$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft File: 7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft (raw, json) Hash identifier: OabsbpRy9WEpX1p9rACX/rAdC0XrKqR37w0P/XDsbWo= Subject key identifier: 35:A2:D7:18:A2:61:D5:77:BE:98:A4:24:6A:02:A9:83:83:1A:47:B0 Authority key identifier: EC:84:D6:0F:79:6B:F4:16:F8:F8:1D:18:BA:DA:2F:FF:87:C1:5F:26 Certificate issuer: /CN=A917ACF1/serialNumber=EC84D60F796BF416F8F81D18BADA2FFF87C15F26 Certificate serial: 0399 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft Manifest number: 0392 Signing time: Tue 03 Jun 2025 01:04:37 +0000 Manifest this update: Tue 03 Jun 2025 01:04:37 +0000 Manifest next update: Tue 10 Jun 2025 01:04:37 +0000 Files and hashes: 1: 7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl (hash: PY0vEkyc8oH9tBUlGBT91poTTAktDn14TktTA29iyik=) 2: 5895821AB62611ECB410C81DC4F9AE02.roa (hash: hC/jX3h+m4kRJTL+3r4qE/OapWO5r8a4N2e8hzVBff0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 01:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 921 (0x399) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ACF1, serialNumber=EC84D60F796BF416F8F81D18BADA2FFF87C15F26 Validity Not Before: Jun 3 01:04:37 2025 GMT Not After : Jun 10 01:04:37 2025 GMT Subject: CN=683e4a25-f5ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:10:8a:f3:93:f9:aa:0e:35:3b:89:c4:ce:7e: 0f:bf:c9:b7:d5:2a:fe:de:2e:3a:e6:a8:54:94:26: 9a:5f:cc:b6:23:07:eb:75:69:41:e2:2e:98:b8:40: 04:ec:cf:4a:6f:1f:40:a3:6e:b9:d0:0a:11:23:4c: 87:09:90:4a:bf:0e:7b:5d:cc:1c:04:96:93:97:a2: 74:f5:38:5b:e6:47:06:53:26:7b:c2:95:ba:47:d2: 3d:45:b8:db:05:51:3e:bb:45:0a:98:2e:e0:2a:30: 5a:63:80:c5:f1:7f:7f:16:4a:b7:65:0a:92:13:a3: 82:ea:d5:ab:1f:fd:14:40:4b:02:7a:12:e4:f9:e4: d5:79:c1:01:47:a2:d5:33:40:64:62:2b:29:59:3a: da:3f:f7:10:d4:37:d2:b8:04:93:a7:c5:2a:63:a2: 72:fe:27:f3:eb:ee:98:d4:dc:a6:71:53:cc:bf:81: 28:a9:6d:0d:0e:ad:33:9c:49:84:fd:94:c2:58:d4: 4e:93:76:e0:c6:cc:cd:60:b0:af:36:44:c1:19:58: be:21:19:d9:44:cd:69:3d:77:7e:d8:8b:85:28:76: fa:37:1d:b9:b1:67:4f:27:7b:ab:8e:c4:97:2e:02: d6:57:39:ac:e8:3d:ef:8b:d8:49:a4:5f:e3:a5:8a: 74:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A2:D7:18:A2:61:D5:77:BE:98:A4:24:6A:02:A9:83:83:1A:47:B0 X509v3 Authority Key Identifier: keyid:EC:84:D6:0F:79:6B:F4:16:F8:F8:1D:18:BA:DA:2F:FF:87:C1:5F:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:5e:99:9a:ba:a1:9c:43:da:2e:23:e8:38:32:0a:eb:e2:11: 29:d3:b9:02:0a:4b:b5:b0:3e:a7:bf:a0:ed:b7:75:11:bf:72: 89:c6:f6:c1:66:0b:e6:b6:2d:4f:d8:ee:75:dc:3d:5c:13:27: 1a:7e:0b:41:09:16:b6:6d:f1:77:46:2e:39:83:f5:0c:e5:8a: 40:62:70:78:52:6a:58:3d:e8:6c:41:8c:2a:b7:a6:69:4b:05: 05:e1:0f:9c:69:d1:b5:66:46:a5:65:71:a6:b1:57:61:c2:d3: dc:f1:92:f1:78:2f:16:ea:a9:e1:f2:be:a5:66:ac:0c:35:2c: 70:33:67:8f:3a:ad:30:d7:45:9d:d5:99:7c:d9:6f:38:f6:f5: 84:7f:8d:c6:16:32:f5:c1:6c:3d:ce:84:42:d7:f0:d0:9a:c3: 32:9e:dd:6a:6b:79:a3:47:58:ce:de:ba:f1:e0:b1:0d:78:42: 4b:e5:9d:07:0e:f5:87:ea:8b:e9:6e:51:46:ca:02:7f:fe:1b: ed:7d:ab:d4:58:9b:fc:47:3d:f9:13:1e:c4:be:53:99:72:a0: bf:2f:71:c9:88:16:68:b5:41:d0:0c:b9:01:0c:6a:72:ab:e2: f1:84:5a:45:66:75:5f:6b:89:95:ae:96:98:6f:05:0a:75:a7: dc:25:49:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDRjExMTAvBgNVBAUTKEVDODRENjBGNzk2QkY0MTZGOEY4MUQxOEJBREEyRkZG ODdDMTVGMjYwHhcNMjUwNjAzMDEwNDM3WhcNMjUwNjEwMDEwNDM3WjAYMRYwFAYD VQQDEw02ODNlNGEyNS1mNWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnxCK85P5qg41O4nEzn4Pv8m31Sr+3i465qhUlCaaX8y2IwfrdWlB4i6YuEAE 7M9Kbx9Ao2650AoRI0yHCZBKvw57XcwcBJaTl6J09Thb5kcGUyZ7wpW6R9I9Rbjb BVE+u0UKmC7gKjBaY4DF8X9/Fkq3ZQqSE6OC6tWrH/0UQEsCehLk+eTVecEBR6LV M0BkYispWTraP/cQ1DfSuASTp8UqY6Jy/ifz6+6Y1NymcVPMv4EoqW0NDq0znEmE /ZTCWNROk3bgxszNYLCvNkTBGVi+IRnZRM1pPXd+2IuFKHb6Nx25sWdPJ3urjsSX LgLWVzms6D3vi9hJpF/jpYp0QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWi1xii YdV3vpikJGoCqYODGkewMB8GA1UdIwQYMBaAFOyE1g95a/QW+PgdGLraL/+HwV8m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUNGMS84NjgzNTUwNkEw MzkxMUVDOEExRjFDMjNDNEY5QUUwMi83SVRXRDNscjlCYjQtQjBZdXRvdl80ZkJY eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdJVFdEM2xyOUJiNC1CMFl1dG92XzRmQlh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUNGMS84NjgzNTUwNkEwMzkxMUVDOEExRjFDMjNDNEY5QUUwMi83SVRXRDNscjlC YjQtQjBZdXRvdl80ZkJYeVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+XpmauqGcQ9ouI+g4Mgrr4hEp07kCCku1sD6nv6Dtt3URv3KJxvbB Zgvmti1P2O513D1cEycafgtBCRa2bfF3Ri45g/UM5YpAYnB4UmpYPehsQYwqt6Zp SwUF4Q+cadG1ZkalZXGmsVdhwtPc8ZLxeC8W6qnh8r6lZqwMNSxwM2ePOq0w10Wd 1Zl82W849vWEf43GFjL1wWw9zoRC1/DQmsMynt1qa3mjR1jO3rrx4LENeEJL5Z0H DvWH6ovpblFGygJ//hvtfavUWJv8Rz35Ex7EvlOZcqC/L3HJiBZotUHQDLkBDGpy q+LxhFpFZnVfa4mVrpaYbwUKdafcJUkD -----END CERTIFICATE-----Generated at Wed Jun 4 00:05:21 2025 by rpki-client