$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft File: 7yfjyfFbWDsVypzMPJBdIpzi8NA.mft (raw, json) Hash identifier: FBnZsuD7eGB2PnYCsnoV6jtRTAY5YFc2lEix+/Qp19M= Subject key identifier: 92:D1:A8:21:F7:FD:39:FA:47:DD:E3:2F:F0:F6:48:69:2C:4E:D8:82 Authority key identifier: EF:27:E3:C9:F1:5B:58:3B:15:CA:9C:CC:3C:90:5D:22:9C:E2:F0:D0 Certificate issuer: /CN=A91C1814/serialNumber=EF27E3C9F15B583B15CA9CCC3C905D229CE2F0D0 Certificate serial: 05BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7yfjyfFbWDsVypzMPJBdIpzi8NA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft Manifest number: 05B9 Signing time: Wed 02 Apr 2025 23:06:25 +0000 Manifest this update: Wed 02 Apr 2025 23:06:24 +0000 Manifest next update: Wed 09 Apr 2025 23:06:24 +0000 Files and hashes: 1: 7yfjyfFbWDsVypzMPJBdIpzi8NA.crl (hash: tLAfced5bQy4Eq6OiI64qmydAEeRY+COmVcqDek58zQ=) 2: 38378A3EBA3411EBB94A527CC4F9AE02.roa (hash: bXfsV+JRththOFdM9JTTJyhVvibLKGVpju+gIvVc/Sk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.crl rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7yfjyfFbWDsVypzMPJBdIpzi8NA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 23:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1470 (0x5be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1814 Validity Not Before: Apr 2 23:06:24 2025 GMT Not After : Apr 9 23:06:24 2025 GMT Subject: CN=67edc2f1-e8b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ac:3c:bd:ca:5a:37:69:15:ea:22:9f:94:4e: 24:88:6d:c6:1f:5c:fa:c1:51:32:de:ae:4d:51:90: 2c:01:20:62:ae:4b:38:53:8e:50:97:78:a3:fe:ee: fe:93:67:89:3b:04:d1:a8:d3:1c:94:28:d9:5c:79: 7f:3d:9c:08:bd:0b:c9:bb:7d:9f:f6:b9:8a:8b:18: 15:c2:a9:67:05:4e:d2:54:b9:3d:49:28:0e:60:86: ea:2c:68:12:4d:8e:ba:7d:38:fe:b8:cd:62:59:bc: a4:9e:eb:85:53:fd:02:dd:7a:f8:5c:a5:0e:58:08: e9:77:e9:c6:8d:8b:2d:8c:ed:cf:16:f1:a0:52:ea: 7f:73:79:b3:81:5b:da:8c:68:23:9e:98:c8:79:93: 87:22:9d:61:4d:fa:95:65:c9:52:a6:8f:7e:08:30: 31:aa:df:02:b4:ee:9a:70:01:93:a4:83:6a:ca:12: 18:03:2e:ad:0e:5b:21:b7:71:94:40:df:1d:0e:07: ba:c3:a0:57:f1:e8:c0:15:d4:cd:12:12:fe:9e:c4: 37:40:e7:57:e4:0e:2f:d3:ed:31:b1:cb:66:8b:97: 21:1a:fd:4d:d7:58:2e:69:6d:dd:a8:10:73:de:df: d4:8e:98:21:c0:85:ad:23:23:7e:cd:a2:fa:bb:52: ff:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D1:A8:21:F7:FD:39:FA:47:DD:E3:2F:F0:F6:48:69:2C:4E:D8:82 X509v3 Authority Key Identifier: keyid:EF:27:E3:C9:F1:5B:58:3B:15:CA:9C:CC:3C:90:5D:22:9C:E2:F0:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7yfjyfFbWDsVypzMPJBdIpzi8NA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:18:b7:83:c6:39:2d:91:88:cd:eb:9a:f0:33:53:38:d8:93: 4c:f1:a8:c8:19:9a:6c:41:24:32:7f:9d:1c:68:b0:35:12:57: ca:5a:e7:94:bd:cb:86:f9:f4:0c:40:2e:08:21:f6:63:90:ce: a4:37:24:a7:4c:d8:48:65:5c:75:d2:9f:bb:de:22:ec:3f:44: 04:db:a0:3b:6d:15:e7:dc:12:70:c4:49:fb:9d:6e:2b:2a:99: be:e9:2a:29:4c:83:25:19:8f:b7:c4:5e:cb:87:60:8e:bf:14: 35:37:61:ad:bd:e8:fb:5b:5e:5c:52:63:e6:f5:ab:b8:71:99: 83:22:fa:8a:f6:0c:18:bc:39:7e:38:4b:ea:c7:23:88:fc:3e: 28:7a:61:83:46:2f:ba:24:29:8e:e6:10:53:ee:a1:dd:5e:7a: 02:bf:0b:e5:94:b1:d3:18:00:6e:6e:03:ff:da:9f:86:dc:36: 52:6f:3a:d9:f0:0a:d8:57:39:3d:6f:ca:99:a7:c1:2b:11:fd: 9e:e0:32:4e:8f:36:31:39:d2:d8:35:35:1f:db:63:38:f4:4a: 8e:bb:38:4f:a9:cc:ce:37:54:14:11:68:ed:4a:b4:2a:77:0a: b6:37:42:ed:f6:c4:b4:47:88:5e:87:8d:a7:5c:79:b3:00:f8: 34:d8:64:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE4MTQxMTAvBgNVBAUTKEVGMjdFM0M5RjE1QjU4M0IxNUNBOUNDQzNDOTA1RDIy OUNFMkYwRDAwHhcNMjUwNDAyMjMwNjI0WhcNMjUwNDA5MjMwNjI0WjAYMRYwFAYD VQQDEw02N2VkYzJmMS1lOGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA66w8vcpaN2kV6iKflE4kiG3GH1z6wVEy3q5NUZAsASBirks4U45Ql3ij/u7+ k2eJOwTRqNMclCjZXHl/PZwIvQvJu32f9rmKixgVwqlnBU7SVLk9SSgOYIbqLGgS TY66fTj+uM1iWbyknuuFU/0C3Xr4XKUOWAjpd+nGjYstjO3PFvGgUup/c3mzgVva jGgjnpjIeZOHIp1hTfqVZclSpo9+CDAxqt8CtO6acAGTpINqyhIYAy6tDlsht3GU QN8dDge6w6BX8ejAFdTNEhL+nsQ3QOdX5A4v0+0xsctmi5chGv1N11guaW3dqBBz 3t/UjpghwIWtIyN+zaL6u1L/IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLRqCH3 /Tn6R93jL/D2SGksTtiCMB8GA1UdIwQYMBaAFO8n48nxW1g7FcqczDyQXSKc4vDQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTgxNC9GM0M4NTM5RUJB MzExMUVCOUM2OUMxNzhDNEY5QUUwMi83eWZqeWZGYldEc1Z5cHpNUEpCZElwemk4 TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd5Zmp5ZkZiV0RzVnlwek1QSkJkSXB6aThOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTgxNC9GM0M4NTM5RUJBMzExMUVCOUM2OUMxNzhDNEY5QUUwMi83eWZqeWZGYldE c1Z5cHpNUEpCZElwemk4TkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsGLeDxjktkYjN65rwM1M42JNM8ajIGZpsQSQyf50caLA1ElfKWueU vcuG+fQMQC4IIfZjkM6kNySnTNhIZVx10p+73iLsP0QE26A7bRXn3BJwxEn7nW4r Kpm+6SopTIMlGY+3xF7Lh2COvxQ1N2Gtvej7W15cUmPm9au4cZmDIvqK9gwYvDl+ OEvqxyOI/D4oemGDRi+6JCmO5hBT7qHdXnoCvwvllLHTGABubgP/2p+G3DZSbzrZ 8ArYVzk9b8qZp8ErEf2e4DJOjzYxOdLYNTUf22M49EqOuzhPqczON1QUEWjtSrQq dwq2N0Lt9sS0R4heh42nXHmzAPg02GQe -----END CERTIFICATE-----Generated at Fri Apr 4 22:00:41 2025 by rpki-client