$ rpki-client -vvf rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft File: er7uZ6xhMToeH6izhl0_sfY090M.mft (raw, json) Hash identifier: Pn6TELYxI5+QbMYKDzXVLTIk4yycdaF2cAaUYBDtG60= Subject key identifier: 4B:1B:8D:73:3A:55:3E:2D:C1:5F:F6:A1:CB:E6:EC:68:EC:8F:02:1B Authority key identifier: 7A:BE:EE:67:AC:61:31:3A:1E:1F:A8:B3:86:5D:3F:B1:F6:34:F7:43 Certificate issuer: /CN=A915DFBD/serialNumber=7ABEEE67AC61313A1E1FA8B3865D3FB1F634F743 Certificate serial: 0495 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft Manifest number: 0490 Signing time: Mon 12 May 2025 23:48:42 +0000 Manifest this update: Mon 12 May 2025 23:48:41 +0000 Manifest next update: Mon 19 May 2025 23:48:41 +0000 Files and hashes: 1: er7uZ6xhMToeH6izhl0_sfY090M.crl (hash: f10rGbStUjw8fwsrm7yWcGK9XR8qvXyYHCAVavpAieM=) 2: 449009F2387C11ECAE655C13C4F9AE02.roa (hash: 4XKTIg0bVBrjQ4gKKV2hpe4LJ1uznZVmF62ttuEN2yA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.crl rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1173 (0x495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DFBD, serialNumber=7ABEEE67AC61313A1E1FA8B3865D3FB1F634F743 Validity Not Before: May 12 23:48:41 2025 GMT Not After : May 19 23:48:41 2025 GMT Subject: CN=682288d9-4963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:28:93:bb:83:36:d7:a5:6a:c1:77:51:d0:4b: 3a:d9:64:4e:d7:2a:b8:cb:b2:ec:ca:2f:70:62:45: 10:6c:cc:0e:43:d3:61:e9:86:4d:a7:f2:7c:d7:21: b9:c9:63:76:72:eb:3f:8d:49:e4:5e:f4:16:44:d8: 38:21:31:76:22:fa:e9:d7:37:92:ba:d9:a6:0e:ce: 81:94:75:c3:1e:b7:0e:cc:0c:34:13:86:3b:cf:c5: 19:b5:04:25:07:23:19:4d:be:4a:be:f8:f8:e5:c2: 80:89:f1:b7:3a:3e:f9:16:1e:3a:36:ca:9c:3d:c5: 80:44:ea:f5:ad:98:db:c7:ab:30:9a:2d:6e:33:dc: d0:ab:e9:0d:9a:b3:2a:d6:12:6a:e4:57:37:9c:c8: 19:1c:21:8d:6c:b8:70:2d:c2:9f:77:3d:4d:df:16: e5:be:be:a2:35:9e:e2:19:59:30:b5:78:49:d4:f0: 65:7a:aa:3f:1d:20:09:76:3d:b6:c9:2d:a3:02:b3: d8:98:93:56:67:c9:c0:3c:13:5b:51:53:48:b9:e0: 1e:5d:06:23:27:43:e7:73:ee:7e:a9:5b:aa:05:a6: 32:17:05:aa:60:57:5a:04:9a:7c:b2:0e:5f:b2:f1: 22:eb:95:46:6f:bf:16:89:6f:38:94:15:76:67:cf: 78:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:1B:8D:73:3A:55:3E:2D:C1:5F:F6:A1:CB:E6:EC:68:EC:8F:02:1B X509v3 Authority Key Identifier: keyid:7A:BE:EE:67:AC:61:31:3A:1E:1F:A8:B3:86:5D:3F:B1:F6:34:F7:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:34:9d:41:03:b3:a6:6d:30:60:77:f1:0c:73:3d:aa:a3:5f: e3:7a:37:46:16:a2:dd:c0:86:bf:db:23:00:c6:22:09:a7:60: c6:85:40:d1:d5:c2:8e:6b:34:79:68:ec:d2:80:40:0a:89:28: 8a:f2:17:72:58:96:01:34:81:b7:30:b3:9a:e1:a3:df:40:ae: f8:a2:4f:65:6e:8c:2e:f8:0b:d4:02:29:37:70:af:58:00:e9: d8:83:3d:45:a6:ff:6f:c0:aa:dd:ed:f9:73:90:18:cb:a8:a6: fa:04:25:e6:92:5d:a1:e6:ff:f1:d3:de:f9:4e:90:a3:15:36: af:6c:30:29:2e:8f:fc:7f:73:ca:56:bf:05:77:25:3b:59:65: 78:32:8a:87:49:39:e0:48:89:95:c4:72:3b:5f:b4:d0:49:2d: 6f:e0:db:1a:70:c1:f3:7b:fb:d0:74:ed:1f:7b:62:07:d4:c7: b5:5c:0d:80:53:d0:bc:a0:30:36:13:f5:6e:b2:e2:a5:83:46: 6c:02:66:f2:2e:62:50:06:e6:40:81:b6:67:d6:ee:02:45:75: e2:82:bc:83:a7:03:d3:67:d5:59:67:74:b3:d9:be:f2:84:ed: f3:9f:ab:60:99:3f:4a:fd:f4:e7:ba:0c:a1:db:6d:f9:83:6a: 47:f8:7b:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURGQkQxMTAvBgNVBAUTKDdBQkVFRTY3QUM2MTMxM0ExRTFGQThCMzg2NUQzRkIx RjYzNEY3NDMwHhcNMjUwNTEyMjM0ODQxWhcNMjUwNTE5MjM0ODQxWjAYMRYwFAYD VQQDEw02ODIyODhkOS00OTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyyiTu4M216VqwXdR0Es62WRO1yq4y7Lsyi9wYkUQbMwOQ9Nh6YZNp/J81yG5 yWN2cus/jUnkXvQWRNg4ITF2Ivrp1zeSutmmDs6BlHXDHrcOzAw0E4Y7z8UZtQQl ByMZTb5Kvvj45cKAifG3Oj75Fh46NsqcPcWAROr1rZjbx6swmi1uM9zQq+kNmrMq 1hJq5Fc3nMgZHCGNbLhwLcKfdz1N3xblvr6iNZ7iGVkwtXhJ1PBleqo/HSAJdj22 yS2jArPYmJNWZ8nAPBNbUVNIueAeXQYjJ0Pnc+5+qVuqBaYyFwWqYFdaBJp8sg5f svEi65VGb78WiW84lBV2Z894aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEsbjXM6 VT4twV/2ocvm7GjsjwIbMB8GA1UdIwQYMBaAFHq+7mesYTE6Hh+os4ZdP7H2NPdD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REZCRC9EMzRBNjgzMDM4 NzgxMUVDOENCNTlCMEVDNEY5QUUwMi9lcjd1WjZ4aE1Ub2VINml6aGwwX3NmWTA5 ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VyN3VaNnhoTVRvZUg2aXpobDBfc2ZZMDkwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REZCRC9EMzRBNjgzMDM4NzgxMUVDOENCNTlCMEVDNEY5QUUwMi9lcjd1WjZ4aE1U b2VINml6aGwwX3NmWTA5ME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxNJ1BA7OmbTBgd/EMcz2qo1/jejdGFqLdwIa/2yMAxiIJp2DGhUDR 1cKOazR5aOzSgEAKiSiK8hdyWJYBNIG3MLOa4aPfQK74ok9lbowu+AvUAik3cK9Y AOnYgz1Fpv9vwKrd7flzkBjLqKb6BCXmkl2h5v/x0975TpCjFTavbDApLo/8f3PK Vr8FdyU7WWV4MoqHSTngSImVxHI7X7TQSS1v4NsacMHze/vQdO0fe2IH1Me1XA2A U9C8oDA2E/VusuKlg0ZsAmbyLmJQBuZAgbZn1u4CRXXigryDpwPTZ9VZZ3Sz2b7y hO3zn6tgmT9K/fTnugyh2235g2pH+HuJ -----END CERTIFICATE-----Generated at Tue May 13 14:50:32 2025 by rpki-client