$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft File: v7abwiV2uVe6tf8za36DWNy3Cio.mft (raw, json) Hash identifier: I4Kasv17f3/11RKAWhBQhZzZ6fpavwMjN2LHGw7IRLQ= Subject key identifier: 6A:B9:B3:C3:F5:E8:2D:E2:E7:3A:EA:31:0F:4A:3D:3F:CA:04:AB:A2 Authority key identifier: BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A Certificate issuer: /CN=A91D5BFB/serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A Certificate serial: 21BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft Manifest number: 219E Signing time: Sun 04 May 2025 15:50:14 +0000 Manifest this update: Sun 04 May 2025 15:50:14 +0000 Manifest next update: Sun 11 May 2025 15:50:14 +0000 Files and hashes: 1: v7abwiV2uVe6tf8za36DWNy3Cio.crl (hash: dgTCaRUAjjwe2tqdGWIFnKqxK2fEbO53yqemk3Mj7GI=) 2: 6D2F20B6ECEB11EE960F5531C4F9AE02.roa (hash: VxYl4qfB1zjkRKmgSxnmRNT6jpcxz/oQeuf18i1PilE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 15:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8639 (0x21bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5BFB, serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A Validity Not Before: May 4 15:50:14 2025 GMT Not After : May 11 15:50:14 2025 GMT Subject: CN=68178cb6-39ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ed:4e:14:4a:87:28:af:55:1a:ef:6f:c3:83: 93:ad:27:b3:4f:8d:9b:88:69:d6:6b:8b:48:cc:2e: 84:52:d4:d1:e4:3e:99:96:d2:08:d7:3d:94:4b:fd: c9:90:4d:1e:c1:db:1e:06:77:4d:29:3b:19:26:cc: e8:47:08:36:4b:52:d5:ba:73:03:e9:b5:82:0f:f9: fc:a2:04:06:53:fc:a3:d2:8b:9d:21:c2:79:d0:1e: d6:d8:0c:89:b2:03:71:7e:92:32:9a:fb:e2:35:3e: 31:d5:22:75:0b:94:f8:55:80:bf:4f:1c:cb:62:5e: 58:b1:ce:7d:79:92:34:7f:8b:d1:ac:db:e4:4d:75: 46:d3:f5:7e:ca:18:a9:de:24:c7:8b:94:0c:fe:93: 2b:d0:78:a2:7d:99:d3:03:66:7c:21:89:41:31:ed: 87:94:3e:a8:c7:f2:52:7c:6c:40:9a:6d:ff:6e:7b: ca:e1:cb:7c:c7:83:e2:fa:5e:85:16:19:58:90:dd: f3:b3:1f:4f:d7:d6:1d:a1:fd:c5:cd:9a:10:91:72: 5c:fb:58:67:89:a7:fd:e7:0f:e0:da:d3:4d:e4:e8: dd:45:c4:58:e0:9d:ac:8c:94:90:52:ea:47:f0:13: b5:4d:df:bb:56:e8:26:94:bc:ac:88:ad:2e:8e:81: 22:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B9:B3:C3:F5:E8:2D:E2:E7:3A:EA:31:0F:4A:3D:3F:CA:04:AB:A2 X509v3 Authority Key Identifier: keyid:BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:15:b4:ac:7d:92:fb:88:09:7a:09:60:30:c5:80:c8:5a:b4: 2a:2f:b1:ea:3d:34:7f:33:b8:85:95:8c:17:94:83:66:cb:a9: c2:04:02:a9:75:ae:ba:1d:77:ac:5d:0c:a7:36:61:b8:5a:4f: dc:ab:7e:3e:6c:b7:9c:c9:93:c4:6d:17:14:98:70:8b:39:1b: 54:1b:b1:40:8d:c5:62:e7:24:26:ee:fe:da:bc:f4:a4:bb:20: 65:86:c5:41:bb:8a:23:70:3c:59:0a:fb:22:5a:db:45:58:f6: b6:98:1d:43:83:25:95:1d:88:fd:02:c2:61:1d:a8:a5:8d:cc: dd:b5:21:07:e7:85:d2:06:da:ba:fb:1f:72:c2:a1:0a:e3:43: 72:2a:64:a1:ae:f9:55:a8:96:5c:7a:1a:d6:1f:11:7e:b4:d7: fa:a0:ce:d5:f7:87:7e:c2:a7:9a:73:25:87:84:b6:04:1c:3b: e6:19:a0:ef:29:10:3f:5f:3d:07:6b:7c:99:8c:db:3c:66:e2: e0:52:b2:8d:f3:02:4c:65:32:74:b5:3e:f4:29:ee:fe:65:ed: 3b:4d:e9:8a:06:cd:38:f0:c6:31:30:c1:f7:b2:70:4b:7c:81: c6:6d:77:fd:46:4e:73:92:48:dc:52:b4:8f:6b:81:87:ea:27: 83:bb:1d:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVCRkIxMTAvBgNVBAUTKEJGQjY5QkMyMjU3NkI5NTdCQUI1RkYzMzZCN0U4MzU4 RENCNzBBMkEwHhcNMjUwNTA0MTU1MDE0WhcNMjUwNTExMTU1MDE0WjAYMRYwFAYD VQQDEw02ODE3OGNiNi0zOWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqe1OFEqHKK9VGu9vw4OTrSezT42biGnWa4tIzC6EUtTR5D6ZltII1z2US/3J kE0ewdseBndNKTsZJszoRwg2S1LVunMD6bWCD/n8ogQGU/yj0oudIcJ50B7W2AyJ sgNxfpIymvviNT4x1SJ1C5T4VYC/TxzLYl5Ysc59eZI0f4vRrNvkTXVG0/V+yhip 3iTHi5QM/pMr0HiifZnTA2Z8IYlBMe2HlD6ox/JSfGxAmm3/bnvK4ct8x4Pi+l6F FhlYkN3zsx9P19Ydof3FzZoQkXJc+1hniaf95w/g2tNN5OjdRcRY4J2sjJSQUupH 8BO1Td+7VugmlLysiK0ujoEizQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGq5s8P1 6C3i5zrqMQ9KPT/KBKuiMB8GA1UdIwQYMBaAFL+2m8IldrlXurX/M2t+g1jctwoq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUJGQi9ERjJFMDEzRUQ5 RkIxMUU1ODREMTFBNzZDNEY5QUUwMi92N2Fid2lWMnVWZTZ0Zjh6YTM2RFdOeTND aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y3YWJ3aVYydVZlNnRmOHphMzZEV055M0Npby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUJGQi9ERjJFMDEzRUQ5RkIxMUU1ODREMTFBNzZDNEY5QUUwMi92N2Fid2lWMnVW ZTZ0Zjh6YTM2RFdOeTNDaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnFbSsfZL7iAl6CWAwxYDIWrQqL7HqPTR/M7iFlYwXlINmy6nCBAKp da66HXesXQynNmG4Wk/cq34+bLecyZPEbRcUmHCLORtUG7FAjcVi5yQm7v7avPSk uyBlhsVBu4ojcDxZCvsiWttFWPa2mB1DgyWVHYj9AsJhHailjczdtSEH54XSBtq6 +x9ywqEK40NyKmShrvlVqJZcehrWHxF+tNf6oM7V94d+wqeacyWHhLYEHDvmGaDv KRA/Xz0Ha3yZjNs8ZuLgUrKN8wJMZTJ0tT70Ke7+Ze07TemKBs048MYxMMH3snBL fIHGbXf9Rk5zkkjcUrSPa4GH6ieDux2E -----END CERTIFICATE-----Generated at Mon May 5 03:31:12 2025 by rpki-client