$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft File: 7cH-eLyHvyWy4419cs2cozAibOk.mft (raw, json) Hash identifier: f3NAJlc5NknTS22jUsNxPHJ57fa1Z5MAz9EBGWVpCSM= Subject key identifier: 72:68:FE:88:F6:CE:8C:CD:ED:9C:A6:2A:E2:A7:D3:C9:58:C7:E9:48 Authority key identifier: ED:C1:FE:78:BC:87:BF:25:B2:E3:8D:7D:72:CD:9C:A3:30:22:6C:E9 Certificate issuer: /CN=A91B5AAA/serialNumber=EDC1FE78BC87BF25B2E38D7D72CD9CA330226CE9 Certificate serial: 3466 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft Manifest number: 3F85 Signing time: Fri 04 Apr 2025 14:49:21 +0000 Manifest this update: Fri 04 Apr 2025 14:49:21 +0000 Manifest next update: Fri 11 Apr 2025 14:49:21 +0000 Files and hashes: 1: 7cH-eLyHvyWy4419cs2cozAibOk.crl (hash: 7v07YKQLo/q6jJA16cH14aTynPT4MA54mRgeTmWKqdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.crl rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13414 (0x3466) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5AAA Validity Not Before: Apr 4 14:49:21 2025 GMT Not After : Apr 11 14:49:21 2025 GMT Subject: CN=67eff171-9c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:08:29:96:36:2d:e4:e8:6f:f2:07:fa:ce:f6: 01:08:e2:36:6c:31:61:1c:f9:d1:a1:aa:42:6b:32: ab:22:84:99:3e:40:81:c3:3e:a1:ad:6c:68:ef:1c: ef:0a:78:50:ff:ed:66:e6:f6:ee:7e:47:ea:0c:2f: 43:55:ac:f2:94:81:dc:bd:1e:2e:f2:2f:57:9e:a7: f2:a5:c7:bb:13:fa:f1:af:0f:6a:4d:18:d8:0c:c7: f3:03:c4:56:f0:00:38:00:e0:39:37:df:ac:5b:81: fc:d6:83:fd:09:b1:51:d9:1d:bf:c9:02:4b:77:9e: 28:08:eb:90:75:4a:89:24:ad:8b:bd:b2:2d:72:a8: 89:c0:40:97:33:82:bd:cc:2c:e0:f5:16:26:ff:cd: 1c:73:ff:2f:63:94:8d:11:a3:bf:6e:d0:26:fc:bf: 0b:ca:4e:5c:e6:4f:2b:7d:02:fc:9f:79:dd:9e:cf: b8:8a:a4:5f:80:7c:f5:c7:16:c3:54:78:33:4b:18: 9a:51:a2:6d:aa:0f:43:e5:29:01:9c:e0:ed:32:be: c0:e1:f4:5b:e9:75:cd:5d:ce:c2:52:95:db:6c:15: 2d:54:a5:96:fe:12:af:15:33:fc:da:4b:99:c6:50: 32:cb:e1:d1:c3:fd:9a:bf:0b:0e:2a:0d:0f:13:19: d7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:68:FE:88:F6:CE:8C:CD:ED:9C:A6:2A:E2:A7:D3:C9:58:C7:E9:48 X509v3 Authority Key Identifier: keyid:ED:C1:FE:78:BC:87:BF:25:B2:E3:8D:7D:72:CD:9C:A3:30:22:6C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:7b:5c:2a:aa:8c:4d:b6:8d:c6:ed:3e:f5:29:93:5a:7c:79: f6:22:0c:dd:5c:cb:24:ed:90:07:73:38:26:34:1f:6e:da:3e: 7f:76:ef:21:1a:e7:6b:0f:8a:6c:e0:1b:86:68:db:6f:32:f7: 69:13:30:28:29:ee:ac:ba:bd:8b:45:14:36:f1:f4:e3:6a:4e: 12:ea:73:3c:34:a6:08:44:f3:77:68:d5:0a:cf:b3:eb:ba:de: e3:bb:72:eb:8d:f9:88:04:c6:65:7d:af:03:0f:1a:4e:6a:6f: 63:d6:01:f7:39:22:f7:c8:eb:79:9e:36:59:57:97:9d:c9:5e: 6c:23:d3:ab:cc:b2:31:20:85:55:51:1d:c9:f8:12:f4:6b:00: 9c:b4:8d:97:54:e2:26:38:a3:50:d0:97:81:04:af:86:d6:68: 32:fa:36:84:c7:96:d7:8e:07:10:be:b2:b0:f8:0e:fd:cf:f3: 6a:54:07:03:6d:2e:23:4d:6f:97:5e:94:67:58:cd:85:69:d5: 7f:ca:92:2a:be:c6:71:a5:bd:f5:bb:74:08:04:02:d5:df:8c: 7a:30:de:7d:39:56:0d:a0:d6:c0:97:cb:de:e1:9c:1d:a9:72: 00:77:69:24:3a:6d:3e:be:cf:26:6f:71:50:ae:89:4c:53:60: 9d:be:ea:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVBQUExMTAvBgNVBAUTKEVEQzFGRTc4QkM4N0JGMjVCMkUzOEQ3RDcyQ0Q5Q0Ez MzAyMjZDRTkwHhcNMjUwNDA0MTQ0OTIxWhcNMjUwNDExMTQ0OTIxWjAYMRYwFAYD VQQDEw02N2VmZjE3MS05YzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQgpljYt5Ohv8gf6zvYBCOI2bDFhHPnRoapCazKrIoSZPkCBwz6hrWxo7xzv CnhQ/+1m5vbufkfqDC9DVazylIHcvR4u8i9Xnqfypce7E/rxrw9qTRjYDMfzA8RW 8AA4AOA5N9+sW4H81oP9CbFR2R2/yQJLd54oCOuQdUqJJK2LvbItcqiJwECXM4K9 zCzg9RYm/80cc/8vY5SNEaO/btAm/L8Lyk5c5k8rfQL8n3ndns+4iqRfgHz1xxbD VHgzSxiaUaJtqg9D5SkBnODtMr7A4fRb6XXNXc7CUpXbbBUtVKWW/hKvFTP82kuZ xlAyy+HRw/2avwsOKg0PExnX5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJo/oj2 zozN7ZymKuKn08lYx+lIMB8GA1UdIwQYMBaAFO3B/ni8h78lsuONfXLNnKMwImzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUFBQS84RjU4OTI5NDFE OTUxMUUyQTk4QTlBN0QwOEIwMkNEMi83Y0gtZUx5SHZ5V3k0NDE5Y3MyY296QWli T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdjSC1lTHlIdnlXeTQ0MTljczJjb3pBaWJPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUFBQS84RjU4OTI5NDFEOTUxMUUyQTk4QTlBN0QwOEIwMkNEMi83Y0gtZUx5SHZ5 V3k0NDE5Y3MyY296QWliT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6e1wqqoxNto3G7T71KZNafHn2IgzdXMsk7ZAHczgmNB9u2j5/du8h GudrD4ps4BuGaNtvMvdpEzAoKe6sur2LRRQ28fTjak4S6nM8NKYIRPN3aNUKz7Pr ut7ju3LrjfmIBMZlfa8DDxpOam9j1gH3OSL3yOt5njZZV5edyV5sI9OrzLIxIIVV UR3J+BL0awCctI2XVOImOKNQ0JeBBK+G1mgy+jaEx5bXjgcQvrKw+A79z/NqVAcD bS4jTW+XXpRnWM2FadV/ypIqvsZxpb31u3QIBALV34x6MN59OVYNoNbAl8ve4Zwd qXIAd2kkOm0+vs8mb3FQrolMU2Cdvuqn -----END CERTIFICATE-----Generated at Fri Apr 4 21:55:46 2025 by rpki-client