$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft File: t7c-ibYhCBYJzWiasK73-vFIkmw.mft (raw, json) Hash identifier: eHDMfHAihwQvGDRyIeciUAsTW8qm7rdWHqQ6mt+LVz4= Subject key identifier: CD:63:74:BF:26:29:2E:E5:2E:8D:3F:B1:1C:7D:AF:6F:27:4A:77:CF Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C Certificate issuer: /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Certificate serial: 2634 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft Manifest number: 25AE Signing time: Mon 12 May 2025 15:43:33 +0000 Manifest this update: Mon 12 May 2025 15:43:33 +0000 Manifest next update: Mon 19 May 2025 15:43:33 +0000 Files and hashes: 1: t7c-ibYhCBYJzWiasK73-vFIkmw.crl (hash: WTLkb5Jg0oZvkNmG8+eUKOFH/TbMIwa10ANBnUsNyrs=) 2: C9848396CD1711ED898C311FC4F9AE02.roa (hash: qiiCfqFkoE73eTUuEAWAlpV2z6GCWd7ckeeiGxi5A4g=) 3: AEEA3AE45BF611E984E25E54C4F9AE02.roa (hash: 8E9asmBCPDP2vspF6SfkqxDFa3zUOjR86wRCRSbANb0=) 4: BE402F16707F11EDBD17DD28C4F9AE02.roa (hash: OnnEcT/kT/2u+quSNu4e6UQE5EuukB+yT7k1rnta/B8=) 5: 4A479BB45A7911E998A6BE80C4F9AE02.roa (hash: 7w5j+dyzSy7t29HEAco9XLxp6MYZWlL3SdlWBrNw0GY=) 6: 1A982CC85A7C11E9A28B110DC4F9AE02.roa (hash: rA4hkIUyghNJGhY6y7qlDGe8Bvu+DeS8X5hf3GA24oo=) 7: 6223956A752011ED84F8CD3CC4F9AE02.roa (hash: qP1taxaDkzPIRlzYJOWEFK27iFdTzqw6PgRMtNqW7DY=) 8: 8F92939C46C711E9A5547325C4F9AE02.roa (hash: OMcalDpUDIv29WHDH5fBd3k9KPtvhZaxcTh0ykbSM4A=) 9: 3824883E72ED11EE812CE764C4F9AE02.roa (hash: SGtpHicj9fj12PvzOePuISsi6bvGYuZWMeMkAXSkEcc=) 10: BD9FC7C4707F11EDBD17DD28C4F9AE02.roa (hash: R4Hu6VZOII2INVF3IDAiNevmkDezpOVd/aGcqQwbfzw=) 11: FF145268EEAB11EFAD1FDC0CC4F9AE02.roa (hash: BUsQ5wBegaz/A2q7GTFIUHkDuT4PXl4dcLWVKVnr0mQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:43:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9780 (0x2634) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1136, serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Validity Not Before: May 12 15:43:33 2025 GMT Not After : May 19 15:43:33 2025 GMT Subject: CN=68221725-41ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0b:62:4a:4c:e0:6a:f4:84:c2:f6:15:ff:9c: 85:c8:20:6d:41:f7:90:e4:45:f7:ab:85:fd:01:78: d5:66:86:04:da:51:a5:93:da:8e:89:23:da:4c:29: bc:eb:8d:62:f0:36:95:f3:f1:95:17:60:ff:5e:e4: 50:02:6d:47:13:ef:9d:ac:9d:5f:76:6f:d5:19:01: 90:89:da:01:7a:71:27:be:9a:24:b0:8d:a5:8a:81: 18:d2:36:2c:0f:80:bb:a0:9f:ff:6e:04:3a:c5:0c: b3:8d:9b:13:6f:eb:6a:fb:f7:f5:32:96:12:be:65: df:cf:01:ce:2b:05:23:e5:d9:55:02:b5:65:b1:51: cd:66:85:cf:41:ca:ef:59:dc:ed:a9:37:92:21:92: 00:62:9c:90:aa:1b:85:a9:3c:41:28:78:6d:3b:d6: 1b:02:de:d9:db:5d:88:1e:c4:11:a8:cd:03:6b:28: 79:f1:05:27:01:15:48:ea:a3:12:5f:f8:97:d3:a1: ee:2f:bf:0d:94:85:3c:15:58:6f:79:f4:29:7f:4a: 90:b0:c9:f4:ee:71:2f:ce:bd:e6:d5:f3:48:e4:11: ec:17:9e:7d:e1:5a:30:32:e7:77:e5:aa:e6:c8:b7: 1c:e5:a2:c2:73:c7:0b:3f:90:89:ea:52:05:dd:4f: 95:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:63:74:BF:26:29:2E:E5:2E:8D:3F:B1:1C:7D:AF:6F:27:4A:77:CF X509v3 Authority Key Identifier: keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:02:a1:3b:76:23:e0:85:52:ed:94:b3:3c:04:6b:83:2a:e9: 28:65:e1:29:ba:43:8f:fc:29:66:8e:22:1b:3b:06:18:65:46: 9e:ff:d5:41:93:bb:b2:06:88:d6:55:61:f9:08:ae:a5:93:34: 60:a5:69:4a:67:ef:ba:79:8b:77:81:e8:75:91:09:5e:88:40: 75:f3:1e:ae:c2:a2:2c:17:06:cb:f0:2d:ba:69:4d:21:13:8a: 76:7a:dc:ae:dd:e5:72:3f:fc:35:8b:a1:be:6c:d4:fd:99:2b: da:55:bf:cb:7f:b2:fd:38:53:64:da:f8:9a:63:53:0d:3b:44: 24:2e:fa:de:a7:c0:67:05:d1:c6:4e:32:7c:f0:9d:ea:d6:b0: c3:0d:e8:7f:da:6c:2b:8e:c3:f6:34:36:89:c0:02:25:74:7e: 90:48:61:d3:01:76:20:40:77:5d:61:da:61:c8:83:87:11:14: 76:94:01:8d:fb:0e:e4:03:7c:e8:2d:6d:0a:8d:20:1a:6d:85: 0a:16:cb:29:11:57:7b:47:cf:8e:7c:83:c7:3a:7f:34:52:01: 8b:df:d1:73:22:06:db:99:58:64:bb:f5:5e:44:fe:5d:c9:81: 46:82:59:10:0e:65:1e:6c:4c:f9:00:ba:34:81:80:22:a5:40: 5f:30:5f:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMzYxMTAvBgNVBAUTKEI3QjczRTg5QjYyMTA4MTYwOUNENjg5QUIwQUVGN0ZB RjE0ODkyNkMwHhcNMjUwNTEyMTU0MzMzWhcNMjUwNTE5MTU0MzMzWjAYMRYwFAYD VQQDEw02ODIyMTcyNS00MWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnwtiSkzgavSEwvYV/5yFyCBtQfeQ5EX3q4X9AXjVZoYE2lGlk9qOiSPaTCm8 641i8DaV8/GVF2D/XuRQAm1HE++drJ1fdm/VGQGQidoBenEnvpoksI2lioEY0jYs D4C7oJ//bgQ6xQyzjZsTb+tq+/f1MpYSvmXfzwHOKwUj5dlVArVlsVHNZoXPQcrv WdztqTeSIZIAYpyQqhuFqTxBKHhtO9YbAt7Z212IHsQRqM0Dayh58QUnARVI6qMS X/iX06HuL78NlIU8FVhvefQpf0qQsMn07nEvzr3m1fNI5BHsF5594VowMud35arm yLcc5aLCc8cLP5CJ6lIF3U+VTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1jdL8m KS7lLo0/sRx9r28nSnfPMB8GA1UdIwQYMBaAFLe3Pom2IQgWCc1omrCu9/rxSJJs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEzNi9DRjMyODFDODIx NUIxMUU1QTdCRjg5MEVDNEY5QUUwMi90N2MtaWJZaENCWUp6V2lhc0s3My12Rklr bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q3Yy1pYlloQ0JZSnpXaWFzSzczLXZGSWttdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTEzNi9DRjMyODFDODIxNUIxMUU1QTdCRjg5MEVDNEY5QUUwMi90N2MtaWJZaENC WUp6V2lhc0s3My12RklrbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChAqE7diPghVLtlLM8BGuDKukoZeEpukOP/ClmjiIbOwYYZUae/9VB k7uyBojWVWH5CK6lkzRgpWlKZ++6eYt3geh1kQleiEB18x6uwqIsFwbL8C26aU0h E4p2etyu3eVyP/w1i6G+bNT9mSvaVb/Lf7L9OFNk2viaY1MNO0QkLvrep8BnBdHG TjJ88J3q1rDDDeh/2mwrjsP2NDaJwAIldH6QSGHTAXYgQHddYdphyIOHERR2lAGN +w7kA3zoLW0KjSAabYUKFsspEVd7R8+OfIPHOn80UgGL39FzIgbbmVhku/VeRP5d yYFGglkQDmUebEz5ALo0gYAipUBfMF+1 -----END CERTIFICATE-----Generated at Tue May 13 09:20:41 2025 by rpki-client