$ rpki-client -vvf rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft File: _7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft (raw, json) Hash identifier: zMR2mLecuNHFhOOtd1pQFL9sI4n7oJwbIaI1vGpJIiw= Subject key identifier: EA:BC:77:FF:B5:F8:50:81:06:D0:7D:09:D8:95:6E:49:F3:76:47:CC Authority key identifier: FF:BC:2D:41:CD:D9:5F:FC:F8:A7:7E:52:91:9E:2E:6D:1B:AF:02:DF Certificate issuer: /CN=A91168FD/serialNumber=FFBC2D41CDD95FFCF8A77E52919E2E6D1BAF02DF Certificate serial: 215F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft Manifest number: 2156 Signing time: Mon 12 May 2025 15:53:08 +0000 Manifest this update: Mon 12 May 2025 15:53:07 +0000 Manifest next update: Mon 19 May 2025 15:53:07 +0000 Files and hashes: 1: _7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl (hash: FQuUxRP0qmCb/8TEn6qnqyOm7r7QjRH3cOKPlfcE6xo=) 2: D07411B6661211ECBCD61A65C4F9AE02.roa (hash: /mOiRGW1T9qa7YdW+2kPvRZkQyewAraUry397iZAYjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8543 (0x215f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168FD, serialNumber=FFBC2D41CDD95FFCF8A77E52919E2E6D1BAF02DF Validity Not Before: May 12 15:53:07 2025 GMT Not After : May 19 15:53:07 2025 GMT Subject: CN=68221964-f520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8a:ca:92:73:d8:a6:7c:de:88:11:d3:5d:81: 1c:0d:64:4a:39:d2:ad:91:79:6a:bc:20:66:6b:a6: a5:db:63:e2:0e:95:67:98:2d:25:17:f1:45:aa:51: 92:ed:29:4e:a9:8c:70:9c:6b:96:76:62:a9:af:53: f8:e2:fe:c2:f1:77:9b:41:8d:4d:65:9f:6f:df:d0: d5:60:82:bb:9f:d6:ef:92:09:42:d9:e7:3e:f3:be: f3:b9:66:fa:19:6a:25:cc:e9:d2:a9:d8:a6:7d:c8: 0d:1b:fb:f6:c8:4a:ea:a7:fd:7a:3c:32:ce:f9:c6: c4:84:d1:3b:e7:50:e9:b7:f9:63:af:61:d9:63:85: 67:c2:01:71:d9:cb:f8:98:c5:04:a7:9c:9b:3a:2d: 55:a6:67:76:af:04:6a:3c:47:61:0b:18:57:fb:e0: 76:6e:77:aa:64:a1:69:27:a6:6e:a1:70:11:2c:f3: c2:07:66:4e:e2:e0:96:d4:c6:75:26:a7:f7:13:1d: 8f:70:94:4c:32:df:33:fd:db:30:27:7a:d1:0a:a0: f9:d4:0b:bb:82:91:9c:a2:f2:65:06:60:63:f6:4f: b7:18:04:b4:70:34:a1:42:5e:ce:20:79:9d:38:39: 5b:b1:83:9d:43:b5:ce:0c:b4:32:4a:ac:a7:21:01: a1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:BC:77:FF:B5:F8:50:81:06:D0:7D:09:D8:95:6E:49:F3:76:47:CC X509v3 Authority Key Identifier: keyid:FF:BC:2D:41:CD:D9:5F:FC:F8:A7:7E:52:91:9E:2E:6D:1B:AF:02:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:4d:9c:8b:6d:d9:9d:4c:ec:64:06:91:a1:6b:c0:89:01:35: ca:6e:ea:8b:3e:d7:db:3a:41:51:fa:fe:9f:a2:cb:d1:e0:26: 8c:47:10:fa:9f:df:d4:8f:7d:20:71:2e:0a:3d:f9:8c:ef:89: df:6c:02:a1:96:5e:15:90:d9:ad:ed:59:97:00:fd:9c:0a:44: 2d:22:40:e1:43:1a:d8:66:aa:0d:c0:ac:4b:c9:d7:71:6b:49: 49:5d:34:87:85:dd:7d:e1:8b:2a:97:25:c7:55:cd:87:71:73: 9d:9d:b8:ef:42:5a:e1:02:7d:fd:f0:72:da:47:5c:cf:33:c2: 79:b6:29:e8:7e:af:c6:48:3a:a2:43:dc:c3:ec:2e:33:16:37: a9:f0:74:af:46:8c:51:1d:0e:a3:41:d8:b6:ad:d7:ce:e1:4d: a0:82:4c:6c:b0:58:cb:ca:92:2d:45:44:85:50:8b:87:6b:49: b2:35:8a:01:71:09:30:f1:c9:ba:d2:90:ae:57:b8:20:36:3c: 90:2d:39:c4:5c:8b:dc:7b:70:79:bd:b7:36:05:42:4d:0b:6f: 29:b7:5e:ca:bc:cb:f8:45:9e:6c:7f:e8:76:38:11:26:06:8b: 7b:96:fb:f6:6c:f0:c0:e1:a4:68:7f:6f:96:9c:b5:9e:7c:96: 38:da:13:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4RkQxMTAvBgNVBAUTKEZGQkMyRDQxQ0REOTVGRkNGOEE3N0U1MjkxOUUyRTZE MUJBRjAyREYwHhcNMjUwNTEyMTU1MzA3WhcNMjUwNTE5MTU1MzA3WjAYMRYwFAYD VQQDEw02ODIyMTk2NC1mNTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuorKknPYpnzeiBHTXYEcDWRKOdKtkXlqvCBma6al22PiDpVnmC0lF/FFqlGS 7SlOqYxwnGuWdmKpr1P44v7C8XebQY1NZZ9v39DVYIK7n9bvkglC2ec+877zuWb6 GWolzOnSqdimfcgNG/v2yErqp/16PDLO+cbEhNE751Dpt/ljr2HZY4VnwgFx2cv4 mMUEp5ybOi1Vpmd2rwRqPEdhCxhX++B2bneqZKFpJ6ZuoXARLPPCB2ZO4uCW1MZ1 Jqf3Ex2PcJRMMt8z/dswJ3rRCqD51Au7gpGcovJlBmBj9k+3GAS0cDShQl7OIHmd ODlbsYOdQ7XODLQySqynIQGhqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOq8d/+1 +FCBBtB9CdiVbknzdkfMMB8GA1UdIwQYMBaAFP+8LUHN2V/8+Kd+UpGeLm0brwLf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhGRC85QTc5OTY0NEUx MTExMUU1QUIwMTc3MjdDNEY5QUUwMi9fN3d0UWMzWlhfejRwMzVTa1o0dWJSdXZB dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL183d3RRYzNaWF96NHAzNVNrWjR1YlJ1dkF0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjhGRC85QTc5OTY0NEUxMTExMUU1QUIwMTc3MjdDNEY5QUUwMi9fN3d0UWMzWlhf ejRwMzVTa1o0dWJSdXZBdDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoTZyLbdmdTOxkBpGha8CJATXKbuqLPtfbOkFR+v6fosvR4CaMRxD6 n9/Uj30gcS4KPfmM74nfbAKhll4VkNmt7VmXAP2cCkQtIkDhQxrYZqoNwKxLyddx a0lJXTSHhd194YsqlyXHVc2HcXOdnbjvQlrhAn398HLaR1zPM8J5tinofq/GSDqi Q9zD7C4zFjep8HSvRoxRHQ6jQdi2rdfO4U2ggkxssFjLypItRUSFUIuHa0myNYoB cQkw8cm60pCuV7ggNjyQLTnEXIvce3B5vbc2BUJNC28pt17KvMv4RZ5sf+h2OBEm Bot7lvv2bPDA4aRof2+WnLWefJY42hOQ -----END CERTIFICATE-----Generated at Tue May 13 07:54:44 2025 by rpki-client