$ rpki-client -vvf rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft File: frs7Qcl_MxP654HvYzI8SvYrj7c.mft (raw, json) Hash identifier: MROtih1YZFw42K1jGhgjZUf0/AIrgREY+LHztgW7nV8= Subject key identifier: 8B:E2:E4:52:6E:31:40:98:68:19:B0:81:C5:5E:53:93:FB:28:7D:43 Authority key identifier: 7E:BB:3B:41:C9:7F:33:13:FA:E7:81:EF:63:32:3C:4A:F6:2B:8F:B7 Certificate issuer: /CN=A91B777C/serialNumber=7EBB3B41C97F3313FAE781EF63323C4AF62B8FB7 Certificate serial: 05D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft Manifest number: 05CD Signing time: Fri 28 Mar 2025 23:19:15 +0000 Manifest this update: Fri 28 Mar 2025 23:19:15 +0000 Manifest next update: Fri 04 Apr 2025 23:19:15 +0000 Files and hashes: 1: frs7Qcl_MxP654HvYzI8SvYrj7c.crl (hash: YNd4tx8dMFpez87UbBdlba0YNMFUDVNh4+tfe1RfDcY=) 2: 10BBF6CEB2E711EB8A61B44EC4F9AE02.roa (hash: 0y9VyknIsSUScmWS3621geMMX5dlAHgNZtNYOtKkDmI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.crl rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1492 (0x5d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B777C Validity Not Before: Mar 28 23:19:15 2025 GMT Not After : Apr 4 23:19:15 2025 GMT Subject: CN=67e72e73-e609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e0:89:6b:11:3a:49:18:fc:81:c8:e7:db:84: f7:e2:fc:ec:88:48:42:1f:c0:e5:aa:70:50:95:70: b6:93:a0:fb:b3:3a:d8:63:9b:f3:8f:0e:a9:d4:36: e8:0e:d0:65:41:3b:b5:ee:ad:ca:c7:10:88:50:8e: 91:7d:d5:ff:37:5b:6e:b7:04:48:43:e4:13:03:b1: 95:c9:34:7b:12:5d:20:7d:2f:24:81:d9:01:0c:c2: ab:e7:e2:2c:40:38:2d:bf:c7:f6:ac:73:2d:ec:a7: fd:64:e9:0f:eb:5d:72:b4:a0:eb:0e:5a:fc:5e:d8: 5d:6d:2b:4a:35:42:70:21:cc:62:f0:ff:01:68:f0: 78:eb:d8:3a:cb:66:05:9d:f6:04:ab:64:19:23:93: f5:89:71:98:d6:87:d6:8e:28:50:de:4d:a3:6b:ff: 8a:05:ec:67:81:7d:f8:fd:06:78:6b:43:89:21:9b: d0:13:8a:0e:bd:17:cc:26:06:59:0c:d1:31:6b:4d: b6:21:e9:ff:fd:0d:4b:23:23:40:5e:07:9a:af:92: c3:2d:04:19:87:ee:90:67:c7:be:1d:fb:2e:b4:ef: d5:07:4e:c6:e3:32:4a:7b:e5:12:b0:39:b7:28:8c: 18:94:83:22:f5:4c:59:f4:69:b1:30:25:54:7b:80: ba:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E2:E4:52:6E:31:40:98:68:19:B0:81:C5:5E:53:93:FB:28:7D:43 X509v3 Authority Key Identifier: keyid:7E:BB:3B:41:C9:7F:33:13:FA:E7:81:EF:63:32:3C:4A:F6:2B:8F:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:00:d9:05:7d:2e:12:61:ce:be:13:d6:8f:22:54:f8:63:c2: 0b:d7:30:f1:ac:24:0b:ff:ac:88:f2:14:1b:bc:e2:5f:da:e2: 8a:da:71:a5:e7:68:56:43:64:0c:d6:21:85:58:73:09:b3:38: 67:80:eb:17:ee:74:67:a9:56:c1:2a:e1:8b:41:b2:12:89:25: af:51:be:f9:35:31:6d:08:a7:f6:a7:a9:d7:8a:d5:27:11:b6: 10:f2:c2:11:50:90:e0:09:80:07:42:1d:2e:bb:86:f6:07:c8: 91:42:23:22:a5:06:08:cc:3c:f1:d3:af:2e:20:6a:90:17:00: c8:de:5a:b2:6f:fb:2c:f2:c8:b6:ce:ab:03:fd:d8:3e:5e:20: 55:ef:5e:8b:7c:91:95:62:9a:60:c4:71:fb:40:97:4f:78:0d: 54:8e:d6:76:16:7e:1e:a6:9b:45:f7:d9:4e:46:d6:fb:86:9e: 9a:6e:5c:85:63:db:23:fb:5a:b3:47:36:c4:8e:77:96:83:b9: 48:c6:64:5c:23:37:ca:d9:bb:6a:a6:33:20:bb:23:d1:05:35: a0:67:2e:98:b4:dd:e0:18:05:ca:63:4d:23:2f:ff:cf:53:9a: ce:ef:a6:65:10:b6:3f:0b:1d:bd:0a:69:3c:1f:cf:3e:8f:88: 57:fe:5e:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3N0MxMTAvBgNVBAUTKDdFQkIzQjQxQzk3RjMzMTNGQUU3ODFFRjYzMzIzQzRB RjYyQjhGQjcwHhcNMjUwMzI4MjMxOTE1WhcNMjUwNDA0MjMxOTE1WjAYMRYwFAYD VQQDEw02N2U3MmU3My1lNjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAquCJaxE6SRj8gcjn24T34vzsiEhCH8DlqnBQlXC2k6D7szrYY5vzjw6p1Dbo DtBlQTu17q3KxxCIUI6RfdX/N1tutwRIQ+QTA7GVyTR7El0gfS8kgdkBDMKr5+Is QDgtv8f2rHMt7Kf9ZOkP611ytKDrDlr8XthdbStKNUJwIcxi8P8BaPB469g6y2YF nfYEq2QZI5P1iXGY1ofWjihQ3k2ja/+KBexngX34/QZ4a0OJIZvQE4oOvRfMJgZZ DNExa022Ien//Q1LIyNAXgear5LDLQQZh+6QZ8e+HfsutO/VB07G4zJKe+USsDm3 KIwYlIMi9UxZ9GmxMCVUe4C6fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvi5FJu MUCYaBmwgcVeU5P7KH1DMB8GA1UdIwQYMBaAFH67O0HJfzMT+ueB72MyPEr2K4+3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3Qy82Q0Q4MTMzQ0Iy REExMUVCOEIzODRBNjBDNEY5QUUwMi9mcnM3UWNsX014UDY1NEh2WXpJOFN2WXJq N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZyczdRY2xfTXhQNjU0SHZZekk4U3ZZcmo3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3Qy82Q0Q4MTMzQ0IyREExMUVCOEIzODRBNjBDNEY5QUUwMi9mcnM3UWNsX014 UDY1NEh2WXpJOFN2WXJqN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACANkFfS4SYc6+E9aPIlT4Y8IL1zDxrCQL/6yI8hQbvOJf2uKK2nGl 52hWQ2QM1iGFWHMJszhngOsX7nRnqVbBKuGLQbISiSWvUb75NTFtCKf2p6nXitUn EbYQ8sIRUJDgCYAHQh0uu4b2B8iRQiMipQYIzDzx068uIGqQFwDI3lqyb/ss8si2 zqsD/dg+XiBV716LfJGVYppgxHH7QJdPeA1UjtZ2Fn4epptF99lORtb7hp6ablyF Y9sj+1qzRzbEjneWg7lIxmRcIzfK2btqpjMguyPRBTWgZy6YtN3gGAXKY00jL//P U5rO76ZlELY/Cx29Cmk8H88+j4hX/l6V -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:10 2025 by rpki-client