$ rpki-client -vvf rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft File: 7HnRemDtVw7Ge1EWFitgi2C5zUE.mft (raw, json) Hash identifier: wUT0iIFbxqIffGvWusCM7I6oDjL3cUN5FMXYNQ9IZpY= Subject key identifier: 11:33:38:6B:98:50:1F:4B:D5:B7:63:97:BE:6B:75:4E:84:3D:CB:71 Authority key identifier: EC:79:D1:7A:60:ED:57:0E:C6:7B:51:16:16:2B:60:8B:60:B9:CD:41 Certificate issuer: /CN=A91C309F/serialNumber=EC79D17A60ED570EC67B5116162B608B60B9CD41 Certificate serial: 0686 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft Manifest number: 0680 Signing time: Fri 28 Mar 2025 22:33:42 +0000 Manifest this update: Fri 28 Mar 2025 22:33:41 +0000 Manifest next update: Fri 04 Apr 2025 22:33:41 +0000 Files and hashes: 1: 7HnRemDtVw7Ge1EWFitgi2C5zUE.crl (hash: C1YCpLZlJLFd3l3IpU0evsmFtErhIhaSlKIzFMTa0+0=) 2: C144C89ADCF311EC80AD955EC4F9AE02.roa (hash: ekWMI9lKI80qdKLgYltLVxIp5iJZ3aucbrILlremPho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.crl rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1670 (0x686) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C309F Validity Not Before: Mar 28 22:33:41 2025 GMT Not After : Apr 4 22:33:41 2025 GMT Subject: CN=67e723c6-8708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2d:5b:b1:e1:f9:cf:a1:b4:80:46:f2:37:bc: 34:0c:c4:0f:8c:25:33:2e:b9:38:a3:27:21:06:ed: a4:f7:fb:21:1a:71:f8:d4:1d:1d:ef:85:93:b5:17: c9:18:6e:8f:f7:51:5d:40:3b:10:ed:4f:96:ad:1a: ff:c8:50:8c:50:ed:59:cb:56:db:42:e9:3e:78:34: 8a:2c:1e:03:94:00:07:4c:7f:95:87:4a:63:3f:19: 5b:60:06:67:97:7f:c7:e9:7c:18:f7:01:c4:2d:f3: 56:75:7a:ee:08:d5:4c:d9:36:bd:8b:0c:7e:d8:29: 89:18:7e:b1:cf:a2:fb:73:4e:be:bc:aa:8c:1a:82: 61:ad:31:b3:7f:0d:aa:bb:ed:d2:63:57:00:cb:47: f8:ee:32:23:d6:05:af:cb:16:f7:b8:7f:e0:cb:f9: 8f:14:de:4a:2f:7f:9f:f1:7a:fe:60:c2:d9:a5:75: f2:c1:53:cf:42:bc:ac:51:05:34:3e:c6:ac:34:50: b6:a9:55:97:2e:ef:7d:8a:7f:ae:7d:3d:e0:b7:19: 67:51:dc:ea:97:2d:e7:c7:53:e4:af:8e:5b:c3:7d: 16:2a:a4:a5:d0:21:5f:e2:8f:56:da:28:b0:69:a7: 7f:41:03:9c:40:e4:fa:f0:21:03:85:97:d2:d2:e0: 65:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:33:38:6B:98:50:1F:4B:D5:B7:63:97:BE:6B:75:4E:84:3D:CB:71 X509v3 Authority Key Identifier: keyid:EC:79:D1:7A:60:ED:57:0E:C6:7B:51:16:16:2B:60:8B:60:B9:CD:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:45:3d:1c:43:d7:0c:9f:52:18:0b:fb:f8:16:ba:00:6c:af: e9:0e:98:29:ca:b4:90:ae:07:07:3c:04:ce:09:99:9c:13:8a: 5d:92:2c:66:ec:38:79:89:43:d0:b1:4e:f0:1d:98:a2:dd:2a: 1f:a9:8a:9c:37:ff:d0:92:68:90:a7:2b:00:84:8e:2a:b9:c8: 7c:ec:1d:23:9b:cb:57:7d:42:49:2c:d8:43:9e:d5:52:56:ae: a3:58:95:2d:9e:3a:25:e5:8f:56:e4:9c:93:2f:77:0f:5e:0c: c1:75:cc:a4:ad:48:25:53:65:79:98:35:59:5f:98:04:d5:7b: df:22:a5:32:67:32:ec:5c:89:e1:c3:a3:52:1c:21:c3:b3:bf: ca:92:c8:fe:43:6d:ae:57:40:12:bb:89:9d:af:a3:cf:75:60: 5d:ef:7a:e8:e9:c3:f0:a7:24:3a:6c:4d:02:49:00:f4:2f:07: 1c:75:1a:8b:46:35:35:b1:27:db:73:1c:3d:b9:01:cc:d0:50: 17:ac:95:7c:db:1e:c8:87:02:80:af:54:d0:83:0e:0f:3c:b2: 32:18:e7:34:7a:2b:8b:72:05:24:a5:0f:6f:20:02:80:14:75: bb:68:e0:ae:e0:82:df:4e:33:a1:a9:bb:e1:a1:28:1f:fb:66: 3d:ab:65:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMwOUYxMTAvBgNVBAUTKEVDNzlEMTdBNjBFRDU3MEVDNjdCNTExNjE2MkI2MDhC NjBCOUNENDEwHhcNMjUwMzI4MjIzMzQxWhcNMjUwNDA0MjIzMzQxWjAYMRYwFAYD VQQDEw02N2U3MjNjNi04NzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzS1bseH5z6G0gEbyN7w0DMQPjCUzLrk4oychBu2k9/shGnH41B0d74WTtRfJ GG6P91FdQDsQ7U+WrRr/yFCMUO1Zy1bbQuk+eDSKLB4DlAAHTH+Vh0pjPxlbYAZn l3/H6XwY9wHELfNWdXruCNVM2Ta9iwx+2CmJGH6xz6L7c06+vKqMGoJhrTGzfw2q u+3SY1cAy0f47jIj1gWvyxb3uH/gy/mPFN5KL3+f8Xr+YMLZpXXywVPPQrysUQU0 PsasNFC2qVWXLu99in+ufT3gtxlnUdzqly3nx1Pkr45bw30WKqSl0CFf4o9W2iiw aad/QQOcQOT68CEDhZfS0uBlEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBEzOGuY UB9L1bdjl75rdU6EPctxMB8GA1UdIwQYMBaAFOx50Xpg7VcOxntRFhYrYItguc1B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzA5Ri8xREI0ODNBNDY5 REMxMUVCOUUxNjA5MUFDNEY5QUUwMi83SG5SZW1EdFZ3N0dlMUVXRml0Z2kyQzV6 VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdIblJlbUR0Vnc3R2UxRVdGaXRnaTJDNXpVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzA5Ri8xREI0ODNBNDY5REMxMUVCOUUxNjA5MUFDNEY5QUUwMi83SG5SZW1EdFZ3 N0dlMUVXRml0Z2kyQzV6VUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNRT0cQ9cMn1IYC/v4FroAbK/pDpgpyrSQrgcHPATOCZmcE4pdkixm 7Dh5iUPQsU7wHZii3SofqYqcN//QkmiQpysAhI4quch87B0jm8tXfUJJLNhDntVS Vq6jWJUtnjol5Y9W5JyTL3cPXgzBdcykrUglU2V5mDVZX5gE1XvfIqUyZzLsXInh w6NSHCHDs7/Kksj+Q22uV0ASu4mdr6PPdWBd73ro6cPwpyQ6bE0CSQD0LwccdRqL RjU1sSfbcxw9uQHM0FAXrJV82x7IhwKAr1TQgw4PPLIyGOc0eiuLcgUkpQ9vIAKA FHW7aOCu4ILfTjOhqbvhoSgf+2Y9q2WG -----END CERTIFICATE-----Generated at Fri Apr 4 22:04:37 2025 by rpki-client