$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft File: 7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft (raw, json) Hash identifier: PI2mESjLv8yKTe7Z4BshRa87UQQRYMCycS7Q1I0+ehQ= Subject key identifier: CE:B1:E7:0F:33:6E:B9:A6:D3:54:B9:17:13:1B:AF:35:09:87:5A:D4 Authority key identifier: ED:1E:63:C4:CA:85:20:4E:CB:AD:26:CE:2C:94:62:64:5E:0B:1C:AD Certificate issuer: /CN=A91F8806/serialNumber=ED1E63C4CA85204ECBAD26CE2C9462645E0B1CAD Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft Manifest number: D5 Signing time: Thu 03 Apr 2025 04:56:09 +0000 Manifest this update: Thu 03 Apr 2025 04:56:08 +0000 Manifest next update: Thu 10 Apr 2025 04:56:08 +0000 Files and hashes: 1: 7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl (hash: jqwilBD+uUzcF30zUKnSatlf/supVHpvBhbgUg99LkE=) 2: 905F46DEE05A11EFA20EC133C4F9AE02.roa (hash: NVqWotupuz8BWtoYreL5BX+y3xeJG+CMVF0kE4qkEmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:56:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8806 Validity Not Before: Apr 3 04:56:08 2025 GMT Not After : Apr 10 04:56:08 2025 GMT Subject: CN=67ee14e8-6c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:52:9d:97:99:7d:7e:d0:53:4a:87:ec:d2:cb: ff:ae:71:58:da:d0:dd:6d:73:db:7f:b7:f5:59:94: 41:a0:cb:02:c7:6b:1d:94:ba:4f:c1:72:70:a2:8c: 08:3a:82:93:e2:24:e8:6b:a5:26:f8:c6:cd:51:27: b4:63:67:e7:8d:97:b7:2f:48:0e:69:60:aa:f5:02: 8d:61:17:30:34:ff:f9:84:32:b4:7d:eb:01:7a:18: 12:83:8c:8f:30:12:ff:04:26:f2:41:43:94:88:aa: 32:bc:40:9a:36:8c:70:3e:f7:95:3e:73:c2:18:72: 74:29:a3:c0:30:50:c7:3c:81:ef:d0:07:af:2f:aa: 26:8f:26:7b:5c:60:29:8d:d4:61:80:72:8b:f5:e7: 89:40:33:31:4e:c6:28:f2:d1:15:17:e6:81:57:b8: e9:bc:0b:75:8b:7f:61:98:ae:5e:17:9e:4c:8e:c4: 44:c6:b0:f6:88:d2:52:ee:9e:28:4d:ce:6e:d0:e1: e4:67:16:66:d6:94:10:48:8e:27:1b:4d:a1:ba:ac: 8c:0b:05:da:da:89:7d:7c:1b:61:ad:fc:5e:a3:c4: 44:6a:76:a9:e6:c4:db:3c:b1:24:ee:cc:c2:e2:26: 44:31:14:a3:0f:a7:4f:57:29:ea:e3:76:00:a4:f2: a3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B1:E7:0F:33:6E:B9:A6:D3:54:B9:17:13:1B:AF:35:09:87:5A:D4 X509v3 Authority Key Identifier: keyid:ED:1E:63:C4:CA:85:20:4E:CB:AD:26:CE:2C:94:62:64:5E:0B:1C:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:f4:41:d1:79:5f:0d:76:1a:78:83:a1:5c:40:d8:e3:7f:4b: 80:39:1d:1d:ee:e7:42:be:68:c0:b4:d6:e9:81:eb:61:e7:9c: 6c:d5:48:cd:29:a7:56:d8:97:74:b6:b5:70:5b:fb:f5:31:2b: 9f:d5:6e:33:f8:47:14:04:88:8d:98:68:a0:1c:7c:69:1a:a4: 93:c9:12:8d:8b:22:9f:9f:49:6f:03:67:94:3a:f8:4f:00:93: 3f:28:c5:b5:94:a1:21:a0:77:20:79:21:ce:71:08:ab:32:31: 94:bb:a4:bb:fe:45:1d:39:c8:50:5c:13:44:6f:1c:af:d8:01: 38:ad:1f:82:76:64:40:e8:f3:8a:38:af:70:66:5e:25:d8:3e: 88:76:07:77:21:e5:6c:42:5c:48:b4:8b:66:ba:2d:47:42:8f: 5f:6a:d9:20:6f:18:e2:15:3d:11:16:b9:c6:3d:a7:5d:75:33: d1:01:ef:90:12:fc:67:f6:e5:f2:8a:b9:92:63:e8:0f:99:62: 70:cf:0d:30:63:a4:52:63:90:1c:00:a1:d9:b2:df:ed:b4:3c: 73:5f:65:06:4c:e2:91:ae:55:2d:65:d7:3c:08:40:83:2c:84: e8:3b:7f:a9:a7:0c:10:ae:c3:d2:f1:92:e8:ee:51:3e:39:98: 19:53:93:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg4MDYxMTAvBgNVBAUTKEVEMUU2M0M0Q0E4NTIwNEVDQkFEMjZDRTJDOTQ2MjY0 NUUwQjFDQUQwHhcNMjUwNDAzMDQ1NjA4WhcNMjUwNDEwMDQ1NjA4WjAYMRYwFAYD VQQDEw02N2VlMTRlOC02YzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9VKdl5l9ftBTSofs0sv/rnFY2tDdbXPbf7f1WZRBoMsCx2sdlLpPwXJwoowI OoKT4iToa6Um+MbNUSe0Y2fnjZe3L0gOaWCq9QKNYRcwNP/5hDK0fesBehgSg4yP MBL/BCbyQUOUiKoyvECaNoxwPveVPnPCGHJ0KaPAMFDHPIHv0AevL6omjyZ7XGAp jdRhgHKL9eeJQDMxTsYo8tEVF+aBV7jpvAt1i39hmK5eF55MjsRExrD2iNJS7p4o Tc5u0OHkZxZm1pQQSI4nG02huqyMCwXa2ol9fBthrfxeo8REanap5sTbPLEk7szC 4iZEMRSjD6dPVynq43YApPKjsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6x5w8z brmm01S5FxMbrzUJh1rUMB8GA1UdIwQYMBaAFO0eY8TKhSBOy60mziyUYmReCxyt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODgwNi8zOUQwODdBQUQ2 OTgxMUVFQTU0NEI0MzhDNEY5QUUwMi83UjVqeE1xRklFN0xyU2JPTEpSaVpGNExI SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdSNWp4TXFGSUU3THJTYk9MSlJpWkY0TEhLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODgwNi8zOUQwODdBQUQ2OTgxMUVFQTU0NEI0MzhDNEY5QUUwMi83UjVqeE1xRklF N0xyU2JPTEpSaVpGNExISzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+9EHReV8Ndhp4g6FcQNjjf0uAOR0d7udCvmjAtNbpgeth55xs1UjN KadW2Jd0trVwW/v1MSuf1W4z+EcUBIiNmGigHHxpGqSTyRKNiyKfn0lvA2eUOvhP AJM/KMW1lKEhoHcgeSHOcQirMjGUu6S7/kUdOchQXBNEbxyv2AE4rR+CdmRA6POK OK9wZl4l2D6Idgd3IeVsQlxItItmui1HQo9fatkgbxjiFT0RFrnGPadddTPRAe+Q Evxn9uXyirmSY+gPmWJwzw0wY6RSY5AcAKHZst/ttDxzX2UGTOKRrlUtZdc8CECD LIToO3+ppwwQrsPS8ZLo7lE+OZgZU5MA -----END CERTIFICATE-----Generated at Fri Apr 4 22:40:08 2025 by rpki-client