$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft File: 7TFghH3ErtktjFnRmEZbHL7y3yI.mft (raw, json) Hash identifier: 4AIQxUQh1nzapH4s6zc6AziDLqjeGmjyQzcq++ZdrY4= Subject key identifier: 6F:2F:A8:F2:19:56:68:A5:62:DA:57:85:03:64:8E:61:2A:BA:91:F3 Authority key identifier: ED:31:60:84:7D:C4:AE:D9:2D:8C:59:D1:98:46:5B:1C:BE:F2:DF:22 Certificate issuer: /CN=A91B6C85/serialNumber=ED3160847DC4AED92D8C59D198465B1CBEF2DF22 Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TFghH3ErtktjFnRmEZbHL7y3yI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft Manifest number: AE Signing time: Thu 15 May 2025 05:21:17 +0000 Manifest this update: Thu 15 May 2025 05:21:16 +0000 Manifest next update: Thu 22 May 2025 05:21:16 +0000 Files and hashes: 1: 7TFghH3ErtktjFnRmEZbHL7y3yI.crl (hash: FjFEamsLHeymoUk9mDtD4PV87xtmMd1R0/VH8BqQb1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.crl rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TFghH3ErtktjFnRmEZbHL7y3yI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:21:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6C85, serialNumber=ED3160847DC4AED92D8C59D198465B1CBEF2DF22 Validity Not Before: May 15 05:21:16 2025 GMT Not After : May 22 05:21:16 2025 GMT Subject: CN=682579cc-29b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7b:27:ac:31:ec:db:8d:b5:66:bf:53:09:63: c9:b5:6f:dc:41:da:fa:5e:f6:1f:f2:d5:02:a6:ac: 9f:0b:f6:91:15:51:21:18:df:a6:48:df:b9:1f:ed: 82:2d:ff:a8:c0:65:7a:a7:27:34:2f:20:52:4f:80: fe:d0:f6:93:23:c9:77:69:9b:88:43:e7:24:50:b9: 5f:f6:10:9a:08:b8:96:b6:ff:21:38:3d:d3:ea:a8: 77:e4:74:a0:27:5c:ff:fd:56:95:34:5c:32:3f:55: 35:d0:f3:d6:13:4e:a2:93:76:04:55:93:f1:04:9f: e9:a9:92:22:f8:b3:f0:29:c5:b2:b6:5d:5c:fd:ae: 4f:f0:a0:f5:46:81:4c:eb:2f:44:c0:ae:1e:2c:0a: 6a:f6:13:b2:f9:4d:e8:aa:29:92:e8:c4:7e:74:15: 8e:a4:66:15:ce:59:ec:90:a7:7c:da:73:7e:bd:62: 19:46:76:a1:1e:5a:50:3a:4c:24:f0:eb:66:45:17: 15:6c:6a:cb:bb:29:c9:b7:b7:2d:c2:29:7b:50:b7: 8b:10:30:cf:96:45:dd:64:16:b2:5c:fa:c2:cc:dd: 4f:c9:24:2a:be:d8:6a:ad:30:93:37:25:51:58:ae: ab:50:39:86:c7:7d:f9:63:8c:72:8d:85:3b:f6:cc: 68:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:2F:A8:F2:19:56:68:A5:62:DA:57:85:03:64:8E:61:2A:BA:91:F3 X509v3 Authority Key Identifier: keyid:ED:31:60:84:7D:C4:AE:D9:2D:8C:59:D1:98:46:5B:1C:BE:F2:DF:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TFghH3ErtktjFnRmEZbHL7y3yI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:cb:07:92:6d:30:94:c5:a2:b3:43:ae:ff:6a:79:fe:9b:5d: db:89:21:d0:61:ea:4b:c8:8d:b7:ae:08:26:97:80:6b:8b:25: 71:62:80:54:17:2b:29:67:59:b9:89:5b:b2:67:6b:ca:bf:e9: 4e:48:16:57:24:c9:85:4a:93:5e:5f:3b:9a:7c:31:7f:1b:57: 47:d3:79:fc:52:1d:9d:23:ce:fc:da:c2:a9:59:58:e0:4b:10: 3d:52:a1:6c:ae:a3:de:30:96:25:cf:86:94:8e:ea:c9:a5:ba: d3:03:02:1d:46:c7:50:a2:d0:39:32:2b:cf:a2:52:64:39:50: 89:60:86:f5:0d:18:3e:12:52:4c:7e:0b:45:f3:13:09:da:1b: 8e:72:04:1d:4d:b1:65:ea:84:47:5c:5b:5e:ac:21:cd:5a:71: 2c:b9:28:b3:5d:2a:0d:d1:e5:fe:71:9e:74:24:f8:bd:3f:7e: 39:f2:08:bb:4e:ea:e2:6e:93:d7:bd:7f:81:c5:5c:a5:42:59: 8b:69:7f:5f:56:65:a8:ad:10:b4:39:bc:94:57:e6:24:c5:ea: c5:f3:4e:2b:15:56:af:01:a3:05:91:21:db:9c:f2:bd:7e:60: 37:4b:e6:6c:4a:61:ac:89:16:f0:d5:5b:21:8b:83:da:73:b8: e9:de:ad:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZDODUxMTAvBgNVBAUTKEVEMzE2MDg0N0RDNEFFRDkyRDhDNTlEMTk4NDY1QjFD QkVGMkRGMjIwHhcNMjUwNTE1MDUyMTE2WhcNMjUwNTIyMDUyMTE2WjAYMRYwFAYD VQQDEw02ODI1NzljYy0yOWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnsnrDHs2421Zr9TCWPJtW/cQdr6XvYf8tUCpqyfC/aRFVEhGN+mSN+5H+2C Lf+owGV6pyc0LyBST4D+0PaTI8l3aZuIQ+ckULlf9hCaCLiWtv8hOD3T6qh35HSg J1z//VaVNFwyP1U10PPWE06ik3YEVZPxBJ/pqZIi+LPwKcWytl1c/a5P8KD1RoFM 6y9EwK4eLApq9hOy+U3oqimS6MR+dBWOpGYVzlnskKd82nN+vWIZRnahHlpQOkwk 8OtmRRcVbGrLuynJt7ctwil7ULeLEDDPlkXdZBayXPrCzN1PySQqvthqrTCTNyVR WK6rUDmGx335Y4xyjYU79sxozQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8vqPIZ VmilYtpXhQNkjmEqupHzMB8GA1UdIwQYMBaAFO0xYIR9xK7ZLYxZ0ZhGWxy+8t8i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkM4NS8yODcwN0NCRTI4 ODYxMUVGOEYxRkIxODVDNEY5QUUwMi83VEZnaEgzRXJ0a3RqRm5SbUVaYkhMN3kz eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdURmdoSDNFcnRrdGpGblJtRVpiSEw3eTN5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkM4NS8yODcwN0NCRTI4ODYxMUVGOEYxRkIxODVDNEY5QUUwMi83VEZnaEgzRXJ0 a3RqRm5SbUVaYkhMN3kzeUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOyweSbTCUxaKzQ67/ann+m13biSHQYepLyI23rggml4BriyVxYoBU FyspZ1m5iVuyZ2vKv+lOSBZXJMmFSpNeXzuafDF/G1dH03n8Uh2dI8782sKpWVjg SxA9UqFsrqPeMJYlz4aUjurJpbrTAwIdRsdQotA5MivPolJkOVCJYIb1DRg+ElJM fgtF8xMJ2huOcgQdTbFl6oRHXFterCHNWnEsuSizXSoN0eX+cZ50JPi9P3458gi7 TuribpPXvX+BxVylQlmLaX9fVmWorRC0ObyUV+YkxerF804rFVavAaMFkSHbnPK9 fmA3S+ZsSmGsiRbw1Vshi4Pac7jp3q3l -----END CERTIFICATE-----Generated at Fri May 16 22:34:42 2025 by rpki-client