$ rpki-client -vvf rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft File: 7unhDCkeVsgtdwcgELDlgAg_5yk.mft (raw, json) Hash identifier: fac8tMLdo6cZU9DCnCprdMqpHEwBg2c3TsTpNoMjKf8= Subject key identifier: A5:BE:86:F7:CD:EF:1F:B3:36:D3:4B:66:14:78:E7:BB:EF:B8:B4:0D Authority key identifier: EE:E9:E1:0C:29:1E:56:C8:2D:77:07:20:10:B0:E5:80:08:3F:E7:29 Certificate issuer: /CN=A91E82F0/serialNumber=EEE9E10C291E56C82D77072010B0E580083FE729 Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft Manifest number: 0118 Signing time: Tue 13 May 2025 03:59:29 +0000 Manifest this update: Tue 13 May 2025 03:59:28 +0000 Manifest next update: Tue 20 May 2025 03:59:28 +0000 Files and hashes: 1: 7unhDCkeVsgtdwcgELDlgAg_5yk.crl (hash: izkB2gNtIhaR3fJbIsP4dqJkr7ndvP3+BUO7u0wvuk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.crl rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:59:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E82F0, serialNumber=EEE9E10C291E56C82D77072010B0E580083FE729 Validity Not Before: May 13 03:59:28 2025 GMT Not After : May 20 03:59:28 2025 GMT Subject: CN=6822c3a1-1463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fb:24:5b:89:47:bd:84:1e:32:b8:6c:63:86: 0d:29:a1:18:f0:dd:3a:43:dc:e1:fa:be:e5:5c:ca: 60:54:82:d9:af:c2:2c:b2:f7:13:01:13:1d:02:c2: 1a:7a:ae:0d:f4:3e:36:dd:c4:f5:f4:18:fc:03:c2: 20:76:0c:a5:c0:a9:8e:e0:d5:03:b7:e9:5f:5a:c8: 44:ee:cd:8b:a5:a6:f7:52:a3:b5:2b:05:f7:fa:0b: f5:7a:3e:ab:9a:db:4d:5f:2d:9e:d0:e8:b6:a7:00: e2:cf:58:40:24:b8:fa:37:17:7d:65:4c:ee:88:c5: 91:64:29:37:75:fc:84:4f:6b:db:6e:36:d5:5f:87: c6:8e:2d:c5:a4:75:f0:c8:fb:dd:90:1f:ee:ca:6b: 35:eb:7a:6f:5c:c1:14:1f:a9:e4:9e:c6:cf:d3:e5: dd:44:61:7a:29:ae:fa:95:54:20:1a:9d:b6:fd:30: f4:26:c8:5a:06:3b:14:16:16:a1:2f:26:4e:8b:db: c3:ec:21:ce:71:b2:16:f6:b2:18:31:e5:f4:f6:70: 13:8a:5e:dd:06:4f:7b:ae:81:e5:b4:6d:70:59:87: a7:7c:da:c4:3a:84:aa:ab:3c:0d:30:ef:74:ad:a6: 4e:26:aa:93:c3:9c:ca:cf:80:96:65:bd:84:bc:3f: 19:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:BE:86:F7:CD:EF:1F:B3:36:D3:4B:66:14:78:E7:BB:EF:B8:B4:0D X509v3 Authority Key Identifier: keyid:EE:E9:E1:0C:29:1E:56:C8:2D:77:07:20:10:B0:E5:80:08:3F:E7:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:4d:b2:39:6b:d4:1f:de:d9:3e:91:af:17:41:49:bb:9a:ad: 37:9d:01:00:3e:76:ac:b3:1a:f8:d0:46:da:48:6e:49:0a:ff: 0f:8b:0d:a5:52:df:f9:83:65:c3:4d:08:b3:9f:db:f6:d5:be: 3f:80:32:3a:ad:41:40:96:b3:3d:12:73:94:59:88:22:d8:ee: b8:00:22:74:58:39:b1:48:82:75:49:63:98:62:a5:f1:68:27: 0c:7b:7c:b7:0b:e8:99:af:46:b6:29:f1:bb:6f:f4:94:c3:84: 29:ed:c2:03:38:c4:61:8f:14:5d:56:63:5d:67:48:e7:ab:9d: 6c:a9:2b:97:bd:55:3b:e4:c2:4a:82:65:ad:28:4d:d8:7d:27: d1:71:05:ba:28:ba:2f:08:39:c8:59:b6:ea:32:80:91:c7:c3: ce:29:c4:6a:58:0c:64:36:5a:58:94:da:36:48:d3:fc:d6:24: 40:ca:32:8e:a1:b1:cf:2f:41:e7:86:2d:b1:80:de:48:82:f2: 8f:94:90:be:38:63:04:9d:d5:0c:19:19:18:5f:37:11:6d:43: 01:72:3f:6e:e3:19:6d:31:2a:36:42:c8:b7:f7:dd:e0:66:eb: 64:6a:13:05:5f:db:9e:cb:a8:75:3d:d0:d1:94:90:a4:44:59: 19:8c:a4:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgyRjAxMTAvBgNVBAUTKEVFRTlFMTBDMjkxRTU2QzgyRDc3MDcyMDEwQjBFNTgw MDgzRkU3MjkwHhcNMjUwNTEzMDM1OTI4WhcNMjUwNTIwMDM1OTI4WjAYMRYwFAYD VQQDEw02ODIyYzNhMS0xNDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfskW4lHvYQeMrhsY4YNKaEY8N06Q9zh+r7lXMpgVILZr8IssvcTARMdAsIa eq4N9D423cT19Bj8A8IgdgylwKmO4NUDt+lfWshE7s2Lpab3UqO1KwX3+gv1ej6r mttNXy2e0Oi2pwDiz1hAJLj6Nxd9ZUzuiMWRZCk3dfyET2vbbjbVX4fGji3FpHXw yPvdkB/uyms163pvXMEUH6nknsbP0+XdRGF6Ka76lVQgGp22/TD0JshaBjsUFhah LyZOi9vD7CHOcbIW9rIYMeX09nATil7dBk97roHltG1wWYenfNrEOoSqqzwNMO90 raZOJqqTw5zKz4CWZb2EvD8ZVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKW+hvfN 7x+zNtNLZhR457vvuLQNMB8GA1UdIwQYMBaAFO7p4QwpHlbILXcHIBCw5YAIP+cp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODJGMC81QzU3RTVDMDgy ODMxMUVFOTBDODgxNkFDNEY5QUUwMi83dW5oRENrZVZzZ3Rkd2NnRUxEbGdBZ181 eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd1bmhEQ2tlVnNndGR3Y2dFTERsZ0FnXzV5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODJGMC81QzU3RTVDMDgyODMxMUVFOTBDODgxNkFDNEY5QUUwMi83dW5oRENrZVZz Z3Rkd2NnRUxEbGdBZ181eWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUTbI5a9Qf3tk+ka8XQUm7mq03nQEAPnassxr40EbaSG5JCv8Piw2l Ut/5g2XDTQizn9v21b4/gDI6rUFAlrM9EnOUWYgi2O64ACJ0WDmxSIJ1SWOYYqXx aCcMe3y3C+iZr0a2KfG7b/SUw4Qp7cIDOMRhjxRdVmNdZ0jnq51sqSuXvVU75MJK gmWtKE3YfSfRcQW6KLovCDnIWbbqMoCRx8POKcRqWAxkNlpYlNo2SNP81iRAyjKO obHPL0Hnhi2xgN5IgvKPlJC+OGMEndUMGRkYXzcRbUMBcj9u4xltMSo2Qsi3993g ZutkahMFX9uey6h1PdDRlJCkRFkZjKSD -----END CERTIFICATE-----Generated at Wed May 14 01:31:52 2025 by rpki-client