$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft File: slUrOLjFywk1yUD6YJgOpvUQz4Y.mft (raw, json) Hash identifier: ZbSZqXLnji6ZISVrzwN/9y4GtRfgPtxfDnjSCJM2AyY= Subject key identifier: 84:7B:6F:75:16:82:4F:21:3B:6C:D7:1E:7F:90:83:85:E9:29:3A:5E Authority key identifier: B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86 Certificate issuer: /CN=A91F5786/serialNumber=B2552B38B8C5CB0935C940FA60980EA6F510CF86 Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft Manifest number: 7A Signing time: Thu 03 Apr 2025 05:56:48 +0000 Manifest this update: Thu 03 Apr 2025 05:56:48 +0000 Manifest next update: Thu 10 Apr 2025 05:56:48 +0000 Files and hashes: 1: slUrOLjFywk1yUD6YJgOpvUQz4Y.crl (hash: Qfk0/b1f782lUnCs4ye/pUkhZCDgcb49ezXy5nhi9Pw=) 2: 1F3782EE5AE211EF8E82D12DC4F9AE02.roa (hash: u07sFp3Yqjqw6LAiuoDt1givQlP2Rg/DNRW12Og3/70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.crl rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5786 Validity Not Before: Apr 3 05:56:48 2025 GMT Not After : Apr 10 05:56:48 2025 GMT Subject: CN=67ee2320-1201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7f:9f:30:91:9d:dc:ac:de:92:98:6c:0a:e4: 1a:c5:af:60:19:38:77:5a:ad:ac:24:07:77:55:38: ee:2d:d6:ea:59:51:7e:23:cf:6e:ca:57:5f:94:1e: 38:fe:6d:3d:94:9b:ae:a0:2e:5d:7b:02:0e:14:1d: c9:f2:93:d0:7a:3a:c5:52:ba:85:70:da:9a:bf:94: 33:86:bb:b6:94:85:f8:d3:58:e3:79:dd:78:ac:ee: f2:fb:4e:95:2d:e4:b0:89:d7:ac:9f:ff:c3:4f:5c: cf:a3:b1:fa:5a:a8:d8:6d:79:ee:6c:e6:c2:7a:39: 2b:23:cd:4b:90:49:c5:24:c5:cd:97:07:42:97:95: 00:33:e4:8b:da:16:d1:25:59:15:80:35:38:ce:18: ee:3c:4e:2c:4a:1c:64:a4:3f:a4:3e:e3:59:c9:33: a7:74:85:2b:c2:a3:d1:aa:c7:e9:de:57:82:d5:ef: ef:42:08:ee:19:0c:f4:dc:d1:91:35:a8:d8:6a:5a: 6a:b9:5b:21:51:d3:d6:37:a9:ac:b8:98:a2:ce:c3: f6:fe:5f:64:0a:cb:f3:e8:c1:4c:9c:20:a3:f0:e9: f1:4a:e2:e4:a1:0a:da:de:69:2d:d4:30:a5:2f:50: 28:ab:74:76:ac:a9:a1:2d:45:de:c2:46:52:80:59: 4e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7B:6F:75:16:82:4F:21:3B:6C:D7:1E:7F:90:83:85:E9:29:3A:5E X509v3 Authority Key Identifier: keyid:B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:23:4c:91:c7:19:aa:94:8a:78:77:cf:cf:d1:1d:71:a2:93: f1:4a:ca:8e:80:9d:1e:72:be:c3:d3:99:23:bb:92:ff:12:0d: 61:ba:f5:11:dc:69:62:c5:0f:ae:a3:32:73:7c:d3:54:ca:cb: fc:08:bf:92:5d:46:29:40:60:6f:8e:af:59:65:57:ed:4e:d2: e6:ff:1f:8a:fb:4f:9c:8b:c4:26:34:5f:17:b9:da:82:c7:9b: cf:47:8c:aa:65:14:7d:57:b3:27:48:4a:94:8d:39:7d:24:ce: 20:ac:d6:4a:44:54:69:44:e3:7e:da:94:bf:4b:8a:81:05:a4: 65:bb:17:4a:be:72:4d:38:d3:02:e9:79:a2:cb:d5:65:a8:06: 19:c9:5f:29:7f:67:f7:a6:16:13:7d:db:fa:19:fe:ef:81:0b: 43:44:4f:86:86:f6:b0:89:9b:2b:42:80:a9:3c:30:a6:f0:51: 36:fc:49:63:a3:26:44:fd:eb:85:ea:4e:d1:8e:7e:64:05:f3: 62:55:c3:44:31:c5:f9:1a:9e:d1:6f:11:25:a5:93:d9:48:d3: e2:67:65:b5:14:f9:01:aa:6a:f5:e6:72:af:a9:12:49:14:4d: 1b:14:d2:ad:db:f6:61:18:49:d7:fb:22:d5:74:44:39:95:e5: 23:fa:5e:3b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTc4NjExMC8GA1UEBRMoQjI1NTJCMzhCOEM1Q0IwOTM1Qzk0MEZBNjA5ODBFQTZG NTEwQ0Y4NjAeFw0yNTA0MDMwNTU2NDhaFw0yNTA0MTAwNTU2NDhaMBgxFjAUBgNV BAMTDTY3ZWUyMzIwLTEyMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVf58wkZ3crN6SmGwK5BrFr2AZOHdarawkB3dVOO4t1upZUX4jz27KV1+UHjj+ bT2Um66gLl17Ag4UHcnyk9B6OsVSuoVw2pq/lDOGu7aUhfjTWON53Xis7vL7TpUt 5LCJ16yf/8NPXM+jsfpaqNhtee5s5sJ6OSsjzUuQScUkxc2XB0KXlQAz5IvaFtEl WRWANTjOGO48TixKHGSkP6Q+41nJM6d0hSvCo9Gqx+neV4LV7+9CCO4ZDPTc0ZE1 qNhqWmq5WyFR09Y3qay4mKLOw/b+X2QKy/PowUycIKPw6fFK4uShCtreaS3UMKUv UCirdHasqaEtRd7CRlKAWU7bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhHtvdRaC TyE7bNcef5CDhekpOl4wHwYDVR0jBBgwFoAUslUrOLjFywk1yUD6YJgOpvUQz4Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1Nzg2L0U1NzcxMzgwNUFF MTExRUZCQjVDNTcyREM0RjlBRTAyL3NsVXJPTGpGeXdrMXlVRDZZSmdPcHZVUXo0 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc2xVck9MakZ5d2sxeVVENllKZ09wdlVRejRZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 Nzg2L0U1NzcxMzgwNUFFMTExRUZCQjVDNTcyREM0RjlBRTAyL3NsVXJPTGpGeXdr MXlVRDZZSmdPcHZVUXo0WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHkjTJHHGaqUinh3z8/RHXGik/FKyo6AnR5yvsPTmSO7kv8SDWG69RHc aWLFD66jMnN801TKy/wIv5JdRilAYG+Or1llV+1O0ub/H4r7T5yLxCY0Xxe52oLH m89HjKplFH1XsydISpSNOX0kziCs1kpEVGlE437alL9LioEFpGW7F0q+ck040wLp eaLL1WWoBhnJXyl/Z/emFhN92/oZ/u+BC0NET4aG9rCJmytCgKk8MKbwUTb8SWOj JkT964XqTtGOfmQF82JVw0QxxfkantFvESWlk9lI0+JnZbUU+QGqavXmcq+pEkkU TRsU0q3b9mEYSdf7ItV0RDmV5SP6Xjs= -----END CERTIFICATE-----Generated at Fri Apr 4 18:34:00 2025 by rpki-client