$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft File: 7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft (raw, json) Hash identifier: msrsBVVcHYZ0mwBc/YS0/xi1gIGwVebnWwYvUh5dn2U= Subject key identifier: 44:26:07:CD:76:86:01:0B:12:E1:30:C6:03:37:DB:CE:DA:B0:AF:B5 Authority key identifier: ED:72:C7:16:BC:0A:F5:9D:43:06:32:3F:BA:A4:74:BD:4B:4D:E7:1C Certificate issuer: /CN=A91BAA24/serialNumber=ED72C716BC0AF59D4306323FBAA474BD4B4DE71C Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft Manifest number: 06 Signing time: Thu 15 May 2025 07:28:23 +0000 Manifest this update: Thu 15 May 2025 07:28:22 +0000 Manifest next update: Thu 22 May 2025 07:28:22 +0000 Files and hashes: 1: 7XLHFrwK9Z1DBjI_uqR0vUtN5xw.crl (hash: LOo1kRoGoKEQkXClKj1BHOUD5Qcx3RPihL3hHqvrnsY=) 2: 28C2D6002BCB11F0A99C1E60C4F9AE02.roa (hash: 3eRh0WSm3ML8fWWz0uqzCk5In0Q1rchUgCmcr9wy07U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.crl rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 07:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAA24, serialNumber=ED72C716BC0AF59D4306323FBAA474BD4B4DE71C Validity Not Before: May 15 07:28:22 2025 GMT Not After : May 22 07:28:22 2025 GMT Subject: CN=68259797-9979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d0:75:8a:e8:74:26:c7:af:4a:f2:09:6d:a0: e9:34:96:7f:8d:55:da:0d:e4:9c:6c:ea:51:cb:dc: df:cc:73:00:73:f9:e7:8f:9a:e6:3a:35:09:16:6f: e0:cc:3e:cb:b9:2b:98:f4:b6:02:3c:70:6e:b3:8c: 54:65:f5:c5:89:10:67:aa:41:d3:f6:08:c8:ce:e5: a7:76:51:ce:f6:cb:59:b7:b9:0b:a2:e2:7f:78:99: a6:d0:82:95:0f:57:8c:03:17:6e:9b:21:1b:a0:5f: d3:45:7c:cf:e7:c0:fb:4c:81:dd:cd:15:a4:90:65: 4a:6d:f1:c0:8d:90:98:e5:eb:c5:ac:c1:bb:87:ab: 09:80:19:5b:88:c1:5a:f7:f9:dd:76:cf:84:5c:40: 9b:56:6c:38:99:ad:d5:9e:de:b2:90:e3:35:f5:07: ec:0c:78:ff:f3:cf:31:b1:19:7f:d4:d1:6e:1b:51: 31:8c:05:5c:f3:a1:23:01:af:0a:b8:19:82:96:89: 76:92:43:21:55:ab:67:cc:61:c3:84:1d:5a:81:4a: 08:f2:97:a2:80:d8:9b:63:6d:e3:83:d3:48:e2:84: 77:1c:01:ff:80:55:32:4a:61:43:ec:54:32:65:33: 07:a3:30:ed:2b:97:81:aa:1e:5f:b2:4e:55:a1:73: 44:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:26:07:CD:76:86:01:0B:12:E1:30:C6:03:37:DB:CE:DA:B0:AF:B5 X509v3 Authority Key Identifier: keyid:ED:72:C7:16:BC:0A:F5:9D:43:06:32:3F:BA:A4:74:BD:4B:4D:E7:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:f6:31:a2:fd:c9:84:74:2d:3c:c9:ba:58:81:f9:ce:b8:7f: 0f:ae:46:f4:f1:74:b3:e2:99:06:74:0f:00:f9:75:8b:ef:fa: 6d:5c:f1:2c:8d:6c:dd:d8:ea:6d:ab:75:24:7a:93:7f:35:0c: 57:d9:a2:dd:51:af:ca:23:66:b6:cc:26:42:12:fe:42:f7:4a: b8:ba:5b:7c:9e:1f:e3:ae:13:ce:84:04:ac:d4:cb:70:8b:0f: 3a:b3:8a:ba:04:fe:80:40:84:98:e9:84:99:cb:c1:5c:f5:fb: 40:6f:e8:38:d1:26:3d:61:87:c6:cd:26:98:fd:e4:aa:dd:70: ca:f7:67:43:05:80:81:a2:59:25:16:ce:6b:58:67:b8:89:b8: ca:b1:73:6f:fb:76:2e:04:bb:b9:b6:8c:df:87:90:78:09:03: 43:15:47:79:ba:58:fc:cd:07:3d:e7:c8:89:1a:f6:ec:01:ac: ca:a9:31:25:d7:d6:68:7e:77:02:59:d8:c8:4c:3b:04:21:fc: 26:5d:a3:69:ab:03:e7:cb:51:43:28:8f:5c:d1:4f:f7:b1:9f: b8:59:f7:87:0b:a8:3e:39:c6:b9:c9:65:68:b4:72:4d:02:93: bf:b3:cc:12:2d:32:9d:fe:f5:7d:eb:d0:ac:b9:98:3d:d0:01: d2:78:aa:33 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QUEyNDExMC8GA1UEBRMoRUQ3MkM3MTZCQzBBRjU5RDQzMDYzMjNGQkFBNDc0QkQ0 QjRERTcxQzAeFw0yNTA1MTUwNzI4MjJaFw0yNTA1MjIwNzI4MjJaMBgxFjAUBgNV BAMTDTY4MjU5Nzk3LTk5NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDK0HWK6HQmx69K8gltoOk0ln+NVdoN5Jxs6lHL3N/McwBz+eePmuY6NQkWb+DM Psu5K5j0tgI8cG6zjFRl9cWJEGeqQdP2CMjO5ad2Uc72y1m3uQui4n94mabQgpUP V4wDF26bIRugX9NFfM/nwPtMgd3NFaSQZUpt8cCNkJjl68WswbuHqwmAGVuIwVr3 +d12z4RcQJtWbDiZrdWe3rKQ4zX1B+wMeP/zzzGxGX/U0W4bUTGMBVzzoSMBrwq4 GYKWiXaSQyFVq2fMYcOEHVqBSgjyl6KA2JtjbeOD00jihHccAf+AVTJKYUPsVDJl MwejMO0rl4GqHl+yTlWhc0T9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURCYHzXaG AQsS4TDGAzfbztqwr7UwHwYDVR0jBBgwFoAU7XLHFrwK9Z1DBjI/uqR0vUtN5xww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJBQTI0LzE3MzlDMzVBMkJD OTExRjBCOEJFM0YzQkM0RjlBRTAyLzdYTEhGcndLOVoxREJqSV91cVIwdlV0TjV4 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN1hMSEZyd0s5WjFEQmpJX3VxUjB2VXRONXh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJB QTI0LzE3MzlDMzVBMkJDOTExRjBCOEJFM0YzQkM0RjlBRTAyLzdYTEhGcndLOVox REJqSV91cVIwdlV0TjV4dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACX2MaL9yYR0LTzJuliB+c64fw+uRvTxdLPimQZ0DwD5dYvv+m1c8SyN bN3Y6m2rdSR6k381DFfZot1Rr8ojZrbMJkIS/kL3Sri6W3yeH+OuE86EBKzUy3CL DzqziroE/oBAhJjphJnLwVz1+0Bv6DjRJj1hh8bNJpj95KrdcMr3Z0MFgIGiWSUW zmtYZ7iJuMqxc2/7di4Eu7m2jN+HkHgJA0MVR3m6WPzNBz3nyIka9uwBrMqpMSXX 1mh+dwJZ2MhMOwQh/CZdo2mrA+fLUUMoj1zRT/exn7hZ94cLqD45xrnJZWi0ck0C k7+zzBItMp3+9X3r0Ky5mD3QAdJ4qjM= -----END CERTIFICATE-----Generated at Thu May 15 11:09:09 2025 by rpki-client