$ rpki-client -vvf rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft File: -7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft (raw, json) Hash identifier: qENxUpfgobZChZ5bqZwDFwv0EQpmtGxskXGsJ56KCis= Subject key identifier: EA:18:74:5D:49:94:A7:4D:82:23:C5:F7:68:AE:98:24:AB:68:A4:9B Authority key identifier: FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68 Certificate issuer: /CN=A91230B8/serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668 Certificate serial: 01C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft Manifest number: 01BA Signing time: Tue 13 May 2025 02:26:08 +0000 Manifest this update: Tue 13 May 2025 02:26:07 +0000 Manifest next update: Tue 20 May 2025 02:26:07 +0000 Files and hashes: 1: -7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl (hash: BiR2bMdh3Ewwy0VQrj6aAh0YkVOUMTzHreZw3pHDhck=) 2: B966D678C0C611EE8F5F0458C4F9AE02.roa (hash: J2faMLBlgt9GzAmsM2dSN7aVP9JzekH0nQNt2xO6dtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91230B8, serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668 Validity Not Before: May 13 02:26:07 2025 GMT Not After : May 20 02:26:07 2025 GMT Subject: CN=6822adbf-ac22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:5c:27:c4:55:20:77:36:e2:e1:f8:c7:9f:22: 9e:cf:31:67:a2:e5:b1:0c:1d:b2:1c:c2:68:97:0a: 08:cd:f4:2a:b7:25:41:6b:f1:c6:23:30:ea:b6:b0: e4:18:f3:1c:09:96:53:0c:7c:f0:cc:96:83:0a:09: 14:8d:2a:3e:60:ce:8a:6b:14:60:e4:d1:7b:da:a9: f2:14:0d:bf:08:fc:0d:95:89:56:d3:db:74:d9:d5: 61:b4:99:c1:d9:1a:2b:fb:a6:75:fc:ab:76:bc:44: 3b:73:18:d5:06:b5:0e:cb:a9:2e:bd:98:29:bd:f2: 50:58:f1:46:56:3d:04:29:aa:fd:bd:97:2f:c3:b4: 25:c3:30:0c:2f:9e:c5:3b:67:3a:9a:92:85:cf:14: 2a:b2:d0:bc:8b:7d:07:95:b2:08:fb:85:44:24:9b: 4e:b1:70:38:3b:b1:f2:51:3a:ac:18:7a:2e:c6:d7: 2f:be:5e:c6:af:c2:01:66:68:89:31:2e:f4:f1:68: 37:03:f8:19:91:52:71:93:c8:7b:c5:a0:64:47:7c: db:f7:ae:04:31:b8:d8:e0:2f:b9:4a:4f:96:94:29: 5a:58:b5:66:5c:c7:80:e4:25:6a:f2:08:bc:be:cf: 14:24:eb:90:08:e0:14:5f:e2:d6:f1:6a:4d:8b:a0: a9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:18:74:5D:49:94:A7:4D:82:23:C5:F7:68:AE:98:24:AB:68:A4:9B X509v3 Authority Key Identifier: keyid:FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:7e:74:65:4c:db:66:6b:0f:a5:df:15:2b:81:76:a1:33:b1: 37:71:14:7d:ae:82:83:04:ae:76:3f:38:5f:f4:29:b0:5f:89: b5:4e:9c:b6:41:6d:a5:17:73:8e:40:26:e8:36:08:f4:0e:cd: 96:63:22:00:f8:e6:7d:5b:cb:16:6b:45:6c:01:70:ca:bd:86: a3:5e:0f:91:ed:a2:6d:9a:5d:0c:19:e6:3d:aa:47:29:5f:c4: f0:07:37:20:17:f4:4e:90:fb:c3:bc:2a:05:93:97:9d:fb:7a: ef:9d:0f:1b:80:94:bf:b0:d0:65:1d:fe:1f:62:b5:6c:9a:98: 18:c7:78:14:14:66:c9:4a:aa:2c:07:53:a8:83:27:b3:eb:8e: 8f:d0:87:41:9f:24:87:79:28:50:a0:d2:b9:18:53:ca:62:7b: 08:76:72:7c:ed:71:ce:a2:9f:f1:a8:f5:e4:0d:22:7b:7d:8b: ca:7f:63:c7:b5:1c:fd:cb:a9:02:79:1d:85:e5:d6:45:e8:d8: 71:c8:0f:f9:97:57:7b:c6:1c:c1:fe:8f:77:23:e4:e5:d4:8e: 57:f4:8c:f2:d8:f0:02:24:90:4a:32:f4:c0:51:53:51:d2:80: d2:83:2e:3e:67:50:c8:16:6b:52:d3:86:67:7c:ff:52:48:b3: 7c:da:82:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMwQjgxMTAvBgNVBAUTKEZCQkFCNjkwQURGRTEwRUY0MzRCNzE4OTU0RjE3Mzg3 RDYzODQ2NjgwHhcNMjUwNTEzMDIyNjA3WhcNMjUwNTIwMDIyNjA3WjAYMRYwFAYD VQQDEw02ODIyYWRiZi1hYzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6lwnxFUgdzbi4fjHnyKezzFnouWxDB2yHMJolwoIzfQqtyVBa/HGIzDqtrDk GPMcCZZTDHzwzJaDCgkUjSo+YM6KaxRg5NF72qnyFA2/CPwNlYlW09t02dVhtJnB 2Ror+6Z1/Kt2vEQ7cxjVBrUOy6kuvZgpvfJQWPFGVj0EKar9vZcvw7QlwzAML57F O2c6mpKFzxQqstC8i30HlbII+4VEJJtOsXA4O7HyUTqsGHouxtcvvl7Gr8IBZmiJ MS708Wg3A/gZkVJxk8h7xaBkR3zb964EMbjY4C+5Sk+WlClaWLVmXMeA5CVq8gi8 vs8UJOuQCOAUX+LW8WpNi6CpyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOoYdF1J lKdNgiPF92iumCSraKSbMB8GA1UdIwQYMBaAFPu6tpCt/hDvQ0txiVTxc4fWOEZo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzBCOC9GMUY4OTBGMDk2 NTkxMUVEOENDNzhBNjBDNEY5QUUwMi8tN3Eya0szLUVPOURTM0dKVlBGemg5WTRS bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03cTJrSzMtRU85RFMzR0pWUEZ6aDlZNFJtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzBCOC9GMUY4OTBGMDk2NTkxMUVEOENDNzhBNjBDNEY5QUUwMi8tN3Eya0szLUVP OURTM0dKVlBGemg5WTRSbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgfnRlTNtmaw+l3xUrgXahM7E3cRR9roKDBK52Pzhf9CmwX4m1Tpy2 QW2lF3OOQCboNgj0Ds2WYyIA+OZ9W8sWa0VsAXDKvYajXg+R7aJtml0MGeY9qkcp X8TwBzcgF/ROkPvDvCoFk5ed+3rvnQ8bgJS/sNBlHf4fYrVsmpgYx3gUFGbJSqos B1Oogyez646P0IdBnySHeShQoNK5GFPKYnsIdnJ87XHOop/xqPXkDSJ7fYvKf2PH tRz9y6kCeR2F5dZF6NhxyA/5l1d7xhzB/o93I+Tl1I5X9Izy2PACJJBKMvTAUVNR 0oDSgy4+Z1DIFmtS04ZnfP9SSLN82oJd -----END CERTIFICATE-----Generated at Tue May 13 23:07:02 2025 by rpki-client