$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft File: J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft (raw, json) Hash identifier: Ut8oh986DrZQBx/50z0wFc5OrD2n7fuCwuPi8k2L56s= Subject key identifier: C8:AA:B9:CC:B4:A8:7B:08:6C:3C:36:F2:C6:50:31:21:E6:59:3B:5E Authority key identifier: 27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5 Certificate issuer: /CN=A91E4696/serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5 Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft Manifest number: 01A7 Signing time: Thu 03 Apr 2025 02:39:59 +0000 Manifest this update: Thu 03 Apr 2025 02:39:59 +0000 Manifest next update: Thu 10 Apr 2025 02:39:59 +0000 Files and hashes: 1: J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl (hash: mcj4uOv37hmccPeLmYGG5omQkNLMaAJS9kI6fL9+8TM=) 2: F04A74EC90C511EDA07C3025C4F9AE02.roa (hash: hWCgt4KmPIBt7/S3B9mMUj5grxgOnMh8nytxnRCNTBY=) 3: 63CC2AA80FEE11EEBCC6AE50C4F9AE02.roa (hash: 1lAGETSydBwVjG0hesN1/ViGN9eOR/26uzUYMFoxaT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4696 Validity Not Before: Apr 3 02:39:59 2025 GMT Not After : Apr 10 02:39:59 2025 GMT Subject: CN=67edf4ff-802a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d1:dd:82:c8:25:e9:4e:06:10:49:bc:62:46: 45:a0:a3:3c:c7:65:5a:f4:d3:04:62:2f:d5:43:ed: c9:d1:26:1b:3f:c6:f5:9c:9c:1c:b8:12:7e:2c:f8: 4d:7a:21:73:94:75:9b:ee:2d:f1:cc:0e:b6:46:02: 4c:52:af:fe:16:be:b6:f4:da:9a:87:c9:60:47:d9: 25:cf:b7:37:58:1f:44:61:0e:d7:97:29:dc:0b:1c: 8b:c4:4e:5f:ec:87:7d:e8:d0:ac:16:63:d1:f6:d8: cd:0c:68:16:84:8d:2e:88:bd:a2:45:c2:d4:7e:98: 36:ff:84:1c:6d:77:30:86:32:2b:b1:bb:6e:4e:8d: af:b2:90:24:58:e5:8a:ac:3b:47:84:97:4c:c1:ba: 58:4e:87:c2:8d:49:98:40:f7:b8:b1:62:90:11:8a: 44:77:55:50:54:34:95:54:19:28:d4:f5:d5:73:3e: 97:f6:2b:68:7a:40:4b:cb:4b:48:18:24:c6:3e:6b: 1c:9a:1b:77:94:1d:41:e4:77:20:02:f1:0a:61:22: ac:c9:80:3f:9d:eb:ca:f9:93:19:52:4e:5f:c2:64: b5:d0:99:98:5c:d6:bd:23:42:17:db:57:02:48:04: c8:cd:09:da:68:92:f4:99:97:e2:11:2d:32:ec:9a: fd:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AA:B9:CC:B4:A8:7B:08:6C:3C:36:F2:C6:50:31:21:E6:59:3B:5E X509v3 Authority Key Identifier: keyid:27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:6d:1e:3a:01:c8:4d:2c:1c:cd:cf:06:8f:3e:98:5a:6e:2c: 60:87:11:03:ca:99:76:18:dd:3b:7f:de:51:23:23:1b:5a:63: 9c:f4:dd:75:92:8d:6f:e1:f4:ad:9c:cd:cd:eb:49:e0:90:6a: 3b:96:e9:40:27:e6:19:81:dc:5b:f2:20:2b:f8:df:2a:be:22: d5:de:2b:51:1e:fb:47:fe:77:07:ec:a1:d0:6f:f3:21:fe:b6: 0d:55:99:87:8b:e3:d4:5f:88:e4:16:aa:e0:67:36:9f:d9:36: 20:91:37:70:48:e9:47:a6:68:3a:3d:6b:01:77:c2:6a:22:2f: 05:4d:37:6a:01:4c:c0:60:d0:05:c2:34:2a:32:dc:ef:a6:81: b3:03:1d:de:2c:88:65:70:32:2e:1a:68:87:5b:53:4b:6c:6a: ce:8e:87:4d:0f:33:9b:5c:e2:a8:5e:5a:8b:11:79:78:1f:ba: ca:7d:14:c6:17:ff:b1:9d:08:1c:b2:fb:aa:22:d0:43:c5:11: 2b:91:2c:6e:0c:aa:8c:c5:81:4f:30:e1:e4:0e:4e:a5:9d:0e: 6f:fa:bb:e1:a3:68:12:47:30:fe:91:3b:57:99:d0:a1:b3:f9: c5:d3:ee:93:3c:09:2d:0a:e4:a3:f0:16:8b:d3:57:f0:06:cd: d5:13:da:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2OTYxMTAvBgNVBAUTKDI3Qjg3MjJDODU5Q0E0RjZGMDNFQzFFMDYxRkRENEMz QjlCNDk3RTUwHhcNMjUwNDAzMDIzOTU5WhcNMjUwNDEwMDIzOTU5WjAYMRYwFAYD VQQDEw02N2VkZjRmZi04MDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7NHdgsgl6U4GEEm8YkZFoKM8x2Va9NMEYi/VQ+3J0SYbP8b1nJwcuBJ+LPhN eiFzlHWb7i3xzA62RgJMUq/+Fr629Nqah8lgR9klz7c3WB9EYQ7XlyncCxyLxE5f 7Id96NCsFmPR9tjNDGgWhI0uiL2iRcLUfpg2/4QcbXcwhjIrsbtuTo2vspAkWOWK rDtHhJdMwbpYTofCjUmYQPe4sWKQEYpEd1VQVDSVVBko1PXVcz6X9itoekBLy0tI GCTGPmscmht3lB1B5HcgAvEKYSKsyYA/nevK+ZMZUk5fwmS10JmYXNa9I0IX21cC SATIzQnaaJL0mZfiES0y7Jr9JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMiqucy0 qHsIbDw28sZQMSHmWTteMB8GA1UdIwQYMBaAFCe4ciyFnKT28D7B4GH91MO5tJfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY5Ni9ENkExMUM0QTkw QkYxMUVEOENDMUU3ODNDNEY5QUUwMi9KN2h5TElXY3BQYndQc0hnWWYzVXc3bTBs LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o3aHlMSVdjcFBid1BzSGdZZjNVdzdtMGwtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDY5Ni9ENkExMUM0QTkwQkYxMUVEOENDMUU3ODNDNEY5QUUwMi9KN2h5TElXY3BQ YndQc0hnWWYzVXc3bTBsLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDbR46AchNLBzNzwaPPphabixghxEDypl2GN07f95RIyMbWmOc9N11 ko1v4fStnM3N60ngkGo7lulAJ+YZgdxb8iAr+N8qviLV3itRHvtH/ncH7KHQb/Mh /rYNVZmHi+PUX4jkFqrgZzaf2TYgkTdwSOlHpmg6PWsBd8JqIi8FTTdqAUzAYNAF wjQqMtzvpoGzAx3eLIhlcDIuGmiHW1NLbGrOjodNDzObXOKoXlqLEXl4H7rKfRTG F/+xnQgcsvuqItBDxRErkSxuDKqMxYFPMOHkDk6lnQ5v+rvho2gSRzD+kTtXmdCh s/nF0+6TPAktCuSj8BaL01fwBs3VE9om -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:47 2025 by rpki-client