$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft File: r7CNb36XeFtvMRce-C4xux0G4uM.mft (raw, json) Hash identifier: bMCjKTLZQTkQEOGk3Fau/QBFEoXiy06nr7HzvBkupa4= Subject key identifier: 14:88:4C:2A:81:EF:B9:0D:F4:3A:D0:A1:25:A7:CF:95:37:A6:A5:73 Authority key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 Certificate issuer: /CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Certificate serial: 1476 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft Manifest number: 1458 Signing time: Sat 10 May 2025 16:49:29 +0000 Manifest this update: Sat 10 May 2025 16:49:28 +0000 Manifest next update: Sat 17 May 2025 16:49:28 +0000 Files and hashes: 1: r7CNb36XeFtvMRce-C4xux0G4uM.crl (hash: /XjfMRAknDNdIpbN/Eyj35jxeiAJwfztgv/FoyXx40c=) 2: 4EED8CBE029911EF96760924C4F9AE02.roa (hash: nVELww+GgEMji9swA1+nobEPfsSUHSJgjMoFUJZQMqM=) 3: CC2A0136F58C11EEB142585CC4F9AE02.roa (hash: NmgnSbqhNrVMFG4Dg8/Hr5BSKbryNdhaQqVsZnbZ5iU=) 4: A0375A56964511EF9481CA74C4F9AE02.roa (hash: kEtEyPhK0r3E14+zMjIhhxmIsJuQscWu62026oNy4Ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:49:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5238 (0x1476) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B15, serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Validity Not Before: May 10 16:49:28 2025 GMT Not After : May 17 16:49:28 2025 GMT Subject: CN=681f8399-e3e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:10:97:ca:4c:90:7e:3a:b8:0b:b0:cb:d2:48: af:9c:66:2c:9a:b4:a8:3a:c1:df:f6:77:58:33:90: 92:88:72:58:55:54:be:49:ce:db:21:61:34:e6:6b: 92:00:03:f3:99:17:50:f7:a8:eb:c1:90:6e:4a:da: b2:a3:8e:6b:0e:52:54:9e:50:36:1f:a9:8b:ad:66: fc:a3:b8:e0:e3:74:d6:00:d4:22:8f:fd:fa:60:cc: 63:cd:84:06:ec:97:70:ed:8a:f0:1e:0c:6b:96:39: 4b:e3:ce:08:34:30:1b:c6:4f:7e:cd:b7:1c:f5:93: 94:7a:20:95:8a:69:d2:ba:5f:39:d0:9a:c3:b2:93: 9d:ba:34:25:95:57:12:34:9f:ee:48:d1:fe:d2:ce: 37:14:56:ea:84:f4:c5:7f:fc:13:d9:56:d9:6a:83: b9:b2:e8:42:e1:35:24:3f:5f:2a:2f:38:fc:ce:07: 17:e0:6e:3f:20:f6:f1:6b:63:70:4b:ef:4e:2c:40: 1f:6a:7f:4e:52:74:de:9a:37:93:2e:09:c4:f2:a6: 6d:3b:c1:ff:b0:7c:70:f1:72:12:07:7e:8b:17:22: 8c:cf:72:65:dc:0c:d0:df:aa:6a:47:32:c4:e0:6f: f6:1c:d1:cc:fd:a7:ed:c6:90:f5:81:96:4a:25:ba: 19:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:88:4C:2A:81:EF:B9:0D:F4:3A:D0:A1:25:A7:CF:95:37:A6:A5:73 X509v3 Authority Key Identifier: keyid:AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:a0:05:5b:31:7d:94:b8:63:76:eb:d2:b3:66:68:25:77:a6: ae:9a:72:b6:51:d4:0e:d6:90:14:d5:80:21:51:65:bc:5b:20: 3e:b2:73:f2:5e:ae:dd:ed:fd:fd:c6:e7:ed:3b:cd:1b:35:70: 49:b8:73:42:a3:35:91:89:df:1e:c3:41:ff:52:33:96:aa:a5: 66:78:6b:f9:a8:68:15:04:5e:fc:8a:ac:df:b4:cf:b9:47:69: e7:73:fa:c5:44:5f:f7:f1:8e:0d:ff:7d:6a:6d:94:c2:f5:42: 44:5e:e1:c7:d0:1c:22:ef:80:cf:d6:22:a8:2f:0e:0b:53:03: c3:3b:4d:75:07:90:ae:63:a2:8e:2d:40:99:7e:2d:c9:2a:21: 67:c8:95:88:bc:1c:ef:de:86:a1:6c:9c:98:26:7d:07:31:be: ad:9b:88:32:94:70:2b:ea:5e:5d:d9:89:78:52:91:06:5b:8f: 95:dd:a6:52:63:a6:73:20:33:80:14:6e:19:a1:24:08:00:4d: af:f4:b1:40:29:58:75:6a:c9:ee:63:fb:b7:67:86:9a:06:56: aa:fb:d0:50:9a:65:ac:45:4f:e9:14:e7:ca:a3:7a:1c:58:1e: 76:9c:ff:5a:2f:58:12:86:e6:ae:ea:1f:4b:ed:7f:f3:57:c1: cf:95:5d:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCMTUxMTAvBgNVBAUTKEFGQjA4RDZGN0U5Nzc4NUI2RjMxMTcxRUY4MkUzMUJC MUQwNkUyRTMwHhcNMjUwNTEwMTY0OTI4WhcNMjUwNTE3MTY0OTI4WjAYMRYwFAYD VQQDEw02ODFmODM5OS1lM2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1RCXykyQfjq4C7DL0kivnGYsmrSoOsHf9ndYM5CSiHJYVVS+Sc7bIWE05muS AAPzmRdQ96jrwZBuStqyo45rDlJUnlA2H6mLrWb8o7jg43TWANQij/36YMxjzYQG 7Jdw7YrwHgxrljlL484INDAbxk9+zbcc9ZOUeiCVimnSul850JrDspOdujQllVcS NJ/uSNH+0s43FFbqhPTFf/wT2VbZaoO5suhC4TUkP18qLzj8zgcX4G4/IPbxa2Nw S+9OLEAfan9OUnTemjeTLgnE8qZtO8H/sHxw8XISB36LFyKMz3Jl3AzQ36pqRzLE 4G/2HNHM/aftxpD1gZZKJboZwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSITCqB 77kN9DrQoSWnz5U3pqVzMB8GA1UdIwQYMBaAFK+wjW9+l3hbbzEXHvguMbsdBuLj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS9GQUY2RkQ3ODcx RTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVGdHZNUmNlLUM0eHV4MEc0 dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3Q05iMzZYZUZ0dk1SY2UtQzR4dXgwRzR1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0IxNS9GQUY2RkQ3ODcxRTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVG dHZNUmNlLUM0eHV4MEc0dU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyoAVbMX2UuGN269KzZmgld6aumnK2UdQO1pAU1YAhUWW8WyA+snPy Xq7d7f39xuftO80bNXBJuHNCozWRid8ew0H/UjOWqqVmeGv5qGgVBF78iqzftM+5 R2nnc/rFRF/38Y4N/31qbZTC9UJEXuHH0Bwi74DP1iKoLw4LUwPDO011B5CuY6KO LUCZfi3JKiFnyJWIvBzv3oahbJyYJn0HMb6tm4gylHAr6l5d2Yl4UpEGW4+V3aZS Y6ZzIDOAFG4ZoSQIAE2v9LFAKVh1asnuY/u3Z4aaBlaq+9BQmmWsRU/pFOfKo3oc WB52nP9aL1gShuau6h9L7X/zV8HPlV2r -----END CERTIFICATE-----Generated at Sun May 11 07:38:21 2025 by rpki-client