$ rpki-client -vvf rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft File: rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft (raw, json) Hash identifier: yeRPPXk7tnhyLgpf7Em90WPshFSpV3JXT9sNKMB2UsA= Subject key identifier: 38:B5:84:B2:1D:D9:20:22:F0:7C:F1:C6:46:4D:78:4F:59:14:A5:27 Authority key identifier: AD:DE:E9:09:A3:16:76:21:55:3F:D4:4E:02:24:D3:8A:06:78:79:87 Certificate issuer: /CN=A91878B2/serialNumber=ADDEE909A3167621553FD44E0224D38A06787987 Certificate serial: 066C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft Manifest number: 0662 Signing time: Sat 10 May 2025 22:01:35 +0000 Manifest this update: Sat 10 May 2025 22:01:35 +0000 Manifest next update: Sat 17 May 2025 22:01:35 +0000 Files and hashes: 1: rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl (hash: YcV2Ia2N64r8ZHZK7gSXfCZqLDzLJrdw5xguRU+kPcE=) 2: 47249F9E7D7D11EBA5FADA5FC4F9AE02.roa (hash: Ck9VYv/1rcTBtaX5FrHIAevWzTx3mNc72bWTwUqMdEA=) 3: 467830CE7D7D11EBA5FADA5FC4F9AE02.roa (hash: mTOOiMtwoSIKIvU9I/HZJyVIkpOV2ubS6z5GxznmdY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1644 (0x66c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91878B2, serialNumber=ADDEE909A3167621553FD44E0224D38A06787987 Validity Not Before: May 10 22:01:35 2025 GMT Not After : May 17 22:01:35 2025 GMT Subject: CN=681fccbf-f0db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:52:83:ad:ed:e3:47:0a:ff:3f:41:65:d1:0f: c5:b2:1a:80:85:ba:3e:e3:37:e4:29:60:be:03:b9: c5:64:c1:ae:f9:ca:f3:a7:1d:e4:a1:70:50:02:5a: ef:18:c0:19:03:e5:f1:85:de:57:05:9f:c9:e6:0f: 4f:5b:f4:f7:28:7d:7c:a8:ab:98:c4:1e:be:61:d4: 89:8e:a1:07:66:85:a3:e7:48:30:1d:01:76:c8:67: 75:ae:f1:9d:54:6a:9d:a2:66:a5:12:e8:14:ce:10: bb:db:a9:0d:63:78:3c:86:f7:7c:70:b9:78:28:68: da:d4:86:35:6b:7d:eb:53:6b:10:67:d4:b0:a0:f6: 90:48:64:7e:31:7e:7d:3e:55:e7:02:35:84:8f:05: 34:3a:7e:64:44:5a:49:31:32:a3:4c:15:17:9f:71: d7:75:78:d0:a6:7f:19:8f:29:ee:f0:f1:b7:24:0f: 68:d8:40:89:c2:01:79:df:ae:5f:51:72:e7:ba:d5: 78:fb:ec:2a:38:81:0f:c4:65:7b:e3:0c:59:8a:c8: 04:1c:3d:44:7e:75:a8:d3:08:21:25:f7:62:54:f8: 73:0b:a5:62:6e:2a:a4:e7:6f:8b:3b:de:d7:60:68: 02:e5:51:d0:7f:94:2c:1c:63:32:0a:9a:0b:44:b4: d9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B5:84:B2:1D:D9:20:22:F0:7C:F1:C6:46:4D:78:4F:59:14:A5:27 X509v3 Authority Key Identifier: keyid:AD:DE:E9:09:A3:16:76:21:55:3F:D4:4E:02:24:D3:8A:06:78:79:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:4a:af:cd:a5:e6:d8:c7:f3:f5:03:9d:8f:5e:7d:c7:5f:4c: a7:e3:56:8c:9f:db:98:2a:81:2d:c1:eb:16:c0:78:33:f3:6b: 67:15:80:4f:0d:6e:8e:27:8a:b5:d8:18:de:88:40:9e:58:bb: cf:37:69:88:e8:a7:30:2a:be:32:68:80:fd:98:da:2e:1d:e5: 45:80:ce:cc:cf:db:6a:44:87:53:71:28:5a:29:9a:6a:05:7e: 16:ac:6e:fb:c8:f6:f6:66:f3:5c:c5:84:b4:d4:81:22:86:c2: 2d:70:8d:d9:ac:42:98:94:84:b5:13:ec:9b:2c:5f:f6:c6:f5: 80:05:4c:de:21:a0:39:aa:bd:99:44:35:02:d2:2f:8b:7a:0c: c1:3e:13:29:70:bb:84:89:8c:0f:09:de:c3:f6:3b:91:85:9a: 7e:d5:24:93:c3:47:78:1b:2a:63:bb:0b:94:8e:17:d6:a4:a3: 49:c0:e9:1d:fc:cc:40:c1:29:90:95:bf:47:f3:ad:84:81:1f: f9:f5:45:b4:5a:e2:26:8d:b2:7c:93:36:81:b3:c7:e2:02:30: 43:8a:e7:23:18:1b:be:d9:19:13:44:1c:5b:61:69:46:13:d9: b4:02:22:79:5c:76:d6:c4:f8:13:2b:25:38:9c:d7:2d:86:eb: e1:39:07:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc4QjIxMTAvBgNVBAUTKEFEREVFOTA5QTMxNjc2MjE1NTNGRDQ0RTAyMjREMzhB MDY3ODc5ODcwHhcNMjUwNTEwMjIwMTM1WhcNMjUwNTE3MjIwMTM1WjAYMRYwFAYD VQQDEw02ODFmY2NiZi1mMGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1KDre3jRwr/P0Fl0Q/FshqAhbo+4zfkKWC+A7nFZMGu+crzpx3koXBQAlrv GMAZA+Xxhd5XBZ/J5g9PW/T3KH18qKuYxB6+YdSJjqEHZoWj50gwHQF2yGd1rvGd VGqdomalEugUzhC726kNY3g8hvd8cLl4KGja1IY1a33rU2sQZ9SwoPaQSGR+MX59 PlXnAjWEjwU0On5kRFpJMTKjTBUXn3HXdXjQpn8Zjynu8PG3JA9o2ECJwgF5365f UXLnutV4++wqOIEPxGV74wxZisgEHD1EfnWo0wghJfdiVPhzC6Vibiqk52+LO97X YGgC5VHQf5QsHGMyCpoLRLTZoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDi1hLId 2SAi8HzxxkZNeE9ZFKUnMB8GA1UdIwQYMBaAFK3e6QmjFnYhVT/UTgIk04oGeHmH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzhCMi83MzlCQkE1QTdE N0IxMUVCQTYyMjI3NUJDNEY5QUUwMi9yZDdwQ2FNV2RpRlZQOVJPQWlUVGlnWjRl WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkN3BDYU1XZGlGVlA5Uk9BaVRUaWdaNGVZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzhCMi83MzlCQkE1QTdEN0IxMUVCQTYyMjI3NUJDNEY5QUUwMi9yZDdwQ2FNV2Rp RlZQOVJPQWlUVGlnWjRlWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUSq/NpebYx/P1A52PXn3HX0yn41aMn9uYKoEtwesWwHgz82tnFYBP DW6OJ4q12BjeiECeWLvPN2mI6KcwKr4yaID9mNouHeVFgM7Mz9tqRIdTcShaKZpq BX4WrG77yPb2ZvNcxYS01IEihsItcI3ZrEKYlIS1E+ybLF/2xvWABUzeIaA5qr2Z RDUC0i+LegzBPhMpcLuEiYwPCd7D9juRhZp+1SSTw0d4GypjuwuUjhfWpKNJwOkd /MxAwSmQlb9H862EgR/59UW0WuImjbJ8kzaBs8fiAjBDiucjGBu+2RkTRBxbYWlG E9m0AiJ5XHbWxPgTKyU4nNcthuvhOQdw -----END CERTIFICATE-----Generated at Sun May 11 04:24:15 2025 by rpki-client