRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjgzRC9BM0Q1MkZCOEM4NTAxMUVEQUY1QkJBODdDNEY5QUUwMi9mN0Z1UVBvOHAz X09KTVRKcEdSV2c4T2VpaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABSqSXL2VMn2NEmWvFjdzBBTfcO1w/T6qA6cJznpLGiC0jJgNd7V+L EWAQPaAuWOW9an1GEIQnQdMBbxUHWzBntIYHJ6bqxo52EYZq80/XvFQ08M+dzGV1 bwjA0BMlrpCFk8uH1G9LGc8ZdRM7ZJ8STwXsWN6b1/UoqbS0nyZTzmBljlg0oOT1 Cgb8jrUHfB4ouvV110NEbzhz0Tss5zkDm2Ek47wZbE4znyDW39CGDSmp7VjOYyUO glj4Z6OzVW44kgNpPhBDRPo20U2PhEzPNUSkYdKe5NrQf02HrQnf3I+taLk8CPSI x8/krHN+d1xSIshLasf1hoBSB/sA14+H -----END CERTIFICATE-----Generated at Wed Apr 16 17:09:14 2025 by rpki-client