$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft File: n7dBtymAPGtDKbw7QOduUqvYufg.mft (raw, json) Hash identifier: 42jG0JSkFIXTKe/FyKgvDcBy5jkfMjZ+k82Fqf1oGK0= Subject key identifier: 4C:57:BB:D4:3E:14:ED:B1:97:DF:EA:BB:E1:3D:9F:A3:9D:17:7F:C5 Authority key identifier: 9F:B7:41:B7:29:80:3C:6B:43:29:BC:3B:40:E7:6E:52:AB:D8:B9:F8 Certificate issuer: /CN=A91A7F56/serialNumber=9FB741B729803C6B4329BC3B40E76E52ABD8B9F8 Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft Manifest number: 0109 Signing time: Sun 01 Jun 2025 04:41:26 +0000 Manifest this update: Sun 01 Jun 2025 04:41:25 +0000 Manifest next update: Sun 08 Jun 2025 04:41:25 +0000 Files and hashes: 1: n7dBtymAPGtDKbw7QOduUqvYufg.crl (hash: vpXgcmH5T7HF+5pcxPnJokJZMrtKl2m7i2hzx+5BGGE=) 2: 1FFCF508ADF211EE93DC0A12C4F9AE02.roa (hash: kN/JSLj9TvzMzCv/SkXvYZbvfv6T8T6WGICKq1DXwxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.crl rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 04:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F56, serialNumber=9FB741B729803C6B4329BC3B40E76E52ABD8B9F8 Validity Not Before: Jun 1 04:41:25 2025 GMT Not After : Jun 8 04:41:25 2025 GMT Subject: CN=683bd9f5-8537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cc:f2:2f:4a:39:78:16:47:ae:51:80:8c:8e: a2:23:d2:77:eb:f8:db:ea:26:71:98:5d:ad:fc:ae: bc:45:2c:6f:49:4f:10:7e:7a:f2:da:9c:e4:80:1f: 9a:a9:6d:e9:07:bc:f7:5b:fe:3e:63:5b:da:43:ed: 30:8d:d0:4d:e0:8c:26:d2:63:cd:ee:06:de:e1:8a: e4:c1:71:25:78:8e:8f:e7:af:c6:d3:4b:5d:56:d0: 27:b5:f0:80:07:91:79:ee:cb:13:76:46:25:9d:3e: 22:6c:9f:7a:e6:50:29:09:22:e5:f4:62:d1:f6:bc: 0c:49:a0:8d:62:2c:47:7c:db:de:2e:20:f7:fc:10: eb:7b:f5:51:5e:8d:c5:b4:c6:f3:88:9d:02:8e:e7: b1:07:18:8c:75:97:2f:b5:bd:27:a3:4b:c9:f2:1e: d7:ed:72:a8:2d:77:35:91:70:77:cd:c1:c0:ca:19: 47:99:8f:b8:34:e2:17:1f:94:44:8d:a5:97:a5:ba: 41:96:e2:1d:05:36:6f:0a:94:c8:72:8a:11:6d:e7: 72:d4:f3:d5:d6:d0:b3:74:7a:63:46:16:c8:00:f7: f2:c4:ee:54:11:28:2a:3d:ab:10:55:d4:ff:23:7c: 4e:82:23:cb:c6:e4:2b:5b:33:ef:06:a9:80:b6:bc: 53:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:57:BB:D4:3E:14:ED:B1:97:DF:EA:BB:E1:3D:9F:A3:9D:17:7F:C5 X509v3 Authority Key Identifier: keyid:9F:B7:41:B7:29:80:3C:6B:43:29:BC:3B:40:E7:6E:52:AB:D8:B9:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:60:c6:8b:25:a0:6c:ba:20:95:14:52:16:9b:6d:ef:dd:23: af:88:4f:75:e7:ec:a5:d2:f4:79:54:96:8d:b1:01:7c:f8:c7: 71:d5:94:d0:7c:c9:39:3a:a3:2e:0d:fa:aa:47:dc:3a:73:24: 5b:50:31:55:2e:03:7c:aa:dd:2b:a4:a4:32:ff:58:03:d8:92: 3a:e5:a6:21:3d:3d:ad:18:44:94:48:b3:5e:68:61:77:e8:67: ba:34:33:a2:6c:c7:0d:14:cc:c0:60:8e:99:7c:4c:da:34:c4: 1b:de:39:4d:76:00:48:e3:45:3c:6f:92:ce:08:2b:5b:e4:20: 0c:49:2b:d1:a2:cc:67:39:27:c7:d8:3d:45:ff:b0:21:b5:c3: 61:5c:31:cd:ae:a8:0f:d3:e9:5b:92:86:11:dd:2d:86:52:7a: ab:ac:3c:2a:44:05:89:b2:64:6f:cc:2c:ce:96:f5:12:e1:46: 0f:54:86:4d:02:30:1e:8f:27:22:69:89:9b:0b:96:ce:bd:b3: db:5e:9e:ab:f4:d4:7e:40:4d:2a:cb:e9:c7:d8:ef:cb:3d:e1: 27:4a:8d:22:e9:6c:95:7e:c7:82:f8:ba:c3:cc:d9:c7:cd:7c: 32:48:0e:7f:2c:62:fd:bd:87:76:9d:4a:0b:99:3e:00:20:50: 8d:9f:84:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdGNTYxMTAvBgNVBAUTKDlGQjc0MUI3Mjk4MDNDNkI0MzI5QkMzQjQwRTc2RTUy QUJEOEI5RjgwHhcNMjUwNjAxMDQ0MTI1WhcNMjUwNjA4MDQ0MTI1WjAYMRYwFAYD VQQDEw02ODNiZDlmNS04NTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtszyL0o5eBZHrlGAjI6iI9J36/jb6iZxmF2t/K68RSxvSU8Qfnry2pzkgB+a qW3pB7z3W/4+Y1vaQ+0wjdBN4Iwm0mPN7gbe4YrkwXEleI6P56/G00tdVtAntfCA B5F57ssTdkYlnT4ibJ965lApCSLl9GLR9rwMSaCNYixHfNveLiD3/BDre/VRXo3F tMbziJ0CjuexBxiMdZcvtb0no0vJ8h7X7XKoLXc1kXB3zcHAyhlHmY+4NOIXH5RE jaWXpbpBluIdBTZvCpTIcooRbedy1PPV1tCzdHpjRhbIAPfyxO5UESgqPasQVdT/ I3xOgiPLxuQrWzPvBqmAtrxTLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExXu9Q+ FO2xl9/qu+E9n6OdF3/FMB8GA1UdIwQYMBaAFJ+3QbcpgDxrQym8O0DnblKr2Ln4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Y1Ni85NEQ1NzIzNkFD Q0QxMUVFODEwNjkwNTBDNEY5QUUwMi9uN2RCdHltQVBHdERLYnc3UU9kdVVxdll1 ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL243ZEJ0eW1BUEd0REtidzdRT2R1VXF2WXVmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0Y1Ni85NEQ1NzIzNkFDQ0QxMUVFODEwNjkwNTBDNEY5QUUwMi9uN2RCdHltQVBH dERLYnc3UU9kdVVxdll1ZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9YMaLJaBsuiCVFFIWm23v3SOviE915+yl0vR5VJaNsQF8+Mdx1ZTQ fMk5OqMuDfqqR9w6cyRbUDFVLgN8qt0rpKQy/1gD2JI65aYhPT2tGESUSLNeaGF3 6Ge6NDOibMcNFMzAYI6ZfEzaNMQb3jlNdgBI40U8b5LOCCtb5CAMSSvRosxnOSfH 2D1F/7AhtcNhXDHNrqgP0+lbkoYR3S2GUnqrrDwqRAWJsmRvzCzOlvUS4UYPVIZN AjAejyciaYmbC5bOvbPbXp6r9NR+QE0qy+nH2O/LPeEnSo0i6WyVfseC+LrDzNnH zXwySA5/LGL9vYd2nUoLmT4AIFCNn4RY -----END CERTIFICATE-----Generated at Mon Jun 2 20:37:44 2025 by rpki-client