$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft File: M77xZK7T_RPWmutR5aDM85n5QUQ.mft (raw, json) Hash identifier: Uhl6VRCBPqm/OMbcKrJ7Mb1XpplxqyJ8TvRWBLybBME= Subject key identifier: 37:98:3D:BB:DD:EE:1A:0F:57:29:15:B8:44:B9:8C:9B:65:92:18:0D Authority key identifier: 33:BE:F1:64:AE:D3:FD:13:D6:9A:EB:51:E5:A0:CC:F3:99:F9:41:44 Certificate issuer: /CN=A91E2E37/serialNumber=33BEF164AED3FD13D69AEB51E5A0CCF399F94144 Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M77xZK7T_RPWmutR5aDM85n5QUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft Manifest number: EB Signing time: Thu 03 Apr 2025 04:33:16 +0000 Manifest this update: Thu 03 Apr 2025 04:33:15 +0000 Manifest next update: Thu 10 Apr 2025 04:33:15 +0000 Files and hashes: 1: M77xZK7T_RPWmutR5aDM85n5QUQ.crl (hash: FFgpyEAH8ANjUZGNMh+5+cRExd+P97dMJgLGhU00Xyg=) 2: B4B20B56AA3D11EEA301A133C4F9AE02.roa (hash: 9jZY1z+VdOX3EbpblEw/cnzGPIt1FRo4e67BiqUONWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.crl rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M77xZK7T_RPWmutR5aDM85n5QUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2E37 Validity Not Before: Apr 3 04:33:15 2025 GMT Not After : Apr 10 04:33:15 2025 GMT Subject: CN=67ee0f8b-fc38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:76:0d:18:36:70:16:b9:eb:b7:74:a0:29:82: 0d:9e:76:a9:23:6e:b7:1a:91:7d:ce:2c:e1:c9:af: 56:87:17:84:a7:b0:50:4f:e3:ce:ad:6a:a1:f5:1b: 8a:f7:81:a3:2d:82:78:82:e4:a0:e1:b2:cb:9e:89: ad:42:24:e1:93:8c:6c:04:fd:da:7d:f4:67:39:87: 48:3d:55:0c:75:cb:87:4c:68:a1:46:cd:dd:af:93: 92:36:c8:1a:48:93:e9:25:e8:34:81:e1:77:a6:5c: 62:ca:24:b2:4b:1a:1f:bc:b2:73:f2:3f:44:01:d6: 57:50:53:2f:b4:cb:e7:db:5c:67:27:0e:af:4a:33: 95:04:b4:74:c2:fa:5a:c5:d2:26:9e:9b:d3:50:59: 47:b8:8c:be:57:3c:56:cc:d3:1a:a2:4b:62:8b:41: 1d:5e:1a:cd:d8:f4:52:52:1b:e9:28:e4:62:48:51: 34:c2:f6:72:78:95:77:06:d4:18:33:89:11:6b:88: b2:46:be:11:d1:c0:ce:2c:a6:23:02:bf:05:56:fa: 75:bb:10:d5:a0:d7:bb:49:c1:af:4c:86:73:70:cd: c9:95:9b:de:e7:d0:d4:df:6e:eb:fc:9e:9d:79:1c: d1:74:e1:ab:33:7c:3f:18:3d:b0:e1:26:26:19:38: 83:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:98:3D:BB:DD:EE:1A:0F:57:29:15:B8:44:B9:8C:9B:65:92:18:0D X509v3 Authority Key Identifier: keyid:33:BE:F1:64:AE:D3:FD:13:D6:9A:EB:51:E5:A0:CC:F3:99:F9:41:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M77xZK7T_RPWmutR5aDM85n5QUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:60:ac:50:83:8e:05:f5:24:a7:50:01:50:ba:b6:a6:96:92: 8d:08:67:a7:c4:a7:a1:ec:e4:d0:c5:66:30:2c:f9:79:a2:09: b2:66:5f:b0:d8:b5:c0:38:cc:28:51:40:6d:8f:ef:44:07:2c: fc:94:8c:2d:01:6b:40:fd:81:4b:9e:ae:c2:f3:b8:c8:00:04: e7:98:23:e8:eb:96:9c:d4:be:e8:c5:3d:e8:3f:4a:c6:50:b1: 8d:f8:3e:82:67:6d:72:b7:23:c2:2b:96:2b:cd:ef:10:10:11: c3:85:56:d1:5c:f8:92:2b:74:29:33:e3:f3:96:98:a7:1d:a6: 6d:2a:3a:95:36:6d:bf:0e:9e:7d:4b:d2:e8:55:3c:f0:20:a7: 66:ea:71:f5:de:79:ef:c1:52:78:c5:1d:b1:52:c0:8e:f3:b8: 2a:b6:b7:60:2b:e5:05:cb:6a:fb:69:00:c6:9d:b1:5c:51:8a: a5:12:d3:b3:c4:ca:50:5d:50:3e:81:7f:b7:9a:76:a2:85:7e: 22:75:63:e3:78:f0:04:ae:9f:43:13:81:97:84:00:4e:48:d3: a6:35:1f:7b:9f:61:59:13:bb:d5:cf:e4:8e:07:97:de:49:6c: 51:46:13:bd:d6:45:ec:40:6b:62:2b:e4:e6:8f:36:4f:69:53: fd:a0:af:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFMzcxMTAvBgNVBAUTKDMzQkVGMTY0QUVEM0ZEMTNENjlBRUI1MUU1QTBDQ0Yz OTlGOTQxNDQwHhcNMjUwNDAzMDQzMzE1WhcNMjUwNDEwMDQzMzE1WjAYMRYwFAYD VQQDEw02N2VlMGY4Yi1mYzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl3YNGDZwFrnrt3SgKYINnnapI263GpF9zizhya9WhxeEp7BQT+POrWqh9RuK 94GjLYJ4guSg4bLLnomtQiThk4xsBP3affRnOYdIPVUMdcuHTGihRs3dr5OSNsga SJPpJeg0geF3plxiyiSySxofvLJz8j9EAdZXUFMvtMvn21xnJw6vSjOVBLR0wvpa xdImnpvTUFlHuIy+VzxWzNMaoktii0EdXhrN2PRSUhvpKORiSFE0wvZyeJV3BtQY M4kRa4iyRr4R0cDOLKYjAr8FVvp1uxDVoNe7ScGvTIZzcM3JlZve59DU327r/J6d eRzRdOGrM3w/GD2w4SYmGTiDjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDeYPbvd 7hoPVykVuES5jJtlkhgNMB8GA1UdIwQYMBaAFDO+8WSu0/0T1prrUeWgzPOZ+UFE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkUzNy80QUM2OTM4OEFB M0QxMUVFOUI4Mzk2MzJDNEY5QUUwMi9NNzd4Wks3VF9SUFdtdXRSNWFETTg1bjVR VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL003N3haSzdUX1JQV211dFI1YURNODVuNVFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkUzNy80QUM2OTM4OEFBM0QxMUVFOUI4Mzk2MzJDNEY5QUUwMi9NNzd4Wks3VF9S UFdtdXRSNWFETTg1bjVRVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhYKxQg44F9SSnUAFQuramlpKNCGenxKeh7OTQxWYwLPl5ogmyZl+w 2LXAOMwoUUBtj+9EByz8lIwtAWtA/YFLnq7C87jIAATnmCPo65ac1L7oxT3oP0rG ULGN+D6CZ21ytyPCK5Yrze8QEBHDhVbRXPiSK3QpM+PzlpinHaZtKjqVNm2/Dp59 S9LoVTzwIKdm6nH13nnvwVJ4xR2xUsCO87gqtrdgK+UFy2r7aQDGnbFcUYqlEtOz xMpQXVA+gX+3mnaihX4idWPjePAErp9DE4GXhABOSNOmNR97n2FZE7vVz+SOB5fe SWxRRhO91kXsQGtiK+TmjzZPaVP9oK+k -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:51 2025 by rpki-client