$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft File: 7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft (raw, json) Hash identifier: 6bO8gD3zOBuHucYoBCl8/R6Ju/VpTZrfwonTRIZbPBA= Subject key identifier: C7:8B:7F:4F:D9:5A:B8:99:6B:E8:C5:45:9B:29:E6:0E:F2:40:7A:42 Authority key identifier: ED:39:78:1E:7C:A2:63:2C:54:B7:FA:E2:25:4E:21:F0:1B:A0:76:87 Certificate issuer: /CN=A91DD468/serialNumber=ED39781E7CA2632C54B7FAE2254E21F01BA07687 Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Tl4HnyiYyxUt_riJU4h8Bugdoc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft Manifest number: 01A9 Signing time: Sun 13 Apr 2025 02:13:22 +0000 Manifest this update: Sun 13 Apr 2025 02:13:22 +0000 Manifest next update: Sun 20 Apr 2025 02:13:22 +0000 Files and hashes: 1: 7Tl4HnyiYyxUt_riJU4h8Bugdoc.crl (hash: DwTHqVKzJUT9PWcz0tJ2MtfPDSejWdlujHbTKw+wh94=) 2: 3FF7C9468C9211ED8D052619C4F9AE02.roa (hash: 5zp05k5VVLn+h5FTDM7wh1ceYmuMlTAzc+yFX4p/lNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.crl rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Tl4HnyiYyxUt_riJU4h8Bugdoc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 02:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD468, serialNumber=ED39781E7CA2632C54B7FAE2254E21F01BA07687 Validity Not Before: Apr 13 02:13:22 2025 GMT Not After : Apr 20 02:13:22 2025 GMT Subject: CN=67fb1dc2-21ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6d:dc:8c:fb:fa:24:f1:c0:f9:78:d5:b7:b3: d2:3c:54:3d:72:46:a4:c7:c5:78:7f:80:f6:82:0f: c3:b1:f0:e5:d1:06:26:1a:63:c3:00:3f:89:2d:b6: 92:e2:62:36:51:74:48:19:fc:23:e0:58:f7:e2:08: 09:15:5e:95:82:d5:29:dd:77:1e:72:16:d5:08:a5: eb:2b:b3:73:e6:58:6e:b9:bf:bf:d6:bb:f0:a0:fc: 92:23:8b:21:de:0f:b3:d4:46:05:25:5a:be:28:22: 3c:2c:79:c3:6d:2a:6f:0c:6d:fb:af:7f:f9:9f:c5: 98:df:2a:df:f8:d3:1f:87:5e:04:56:a7:ee:16:6f: 5b:95:cb:5c:57:2a:d4:c2:59:66:3e:9e:32:46:33: 57:ef:b3:61:c9:a3:95:95:1d:7d:9e:7d:dc:55:4d: cf:7c:42:aa:db:14:11:81:a4:1e:bc:bf:02:24:9b: 45:f1:a4:01:a2:7f:7d:13:f3:06:af:37:31:e8:fe: b4:25:0a:5f:e8:8f:bc:07:20:dd:22:2c:75:ee:8a: d5:2f:99:2e:4e:f9:ff:04:e0:c3:47:1e:a0:17:4b: 56:53:8b:38:50:fe:5c:06:ed:4e:5e:06:cb:fb:f1: 66:75:63:1a:9d:57:31:a9:22:bf:58:cc:19:25:fb: df:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:8B:7F:4F:D9:5A:B8:99:6B:E8:C5:45:9B:29:E6:0E:F2:40:7A:42 X509v3 Authority Key Identifier: keyid:ED:39:78:1E:7C:A2:63:2C:54:B7:FA:E2:25:4E:21:F0:1B:A0:76:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Tl4HnyiYyxUt_riJU4h8Bugdoc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:22:17:b2:f9:e5:62:e8:72:3b:c0:0d:8d:87:bd:b4:87:41: 35:35:46:7f:7c:90:81:0d:2f:67:a7:d1:6a:df:03:4c:ce:96: 34:23:5e:1b:70:4e:17:7e:73:b3:50:7b:15:8f:58:c9:26:0e: 0d:d4:c7:24:86:13:33:d9:9f:ca:39:e6:23:1c:d8:06:27:da: 05:90:6b:36:7f:99:c4:65:ff:91:0a:f7:2f:94:fe:9a:84:05: a3:7a:df:0c:1f:4b:a1:14:cd:9b:21:a1:99:86:09:88:be:9d: ec:6a:88:04:b6:fc:70:e1:2d:fc:0b:3b:5d:fb:3d:a8:07:03: 19:f8:f6:61:98:e8:f5:d6:fe:2a:f9:28:21:c8:a6:a7:5a:0f: 50:49:0c:29:ef:f4:07:e0:1f:b9:d8:cc:2c:a3:c5:93:91:a1: ff:6c:bd:b5:c8:da:9b:8f:2f:24:7c:d0:f8:fd:7b:19:20:fe: 38:55:b5:03:83:8b:fd:99:90:7c:2d:76:76:ac:bc:d5:d0:85: ec:4f:32:c4:cf:c9:ac:32:38:65:86:85:83:93:40:7c:a6:9f: 8e:83:07:1f:e1:6f:00:21:6a:ea:65:8f:a7:d0:8a:28:90:32: a6:01:cf:40:23:e4:83:9b:fa:6b:ab:d7:88:cc:1d:b9:6e:b3: 8c:c7:c8:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ0NjgxMTAvBgNVBAUTKEVEMzk3ODFFN0NBMjYzMkM1NEI3RkFFMjI1NEUyMUYw MUJBMDc2ODcwHhcNMjUwNDEzMDIxMzIyWhcNMjUwNDIwMDIxMzIyWjAYMRYwFAYD VQQDEw02N2ZiMWRjMi0yMWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuG3cjPv6JPHA+XjVt7PSPFQ9ckakx8V4f4D2gg/DsfDl0QYmGmPDAD+JLbaS 4mI2UXRIGfwj4Fj34ggJFV6VgtUp3XcechbVCKXrK7Nz5lhuub+/1rvwoPySI4sh 3g+z1EYFJVq+KCI8LHnDbSpvDG37r3/5n8WY3yrf+NMfh14EVqfuFm9blctcVyrU wllmPp4yRjNX77NhyaOVlR19nn3cVU3PfEKq2xQRgaQevL8CJJtF8aQBon99E/MG rzcx6P60JQpf6I+8ByDdIix17orVL5kuTvn/BODDRx6gF0tWU4s4UP5cBu1OXgbL +/FmdWManVcxqSK/WMwZJfvfiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMeLf0/Z WriZa+jFRZsp5g7yQHpCMB8GA1UdIwQYMBaAFO05eB58omMsVLf64iVOIfAboHaH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDQ2OC81QjRBMzNDNjhD OEYxMUVEQkM4QTYxMTRDNEY5QUUwMi83VGw0SG55aVl5eFV0X3JpSlU0aDhCdWdk b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdUbDRIbnlpWXl4VXRfcmlKVTRoOEJ1Z2RvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDQ2OC81QjRBMzNDNjhDOEYxMUVEQkM4QTYxMTRDNEY5QUUwMi83VGw0SG55aVl5 eFV0X3JpSlU0aDhCdWdkb2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZIhey+eVi6HI7wA2Nh720h0E1NUZ/fJCBDS9np9Fq3wNMzpY0I14b cE4XfnOzUHsVj1jJJg4N1MckhhMz2Z/KOeYjHNgGJ9oFkGs2f5nEZf+RCvcvlP6a hAWjet8MH0uhFM2bIaGZhgmIvp3saogEtvxw4S38Cztd+z2oBwMZ+PZhmOj11v4q +SghyKanWg9QSQwp7/QH4B+52Mwso8WTkaH/bL21yNqbjy8kfND4/XsZIP44VbUD g4v9mZB8LXZ2rLzV0IXsTzLEz8msMjhlhoWDk0B8pp+Ogwcf4W8AIWrqZY+n0Ioo kDKmAc9AI+SDm/prq9eIzB25brOMx8hx -----END CERTIFICATE-----Generated at Sun Apr 13 05:43:27 2025 by rpki-client