$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft File: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft (raw, json) Hash identifier: OT3oWPaa7OXOe6n+zUTsoG6QTrJeCu15h71sjvgPTvM= Subject key identifier: CB:DF:4E:4B:43:79:08:6D:2F:BD:F7:50:4E:62:42:55:66:FE:0F:10 Authority key identifier: ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25 Certificate issuer: /CN=A91C8236/serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25 Certificate serial: 0ABC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft Manifest number: 0AA3 Signing time: Fri 28 Mar 2025 19:46:09 +0000 Manifest this update: Fri 28 Mar 2025 19:46:08 +0000 Manifest next update: Fri 04 Apr 2025 19:46:08 +0000 Files and hashes: 1: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl (hash: FASsdeGtyonZOYqya0b72+Dbx36uuZKWu8hOhh83aHI=) 2: 64460F68F17B11EC806AC312C4F9AE02.roa (hash: Cg+ozZFKJS0FjsmqsA75/MWl3j+ogYPR/cxj43bck4Y=) 3: B5D3426854F111ED85A7AC66C4F9AE02.roa (hash: IOzHtTbWHhgsZHthrmnKo8KE4uFqwhbjTMYbOTQH+38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 19:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2748 (0xabc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8236 Validity Not Before: Mar 28 19:46:08 2025 GMT Not After : Apr 4 19:46:08 2025 GMT Subject: CN=67e6fc80-6c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a4:36:00:d8:d0:8e:0a:9b:4c:65:37:ac:57: 52:c3:a9:7a:74:d2:bc:7d:f7:6c:89:a0:0f:4c:f8: af:e2:a6:dd:f8:3b:76:50:71:1c:bd:83:a7:68:85: 34:97:e3:3e:8b:26:c8:a3:c0:3c:87:75:d0:13:b9: 42:52:44:c7:17:e7:04:56:42:74:c2:87:81:6c:b1: 1b:97:fa:9b:5d:c2:1c:1f:8c:b8:58:2d:92:62:44: 96:05:ff:13:33:b6:02:16:3d:83:4e:0b:62:96:db: 3b:59:ce:e8:6b:01:65:ee:fb:cb:a3:75:e0:97:ed: 96:7c:98:55:ee:4a:ee:48:7b:30:dd:00:3f:a2:16: cc:a0:16:95:2e:3e:44:3a:32:d2:4f:d0:19:5f:1e: 27:30:2c:71:7d:8e:0b:e4:d1:79:11:11:78:4f:9f: 8b:16:cc:e1:00:28:53:0f:68:d4:10:e7:f7:b0:ca: e7:83:24:f7:3e:b4:0b:b2:36:a2:6a:d5:70:c3:52: b1:2e:db:24:9e:7f:84:b0:fd:77:bd:85:7b:f5:27: cc:9c:21:66:41:58:56:1f:0b:6b:7c:a1:1b:22:49: 49:10:9a:e4:cb:c9:8d:c2:f5:09:59:78:c7:ce:bf: b6:61:04:3c:3f:a3:68:58:ac:16:df:3b:ae:ff:89: c4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:DF:4E:4B:43:79:08:6D:2F:BD:F7:50:4E:62:42:55:66:FE:0F:10 X509v3 Authority Key Identifier: keyid:ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:5a:ac:76:b1:1b:1b:19:d0:09:24:13:ba:0f:1b:a1:20:90: 50:45:76:ff:3a:61:db:64:65:ab:11:cb:8a:93:d9:a7:a2:2a: e8:4c:10:da:9a:e3:a7:bc:f3:54:8d:f7:a0:72:92:0c:8d:1e: f1:63:8b:6e:b7:4b:fa:ba:77:d0:c3:dd:df:5f:1a:00:d3:9e: de:5a:6f:05:54:25:53:e3:af:af:34:96:24:20:15:b8:18:8a: 5b:69:81:46:96:87:83:c5:49:28:cc:45:49:b1:ae:12:4b:7d: 3a:3b:e1:8b:3d:87:2e:08:d5:e8:f0:5f:d2:cc:81:1b:4a:fe: f6:83:aa:9f:c3:66:c3:a2:5d:bb:f5:f7:f9:ab:b1:6a:53:61: 51:71:7c:08:d6:79:7d:14:d5:a8:36:38:18:a5:2f:40:39:29: ae:65:8b:11:cc:b2:1d:b8:75:ae:96:e7:eb:59:25:dd:59:2b: 9f:fe:85:cf:d8:b7:aa:1b:b8:08:55:61:95:ba:12:d1:ab:cd: 1f:19:54:71:8d:5b:e3:06:54:98:83:83:fa:61:18:fb:08:29: 82:1c:d7:84:4e:e9:38:1f:ac:75:42:c0:a8:ec:b6:76:f6:74: 77:0e:99:0c:9b:d9:77:97:73:fe:9e:41:73:af:e9:2a:bc:37: fa:7d:dc:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgyMzYxMTAvBgNVBAUTKEVEODVFRjc3MzQzQzU1NDEyQjA2QTUzQzJBNEUyMDc2 N0FEMTJGMjUwHhcNMjUwMzI4MTk0NjA4WhcNMjUwNDA0MTk0NjA4WjAYMRYwFAYD VQQDEw02N2U2ZmM4MC02YzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2aQ2ANjQjgqbTGU3rFdSw6l6dNK8ffdsiaAPTPiv4qbd+Dt2UHEcvYOnaIU0 l+M+iybIo8A8h3XQE7lCUkTHF+cEVkJ0woeBbLEbl/qbXcIcH4y4WC2SYkSWBf8T M7YCFj2DTgtilts7Wc7oawFl7vvLo3Xgl+2WfJhV7kruSHsw3QA/ohbMoBaVLj5E OjLST9AZXx4nMCxxfY4L5NF5ERF4T5+LFszhAChTD2jUEOf3sMrngyT3PrQLsjai atVww1KxLtsknn+EsP13vYV79SfMnCFmQVhWHwtrfKEbIklJEJrky8mNwvUJWXjH zr+2YQQ8P6NoWKwW3zuu/4nEDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMvfTktD eQhtL733UE5iQlVm/g8QMB8GA1UdIwQYMBaAFO2F73c0PFVBKwalPCpOIHZ60S8l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODIzNi9ENDI4Nzk2RTUz MjcxMUVBOEM1N0UzN0FDNEY5QUUwMi83WVh2ZHpROFZVRXJCcVU4S2s0Z2RuclJM eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZWHZkelE4VlVFckJxVThLazRnZG5yUkx5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODIzNi9ENDI4Nzk2RTUzMjcxMUVBOEM1N0UzN0FDNEY5QUUwMi83WVh2ZHpROFZV RXJCcVU4S2s0Z2RuclJMeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8Wqx2sRsbGdAJJBO6DxuhIJBQRXb/OmHbZGWrEcuKk9mnoiroTBDa muOnvPNUjfegcpIMjR7xY4tut0v6unfQw93fXxoA057eWm8FVCVT46+vNJYkIBW4 GIpbaYFGloeDxUkozEVJsa4SS306O+GLPYcuCNXo8F/SzIEbSv72g6qfw2bDol27 9ff5q7FqU2FRcXwI1nl9FNWoNjgYpS9AOSmuZYsRzLIduHWulufrWSXdWSuf/oXP 2LeqG7gIVWGVuhLRq80fGVRxjVvjBlSYg4P6YRj7CCmCHNeETuk4H6x1QsCo7LZ2 9nR3DpkMm9l3l3P+nkFzr+kqvDf6fdx6 -----END CERTIFICATE-----Generated at Fri Apr 4 18:31:24 2025 by rpki-client