$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft File: h7HuPp7irRoRPyeipU4sC41a-zQ.mft (raw, json) Hash identifier: NKhmBGC+c/KyIjTzPM1x8KLTUzGn8jK5bnS2qxMHpFU= Subject key identifier: D0:C7:EB:C5:8D:8A:BC:89:D4:AC:9B:1E:34:B3:F9:48:C1:91:24:17 Authority key identifier: 87:B1:EE:3E:9E:E2:AD:1A:11:3F:27:A2:A5:4E:2C:0B:8D:5A:FB:34 Certificate issuer: /CN=A91CF9F5/serialNumber=87B1EE3E9EE2AD1A113F27A2A54E2C0B8D5AFB34 Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft Manifest number: 83 Signing time: Mon 21 Apr 2025 05:27:06 +0000 Manifest this update: Mon 21 Apr 2025 05:27:06 +0000 Manifest next update: Mon 28 Apr 2025 05:27:06 +0000 Files and hashes: 1: h7HuPp7irRoRPyeipU4sC41a-zQ.crl (hash: jdCTDsg74gFl7hAc9isXgiVxKbOjNbJaPPbvUVm9lhA=) 2: D4FC5DAE5B9E11EF9205B45BC4F9AE02.roa (hash: 01FcOCzumKzY/vQ8wHIJFFKXgIpVBxtq1T3eDI1dtgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.crl rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 05:27:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF9F5, serialNumber=87B1EE3E9EE2AD1A113F27A2A54E2C0B8D5AFB34 Validity Not Before: Apr 21 05:27:06 2025 GMT Not After : Apr 28 05:27:06 2025 GMT Subject: CN=6805d72a-0469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:22:10:ce:ce:7d:46:68:4d:1e:07:74:1f:58: bc:90:e4:2f:c3:07:ea:36:a4:92:73:d7:00:0d:e9: cc:20:58:e4:5d:6b:f1:71:56:f5:cb:1f:44:15:97: fb:28:ba:f0:c3:f1:eb:70:6c:d3:e6:f5:d0:d4:01: 05:06:c0:72:4a:23:37:b1:05:be:6f:4a:64:47:0c: 6e:51:03:1b:35:27:53:c2:3d:ce:0e:39:66:13:07: 65:62:04:82:1c:62:ff:0e:30:43:02:4c:1b:58:40: a7:f7:43:cd:e0:5c:d4:3c:83:52:d0:38:e4:1d:66: 1a:4e:62:e8:aa:e4:7c:e5:af:13:a2:50:16:16:6d: 7e:e5:0e:5d:90:74:55:fc:28:31:2a:4d:cd:7d:bb: 19:cb:64:82:a5:d4:13:9c:7f:9f:c5:66:31:a1:65: c4:9f:f8:d2:0e:dd:ae:74:fb:9b:ff:80:9f:b9:30: 03:e3:97:88:9f:1c:8b:d0:66:a7:de:78:16:10:49: d9:a8:fd:83:ae:b8:ff:e7:26:9c:66:24:01:ac:fc: be:ce:fc:25:b2:10:a8:40:26:d0:ba:6a:33:98:79: cf:0d:ed:e2:18:1c:0c:c7:8f:18:5d:f6:de:16:5f: 42:7d:8a:4c:53:9b:3f:53:d2:2f:2f:db:9a:8f:34: 3e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C7:EB:C5:8D:8A:BC:89:D4:AC:9B:1E:34:B3:F9:48:C1:91:24:17 X509v3 Authority Key Identifier: keyid:87:B1:EE:3E:9E:E2:AD:1A:11:3F:27:A2:A5:4E:2C:0B:8D:5A:FB:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b5:12:79:a3:ee:73:22:29:38:35:ab:bf:2a:0b:05:c7:34: 49:63:e7:cb:21:8e:90:56:c8:fc:71:f6:6e:cb:8f:fa:bc:ab: ce:a4:f6:0e:44:af:5f:ff:d5:e7:3d:a9:38:d1:05:14:1f:bd: 97:1e:99:f9:3b:84:67:60:d8:28:92:c1:ce:8f:93:01:74:c7: 85:b7:78:d1:00:15:9c:4a:b3:8e:d7:0e:05:40:a9:25:a0:96: 3d:28:f3:23:89:65:8d:25:a2:fd:44:82:3b:ed:3d:14:e4:9d: ab:b6:16:f2:72:6e:1e:40:8e:65:94:1b:fc:1a:8b:ef:c6:1f: ea:b3:e6:0d:8f:a1:14:32:6d:a6:0a:90:19:7d:b1:5a:de:bd: e5:fa:66:a0:4f:ba:2c:29:b9:1a:d4:67:48:28:3a:52:17:77: 91:36:eb:49:8a:e9:a5:10:4a:b2:b6:15:d8:01:67:95:ea:49: 67:08:5b:4a:93:fc:48:8f:e9:24:97:3d:1d:fd:63:d4:05:6c: b2:25:43:3e:a8:e8:a1:13:04:36:37:78:1f:a7:16:f8:7a:82: 00:19:50:c3:f4:b2:44:07:06:24:ea:37:8c:ec:92:30:63:61: f6:2c:56:1a:d7:0c:61:ba:02:eb:69:1e:e4:5c:5a:36:df:c5: 9d:0f:b4:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y5RjUxMTAvBgNVBAUTKDg3QjFFRTNFOUVFMkFEMUExMTNGMjdBMkE1NEUyQzBC OEQ1QUZCMzQwHhcNMjUwNDIxMDUyNzA2WhcNMjUwNDI4MDUyNzA2WjAYMRYwFAYD VQQDEw02ODA1ZDcyYS0wNDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnSIQzs59RmhNHgd0H1i8kOQvwwfqNqSSc9cADenMIFjkXWvxcVb1yx9EFZf7 KLrww/HrcGzT5vXQ1AEFBsBySiM3sQW+b0pkRwxuUQMbNSdTwj3ODjlmEwdlYgSC HGL/DjBDAkwbWECn90PN4FzUPINS0DjkHWYaTmLoquR85a8TolAWFm1+5Q5dkHRV /CgxKk3NfbsZy2SCpdQTnH+fxWYxoWXEn/jSDt2udPub/4CfuTAD45eInxyL0Gan 3ngWEEnZqP2Drrj/5yacZiQBrPy+zvwlshCoQCbQumozmHnPDe3iGBwMx48YXfbe Fl9CfYpMU5s/U9IvL9uajzQ+LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNDH68WN iryJ1KybHjSz+UjBkSQXMB8GA1UdIwQYMBaAFIex7j6e4q0aET8noqVOLAuNWvs0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjlGNS84QjkyNkQyQTVC OUUxMUVGOEJGOTE3NUJDNEY5QUUwMi9oN0h1UHA3aXJSb1JQeWVpcFU0c0M0MWEt elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3SHVQcDdpclJvUlB5ZWlwVTRzQzQxYS16US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjlGNS84QjkyNkQyQTVCOUUxMUVGOEJGOTE3NUJDNEY5QUUwMi9oN0h1UHA3aXJS b1JQeWVpcFU0c0M0MWEtelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAftRJ5o+5zIik4Nau/KgsFxzRJY+fLIY6QVsj8cfZuy4/6vKvOpPYO RK9f/9XnPak40QUUH72XHpn5O4RnYNgoksHOj5MBdMeFt3jRABWcSrOO1w4FQKkl oJY9KPMjiWWNJaL9RII77T0U5J2rthbycm4eQI5llBv8Govvxh/qs+YNj6EUMm2m CpAZfbFa3r3l+magT7osKbka1GdIKDpSF3eRNutJiumlEEqythXYAWeV6klnCFtK k/xIj+kklz0d/WPUBWyyJUM+qOihEwQ2N3gfpxb4eoIAGVDD9LJEBwYk6jeM7JIw Y2H2LFYa1wxhugLraR7kXFo238WdD7S8 -----END CERTIFICATE-----Generated at Tue Apr 22 12:59:56 2025 by rpki-client