$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft File: r7CNb36XeFtvMRce-C4xux0G4uM.mft (raw, json) Hash identifier: TRufKaq39AjIHhMjplT45jKx6EcY8ZYFFzLA6pMAlwE= Subject key identifier: C1:3E:A8:B8:FF:1C:DD:10:8E:21:F8:D1:79:89:26:1D:BA:21:65:79 Authority key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 Certificate issuer: /CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Certificate serial: 1440 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft Manifest number: 1427 Signing time: Sun 16 Feb 2025 17:14:55 +0000 Manifest this update: Sun 16 Feb 2025 17:14:54 +0000 Manifest next update: Sun 23 Feb 2025 17:14:54 +0000 Files and hashes: 1: r7CNb36XeFtvMRce-C4xux0G4uM.crl (hash: /Qa0EBvvVuU+McvXqQE6NZ27ib2zIgfiAWDukkX2G2A=) 2: 4EED8CBE029911EF96760924C4F9AE02.roa (hash: cpQwQDSUoYa+Vnot2yqU8AJPODFXEemIQDAmCs6uXVM=) 3: CC2A0136F58C11EEB142585CC4F9AE02.roa (hash: qmiQQhJumSCOTqN0UAWHayq21svmJxORov2Aa4yLRQg=) 4: A0375A56964511EF9481CA74C4F9AE02.roa (hash: gbrkH4U/QpazQg+F0ZnEc57+CT76cpZp6ZU9vhBq73s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5184 (0x1440) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B15 Validity Not Before: Feb 16 17:14:54 2025 GMT Not After : Feb 23 17:14:54 2025 GMT Subject: CN=67b21d0e-d5f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:56:e1:40:a8:62:18:68:67:de:40:04:4f:67: a5:f4:b5:26:de:16:ae:ec:0e:4f:52:04:0c:fd:38: 69:ce:7b:c6:9b:b7:c7:97:95:7e:59:c4:d5:e1:11: 36:8b:e2:f7:4f:0e:76:7f:09:56:4c:a4:57:3a:f4: ab:57:da:b3:88:b1:2e:24:ed:ec:0a:30:0e:f6:81: dd:99:18:ae:82:73:b2:d4:b4:31:c8:a2:d7:aa:ae: 92:22:39:53:92:df:40:79:13:98:cf:3d:39:c3:e4: d4:04:9e:6d:25:33:75:ef:ac:d9:3e:cc:5a:0c:fb: 77:19:f1:93:e2:6b:a6:07:83:b2:99:ea:d0:3b:a6: 7b:51:f6:01:4e:ad:93:ce:e3:41:7a:0c:45:37:19: 6a:7a:9c:da:cc:48:25:df:c0:b4:82:2e:13:95:1b: 47:5c:88:7d:c0:ea:53:fb:57:7a:25:06:8b:33:34: b6:40:88:c1:81:da:80:26:0c:20:13:d5:59:77:f5: 5f:51:ff:56:6d:45:5d:ba:2e:ca:17:de:43:a7:ee: d0:a9:46:d2:1e:b7:27:4e:b8:2d:ad:ae:81:cb:ba: f8:cb:21:ce:89:6a:b1:b6:d5:43:fe:14:76:02:06: ae:45:fe:3a:4b:04:bb:cd:89:bd:03:b2:c5:b8:a0: a6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:3E:A8:B8:FF:1C:DD:10:8E:21:F8:D1:79:89:26:1D:BA:21:65:79 X509v3 Authority Key Identifier: keyid:AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:d3:a6:07:e9:b9:e8:07:fb:44:27:f9:ef:87:fc:67:61:3a: 96:0b:32:7f:30:f5:fc:17:8a:be:a4:c6:89:f9:be:9d:88:71: 5a:ba:4c:57:6a:db:96:ec:12:14:4a:09:bb:d8:d2:d8:19:bd: cd:3f:e3:b8:24:4f:3c:a3:a8:de:5a:6f:54:7d:ff:81:e2:66: c2:17:49:1c:0a:ee:dc:e9:8e:09:23:85:17:df:86:89:97:71: dd:2a:04:bf:c9:0a:8d:97:74:19:b3:2e:41:9c:50:aa:ca:a9: 23:c0:d7:35:94:8a:fe:b2:aa:f5:cd:d5:c6:41:4d:a6:63:ea: 88:63:13:9a:66:a0:27:79:19:93:b6:65:9c:b8:d4:10:e4:31: 43:74:76:21:fc:35:00:06:77:57:75:b9:5b:f8:3e:15:f6:0c: d9:9b:69:d9:61:ff:4b:10:64:ed:61:60:81:3f:5d:fd:97:34: d2:5f:c9:6c:84:d3:c9:2f:2d:69:bc:91:7f:5e:c9:90:8d:a7: a5:aa:cd:f6:98:d8:33:0d:f1:aa:34:09:01:ac:e4:ee:ea:a0: 19:b0:34:41:35:35:7d:32:d7:eb:17:29:16:ae:2c:e5:25:c8: 62:d3:6d:3a:1a:10:c6:f3:d0:7d:39:39:fd:3d:36:b7:7c:16: e0:0f:a0:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCMTUxMTAvBgNVBAUTKEFGQjA4RDZGN0U5Nzc4NUI2RjMxMTcxRUY4MkUzMUJC MUQwNkUyRTMwHhcNMjUwMjE2MTcxNDU0WhcNMjUwMjIzMTcxNDU0WjAYMRYwFAYD VQQDEw02N2IyMWQwZS1kNWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVbhQKhiGGhn3kAET2el9LUm3hau7A5PUgQM/ThpznvGm7fHl5V+WcTV4RE2 i+L3Tw52fwlWTKRXOvSrV9qziLEuJO3sCjAO9oHdmRiugnOy1LQxyKLXqq6SIjlT kt9AeROYzz05w+TUBJ5tJTN176zZPsxaDPt3GfGT4mumB4OymerQO6Z7UfYBTq2T zuNBegxFNxlqepzazEgl38C0gi4TlRtHXIh9wOpT+1d6JQaLMzS2QIjBgdqAJgwg E9VZd/VfUf9WbUVdui7KF95Dp+7QqUbSHrcnTrgtra6By7r4yyHOiWqxttVD/hR2 AgauRf46SwS7zYm9A7LFuKCmEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFME+qLj/ HN0QjiH40XmJJh26IWV5MB8GA1UdIwQYMBaAFK+wjW9+l3hbbzEXHvguMbsdBuLj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS9GQUY2RkQ3ODcx RTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVGdHZNUmNlLUM0eHV4MEc0 dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3Q05iMzZYZUZ0dk1SY2UtQzR4dXgwRzR1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0IxNS9GQUY2RkQ3ODcxRTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVG dHZNUmNlLUM0eHV4MEc0dU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf06YH6bnoB/tEJ/nvh/xnYTqWCzJ/MPX8F4q+pMaJ+b6diHFaukxX atuW7BIUSgm72NLYGb3NP+O4JE88o6jeWm9Uff+B4mbCF0kcCu7c6Y4JI4UX34aJ l3HdKgS/yQqNl3QZsy5BnFCqyqkjwNc1lIr+sqr1zdXGQU2mY+qIYxOaZqAneRmT tmWcuNQQ5DFDdHYh/DUABndXdblb+D4V9gzZm2nZYf9LEGTtYWCBP139lzTSX8ls hNPJLy1pvJF/XsmQjaelqs32mNgzDfGqNAkBrOTu6qAZsDRBNTV9MtfrFykWrizl Jchi0206GhDG89B9OTn9PTa3fBbgD6AT -----END CERTIFICATE-----Generated at Sun Feb 16 22:24:32 2025 by rpki-client