$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft File: r7CNb36XeFtvMRce-C4xux0G4uM.mft (raw, json) Hash identifier: mM4BZlhzdQbDlqWer/stpC7PboRzJDDV+TQgr8xR6Co= Subject key identifier: 12:73:9D:31:05:F1:56:86:D4:41:9E:77:B3:79:52:1A:75:43:C3:6C Authority key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 Certificate issuer: /CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Certificate serial: 1463 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft Manifest number: 1447 Signing time: Wed 16 Apr 2025 16:55:32 +0000 Manifest this update: Wed 16 Apr 2025 16:55:31 +0000 Manifest next update: Wed 23 Apr 2025 16:55:31 +0000 Files and hashes: 1: r7CNb36XeFtvMRce-C4xux0G4uM.crl (hash: PQaW4XTJ7puf0qrGD3+LgQ6YUZt8D6Og3iVcKB+nErk=) 2: 4EED8CBE029911EF96760924C4F9AE02.roa (hash: nVELww+GgEMji9swA1+nobEPfsSUHSJgjMoFUJZQMqM=) 3: CC2A0136F58C11EEB142585CC4F9AE02.roa (hash: LcIUX4YJ29+aJV1+YxaPbbSzmp98riAGflfyDE/z+VQ=) 4: A0375A56964511EF9481CA74C4F9AE02.roa (hash: kEtEyPhK0r3E14+zMjIhhxmIsJuQscWu62026oNy4Ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 16:55:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5219 (0x1463) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B15, serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Validity Not Before: Apr 16 16:55:31 2025 GMT Not After : Apr 23 16:55:31 2025 GMT Subject: CN=67ffe104-3a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bb:38:fb:ef:2b:b1:e1:a5:63:a5:16:3f:f1: 08:35:29:5c:00:4a:83:de:ed:ad:95:d2:62:23:c6: 35:7f:f5:eb:69:dc:92:7c:b2:52:0b:3e:16:0b:df: da:86:df:1e:ae:90:7c:bf:10:c0:2b:1a:71:8e:fd: ee:cd:29:43:43:68:7b:89:e8:b8:a6:19:71:44:a9: 2d:4b:76:d1:a0:48:a6:66:03:16:bb:bb:a7:33:ff: 6f:5a:ea:1c:65:53:ce:29:ad:ca:89:00:e7:6e:86: 1c:9f:78:23:ab:7c:28:a8:b5:4a:8e:90:56:8f:c5: 1a:9d:1d:d5:ad:f2:ec:e3:09:f1:6e:32:28:a4:31: 4b:93:fa:e7:80:57:3b:03:b2:6d:d2:64:f1:9a:e5: 68:15:7c:9f:27:bd:9e:64:b6:ea:9d:7f:04:67:e6: a7:2c:d3:02:d3:d9:a2:b8:d8:d6:38:86:e7:55:99: 24:db:2d:12:90:99:ba:9f:e2:78:af:88:ce:2c:92: b0:06:ed:20:00:22:da:e0:ac:c6:76:7c:2a:67:25: 95:c3:71:b7:df:30:d5:07:91:27:12:e3:ba:af:b5: a2:34:37:43:b3:be:fb:fa:41:55:fe:fa:97:4a:bf: c3:98:82:b1:30:0c:cd:a4:49:8e:3a:17:f7:62:4a: 97:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:73:9D:31:05:F1:56:86:D4:41:9E:77:B3:79:52:1A:75:43:C3:6C X509v3 Authority Key Identifier: keyid:AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:3f:46:20:f2:52:66:12:9d:eb:91:0f:13:3c:7d:6c:39:be: b1:41:c5:25:9b:03:7a:a0:3b:2e:a3:1d:85:48:ba:61:68:a2: d2:50:65:78:19:a4:d6:2a:13:7a:70:ea:8e:e2:ed:c3:94:94: e4:64:13:96:c8:bc:96:85:43:9b:73:3a:ab:2a:14:e5:be:1c: 8a:2f:8e:2f:c6:66:17:ad:e3:4e:bc:81:7a:af:01:07:92:9c: 13:77:03:76:b1:6a:55:21:7f:2e:45:b5:cc:fc:69:57:df:84: b2:18:ed:22:5b:ed:83:4a:ed:ce:7f:ea:4a:46:f5:3a:64:7e: 1b:4e:50:6a:e6:dc:e8:16:0c:fb:5a:86:77:aa:c7:fc:af:00: 0e:33:ec:74:92:c6:35:15:b0:72:1c:79:e3:7a:22:bf:a0:df: f0:f7:ab:fb:cd:25:87:6c:8f:8f:97:79:75:51:33:25:96:6c: 28:73:c9:8f:91:ba:f3:13:8a:dd:4c:77:dd:3e:03:6e:44:f5: c1:8c:09:95:cf:80:74:0a:c0:cd:19:ba:d3:d0:9b:37:40:2a: f0:6a:5e:9c:25:ad:fd:d4:cf:80:fd:7a:b9:5a:1c:dd:84:f1: 36:c5:fd:c0:c3:57:e4:aa:9e:0f:3d:ef:08:42:5a:1a:db:15: ae:bc:8d:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCMTUxMTAvBgNVBAUTKEFGQjA4RDZGN0U5Nzc4NUI2RjMxMTcxRUY4MkUzMUJC MUQwNkUyRTMwHhcNMjUwNDE2MTY1NTMxWhcNMjUwNDIzMTY1NTMxWjAYMRYwFAYD VQQDEw02N2ZmZTEwNC0zYTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrs4++8rseGlY6UWP/EINSlcAEqD3u2tldJiI8Y1f/XradySfLJSCz4WC9/a ht8erpB8vxDAKxpxjv3uzSlDQ2h7iei4phlxRKktS3bRoEimZgMWu7unM/9vWuoc ZVPOKa3KiQDnboYcn3gjq3woqLVKjpBWj8UanR3VrfLs4wnxbjIopDFLk/rngFc7 A7Jt0mTxmuVoFXyfJ72eZLbqnX8EZ+anLNMC09miuNjWOIbnVZkk2y0SkJm6n+J4 r4jOLJKwBu0gACLa4KzGdnwqZyWVw3G33zDVB5EnEuO6r7WiNDdDs777+kFV/vqX Sr/DmIKxMAzNpEmOOhf3YkqX9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJznTEF 8VaG1EGed7N5Uhp1Q8NsMB8GA1UdIwQYMBaAFK+wjW9+l3hbbzEXHvguMbsdBuLj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS9GQUY2RkQ3ODcx RTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVGdHZNUmNlLUM0eHV4MEc0 dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3Q05iMzZYZUZ0dk1SY2UtQzR4dXgwRzR1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0IxNS9GQUY2RkQ3ODcxRTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVG dHZNUmNlLUM0eHV4MEc0dU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKP0Yg8lJmEp3rkQ8TPH1sOb6xQcUlmwN6oDsuox2FSLphaKLSUGV4 GaTWKhN6cOqO4u3DlJTkZBOWyLyWhUObczqrKhTlvhyKL44vxmYXreNOvIF6rwEH kpwTdwN2sWpVIX8uRbXM/GlX34SyGO0iW+2DSu3Of+pKRvU6ZH4bTlBq5tzoFgz7 WoZ3qsf8rwAOM+x0ksY1FbByHHnjeiK/oN/w96v7zSWHbI+Pl3l1UTMllmwoc8mP kbrzE4rdTHfdPgNuRPXBjAmVz4B0CsDNGbrT0Js3QCrwal6cJa391M+A/Xq5Whzd hPE2xf3Aw1fkqp4PPe8IQloa2xWuvI2M -----END CERTIFICATE-----Generated at Thu Apr 17 19:03:48 2025 by rpki-client