$ rpki-client -vvf rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft File: V7aHJ0szGe2QcblmFY-birZK5vc.mft (raw, json) Hash identifier: TcuPGtsPetMmO3ck7h4gaqB89xfvq43iYosU2aW/1x0= Subject key identifier: 05:70:9C:D3:3F:40:0A:09:21:11:C7:95:BC:C4:58:83:FB:F6:8F:02 Authority key identifier: 57:B6:87:27:4B:33:19:ED:90:71:B9:66:15:8F:9B:8A:B6:4A:E6:F7 Certificate issuer: /CN=A91B527E/serialNumber=57B687274B3319ED9071B966158F9B8AB64AE6F7 Certificate serial: 277A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft Manifest number: 2773 Signing time: Sat 12 Apr 2025 15:35:52 +0000 Manifest this update: Sat 12 Apr 2025 15:35:52 +0000 Manifest next update: Sat 19 Apr 2025 15:35:52 +0000 Files and hashes: 1: V7aHJ0szGe2QcblmFY-birZK5vc.crl (hash: D8Di+glohrfgZSMrhMlSP9a0kHBjDZjLRH1pkwP5ij0=) 2: C22BA9D094E411EA9076F758C4F9AE02.roa (hash: IgwhRGzkUSBDQMKcII70Dlgk2iFbA7Ss/RSC/5v2m40=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.crl rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 15:35:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10106 (0x277a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B527E, serialNumber=57B687274B3319ED9071B966158F9B8AB64AE6F7 Validity Not Before: Apr 12 15:35:52 2025 GMT Not After : Apr 19 15:35:52 2025 GMT Subject: CN=67fa8858-0859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:51:92:77:dc:48:2e:38:aa:ff:79:f8:9a:eb: 54:78:4e:58:45:0d:7e:9b:85:78:86:5b:72:70:5a: bc:7d:0d:c5:46:dc:6e:bc:5c:9b:5f:a2:ca:cb:f7: 06:1a:bc:d5:51:4f:88:a4:e7:ad:a7:f7:2c:53:93: b7:ce:41:c9:5d:ac:2a:3b:9d:41:38:61:64:9f:a4: 05:ba:ab:e2:0a:70:ec:6a:72:9f:90:dd:6d:91:ad: 8d:73:d1:e7:d0:8b:3a:4d:fc:53:8a:d7:e1:65:20: 62:b0:d8:ae:ba:aa:2a:51:c1:cb:5e:63:35:53:79: 88:1a:6a:e8:db:dd:fd:41:8e:02:c0:91:d0:c1:43: 8a:f9:e6:1b:8a:7d:b5:63:32:05:9d:36:09:6a:1d: 43:94:43:c4:3b:ea:6e:c0:a9:e4:1e:c7:5a:50:10: 59:08:70:c0:47:eb:ed:23:5e:d9:c5:93:7e:16:62: 9d:6e:00:76:0e:4d:2b:5e:41:36:6a:12:78:6f:d1: b2:f2:d0:98:d6:e0:b1:8c:5d:cb:c8:a3:be:89:96: b1:42:e2:b7:ff:62:0c:fe:96:d5:a1:44:32:5c:9d: 8f:e2:95:c1:30:c9:c3:72:45:93:91:53:b7:de:cb: 88:86:c2:99:11:5a:84:6b:dc:98:c5:a6:3a:4c:47: ac:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:70:9C:D3:3F:40:0A:09:21:11:C7:95:BC:C4:58:83:FB:F6:8F:02 X509v3 Authority Key Identifier: keyid:57:B6:87:27:4B:33:19:ED:90:71:B9:66:15:8F:9B:8A:B6:4A:E6:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:b8:b4:58:40:2b:8b:b7:fe:51:1a:a2:b6:18:61:ad:3a:79: 68:ad:23:3a:93:28:8c:59:24:dc:0a:59:67:1b:ee:48:2e:fe: 55:c3:ae:1e:c6:5d:c7:80:1f:52:59:8d:75:9b:e4:52:9b:b1: 0b:0f:ed:80:88:a9:d8:e9:dd:4f:a5:95:d9:af:9c:09:b9:bb: 49:80:c4:7d:a7:15:c3:00:e8:74:ab:90:57:83:e0:db:35:2c: 38:3f:1a:a1:34:62:6c:99:1d:2a:ca:d7:56:d9:bd:c4:d9:6a: 04:ad:f0:10:db:24:c4:56:85:85:6a:ab:c2:a6:f3:ff:2f:06: 19:2f:95:1a:6d:7b:02:4f:0f:3d:b8:37:77:4a:11:bb:3d:c2: af:88:61:c8:3a:50:17:82:43:4b:4e:39:ff:ec:1e:63:9f:65: a9:89:e8:f1:91:e7:09:37:36:b7:41:0a:c1:0b:c5:9a:f9:a0: bd:d8:99:72:9d:86:5c:d7:e7:d4:7f:b8:22:6b:d6:78:10:71: d1:e3:27:41:e4:d9:56:24:fe:a6:d1:71:70:40:26:86:80:f5: e0:f8:b4:b1:87:7f:15:87:6c:95:81:fb:17:95:c3:7e:cc:59: b2:37:d2:b3:f2:8f:e7:72:7f:bf:a8:b7:67:17:5c:00:fd:ef: c0:55:5d:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUyN0UxMTAvBgNVBAUTKDU3QjY4NzI3NEIzMzE5RUQ5MDcxQjk2NjE1OEY5QjhB QjY0QUU2RjcwHhcNMjUwNDEyMTUzNTUyWhcNMjUwNDE5MTUzNTUyWjAYMRYwFAYD VQQDEw02N2ZhODg1OC0wODU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3VGSd9xILjiq/3n4mutUeE5YRQ1+m4V4hltycFq8fQ3FRtxuvFybX6LKy/cG GrzVUU+IpOetp/csU5O3zkHJXawqO51BOGFkn6QFuqviCnDsanKfkN1tka2Nc9Hn 0Is6TfxTitfhZSBisNiuuqoqUcHLXmM1U3mIGmro2939QY4CwJHQwUOK+eYbin21 YzIFnTYJah1DlEPEO+puwKnkHsdaUBBZCHDAR+vtI17ZxZN+FmKdbgB2Dk0rXkE2 ahJ4b9Gy8tCY1uCxjF3LyKO+iZaxQuK3/2IM/pbVoUQyXJ2P4pXBMMnDckWTkVO3 3suIhsKZEVqEa9yYxaY6TEesgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAVwnNM/ QAoJIRHHlbzEWIP79o8CMB8GA1UdIwQYMBaAFFe2hydLMxntkHG5ZhWPm4q2Sub3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTI3RS9FOEE4OENCQUFC NzIxMUU0QjhCQkI4MUNDNEY5QUUwMi9WN2FISjBzekdlMlFjYmxtRlktYmlyWks1 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Y3YUhKMHN6R2UyUWNibG1GWS1iaXJaSzV2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTI3RS9FOEE4OENCQUFCNzIxMUU0QjhCQkI4MUNDNEY5QUUwMi9WN2FISjBzekdl MlFjYmxtRlktYmlyWks1dmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2uLRYQCuLt/5RGqK2GGGtOnlorSM6kyiMWSTcCllnG+5ILv5Vw64e xl3HgB9SWY11m+RSm7ELD+2AiKnY6d1PpZXZr5wJubtJgMR9pxXDAOh0q5BXg+Db NSw4PxqhNGJsmR0qytdW2b3E2WoErfAQ2yTEVoWFaqvCpvP/LwYZL5UabXsCTw89 uDd3ShG7PcKviGHIOlAXgkNLTjn/7B5jn2WpiejxkecJNza3QQrBC8Wa+aC92Jly nYZc1+fUf7gia9Z4EHHR4ydB5NlWJP6m0XFwQCaGgPXg+LSxh38Vh2yVgfsXlcN+ zFmyN9Kz8o/ncn+/qLdnF1wA/e/AVV0v -----END CERTIFICATE-----Generated at Sat Apr 12 23:12:09 2025 by rpki-client