$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft File: X-7enTglQ_BRUn-lM9R6kXB35jI.mft (raw, json) Hash identifier: TyKcXMIN58H/Tq+bpRKfwAbVid+VHwE/owOOm8eDyQw= Subject key identifier: 46:88:EE:05:8A:92:5F:84:A1:FD:73:E2:7D:74:04:C9:75:FB:B5:B7 Authority key identifier: 5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32 Certificate issuer: /CN=A91EA198/serialNumber=5FEEDE9D382543F051527FA533D47A917077E632 Certificate serial: 1DF6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft Manifest number: 1D74 Signing time: Wed 12 Mar 2025 16:07:51 +0000 Manifest this update: Wed 12 Mar 2025 16:07:51 +0000 Manifest next update: Wed 19 Mar 2025 16:07:51 +0000 Files and hashes: 1: X-7enTglQ_BRUn-lM9R6kXB35jI.crl (hash: n+pEvfpvrF6tKu9cln0X8LP54sCe01W0hDp2J5MWAxA=) 2: 1A0D44FA3B5411EABAC6EE18C4F9AE02.roa (hash: ErQUIZBQOuclNYifsKsmx5/Jnr/1hpU5xKibhIO600k=) 3: B8BA4E603B5211EAA0D53F12C4F9AE02.roa (hash: JDAGe4IksOtjrzlmQZ9zVBIzM1ZKwteeQYN9TBrAsPk=) 4: DF730482A32311EFBE77BA2EC4F9AE02.roa (hash: nvySfMAS7TN3zTFr4mHSPK7RJZZnC8NIvHsh40VIoNk=) 5: 4EA15AE44FD811ED8AEB0282C4F9AE02.roa (hash: KptRM9OhZOY+IAnuIj6dKpgRtL+UG95HSLHK6SbwluY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 16:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7670 (0x1df6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198 Validity Not Before: Mar 12 16:07:51 2025 GMT Not After : Mar 19 16:07:51 2025 GMT Subject: CN=67d1b157-e30f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b9:56:c2:9f:7c:22:d0:e8:5a:46:02:94:84: cf:40:53:df:9d:e6:11:90:24:fe:a6:cd:ba:f7:78: 74:9c:6f:93:5d:54:99:57:d4:d3:4d:f5:6f:f5:3a: be:41:69:b0:78:e5:d0:ad:ae:cc:bb:f1:55:1b:c0: e7:ca:6e:ac:81:f3:d2:06:1f:cf:c0:6a:d3:35:c9: 21:11:f2:07:fe:af:1b:79:0b:38:26:dd:6e:d7:2f: 0f:3c:61:95:d4:9b:cd:fd:31:0e:50:c2:52:c5:0a: 30:6e:ea:6e:08:af:29:28:ac:18:00:e8:d0:e3:c3: 35:94:ce:e4:21:27:b2:13:4d:68:86:9d:36:8f:cd: 42:a2:d0:a9:4a:c0:dd:b6:d1:2e:a6:8d:51:70:1d: fa:85:86:52:f3:48:6a:b6:93:e0:2e:af:4b:32:31: 77:44:4c:59:30:83:32:84:d3:cf:0d:d8:e9:05:2e: 4f:a2:bf:c0:1c:e1:71:11:7a:5f:0f:d1:df:ef:fe: be:d6:2d:0e:eb:46:e7:e2:65:c0:d6:da:c3:a7:93: 1d:0f:3e:c9:45:0d:ed:b3:32:94:bb:ff:f9:3a:14: 3e:26:e9:b1:9c:38:33:9b:b6:1f:e3:95:8d:bb:89: d5:be:d4:2c:23:6e:9f:9b:d9:7d:90:5d:f9:7a:0d: c0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:88:EE:05:8A:92:5F:84:A1:FD:73:E2:7D:74:04:C9:75:FB:B5:B7 X509v3 Authority Key Identifier: keyid:5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:34:d9:d9:e1:1e:50:ee:ec:af:e1:63:26:24:db:a1:75:ff: 9a:1b:eb:2e:f9:3b:8d:89:f2:03:af:0e:5f:c1:f6:dd:d2:b0: 3e:ef:44:d4:3d:34:46:b9:e5:cf:45:63:e8:e1:44:f7:53:4a: 7e:b9:54:7c:de:7c:69:66:96:b2:ff:6a:3e:a0:5d:88:4d:53: 65:df:5e:55:5e:6c:42:77:7e:d4:41:06:05:59:80:1a:0f:25: 9d:7f:1d:7e:d8:fe:77:3e:9c:30:de:9c:85:00:24:e1:a5:a2: ba:30:b3:42:67:9c:50:a0:83:24:3d:80:be:3d:d5:c5:2d:ec: 8e:62:ad:19:15:2a:38:2e:95:5e:2e:a9:c2:fd:49:d7:26:36: 89:4b:4c:7c:69:27:9d:9e:fe:c4:d7:29:4e:35:f4:9e:55:fb: 8b:b9:ac:f5:9f:6f:04:e8:71:59:d6:92:fb:a8:98:54:c1:ad: 37:bd:55:c9:0d:58:ae:1d:cb:22:98:0a:1c:02:dc:6a:81:13: 6c:30:39:f4:cf:62:03:1d:76:97:ec:af:8e:2e:55:c3:e9:74: b1:6e:dd:05:72:ec:d2:36:c5:3c:e4:e8:90:4f:f2:a4:6f:6d: 76:69:5a:bc:7c:c3:52:20:aa:10:f8:34:44:d5:55:3b:52:a5: 02:e5:81:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDVGRUVERTlEMzgyNTQzRjA1MTUyN0ZBNTMzRDQ3QTkx NzA3N0U2MzIwHhcNMjUwMzEyMTYwNzUxWhcNMjUwMzE5MTYwNzUxWjAYMRYwFAYD VQQDEw02N2QxYjE1Ny1lMzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq7lWwp98ItDoWkYClITPQFPfneYRkCT+ps2693h0nG+TXVSZV9TTTfVv9Tq+ QWmweOXQra7Mu/FVG8Dnym6sgfPSBh/PwGrTNckhEfIH/q8beQs4Jt1u1y8PPGGV 1JvN/TEOUMJSxQowbupuCK8pKKwYAOjQ48M1lM7kISeyE01ohp02j81CotCpSsDd ttEupo1RcB36hYZS80hqtpPgLq9LMjF3RExZMIMyhNPPDdjpBS5Por/AHOFxEXpf D9Hf7/6+1i0O60bn4mXA1trDp5MdDz7JRQ3tszKUu//5OhQ+JumxnDgzm7Yf45WN u4nVvtQsI26fm9l9kF35eg3ASwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEaI7gWK kl+Eof1z4n10BMl1+7W3MB8GA1UdIwQYMBaAFF/u3p04JUPwUVJ/pTPUepFwd+Yy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC9BRDYyOTIyMkI1 MjUxMUU2QUY2Qzg5NUVDNEY5QUUwMi9YLTdlblRnbFFfQlJVbi1sTTlSNmtYQjM1 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1gtN2VuVGdsUV9CUlVuLWxNOVI2a1hCMzVqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE5OC9BRDYyOTIyMkI1MjUxMUU2QUY2Qzg5NUVDNEY5QUUwMi9YLTdlblRnbFFf QlJVbi1sTTlSNmtYQjM1akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCNNnZ4R5Q7uyv4WMmJNuhdf+aG+su+TuNifIDrw5fwfbd0rA+70TU PTRGueXPRWPo4UT3U0p+uVR83nxpZpay/2o+oF2ITVNl315VXmxCd37UQQYFWYAa DyWdfx1+2P53Ppww3pyFACThpaK6MLNCZ5xQoIMkPYC+PdXFLeyOYq0ZFSo4LpVe LqnC/UnXJjaJS0x8aSednv7E1ylONfSeVfuLuaz1n28E6HFZ1pL7qJhUwa03vVXJ DViuHcsimAocAtxqgRNsMDn0z2IDHXaX7K+OLlXD6XSxbt0FcuzSNsU85OiQT/Kk b212aVq8fMNSIKoQ+DRE1VU7UqUC5YGH -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:44 2025 by rpki-client