$ rpki-client -vvf rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft File: 7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft (raw, json) Hash identifier: 0+CoCQYtk2AjoPirQ9FOJ8XcQDB2/7cr9GqHtKsXkhw= Subject key identifier: FE:94:F6:3C:9B:83:4E:99:75:7F:1E:72:5C:FF:8E:21:35:3E:C5:0D Authority key identifier: EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6 Certificate issuer: /CN=A91982B6/serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft Manifest number: 45 Signing time: Sat 17 May 2025 06:51:47 +0000 Manifest this update: Sat 17 May 2025 06:51:46 +0000 Manifest next update: Sat 24 May 2025 06:51:46 +0000 Files and hashes: 1: 7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl (hash: Zh0oFZ0Ydw3VP8FuXNW2zKtf/rvoNrnXBnbN6hBi0yM=) 2: 739C8BDECB5A11EFBEE64062C4F9AE02.roa (hash: WVqv1JuSt8hSNNolUiV5z8//m1vJSnq0q+Q8Ooe/S0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 06:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91982B6, serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6 Validity Not Before: May 17 06:51:46 2025 GMT Not After : May 24 06:51:46 2025 GMT Subject: CN=68283202-0cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a9:9a:85:3b:72:c3:c4:45:e9:53:3a:f0:7a: 4d:a3:ce:f1:74:b0:7c:61:4b:7b:1b:91:af:b7:ad: af:29:20:65:e2:10:e2:fe:5c:c5:4f:4b:52:2f:aa: 99:5c:38:c8:60:9c:fe:cb:80:7b:78:58:44:22:e2: 87:3a:e3:e4:76:4e:1d:f5:48:0e:85:54:ce:c9:c7: de:01:62:70:8d:ec:08:63:cd:ea:5d:4a:7c:9a:40: 69:1c:49:6c:b2:d0:bf:08:2a:f8:3f:c2:f1:32:e2: c1:df:de:2b:73:62:f2:65:3f:04:15:19:e7:24:fd: 7c:c7:13:4d:e8:db:af:ab:f6:b8:91:24:9b:07:14: 47:d5:12:25:be:52:2e:39:57:a3:28:c0:ab:06:9f: c7:e5:fa:35:38:65:55:9f:cf:ec:c8:e1:1d:e2:1a: 05:12:1e:72:99:5c:a9:4a:b8:dc:9e:cc:be:49:d8: 95:b4:f2:b1:0a:c0:a1:75:a5:83:66:fe:15:33:b4: e0:80:a5:b2:70:3b:9d:ca:4a:0e:16:18:d2:18:d6: c4:d4:d4:89:1c:52:9c:97:51:fd:bd:27:ab:ff:27: 92:2a:61:c9:14:b8:3b:a1:fb:f2:b7:51:59:b5:0f: 75:43:ab:19:97:21:54:6f:8c:04:9d:25:0b:ab:06: 6b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:94:F6:3C:9B:83:4E:99:75:7F:1E:72:5C:FF:8E:21:35:3E:C5:0D X509v3 Authority Key Identifier: keyid:EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:a9:69:5c:22:02:53:77:9f:a2:17:cc:b0:79:61:f8:42:38: 5c:77:3f:58:77:c2:4d:17:fd:e5:b9:0e:e3:f1:6b:2c:47:3a: 9f:9f:f4:b2:4f:67:11:52:30:27:cb:ed:47:4b:98:b8:47:5a: 34:b8:a6:59:31:48:a4:aa:36:a9:d7:6e:64:e2:ff:7f:f5:4b: bf:85:21:70:bd:92:02:50:66:40:f0:cc:d0:14:e5:2f:15:39: a5:b6:03:ab:db:27:10:af:0b:1b:89:91:75:60:80:28:c6:40: db:c2:71:52:ca:f1:fc:a1:18:bf:9a:a4:2b:3f:d5:40:16:3f: e9:c1:0f:7f:ba:34:cf:c9:9b:c8:3d:47:dd:a5:ff:58:6e:ab: 29:0c:42:7c:45:d0:19:af:c3:dd:d3:19:b4:b9:8a:d4:8b:bf: 3a:63:6b:8d:a4:cd:5d:6d:5d:1a:fe:39:db:c4:6c:91:66:88: 95:f5:78:a1:7e:91:1b:1e:ba:d4:25:57:bd:92:3d:80:e0:9d: d1:94:2b:5c:e2:4a:4b:fa:93:98:b9:76:53:19:48:4c:82:07: 4f:c8:c2:7b:3a:e7:1f:b4:fd:79:56:03:e4:07:ff:af:df:0d: be:e4:38:cd:7c:41:fa:45:08:d3:43:e9:67:09:54:9a:1d:86: 8b:8e:e5:21 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 ODJCNjExMC8GA1UEBRMoRUM2NzkxNjkxNzdCOUUxMzFEMERBQTAxMzk4RDcwMDM5 ODI3RDFGNjAeFw0yNTA1MTcwNjUxNDZaFw0yNTA1MjQwNjUxNDZaMBgxFjAUBgNV BAMTDTY4MjgzMjAyLTBjZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqqZqFO3LDxEXpUzrwek2jzvF0sHxhS3sbka+3ra8pIGXiEOL+XMVPS1Ivqplc OMhgnP7LgHt4WEQi4oc64+R2Th31SA6FVM7Jx94BYnCN7AhjzepdSnyaQGkcSWyy 0L8IKvg/wvEy4sHf3itzYvJlPwQVGeck/XzHE03o26+r9riRJJsHFEfVEiW+Ui45 V6MowKsGn8fl+jU4ZVWfz+zI4R3iGgUSHnKZXKlKuNyezL5J2JW08rEKwKF1pYNm /hUztOCApbJwO53KSg4WGNIY1sTU1IkcUpyXUf29J6v/J5IqYckUuDuh+/K3UVm1 D3VDqxmXIVRvjASdJQurBmvxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/pT2PJuD Tpl1fx5yXP+OITU+xQ0wHwYDVR0jBBgwFoAU7GeRaRd7nhMdDaoBOY1wA5gn0fYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4MkI2L0U2NEIwM0I0Q0I1 OTExRUY4NjkxNUI2MUM0RjlBRTAyLzdHZVJhUmQ3bmhNZERhb0JPWTF3QTVnbjBm WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN0dlUmFSZDduaE1kRGFvQk9ZMXdBNWduMGZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 MkI2L0U2NEIwM0I0Q0I1OTExRUY4NjkxNUI2MUM0RjlBRTAyLzdHZVJhUmQ3bmhN ZERhb0JPWTF3QTVnbjBmWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABKpaVwiAlN3n6IXzLB5YfhCOFx3P1h3wk0X/eW5DuPxayxHOp+f9LJP ZxFSMCfL7UdLmLhHWjS4plkxSKSqNqnXbmTi/3/1S7+FIXC9kgJQZkDwzNAU5S8V OaW2A6vbJxCvCxuJkXVggCjGQNvCcVLK8fyhGL+apCs/1UAWP+nBD3+6NM/Jm8g9 R92l/1huqykMQnxF0Bmvw93TGbS5itSLvzpja42kzV1tXRr+OdvEbJFmiJX1eKF+ kRseutQlV72SPYDgndGUK1ziSkv6k5i5dlMZSEyCB0/Iwns65x+0/XlWA+QH/6/f Db7kOM18QfpFCNND6WcJVJodhouO5SE= -----END CERTIFICATE-----Generated at Sat May 17 11:41:42 2025 by rpki-client