$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft File: 07TuvD2fWh6iApZpmumSiBsdjf0.mft (raw, json) Hash identifier: 7fi4wMH91cRlqqYbWuJVP6ukYA3eH6ACLQnJFm+pMDQ= Subject key identifier: 37:0E:4F:A3:6E:51:E9:02:7D:85:56:1B:11:69:5A:66:61:2D:15:66 Authority key identifier: D3:B4:EE:BC:3D:9F:5A:1E:A2:02:96:69:9A:E9:92:88:1B:1D:8D:FD Certificate issuer: /CN=A91CD4E0/serialNumber=D3B4EEBC3D9F5A1EA20296699AE992881B1D8DFD Certificate serial: 063D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft Manifest number: 063B Signing time: Sun 20 Apr 2025 14:47:38 +0000 Manifest this update: Sun 20 Apr 2025 14:47:38 +0000 Manifest next update: Sun 27 Apr 2025 14:47:38 +0000 Files and hashes: 1: 07TuvD2fWh6iApZpmumSiBsdjf0.crl (hash: pHsB/hu8sj0pcZ4eb2sgZ3REuj5QxQ8i8WD6Pm1icrg=) 2: E969742CB33B11EEB4D87842C4F9AE02.roa (hash: /bP5RMzdbkL7/5EZqhq7cO3FfNuTY5k1xdEgv+lDTck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.crl rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 14:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1597 (0x63d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD4E0, serialNumber=D3B4EEBC3D9F5A1EA20296699AE992881B1D8DFD Validity Not Before: Apr 20 14:47:38 2025 GMT Not After : Apr 27 14:47:38 2025 GMT Subject: CN=6805090a-2c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bb:65:ff:a1:ba:1e:98:ff:24:78:51:e6:3a: 5f:2c:93:9e:bd:33:f3:7c:3e:1c:c4:97:2a:27:fd: 41:1f:1a:2d:c7:91:59:e0:24:b6:6d:75:84:4c:5f: 00:ac:10:ee:32:8e:05:f6:69:3f:b7:32:d8:22:6b: 7d:b6:23:e3:7d:6d:de:e2:87:54:8a:83:0d:45:7b: 91:6e:43:be:b5:89:a5:2c:78:70:74:1e:c9:47:8b: 23:8a:13:e8:7b:a4:a9:4f:d3:fe:1c:f0:bc:8a:88: fd:43:73:cd:76:cd:50:f2:7c:f8:70:f5:c8:80:df: 86:e7:f1:05:74:02:fe:2d:3b:49:a4:c8:62:93:94: 66:6a:d1:4a:66:1f:1b:b0:47:70:f4:3e:0b:34:82: 26:4f:bb:bc:59:ba:09:30:0d:08:09:02:80:ba:1f: 32:52:b8:53:4b:cb:8c:10:39:83:fc:07:d9:7c:f0: d3:11:f6:a4:4d:8c:70:3c:a9:94:f2:e6:70:12:67: ab:48:9b:c6:53:41:32:1a:92:6a:cc:5e:4b:2e:31: fb:fe:ed:47:d4:19:d1:3e:fa:9b:98:6a:e5:9a:ec: 39:55:b3:78:db:55:d3:dc:64:38:05:66:29:dd:ed: f3:f2:1c:77:03:6e:02:9c:8e:4a:32:79:64:bc:b6: bf:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0E:4F:A3:6E:51:E9:02:7D:85:56:1B:11:69:5A:66:61:2D:15:66 X509v3 Authority Key Identifier: keyid:D3:B4:EE:BC:3D:9F:5A:1E:A2:02:96:69:9A:E9:92:88:1B:1D:8D:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:47:17:1b:68:91:76:67:07:0b:e1:83:30:54:34:c6:93:92: d7:2f:2a:f4:e9:50:6c:33:de:f0:a9:c9:34:bd:8c:b5:45:df: e7:f6:e6:08:7c:9b:0a:c8:d5:cd:3a:51:48:8a:4d:2c:e2:ff: da:4f:63:d0:d4:50:9e:c0:36:a7:c5:71:fe:04:25:6c:0e:83: d4:f4:64:e4:21:ba:22:d5:c2:eb:32:1d:ec:3f:dd:e0:ba:71: 87:d8:53:5e:e4:25:6c:36:20:13:29:95:79:68:25:80:1c:72: f7:da:9a:af:15:79:0b:ef:88:67:12:5c:72:b6:b0:b4:8e:60: de:cb:f2:15:36:ac:cb:89:c0:e1:58:ba:4e:63:13:7f:eb:32: c8:fd:16:fc:6c:cd:e9:21:de:e1:e7:df:09:b1:44:3c:07:cb: 89:2c:f5:d2:b0:1c:ae:4d:f3:ed:c7:0a:23:f0:04:87:3c:c1: db:67:f2:84:e2:26:c8:9e:75:ac:f1:0e:26:79:72:3c:94:fa: f1:f5:69:c2:10:40:f0:5b:22:78:57:25:a5:ba:c8:0b:5d:8d: af:16:8c:68:dc:ba:3d:50:ed:b4:25:cf:01:ed:fe:49:0a:fd: 02:cb:d9:b7:fd:23:8c:e9:83:73:ec:e0:78:89:0c:3e:76:a2: 29:8a:df:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q0RTAxMTAvBgNVBAUTKEQzQjRFRUJDM0Q5RjVBMUVBMjAyOTY2OTlBRTk5Mjg4 MUIxRDhERkQwHhcNMjUwNDIwMTQ0NzM4WhcNMjUwNDI3MTQ0NzM4WjAYMRYwFAYD VQQDEw02ODA1MDkwYS0yYzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnrtl/6G6Hpj/JHhR5jpfLJOevTPzfD4cxJcqJ/1BHxotx5FZ4CS2bXWETF8A rBDuMo4F9mk/tzLYImt9tiPjfW3e4odUioMNRXuRbkO+tYmlLHhwdB7JR4sjihPo e6SpT9P+HPC8ioj9Q3PNds1Q8nz4cPXIgN+G5/EFdAL+LTtJpMhik5RmatFKZh8b sEdw9D4LNIImT7u8WboJMA0ICQKAuh8yUrhTS8uMEDmD/AfZfPDTEfakTYxwPKmU 8uZwEmerSJvGU0EyGpJqzF5LLjH7/u1H1BnRPvqbmGrlmuw5VbN421XT3GQ4BWYp 3e3z8hx3A24CnI5KMnlkvLa/vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcOT6Nu UekCfYVWGxFpWmZhLRVmMB8GA1UdIwQYMBaAFNO07rw9n1oeogKWaZrpkogbHY39 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDRFMC84MzQ1NzExNjhE N0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi8wN1R1dkQyZldoNmlBcFpwbXVtU2lCc2Rq ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA3VHV2RDJmV2g2aUFwWnBtdW1TaUJzZGpmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDRFMC84MzQ1NzExNjhEN0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi8wN1R1dkQyZldo NmlBcFpwbXVtU2lCc2RqZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlRxcbaJF2ZwcL4YMwVDTGk5LXLyr06VBsM97wqck0vYy1Rd/n9uYI fJsKyNXNOlFIik0s4v/aT2PQ1FCewDanxXH+BCVsDoPU9GTkIboi1cLrMh3sP93g unGH2FNe5CVsNiATKZV5aCWAHHL32pqvFXkL74hnElxytrC0jmDey/IVNqzLicDh WLpOYxN/6zLI/Rb8bM3pId7h598JsUQ8B8uJLPXSsByuTfPtxwoj8ASHPMHbZ/KE 4ibInnWs8Q4meXI8lPrx9WnCEEDwWyJ4VyWlusgLXY2vFoxo3Lo9UO20Jc8B7f5J Cv0Cy9m3/SOM6YNz7OB4iQw+dqIpit9o -----END CERTIFICATE-----Generated at Mon Apr 21 21:20:59 2025 by rpki-client