$ rpki-client -vvf rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft File: 7grUN1-fCpi3ptnvqKUlFY2BcJE.mft (raw, json) Hash identifier: vHGfDz/kQBOKWKuGwh3fRlAAnd2uDXng7AZvMq8pVXE= Subject key identifier: 93:3E:FC:81:1F:FD:F5:C0:1C:C0:C8:3C:36:46:8D:23:5B:14:75:1E Authority key identifier: EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91 Certificate issuer: /CN=A9193BF8/serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091 Certificate serial: 0188 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft Manifest number: 0185 Signing time: Thu 15 May 2025 03:03:27 +0000 Manifest this update: Thu 15 May 2025 03:03:26 +0000 Manifest next update: Thu 22 May 2025 03:03:26 +0000 Files and hashes: 1: 7grUN1-fCpi3ptnvqKUlFY2BcJE.crl (hash: 9YfZwn5QH+NuUm/rdj+XqFquHTHgX1dte41lHZt1u4Y=) 2: B983A684E01811ED8385DA62C4F9AE02.roa (hash: XNf/2Q6uWI444vIMmSBl+gGmGXhm3xu89mz5NFyHmH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:03:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 392 (0x188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193BF8, serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091 Validity Not Before: May 15 03:03:26 2025 GMT Not After : May 22 03:03:26 2025 GMT Subject: CN=6825597f-7e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a3:a3:6d:eb:67:06:a6:d8:b8:ae:10:e3:9b: 2e:a4:6d:7b:d9:25:29:44:12:bb:18:fd:48:56:9f: 70:ff:7b:c4:67:98:cf:ee:c0:8a:43:5c:24:5f:11: 3b:35:d4:40:06:c6:6a:71:01:d9:c9:a2:e9:48:d9: 54:e1:33:be:d8:95:56:28:af:53:15:ad:84:3b:8f: fc:69:32:3d:4b:31:9c:99:2d:9a:bc:a5:f2:42:e9: bb:bc:eb:ea:d4:c7:8d:d6:5d:f7:62:e4:f2:b6:26: 70:11:09:0d:5d:f9:cc:18:6b:cd:8e:36:8a:38:44: 93:3e:3b:45:58:c5:b1:58:87:f9:05:d0:d5:31:dd: 19:ef:33:ac:dc:63:75:76:76:1e:00:37:c3:48:4c: 95:b7:60:fe:95:09:88:f6:be:06:5e:d4:b4:83:a5: 99:02:e4:10:7b:8a:8e:23:37:42:8a:b6:1e:df:3f: 31:e4:2b:53:16:73:42:eb:ab:68:b5:3d:43:a7:92: 8e:36:df:d9:87:16:02:bd:ea:0d:e0:2c:26:8c:f1: 3d:79:19:99:f4:21:24:d9:80:93:54:ba:82:7f:72: c6:89:c1:a7:d9:87:a0:70:9b:5e:f8:58:92:62:e9: 2b:6c:af:63:96:c1:73:23:92:14:9b:4a:27:e3:31: 0d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:3E:FC:81:1F:FD:F5:C0:1C:C0:C8:3C:36:46:8D:23:5B:14:75:1E X509v3 Authority Key Identifier: keyid:EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:b9:b3:ab:1a:4e:31:91:52:1a:92:73:7e:31:df:f5:d9:74: 9c:95:82:64:64:6c:dd:b0:d8:e6:e8:74:9d:ae:c5:bc:30:47: 64:20:b6:f7:17:94:44:e7:cf:b2:d7:5a:92:88:39:3c:33:91: 58:c1:6a:e8:8c:92:ff:d5:ce:14:44:4e:fb:bf:54:8a:89:3c: 36:91:63:9b:0e:71:94:b5:ef:70:39:e8:78:cb:a7:71:2c:f9: d6:4f:b3:59:28:37:25:ba:bd:91:a9:2c:73:90:ff:31:53:a6: b2:34:f3:e2:16:10:d5:5f:d8:1b:f4:3f:8c:bd:a2:b5:14:cb: e4:28:19:a7:a2:70:79:0a:9f:87:76:40:67:c2:ec:42:e4:43: ac:34:cc:15:ba:47:af:97:aa:e4:a6:52:4c:d2:d5:bb:1b:dc: 6f:c9:57:cb:62:8b:e6:7f:5f:ac:06:82:a4:d4:16:06:c6:60: 8f:9f:b9:1e:74:e2:96:4b:d4:03:25:c2:9a:3d:55:40:e7:5f: 0b:56:99:6d:3e:7a:63:f7:31:76:7f:b3:72:13:46:0d:33:3f: b3:ce:f5:4a:5c:fd:b8:49:d3:ca:97:d4:aa:ba:46:ca:f6:d0: c4:66:7f:61:70:89:f6:45:b7:e6:20:99:90:3c:9d:6a:e8:9d: 46:97:fb:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNCRjgxMTAvBgNVBAUTKEVFMEFENDM3NUY5RjBBOThCN0E2RDlFRkE4QTUyNTE1 OEQ4MTcwOTEwHhcNMjUwNTE1MDMwMzI2WhcNMjUwNTIyMDMwMzI2WjAYMRYwFAYD VQQDEw02ODI1NTk3Zi03ZTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaOjbetnBqbYuK4Q45supG172SUpRBK7GP1IVp9w/3vEZ5jP7sCKQ1wkXxE7 NdRABsZqcQHZyaLpSNlU4TO+2JVWKK9TFa2EO4/8aTI9SzGcmS2avKXyQum7vOvq 1MeN1l33YuTytiZwEQkNXfnMGGvNjjaKOESTPjtFWMWxWIf5BdDVMd0Z7zOs3GN1 dnYeADfDSEyVt2D+lQmI9r4GXtS0g6WZAuQQe4qOIzdCirYe3z8x5CtTFnNC66to tT1Dp5KONt/ZhxYCveoN4CwmjPE9eRmZ9CEk2YCTVLqCf3LGicGn2YegcJte+FiS YukrbK9jlsFzI5IUm0on4zEN5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJM+/IEf /fXAHMDIPDZGjSNbFHUeMB8GA1UdIwQYMBaAFO4K1DdfnwqYt6bZ76ilJRWNgXCR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0JGOC9BQzI5NERFOEUw MTUxMUVEQjE2NjY5NjFDNEY5QUUwMi83Z3JVTjEtZkNwaTNwdG52cUtVbEZZMkJj SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdnclVOMS1mQ3BpM3B0bnZxS1VsRlkyQmNKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0JGOC9BQzI5NERFOEUwMTUxMUVEQjE2NjY5NjFDNEY5QUUwMi83Z3JVTjEtZkNw aTNwdG52cUtVbEZZMkJjSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzubOrGk4xkVIaknN+Md/12XSclYJkZGzdsNjm6HSdrsW8MEdkILb3 F5RE58+y11qSiDk8M5FYwWrojJL/1c4URE77v1SKiTw2kWObDnGUte9wOeh4y6dx LPnWT7NZKDclur2RqSxzkP8xU6ayNPPiFhDVX9gb9D+MvaK1FMvkKBmnonB5Cp+H dkBnwuxC5EOsNMwVukevl6rkplJM0tW7G9xvyVfLYovmf1+sBoKk1BYGxmCPn7ke dOKWS9QDJcKaPVVA518LVpltPnpj9zF2f7NyE0YNMz+zzvVKXP24SdPKl9SqukbK 9tDEZn9hcIn2RbfmIJmQPJ1q6J1Gl/uc -----END CERTIFICATE-----Generated at Fri May 16 22:57:59 2025 by rpki-client