$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft File: r7CNb36XeFtvMRce-C4xux0G4uM.mft (raw, json) Hash identifier: /1ni3kCf9KX5DPFYnGHhcqgvQDStgBWd16PXq1Yt+oc= Subject key identifier: A0:35:7B:51:3A:3C:48:02:DA:C3:05:EC:D4:4A:AE:88:7D:85:29:6A Authority key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 Certificate issuer: /CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Certificate serial: 144C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft Manifest number: 1433 Signing time: Wed 12 Mar 2025 16:53:14 +0000 Manifest this update: Wed 12 Mar 2025 16:53:13 +0000 Manifest next update: Wed 19 Mar 2025 16:53:13 +0000 Files and hashes: 1: r7CNb36XeFtvMRce-C4xux0G4uM.crl (hash: p1yd2yU+YYBKZ4uDEhsYGN26gaVZWPIWHjydyCvCV3k=) 2: 4EED8CBE029911EF96760924C4F9AE02.roa (hash: cpQwQDSUoYa+Vnot2yqU8AJPODFXEemIQDAmCs6uXVM=) 3: CC2A0136F58C11EEB142585CC4F9AE02.roa (hash: qmiQQhJumSCOTqN0UAWHayq21svmJxORov2Aa4yLRQg=) 4: A0375A56964511EF9481CA74C4F9AE02.roa (hash: gbrkH4U/QpazQg+F0ZnEc57+CT76cpZp6ZU9vhBq73s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 16:53:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5196 (0x144c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B15 Validity Not Before: Mar 12 16:53:13 2025 GMT Not After : Mar 19 16:53:13 2025 GMT Subject: CN=67d1bbfa-4767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8a:9a:11:b4:8b:28:ed:b2:2b:ef:db:1e:5b: 3d:18:fa:df:52:28:64:11:e6:d7:3e:f7:d8:bc:3e: aa:16:e6:59:21:2c:3c:4a:3d:59:00:07:de:c3:2c: 38:2f:f3:66:4d:f2:dd:1f:57:3a:d1:6a:7d:65:78: d1:58:db:fe:75:a9:54:4d:1a:dd:88:84:b7:a0:6b: 92:47:1a:fd:8f:46:3a:a8:53:84:5c:c6:9d:87:86: fa:08:39:18:4b:6f:d4:87:5a:dc:aa:6b:23:9f:4e: 4f:18:11:3b:90:bf:37:1f:59:19:ef:d4:8e:e7:60: 28:15:7f:37:fd:69:39:53:21:39:af:9d:84:4a:23: e3:a6:17:6f:e2:94:f4:a1:22:5a:6e:16:2a:02:6f: 96:ea:77:ab:1a:c0:0c:97:3a:27:e2:71:89:4c:6e: 47:0c:18:d0:1e:75:4f:56:7d:05:fc:37:8d:b8:71: 0f:be:71:33:78:45:47:9a:08:0e:7d:7e:c4:04:50: 32:45:28:06:0a:d0:e5:d5:34:05:3b:54:e5:48:d3: b3:dc:1d:2b:41:b5:03:e4:f2:f9:2c:54:b2:98:ea: 1d:27:8e:87:d6:a0:9a:fd:b7:1c:78:11:64:de:e4: d6:3c:da:84:f6:6d:93:44:ae:b9:f5:e5:cd:41:c4: a6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:35:7B:51:3A:3C:48:02:DA:C3:05:EC:D4:4A:AE:88:7D:85:29:6A X509v3 Authority Key Identifier: keyid:AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:a1:8b:5a:a7:54:3e:e6:48:08:d3:73:81:76:a7:ed:c2:b1: b9:10:6d:d1:69:6d:80:bd:6f:83:c2:d9:b6:91:fc:a4:26:2e: 8f:35:e7:c7:70:03:91:6c:9b:f5:1b:c8:2d:7b:c0:f4:a9:fd: d2:b4:0e:3f:8d:66:81:0d:02:d8:6d:8e:31:1a:61:1d:a4:7d: af:f9:25:df:7e:73:12:35:00:2d:df:51:80:8e:7b:7e:8d:d2: d4:30:cd:39:80:75:74:d0:82:9e:47:4b:c7:75:50:7c:a5:80: 96:4d:bb:77:c5:e4:d5:21:cf:49:0f:87:7a:3d:ef:77:ae:6e: 34:f0:d6:86:20:25:f0:5a:87:21:7d:45:9b:9e:37:ba:04:2a: 36:c1:90:8e:5f:ba:05:52:06:5d:aa:31:21:b0:53:a4:7f:eb: 45:f2:56:8a:14:f7:b3:e5:2c:55:b4:9b:af:36:90:04:67:07: da:fe:9f:fa:31:64:ad:c0:6b:77:8f:2a:20:81:ae:8c:65:f9: 9f:6c:f9:1d:a4:ef:d4:cb:5d:43:7d:60:43:3f:92:7d:ea:f6: 4b:f3:f2:72:fd:15:2c:78:d6:ee:ea:d3:88:44:fd:c2:1b:e4: 26:bb:fe:88:f4:24:df:4d:cf:ab:be:ee:1c:f8:3f:54:44:65: d0:71:cd:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCMTUxMTAvBgNVBAUTKEFGQjA4RDZGN0U5Nzc4NUI2RjMxMTcxRUY4MkUzMUJC MUQwNkUyRTMwHhcNMjUwMzEyMTY1MzEzWhcNMjUwMzE5MTY1MzEzWjAYMRYwFAYD VQQDEw02N2QxYmJmYS00NzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYqaEbSLKO2yK+/bHls9GPrfUihkEebXPvfYvD6qFuZZISw8Sj1ZAAfewyw4 L/NmTfLdH1c60Wp9ZXjRWNv+dalUTRrdiIS3oGuSRxr9j0Y6qFOEXMadh4b6CDkY S2/Uh1rcqmsjn05PGBE7kL83H1kZ79SO52AoFX83/Wk5UyE5r52ESiPjphdv4pT0 oSJabhYqAm+W6nerGsAMlzon4nGJTG5HDBjQHnVPVn0F/DeNuHEPvnEzeEVHmggO fX7EBFAyRSgGCtDl1TQFO1TlSNOz3B0rQbUD5PL5LFSymOodJ46H1qCa/bcceBFk 3uTWPNqE9m2TRK659eXNQcSmDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKA1e1E6 PEgC2sMF7NRKroh9hSlqMB8GA1UdIwQYMBaAFK+wjW9+l3hbbzEXHvguMbsdBuLj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS9GQUY2RkQ3ODcx RTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVGdHZNUmNlLUM0eHV4MEc0 dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3Q05iMzZYZUZ0dk1SY2UtQzR4dXgwRzR1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0IxNS9GQUY2RkQ3ODcxRTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVG dHZNUmNlLUM0eHV4MEc0dU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpoYtap1Q+5kgI03OBdqftwrG5EG3RaW2AvW+Dwtm2kfykJi6PNefH cAORbJv1G8gte8D0qf3StA4/jWaBDQLYbY4xGmEdpH2v+SXffnMSNQAt31GAjnt+ jdLUMM05gHV00IKeR0vHdVB8pYCWTbt3xeTVIc9JD4d6Pe93rm408NaGICXwWoch fUWbnje6BCo2wZCOX7oFUgZdqjEhsFOkf+tF8laKFPez5SxVtJuvNpAEZwfa/p/6 MWStwGt3jyogga6MZfmfbPkdpO/Uy11DfWBDP5J96vZL8/Jy/RUseNbu6tOIRP3C G+Qmu/6I9CTfTc+rvu4c+D9URGXQcc1X -----END CERTIFICATE-----Generated at Thu Mar 13 21:29:01 2025 by rpki-client