$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft File: 7w5JMvxot1LjQokiqT5mq-MfNDE.mft (raw, json) Hash identifier: iIWpgtDVcnjrhpONcdghgBy3CV1wjt5l0u+ga1W48OE= Subject key identifier: D7:CA:2D:A3:0D:3A:93:02:9A:B0:0B:1E:5E:16:DB:8A:81:B6:5D:89 Authority key identifier: EF:0E:49:32:FC:68:B7:52:E3:42:89:22:A9:3E:66:AB:E3:1F:34:31 Certificate issuer: /CN=A91B4B33/serialNumber=EF0E4932FC68B752E3428922A93E66ABE31F3431 Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft Manifest number: 91 Signing time: Thu 13 Mar 2025 04:28:55 +0000 Manifest this update: Thu 13 Mar 2025 04:28:55 +0000 Manifest next update: Thu 20 Mar 2025 04:28:55 +0000 Files and hashes: 1: 7w5JMvxot1LjQokiqT5mq-MfNDE.crl (hash: EIVVzG1gbaAyuaKYMsr5xTsOM2pQxzrH6A6q7lm+2+Q=) 2: 80741B04221F11EF92A42E1AC4F9AE02.roa (hash: +0mo10Ws60113T/VX//uyh/DURlhmmXDvzWq5iLVu9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.crl rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 04:28:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4B33 Validity Not Before: Mar 13 04:28:55 2025 GMT Not After : Mar 20 04:28:55 2025 GMT Subject: CN=67d25f07-00e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ba:aa:b6:36:58:20:88:51:cf:5f:17:32:ce: 15:cc:28:f8:d9:fb:6d:ca:4b:16:2b:d9:70:80:60: 51:24:d6:e6:2e:8d:31:00:cf:8b:45:06:5e:bd:a3: 95:dc:c3:16:53:1a:04:4d:5e:1e:7a:4e:f1:ec:93: a5:3b:90:df:68:82:0c:c3:4a:85:06:32:ec:ac:1c: a2:76:04:54:98:9a:2d:7e:5d:0c:10:c3:ab:59:1a: 92:f3:3b:ba:6d:5d:a1:00:48:0e:72:89:39:1f:3a: 08:66:4c:43:18:6c:0c:56:7a:96:ba:18:31:a5:2b: bc:8d:e3:9c:ae:af:e0:a2:c2:9b:9d:33:98:9c:2d: d0:4b:b1:5b:c7:fc:a6:65:a9:0e:14:38:3b:cb:2a: 54:1d:4b:11:0f:80:1e:87:3c:2a:9a:a4:ac:37:b6: 93:e5:68:43:06:89:aa:e1:ff:f1:b5:03:ca:41:b0: 6f:25:d5:9a:a5:2f:2e:07:8c:eb:e2:59:b0:47:22: 85:84:4f:7c:a1:fb:eb:34:68:2d:c3:eb:88:5e:38: 18:a9:d0:17:dc:13:9d:72:ec:01:90:d9:18:9b:1a: 52:92:e5:50:8e:43:c5:f6:e3:4a:56:2a:6e:f2:de: 54:fe:07:c3:94:2d:5e:d7:48:f1:20:15:98:8b:03: ae:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CA:2D:A3:0D:3A:93:02:9A:B0:0B:1E:5E:16:DB:8A:81:B6:5D:89 X509v3 Authority Key Identifier: keyid:EF:0E:49:32:FC:68:B7:52:E3:42:89:22:A9:3E:66:AB:E3:1F:34:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:2c:fe:25:3d:03:9d:74:31:b5:fb:8c:17:3a:01:6f:86:7d: e9:2e:4e:ab:b2:67:c6:66:fc:ae:c5:07:1d:27:a7:40:1e:34: e8:3c:ff:00:ee:38:a7:df:53:36:89:81:cf:15:be:bf:e5:77: 05:51:43:97:44:68:7a:76:e6:fa:12:ab:60:9f:f8:bb:1f:c0: 9c:cf:84:69:15:31:0a:08:a6:eb:c0:fe:e4:40:06:a4:98:2a: be:0b:1c:d1:36:44:b6:42:fc:7f:29:05:64:c1:3c:f4:aa:cc: 78:0c:b8:13:6a:d5:00:32:07:3e:dc:3c:e3:af:7c:9b:2d:89: 5a:e4:45:a7:42:79:a5:db:2b:e5:57:ae:48:ae:b6:e7:8e:08: e9:35:5e:58:c7:f7:65:9e:bf:10:12:4c:9a:e0:bb:f2:a5:15: 4a:58:1a:15:0d:77:e9:98:ec:2d:d9:8e:21:0b:c7:ce:70:17: c6:aa:b8:d8:91:77:8f:43:c1:cf:3d:08:b7:93:d5:2a:97:48: 31:ea:75:40:f9:c4:10:8d:96:ff:79:71:9e:66:9b:ce:f2:37: c8:14:ff:95:39:94:c2:61:80:ae:68:f5:9f:4a:a4:41:fa:69: 3f:9e:83:12:42:7c:a9:46:ee:27:e8:70:62:f4:9d:a2:0c:bb: a5:31:b2:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRCMzMxMTAvBgNVBAUTKEVGMEU0OTMyRkM2OEI3NTJFMzQyODkyMkE5M0U2NkFC RTMxRjM0MzEwHhcNMjUwMzEzMDQyODU1WhcNMjUwMzIwMDQyODU1WjAYMRYwFAYD VQQDEw02N2QyNWYwNy0wMGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLqqtjZYIIhRz18XMs4VzCj42fttyksWK9lwgGBRJNbmLo0xAM+LRQZevaOV 3MMWUxoETV4eek7x7JOlO5DfaIIMw0qFBjLsrByidgRUmJotfl0MEMOrWRqS8zu6 bV2hAEgOcok5HzoIZkxDGGwMVnqWuhgxpSu8jeOcrq/gosKbnTOYnC3QS7Fbx/ym ZakOFDg7yypUHUsRD4AehzwqmqSsN7aT5WhDBomq4f/xtQPKQbBvJdWapS8uB4zr 4lmwRyKFhE98ofvrNGgtw+uIXjgYqdAX3BOdcuwBkNkYmxpSkuVQjkPF9uNKVipu 8t5U/gfDlC1e10jxIBWYiwOuFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfKLaMN OpMCmrALHl4W24qBtl2JMB8GA1UdIwQYMBaAFO8OSTL8aLdS40KJIqk+ZqvjHzQx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEIzMy8xQUNFN0QwNDIy MUUxMUVGOTM0NEEzMDlDNEY5QUUwMi83dzVKTXZ4b3QxTGpRb2tpcVQ1bXEtTWZO REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzd3NUpNdnhvdDFMalFva2lxVDVtcS1NZk5ERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEIzMy8xQUNFN0QwNDIyMUUxMUVGOTM0NEEzMDlDNEY5QUUwMi83dzVKTXZ4b3Qx TGpRb2tpcVQ1bXEtTWZOREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+LP4lPQOddDG1+4wXOgFvhn3pLk6rsmfGZvyuxQcdJ6dAHjToPP8A 7jin31M2iYHPFb6/5XcFUUOXRGh6dub6Eqtgn/i7H8Ccz4RpFTEKCKbrwP7kQAak mCq+CxzRNkS2Qvx/KQVkwTz0qsx4DLgTatUAMgc+3Dzjr3ybLYla5EWnQnml2yvl V65IrrbnjgjpNV5Yx/dlnr8QEkya4LvypRVKWBoVDXfpmOwt2Y4hC8fOcBfGqrjY kXePQ8HPPQi3k9Uql0gx6nVA+cQQjZb/eXGeZpvO8jfIFP+VOZTCYYCuaPWfSqRB +mk/noMSQnypRu4n6HBi9J2iDLulMbIu -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:02 2025 by rpki-client