$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft File: P7eFXvMwunfZ87ct_97CBxKsFAc.mft (raw, json) Hash identifier: CEnmrJC01W6ndzN86zGeIWDhCy0X9ulRH1+0P+oOR8E= Subject key identifier: 7A:FC:48:E4:9F:51:FA:52:C5:39:F8:C7:44:81:38:E9:54:65:E8:EA Authority key identifier: 3F:B7:85:5E:F3:30:BA:77:D9:F3:B7:2D:FF:DE:C2:07:12:AC:14:07 Certificate issuer: /CN=A91CD4DB/serialNumber=3FB7855EF330BA77D9F3B72DFFDEC20712AC1407 Certificate serial: 17AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft Manifest number: 179B Signing time: Sat 10 May 2025 16:29:56 +0000 Manifest this update: Sat 10 May 2025 16:29:56 +0000 Manifest next update: Sat 17 May 2025 16:29:56 +0000 Files and hashes: 1: P7eFXvMwunfZ87ct_97CBxKsFAc.crl (hash: wW8wkRmWPQKhKvLditeYDmN6VGCXieDXzJqxII3U5O0=) 2: 1615AC3AD9E911EC9017DD21C4F9AE02.roa (hash: tZ+n1rBeiFep27McDY+TR8Gj4nHp3eK0QyhamvlvTOk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.crl rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:29:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6062 (0x17ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD4DB, serialNumber=3FB7855EF330BA77D9F3B72DFFDEC20712AC1407 Validity Not Before: May 10 16:29:56 2025 GMT Not After : May 17 16:29:56 2025 GMT Subject: CN=681f7f04-f421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ad:a0:d5:48:11:c2:e4:0b:83:0e:8f:b0:18: 0c:2e:30:e3:2e:3a:f1:7e:ed:5e:8f:37:a4:92:cb: 0a:99:03:a0:f2:e6:45:d3:5e:60:73:d0:1a:6e:20: 50:db:e4:a9:e6:46:14:49:de:70:9e:11:12:a3:c6: 6c:fa:82:36:85:06:fd:c8:d4:b5:43:87:4f:67:8c: da:fb:87:7e:68:a3:32:c1:02:18:52:d2:f3:86:9c: d0:d7:ac:ed:00:b1:b4:dc:48:ac:76:a4:f6:a9:a1: 6e:57:d6:ab:a3:0b:da:45:dc:f4:1b:42:d1:60:fe: f4:ee:5a:88:8b:7b:3d:9b:60:fd:18:e9:76:dd:38: 7f:9e:92:d9:41:28:68:46:87:b9:54:7a:59:4a:58: 5f:d3:c2:5e:ca:f1:cc:be:ab:f0:e0:82:1d:fb:24: d9:57:d2:7b:a6:10:e2:b2:54:ea:62:a4:4e:84:f6: 95:6a:e7:25:b6:83:4f:32:4f:9a:b0:6c:41:7d:16: 18:00:48:a3:76:aa:30:55:0c:73:bb:6d:6f:8a:4d: 90:a3:dc:92:30:db:7d:9f:f9:b3:fc:c1:bc:8a:11: ff:13:34:13:26:08:33:0f:6d:ad:7d:2b:f9:52:3f: 0c:32:bf:09:a9:ca:8b:17:4c:4c:cb:3d:b2:41:7b: da:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FC:48:E4:9F:51:FA:52:C5:39:F8:C7:44:81:38:E9:54:65:E8:EA X509v3 Authority Key Identifier: keyid:3F:B7:85:5E:F3:30:BA:77:D9:F3:B7:2D:FF:DE:C2:07:12:AC:14:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:4b:b9:d6:ad:d3:59:8c:ea:8c:b8:df:25:c8:f9:60:ba:ac: 19:a6:0e:de:da:ce:78:5c:85:07:ae:6f:7d:cc:ed:02:3b:a9: c8:0f:73:12:45:a9:65:17:23:1e:61:e0:87:5d:55:bd:2d:c0: 22:e0:a9:51:9c:93:c8:d8:67:f5:28:71:a7:8a:bd:a8:f2:3d: 5f:00:bd:07:fb:2d:7f:87:10:f4:de:ab:5e:b8:1b:58:0d:75: 75:71:4d:bd:ab:83:7e:8e:1e:3c:21:95:c3:45:0f:18:4d:81: ef:5a:5e:3c:cd:75:ba:71:71:a2:bb:28:e6:07:ca:0c:05:8c: 2d:37:be:7a:b8:ea:e5:30:1d:57:be:ac:ce:de:72:4b:bc:29: ae:5c:13:94:9c:63:a1:89:0e:b0:7f:07:fd:80:26:fb:70:da: 11:e8:ce:95:ef:eb:68:1c:39:69:a8:e3:17:ea:d9:fa:98:70: 29:28:97:71:8d:f2:2f:fc:31:6e:1d:48:3e:1e:a9:0b:b8:a9: 9e:f2:9c:7e:8e:08:d4:d0:e5:54:18:a9:66:41:08:8c:7f:ac: c7:7a:02:95:63:b6:c0:d4:c9:c8:af:b0:8e:fe:59:94:12:2a: 0b:ec:b7:77:23:0c:51:23:7c:db:72:c2:36:4b:4c:92:91:02: 59:a2:72:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q0REIxMTAvBgNVBAUTKDNGQjc4NTVFRjMzMEJBNzdEOUYzQjcyREZGREVDMjA3 MTJBQzE0MDcwHhcNMjUwNTEwMTYyOTU2WhcNMjUwNTE3MTYyOTU2WjAYMRYwFAYD VQQDEw02ODFmN2YwNC1mNDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2K2g1UgRwuQLgw6PsBgMLjDjLjrxfu1ejzekkssKmQOg8uZF015gc9AabiBQ 2+Sp5kYUSd5wnhESo8Zs+oI2hQb9yNS1Q4dPZ4za+4d+aKMywQIYUtLzhpzQ16zt ALG03EisdqT2qaFuV9arowvaRdz0G0LRYP707lqIi3s9m2D9GOl23Th/npLZQSho Roe5VHpZSlhf08JeyvHMvqvw4IId+yTZV9J7phDislTqYqROhPaVaucltoNPMk+a sGxBfRYYAEijdqowVQxzu21vik2Qo9ySMNt9n/mz/MG8ihH/EzQTJggzD22tfSv5 Uj8MMr8JqcqLF0xMyz2yQXva/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHr8SOSf UfpSxTn4x0SBOOlUZejqMB8GA1UdIwQYMBaAFD+3hV7zMLp32fO3Lf/ewgcSrBQH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDREQi8zQTMxNURDRUNE MDIxMUU3QjA0NDJEMjhDNEY5QUUwMi9QN2VGWHZNd3VuZlo4N2N0Xzk3Q0J4S3NG QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A3ZUZYdk13dW5mWjg3Y3RfOTdDQnhLc0ZBYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDREQi8zQTMxNURDRUNEMDIxMUU3QjA0NDJEMjhDNEY5QUUwMi9QN2VGWHZNd3Vu Zlo4N2N0Xzk3Q0J4S3NGQWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1S7nWrdNZjOqMuN8lyPlguqwZpg7e2s54XIUHrm99zO0CO6nID3MS RallFyMeYeCHXVW9LcAi4KlRnJPI2Gf1KHGnir2o8j1fAL0H+y1/hxD03qteuBtY DXV1cU29q4N+jh48IZXDRQ8YTYHvWl48zXW6cXGiuyjmB8oMBYwtN756uOrlMB1X vqzO3nJLvCmuXBOUnGOhiQ6wfwf9gCb7cNoR6M6V7+toHDlpqOMX6tn6mHApKJdx jfIv/DFuHUg+HqkLuKme8px+jgjU0OVUGKlmQQiMf6zHegKVY7bA1MnIr7CO/lmU EioL7Ld3IwxRI3zbcsI2S0ySkQJZonLg -----END CERTIFICATE-----Generated at Sun May 11 15:09:42 2025 by rpki-client