$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft File: 7DavWXkJHGv6WA6juiJXeTV1cNc.mft (raw, json) Hash identifier: BNzA6EoX7/kg7asuzJAAFrvvMd1PhaOJycJNND6dxLU= Subject key identifier: 5A:40:8E:1D:E7:B3:75:5C:91:ED:26:D0:5D:21:4F:E5:14:49:8B:32 Authority key identifier: EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7 Certificate issuer: /CN=A91D7578/serialNumber=EC36AF5979091C6BFA580EA3BA225779357570D7 Certificate serial: 05DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft Manifest number: 05CD Signing time: Wed 02 Apr 2025 23:07:21 +0000 Manifest this update: Wed 02 Apr 2025 23:07:21 +0000 Manifest next update: Wed 09 Apr 2025 23:07:21 +0000 Files and hashes: 1: 7DavWXkJHGv6WA6juiJXeTV1cNc.crl (hash: IgsK5q6rjr9Fy9W8+orae2IeNM3nXlmY6Q0NUgajb/s=) 2: E8542DEA6B8811ECAC731B4EC4F9AE02.roa (hash: okKowtfia94t5qx7MGTZQGLAEYnC4fX+ZpQbsyMhCVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.crl rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 23:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1499 (0x5db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7578 Validity Not Before: Apr 2 23:07:21 2025 GMT Not After : Apr 9 23:07:21 2025 GMT Subject: CN=67edc329-16f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:13:3e:67:dc:a8:50:5c:c4:14:2b:72:b4:da: 40:0d:a2:b4:0d:9d:84:e7:15:18:b2:89:8a:18:a1: 46:21:cc:3a:3a:ee:2c:66:a3:79:c9:ad:a6:d0:a5: 9e:f7:9e:79:48:ab:43:a0:11:5a:0b:96:92:84:9b: 07:ff:eb:fc:d2:b7:92:02:c1:46:43:4d:51:07:f3: 8b:ad:91:a7:b9:ab:ee:a4:80:4c:51:da:ed:06:5d: 54:8a:6a:e7:a2:4d:a0:87:92:9d:9c:ea:1f:25:d4: 0d:cd:36:58:85:87:a1:dd:81:16:71:ac:31:1f:69: 90:59:db:47:4a:41:d2:8d:14:b4:5a:e0:ad:fd:b3: 83:06:ff:f2:e0:2c:37:95:7b:25:34:d8:bf:23:56: be:7b:3a:bf:2d:dc:ea:88:9d:98:2b:3a:30:b0:09: 86:93:3d:a7:bf:45:9b:4d:e7:7e:74:c6:8e:56:89: 39:1a:17:6d:e4:3e:a3:dc:d6:31:d0:7f:92:dc:b3: 28:6c:3c:c5:8d:57:b7:62:36:f7:54:23:6d:0d:c1: 0c:3e:cc:d4:29:94:65:79:fe:ca:ff:4d:eb:98:04: 5c:27:1b:18:cf:eb:30:ca:a9:83:62:2e:1a:06:06: 77:2f:4c:8d:6f:87:97:e3:6d:9e:33:98:f0:c3:32: 01:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:40:8E:1D:E7:B3:75:5C:91:ED:26:D0:5D:21:4F:E5:14:49:8B:32 X509v3 Authority Key Identifier: keyid:EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:1c:b0:1a:ac:74:95:88:e6:93:46:f8:4e:49:97:9b:8f:ac: 5d:99:09:a7:b6:43:7d:6b:db:1e:40:90:14:1c:9b:8f:df:d1: 58:f5:8b:d7:2a:8c:a9:92:08:a0:aa:80:e8:0d:0c:ca:d5:4d: e6:0a:e4:3f:d0:3f:2c:0a:33:3b:b4:cc:27:28:60:ab:f6:2a: a8:c4:13:d1:46:b1:21:9c:cf:19:67:bb:50:cd:f2:b2:4c:e3: 6f:08:34:30:1f:1d:08:0a:74:37:b9:ad:80:97:4e:c9:fe:04: d1:71:b5:ba:7a:cc:5c:c4:2c:9f:66:75:08:be:6a:ab:00:8b: 4a:37:48:31:e3:b4:a8:5b:7f:c8:4c:1f:4d:9b:76:ad:4f:09: d9:7c:1a:94:a1:37:a7:da:53:cc:8a:9c:67:03:d5:9c:bb:dc: e7:d5:24:e3:1a:5c:14:24:39:db:6a:58:fd:6b:6e:81:83:e9: ab:a2:d1:2c:da:55:e3:1b:57:92:a9:f2:cd:9a:e8:8e:14:cb: b9:28:7a:7d:53:0e:73:1d:49:9d:63:74:19:a2:3a:c5:2e:9c: 7a:a3:71:da:81:44:3a:8c:74:18:1d:3e:a0:fb:38:60:e1:07: a5:e5:d5:ad:4c:91:30:47:26:3f:54:52:ef:fb:16:ba:6c:d6: de:44:9e:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc1NzgxMTAvBgNVBAUTKEVDMzZBRjU5NzkwOTFDNkJGQTU4MEVBM0JBMjI1Nzc5 MzU3NTcwRDcwHhcNMjUwNDAyMjMwNzIxWhcNMjUwNDA5MjMwNzIxWjAYMRYwFAYD VQQDEw02N2VkYzMyOS0xNmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRM+Z9yoUFzEFCtytNpADaK0DZ2E5xUYsomKGKFGIcw6Ou4sZqN5ya2m0KWe 9555SKtDoBFaC5aShJsH/+v80reSAsFGQ01RB/OLrZGnuavupIBMUdrtBl1Uimrn ok2gh5KdnOofJdQNzTZYhYeh3YEWcawxH2mQWdtHSkHSjRS0WuCt/bODBv/y4Cw3 lXslNNi/I1a+ezq/LdzqiJ2YKzowsAmGkz2nv0WbTed+dMaOVok5Ghdt5D6j3NYx 0H+S3LMobDzFjVe3Yjb3VCNtDcEMPszUKZRlef7K/03rmARcJxsYz+swyqmDYi4a BgZ3L0yNb4eX422eM5jwwzIBbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFpAjh3n s3Vcke0m0F0hT+UUSYsyMB8GA1UdIwQYMBaAFOw2r1l5CRxr+lgOo7oiV3k1dXDX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzU3OC9EM0MwMTkwQ0JC OUQxMUVCODRGNzNCM0FDNEY5QUUwMi83RGF2V1hrSkhHdjZXQTZqdWlKWGVUVjFj TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEYXZXWGtKSEd2NldBNmp1aUpYZVRWMWNOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzU3OC9EM0MwMTkwQ0JCOUQxMUVCODRGNzNCM0FDNEY5QUUwMi83RGF2V1hrSkhH djZXQTZqdWlKWGVUVjFjTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEHLAarHSViOaTRvhOSZebj6xdmQmntkN9a9seQJAUHJuP39FY9YvX KoypkgigqoDoDQzK1U3mCuQ/0D8sCjM7tMwnKGCr9iqoxBPRRrEhnM8ZZ7tQzfKy TONvCDQwHx0ICnQ3ua2Al07J/gTRcbW6esxcxCyfZnUIvmqrAItKN0gx47SoW3/I TB9Nm3atTwnZfBqUoTen2lPMipxnA9Wcu9zn1STjGlwUJDnbalj9a26Bg+mrotEs 2lXjG1eSqfLNmuiOFMu5KHp9Uw5zHUmdY3QZojrFLpx6o3HagUQ6jHQYHT6g+zhg 4Qel5dWtTJEwRyY/VFLv+xa6bNbeRJ48 -----END CERTIFICATE-----Generated at Fri Apr 4 21:58:30 2025 by rpki-client