$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEE1D/92782234C70E11EF8067C466C4F9AE02/7AffwfGIh38OvP3gtIHMAiw0NrI.mft File: 7AffwfGIh38OvP3gtIHMAiw0NrI.mft (raw, json) Hash identifier: 6armH/i+4tTt2ZXaqXxR+olhPzCdiBJveWkWeK3a/dA= Subject key identifier: A8:12:2B:63:AA:5A:0B:A0:28:A5:F0:8C:C2:D4:26:14:D5:5E:6D:4C Authority key identifier: EC:07:DF:C1:F1:88:87:7F:0E:BC:FD:E0:B4:81:CC:02:2C:34:36:B2 Certificate issuer: /CN=A91BEE1D/serialNumber=EC07DFC1F188877F0EBCFDE0B481CC022C3436B2 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7AffwfGIh38OvP3gtIHMAiw0NrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEE1D/92782234C70E11EF8067C466C4F9AE02/7AffwfGIh38OvP3gtIHMAiw0NrI.mft Manifest number: 47 Signing time: Thu 15 May 2025 06:39:46 +0000 Manifest this update: Thu 15 May 2025 06:39:45 +0000 Manifest next update: Thu 22 May 2025 06:39:45 +0000 Files and hashes: 1: 7AffwfGIh38OvP3gtIHMAiw0NrI.crl (hash: BlU2nEvaaBT7jzSeKs/p6EQzIcA1Zv7oQTAw67e2BzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEE1D/92782234C70E11EF8067C466C4F9AE02/7AffwfGIh38OvP3gtIHMAiw0NrI.crl rsync://rpki.apnic.net/member_repository/A91BEE1D/92782234C70E11EF8067C466C4F9AE02/7AffwfGIh38OvP3gtIHMAiw0NrI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7AffwfGIh38OvP3gtIHMAiw0NrI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEE1D, serialNumber=EC07DFC1F188877F0EBCFDE0B481CC022C3436B2 Validity Not Before: May 15 06:39:45 2025 GMT Not After : May 22 06:39:45 2025 GMT Subject: CN=68258c31-fcbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9c:f9:88:19:16:b6:1e:2c:62:70:37:0f:77: be:58:8e:9f:66:96:7e:dc:35:cf:e7:01:90:72:66: 54:84:f4:a2:0c:8f:97:19:81:59:8b:6d:69:34:47: 47:86:79:17:97:29:ec:13:6f:92:0b:1e:f9:af:28: 59:32:10:d3:9a:df:24:32:5f:c5:5d:7c:25:b1:94: 28:0d:21:1d:c2:14:aa:ed:f9:45:31:51:4a:e9:c6: 83:1f:17:b4:9a:86:ba:c1:5a:b4:c2:5c:bb:57:be: 83:2c:68:cd:4a:26:af:1c:ef:79:02:a1:30:ee:da: 64:f5:87:54:e3:c5:4f:84:7d:3f:c0:26:e7:99:55: 1b:da:c2:a4:fc:f3:6c:49:09:5d:45:a5:75:af:55: 92:2c:9a:65:2c:1d:d0:a7:71:9b:73:81:f0:0f:3b: a2:ca:64:6b:e4:fc:69:52:20:e5:85:41:dd:f3:d0: 6b:6e:85:be:4f:51:5b:30:74:74:57:8f:f7:7d:57: 65:4c:bc:69:5c:40:66:54:74:1e:e4:61:c7:16:9a: 74:fd:32:6c:de:3d:3c:18:58:46:2a:f5:82:53:ff: a2:7b:78:c1:35:c7:cd:fd:83:6b:35:56:13:59:c4: 7b:89:c5:98:2d:48:28:c4:14:44:fc:54:e3:4b:eb: 52:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:12:2B:63:AA:5A:0B:A0:28:A5:F0:8C:C2:D4:26:14:D5:5E:6D:4C X509v3 Authority Key Identifier: keyid:EC:07:DF:C1:F1:88:87:7F:0E:BC:FD:E0:B4:81:CC:02:2C:34:36:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEE1D/92782234C70E11EF8067C466C4F9AE02/7AffwfGIh38OvP3gtIHMAiw0NrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7AffwfGIh38OvP3gtIHMAiw0NrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEE1D/92782234C70E11EF8067C466C4F9AE02/7AffwfGIh38OvP3gtIHMAiw0NrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:86:88:b6:7f:17:d2:cf:1d:94:6e:c8:ca:59:d3:e5:93:09: 59:6f:49:52:90:4d:29:3a:ae:17:36:03:17:68:15:23:9a:97: 05:99:4d:c1:d6:90:c7:57:0c:7e:3a:08:85:83:21:92:3c:44: 82:2e:90:7c:81:3a:ad:fc:83:dd:7b:58:5d:75:a2:a7:57:3a: 21:6e:fa:ec:39:a0:2e:00:01:1a:ff:17:f4:06:d4:1c:64:92: 10:0a:eb:e1:fe:a2:94:ab:d2:aa:30:94:43:10:1a:67:42:c1: 42:e3:80:cb:f7:58:76:6c:0f:b5:28:22:37:21:e0:f2:89:76: 0d:16:91:e4:c5:18:0f:51:27:10:18:b8:f4:4b:5f:d7:7e:38: a7:32:ed:68:20:a8:e9:ad:20:b6:85:a8:6b:d7:ef:18:79:6f: 55:05:18:02:1d:fc:3a:cf:0f:06:7c:a6:0c:ab:2d:7e:b1:08: 37:32:e2:28:88:98:4d:03:d9:55:3b:66:20:b1:df:12:15:cd: 83:fd:61:57:cb:a3:1f:ef:2c:10:30:84:45:3a:5c:67:59:aa: d3:e4:f8:07:bd:b0:07:9a:8b:91:f5:f9:d9:d4:c4:91:82:86: 4f:d0:a6:b9:f1:0c:e1:e5:02:d2:57:28:24:0a:9c:33:51:b5: 06:9c:b2:d9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RUUxRDExMC8GA1UEBRMoRUMwN0RGQzFGMTg4ODc3RjBFQkNGREUwQjQ4MUNDMDIy QzM0MzZCMjAeFw0yNTA1MTUwNjM5NDVaFw0yNTA1MjIwNjM5NDVaMBgxFjAUBgNV BAMTDTY4MjU4YzMxLWZjYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCznPmIGRa2HixicDcPd75Yjp9mln7cNc/nAZByZlSE9KIMj5cZgVmLbWk0R0eG eReXKewTb5ILHvmvKFkyENOa3yQyX8VdfCWxlCgNIR3CFKrt+UUxUUrpxoMfF7Sa hrrBWrTCXLtXvoMsaM1KJq8c73kCoTDu2mT1h1TjxU+EfT/AJueZVRvawqT882xJ CV1FpXWvVZIsmmUsHdCncZtzgfAPO6LKZGvk/GlSIOWFQd3z0Gtuhb5PUVswdHRX j/d9V2VMvGlcQGZUdB7kYccWmnT9MmzePTwYWEYq9YJT/6J7eME1x839g2s1VhNZ xHuJxZgtSCjEFET8VONL61LHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqBIrY6pa C6AopfCMwtQmFNVebUwwHwYDVR0jBBgwFoAU7AffwfGIh38OvP3gtIHMAiw0NrIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFRTFELzkyNzgyMjM0Qzcw RTExRUY4MDY3QzQ2NkM0RjlBRTAyLzdBZmZ3ZkdJaDM4T3ZQM2d0SUhNQWl3ME5y SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvN0FmZndmR0loMzhPdlAzZ3RJSE1BaXcwTnJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJF RTFELzkyNzgyMjM0QzcwRTExRUY4MDY3QzQ2NkM0RjlBRTAyLzdBZmZ3ZkdJaDM4 T3ZQM2d0SUhNQWl3ME5ySS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAKGiLZ/F9LPHZRuyMpZ0+WTCVlvSVKQTSk6rhc2AxdoFSOalwWZTcHW kMdXDH46CIWDIZI8RIIukHyBOq38g917WF11oqdXOiFu+uw5oC4AARr/F/QG1Bxk khAK6+H+opSr0qowlEMQGmdCwULjgMv3WHZsD7UoIjch4PKJdg0WkeTFGA9RJxAY uPRLX9d+OKcy7WggqOmtILaFqGvX7xh5b1UFGAId/DrPDwZ8pgyrLX6xCDcy4iiI mE0D2VU7ZiCx3xIVzYP9YVfLox/vLBAwhEU6XGdZqtPk+Ae9sAeai5H1+dnUxJGC hk/QprnxDOHlAtJXKCQKnDNRtQacstk= -----END CERTIFICATE-----Generated at Fri May 16 15:32:20 2025 by rpki-client