$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft File: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft (raw, json) Hash identifier: cZEu4NZriif84K/Dlpe8st9curghcguzG83FLzr73q0= Subject key identifier: C3:0C:68:7C:48:0B:4F:E6:82:94:2D:72:C3:30:18:1C:26:35:D2:D4 Authority key identifier: EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA Certificate issuer: /CN=A91D63AF/serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft Manifest number: F9 Signing time: Mon 05 May 2025 04:08:17 +0000 Manifest this update: Mon 05 May 2025 04:08:17 +0000 Manifest next update: Mon 12 May 2025 04:08:17 +0000 Files and hashes: 1: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl (hash: rqEb42u4ey2fiYj7wiNwlzA2ar1M8ZNnjcvMHtm9iFM=) 2: E3E47D36B6B911EE8E72C641C4F9AE02.roa (hash: yzICNTcM283Dqn+31XlCHYK+SaKesuIOk3Z/S3+BpWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 04:08:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63AF, serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA Validity Not Before: May 5 04:08:17 2025 GMT Not After : May 12 04:08:17 2025 GMT Subject: CN=681839b1-fc00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6f:8f:9a:82:0a:eb:c1:92:83:4b:26:19:db: b4:90:3e:e0:e8:13:32:34:f5:4e:18:62:76:10:58: 44:f9:36:5d:f8:d6:af:36:43:97:4a:5a:87:dc:d8: 67:5c:3a:79:1c:5a:7d:38:20:67:b5:a3:d1:21:ea: fa:a7:d4:80:da:8d:4f:7a:57:ba:4e:91:70:10:e3: 29:f3:6c:fe:df:e6:23:52:95:ab:5d:47:ca:74:ee: c8:66:e5:2e:6c:34:8b:dd:a2:08:69:40:d2:6c:d9: 4d:6b:a3:68:27:a8:4d:d4:b0:fc:77:0c:85:2f:6b: 84:21:d7:b9:4b:fc:3a:be:3a:af:bc:06:12:9f:d2: 54:d9:93:2e:fc:84:84:df:00:9c:35:36:57:b9:bb: 6c:0b:a9:9e:2d:9c:f8:59:a6:29:07:e3:7f:4b:ea: f8:a7:d6:71:d6:81:6f:9f:3a:be:e9:28:84:fb:e4: 8f:49:89:6a:cf:01:11:b9:b1:29:9a:86:de:8e:fb: 3d:fa:7f:9c:b2:e2:32:e4:24:7a:94:ed:bd:f4:b9: 02:33:3e:2d:97:5b:de:0a:5e:0a:94:d5:32:d3:e2: 4b:43:75:97:9d:29:e4:a2:2e:06:0e:12:c3:6b:3e: a7:54:f2:4f:8d:9a:cd:54:8a:96:03:99:97:4a:a7: 28:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:0C:68:7C:48:0B:4F:E6:82:94:2D:72:C3:30:18:1C:26:35:D2:D4 X509v3 Authority Key Identifier: keyid:EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:27:9c:e2:14:11:72:95:67:61:23:dc:e2:94:02:3c:ab:b0: be:53:e9:3e:77:00:d5:52:06:fe:de:38:c4:11:47:fa:40:f4: 42:4c:6f:d8:3a:d2:5c:bd:c0:2a:e0:4c:3d:9b:fe:af:49:e5: 31:2a:ba:6f:65:33:86:5d:cc:38:c8:47:bf:50:07:03:8d:f1: 39:ce:1a:3f:c1:ec:5a:27:ae:6a:de:53:08:a2:3c:c5:47:18: 46:5b:8d:c5:fb:44:38:fc:4c:77:bc:7d:ee:3f:54:2d:68:7b: f3:c2:cb:3a:24:df:13:18:d2:b2:b3:3c:fd:76:72:b0:88:c5: ce:28:73:6e:58:bd:24:cd:d9:52:fa:df:08:9c:7d:77:a2:70: ee:fc:fb:06:44:06:13:89:33:01:1b:d0:78:d9:76:95:ed:19: 50:87:66:98:6e:02:05:e7:bb:ba:29:03:cc:27:8c:5a:6d:a7: ca:e4:87:ba:f5:65:99:18:7f:ad:40:25:e9:81:be:13:b7:39: db:fe:9c:4d:c4:33:1a:1e:b0:89:9a:b5:92:bb:a2:e7:91:f4: 8a:6c:2c:29:9d:4d:c6:fa:84:59:82:f6:0e:6b:f4:bf:81:f6: 11:2b:9b:bf:b4:58:ca:15:ad:f3:3b:cc:d5:02:38:e0:68:b6: 76:55:a3:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzQUYxMTAvBgNVBAUTKEVGMzBBMjQxNDZERjY2QjFGQTZGQkE1RDY3Njc2OUVC NjRCMzg3QUEwHhcNMjUwNTA1MDQwODE3WhcNMjUwNTEyMDQwODE3WjAYMRYwFAYD VQQDEw02ODE4MzliMS1mYzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0W+PmoIK68GSg0smGdu0kD7g6BMyNPVOGGJ2EFhE+TZd+NavNkOXSlqH3Nhn XDp5HFp9OCBntaPRIer6p9SA2o1Pele6TpFwEOMp82z+3+YjUpWrXUfKdO7IZuUu bDSL3aIIaUDSbNlNa6NoJ6hN1LD8dwyFL2uEIde5S/w6vjqvvAYSn9JU2ZMu/ISE 3wCcNTZXubtsC6meLZz4WaYpB+N/S+r4p9Zx1oFvnzq+6SiE++SPSYlqzwERubEp mobejvs9+n+csuIy5CR6lO299LkCMz4tl1veCl4KlNUy0+JLQ3WXnSnkoi4GDhLD az6nVPJPjZrNVIqWA5mXSqcoVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMMaHxI C0/mgpQtcsMwGBwmNdLUMB8GA1UdIwQYMBaAFO8wokFG32ax+m+6XWdnaetks4eq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNBRi9FMTREMUFCNEI2 QTYxMUVFQTA0QThCMjNDNEY5QUUwMi83ekNpUVViZlpySDZiN3BkWjJkcDYyU3po Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd6Q2lRVWJmWnJINmI3cGRaMmRwNjJTemg2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNBRi9FMTREMUFCNEI2QTYxMUVFQTA0QThCMjNDNEY5QUUwMi83ekNpUVViZlpy SDZiN3BkWjJkcDYyU3poNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6J5ziFBFylWdhI9zilAI8q7C+U+k+dwDVUgb+3jjEEUf6QPRCTG/Y OtJcvcAq4Ew9m/6vSeUxKrpvZTOGXcw4yEe/UAcDjfE5zho/wexaJ65q3lMIojzF RxhGW43F+0Q4/Ex3vH3uP1QtaHvzwss6JN8TGNKyszz9dnKwiMXOKHNuWL0kzdlS +t8InH13onDu/PsGRAYTiTMBG9B42XaV7RlQh2aYbgIF57u6KQPMJ4xabafK5Ie6 9WWZGH+tQCXpgb4Ttznb/pxNxDMaHrCJmrWSu6LnkfSKbCwpnU3G+oRZgvYOa/S/ gfYRK5u/tFjKFa3zO8zVAjjgaLZ2VaMw -----END CERTIFICATE-----Generated at Mon May 5 06:30:22 2025 by rpki-client