$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft File: 7w5JMvxot1LjQokiqT5mq-MfNDE.mft (raw, json) Hash identifier: 6g2Dmkme0LXl5V01zBEaIlXkZnRLl2s6GAen2s8oCNQ= Subject key identifier: 61:A2:67:8E:6B:D6:48:A9:A1:ED:99:5E:1D:0F:F6:ED:67:8A:98:47 Authority key identifier: EF:0E:49:32:FC:68:B7:52:E3:42:89:22:A9:3E:66:AB:E3:1F:34:31 Certificate issuer: /CN=A91B4B33/serialNumber=EF0E4932FC68B752E3428922A93E66ABE31F3431 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft Manifest number: A0 Signing time: Mon 07 Apr 2025 05:05:46 +0000 Manifest this update: Mon 07 Apr 2025 05:05:46 +0000 Manifest next update: Mon 14 Apr 2025 05:05:46 +0000 Files and hashes: 1: 7w5JMvxot1LjQokiqT5mq-MfNDE.crl (hash: Pjibyz+yUSKvzYqmY/n0jliV13V8ROeoRoAIfioSh7A=) 2: 80741B04221F11EF92A42E1AC4F9AE02.roa (hash: tCXmsiS2pZhfyBR2w7/CD7l4+Sf7uzGB1XazUIv4/b4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.crl rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 05:05:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4B33 Validity Not Before: Apr 7 05:05:46 2025 GMT Not After : Apr 14 05:05:46 2025 GMT Subject: CN=67f35d2a-6f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ad:d8:49:34:79:2d:e5:32:68:9d:f0:0c:2b: cf:1d:82:03:55:45:96:3f:db:9a:49:2c:33:20:39: b1:f5:d5:7a:2e:0e:f3:b4:54:57:bb:8c:95:8e:34: 22:fd:a7:f3:4c:24:72:09:de:98:d8:dc:87:40:5e: 9d:a7:54:a9:55:d6:2d:c3:8d:72:34:b4:81:f7:87: 84:65:31:0c:a9:e9:43:38:8b:03:a5:bf:08:77:08: 91:da:3c:b9:b1:b3:1e:2d:24:72:e9:df:59:4b:6e: cd:f1:9e:15:ad:e2:ad:d6:85:fc:70:c4:41:c6:0e: 9e:fa:8c:b3:90:44:00:f8:61:dc:82:ce:eb:06:c3: 68:06:29:85:13:40:90:ec:e4:bc:ff:e7:1b:8a:07: c0:0a:70:fb:ee:bf:f0:f5:de:e9:22:1d:18:57:d4: be:46:d8:09:ce:c8:09:db:d3:f1:c3:39:a8:4a:e0: e8:4c:eb:3a:76:5c:49:89:59:87:38:57:f1:75:d2: 01:c1:8f:09:2d:6e:41:69:c8:ae:2e:bb:1e:9d:fd: 5f:c6:26:e4:e7:f2:fe:75:2f:b6:a3:1e:84:1c:f0: 6e:eb:bd:b7:c5:15:cd:65:6f:32:07:c7:c2:bc:45: 8c:e8:b7:57:66:ac:12:09:d0:66:0f:68:b0:71:f7: d5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A2:67:8E:6B:D6:48:A9:A1:ED:99:5E:1D:0F:F6:ED:67:8A:98:47 X509v3 Authority Key Identifier: keyid:EF:0E:49:32:FC:68:B7:52:E3:42:89:22:A9:3E:66:AB:E3:1F:34:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:0b:b1:9c:f4:5c:7f:c3:e9:05:e7:79:33:49:a0:81:69:e7: 27:de:94:e4:ad:58:e5:a4:c4:69:bd:08:6a:07:24:5e:62:b7: 28:ec:03:fa:67:c2:e4:d4:1d:46:0d:48:d7:8f:1d:00:bb:aa: 30:37:48:f7:40:e6:18:a3:55:e9:e8:68:a2:10:be:f6:3c:3b: f7:9f:ea:4e:ce:4e:06:11:3b:fd:7f:4b:2d:6b:23:9d:89:e5: 2c:e9:b0:ba:d3:a5:1e:80:31:24:8c:ee:c0:22:41:0d:5c:2c: cd:ec:10:63:23:85:84:03:8d:19:aa:41:52:46:b9:67:93:67: 93:5c:f7:73:28:ea:0a:bf:76:7f:61:6d:10:f5:72:a3:e3:cc: 83:f5:ad:b2:9e:18:33:c3:b4:73:ac:ab:b6:6d:9f:4f:c0:e4: 57:61:fa:0f:7c:84:21:b8:d3:85:17:7e:52:f0:b3:b0:83:39: e6:f8:57:58:a4:c4:15:0c:8c:92:69:9c:ab:97:50:ae:9e:ea: f4:89:1b:c3:13:4f:61:17:08:5e:5e:9c:33:56:6c:5c:a1:fa: 52:02:66:54:e9:4e:e5:47:27:f4:35:bd:19:29:5f:4b:5f:9e: fe:65:b7:1a:72:24:0d:54:62:19:95:3f:dd:1a:0c:3f:15:52: 15:48:a7:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRCMzMxMTAvBgNVBAUTKEVGMEU0OTMyRkM2OEI3NTJFMzQyODkyMkE5M0U2NkFC RTMxRjM0MzEwHhcNMjUwNDA3MDUwNTQ2WhcNMjUwNDE0MDUwNTQ2WjAYMRYwFAYD VQQDEw02N2YzNWQyYS02ZjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAua3YSTR5LeUyaJ3wDCvPHYIDVUWWP9uaSSwzIDmx9dV6Lg7ztFRXu4yVjjQi /afzTCRyCd6Y2NyHQF6dp1SpVdYtw41yNLSB94eEZTEMqelDOIsDpb8IdwiR2jy5 sbMeLSRy6d9ZS27N8Z4VreKt1oX8cMRBxg6e+oyzkEQA+GHcgs7rBsNoBimFE0CQ 7OS8/+cbigfACnD77r/w9d7pIh0YV9S+RtgJzsgJ29PxwzmoSuDoTOs6dlxJiVmH OFfxddIBwY8JLW5BaciuLrsenf1fxibk5/L+dS+2ox6EHPBu6723xRXNZW8yB8fC vEWM6LdXZqwSCdBmD2iwcffVRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGiZ45r 1kipoe2ZXh0P9u1niphHMB8GA1UdIwQYMBaAFO8OSTL8aLdS40KJIqk+ZqvjHzQx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEIzMy8xQUNFN0QwNDIy MUUxMUVGOTM0NEEzMDlDNEY5QUUwMi83dzVKTXZ4b3QxTGpRb2tpcVQ1bXEtTWZO REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzd3NUpNdnhvdDFMalFva2lxVDVtcS1NZk5ERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEIzMy8xQUNFN0QwNDIyMUUxMUVGOTM0NEEzMDlDNEY5QUUwMi83dzVKTXZ4b3Qx TGpRb2tpcVQ1bXEtTWZOREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMC7Gc9Fx/w+kF53kzSaCBaecn3pTkrVjlpMRpvQhqByReYrco7AP6 Z8Lk1B1GDUjXjx0Au6owN0j3QOYYo1Xp6GiiEL72PDv3n+pOzk4GETv9f0stayOd ieUs6bC606UegDEkjO7AIkENXCzN7BBjI4WEA40ZqkFSRrlnk2eTXPdzKOoKv3Z/ YW0Q9XKj48yD9a2ynhgzw7RzrKu2bZ9PwORXYfoPfIQhuNOFF35S8LOwgznm+FdY pMQVDIySaZyrl1Cunur0iRvDE09hFwheXpwzVmxcofpSAmZU6U7lRyf0Nb0ZKV9L X57+ZbcaciQNVGIZlT/dGgw/FVIVSKfa -----END CERTIFICATE-----Generated at Mon Apr 7 13:51:35 2025 by rpki-client