$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft File: X-7enTglQ_BRUn-lM9R6kXB35jI.mft (raw, json) Hash identifier: qkOh4cs+pRqFxqHdBwrJAU4QT+IdoRFoHfDb4w+4r+E= Subject key identifier: EE:02:A5:87:3A:DA:12:31:1B:D5:99:13:EB:0A:E7:98:46:B5:66:1C Authority key identifier: 5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32 Certificate issuer: /CN=A91EA198/serialNumber=5FEEDE9D382543F051527FA533D47A917077E632 Certificate serial: 1E16 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft Manifest number: 1D94 Signing time: Wed 14 May 2025 16:13:24 +0000 Manifest this update: Wed 14 May 2025 16:13:24 +0000 Manifest next update: Wed 21 May 2025 16:13:24 +0000 Files and hashes: 1: X-7enTglQ_BRUn-lM9R6kXB35jI.crl (hash: cO2CGdgQCJ+d19FVZomCsWsvPNhnKkH6ymqpd7mSVbQ=) 2: 1A0D44FA3B5411EABAC6EE18C4F9AE02.roa (hash: ErQUIZBQOuclNYifsKsmx5/Jnr/1hpU5xKibhIO600k=) 3: B8BA4E603B5211EAA0D53F12C4F9AE02.roa (hash: JDAGe4IksOtjrzlmQZ9zVBIzM1ZKwteeQYN9TBrAsPk=) 4: DF730482A32311EFBE77BA2EC4F9AE02.roa (hash: nvySfMAS7TN3zTFr4mHSPK7RJZZnC8NIvHsh40VIoNk=) 5: 4EA15AE44FD811ED8AEB0282C4F9AE02.roa (hash: KptRM9OhZOY+IAnuIj6dKpgRtL+UG95HSLHK6SbwluY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 16:13:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7702 (0x1e16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198, serialNumber=5FEEDE9D382543F051527FA533D47A917077E632 Validity Not Before: May 14 16:13:24 2025 GMT Not After : May 21 16:13:24 2025 GMT Subject: CN=6824c124-7726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2f:bb:69:09:ed:d3:01:7b:a6:f4:2d:cc:51: b6:2c:02:56:6d:0c:cb:2e:53:30:9b:84:c7:5a:97: b4:e8:ab:4e:16:70:c9:28:80:62:03:ad:3f:dd:89: cb:ac:7f:52:4d:77:49:7c:43:91:e2:08:03:d9:a9: a3:dc:f2:4b:7a:ec:78:47:19:c8:58:7d:0a:c3:b2: 5e:bd:94:23:86:e8:b0:23:10:38:45:14:38:ce:ec: 6d:5f:67:d8:56:e0:e6:ac:d0:78:a4:43:2d:74:6b: 4e:2b:77:7f:8d:82:12:6e:e7:31:a5:f9:31:62:77: 70:05:b4:5e:14:e4:7c:95:8b:46:45:59:44:81:86: fd:53:5d:ee:85:80:8c:93:b8:9f:ff:1d:9a:20:3f: 66:7b:88:ea:5c:29:8e:94:20:6b:d7:70:83:17:01: e0:ba:aa:77:b5:a4:8e:c8:de:3a:b6:06:bb:69:3d: f4:e9:98:69:1f:70:8c:cc:eb:41:1c:0f:cb:50:3b: 4d:05:d1:83:54:c8:f7:bf:a5:0f:67:72:67:e0:f0: d8:35:9c:ca:72:83:70:89:a9:69:8f:79:72:73:84: df:5b:46:c1:f4:a0:14:77:20:ad:34:e5:b4:9e:eb: 71:e4:fc:93:3c:13:61:8e:f8:7a:cc:ed:76:ab:9e: da:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:02:A5:87:3A:DA:12:31:1B:D5:99:13:EB:0A:E7:98:46:B5:66:1C X509v3 Authority Key Identifier: keyid:5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c8:1c:61:62:a6:09:df:58:27:2d:a0:fd:f1:5b:ed:10:91: 1c:ab:24:e0:f7:ba:2e:a0:10:14:c3:7f:f3:d1:99:9f:0e:60: 88:f6:6c:d2:c0:c1:20:f0:08:52:84:0a:98:3b:62:1d:ad:6c: 3a:4d:f6:f8:75:64:67:72:7d:aa:c7:e4:88:c2:a8:a6:fc:62: 61:a9:8f:a9:b0:f4:a0:b0:db:9b:19:1b:af:5e:82:ff:44:b6: 16:c9:9d:e4:f9:e5:ee:bb:ad:28:f0:f4:cf:a9:57:f6:f0:6e: 84:07:f9:f3:e2:b7:e2:95:2b:35:02:29:9d:7d:8d:f6:ed:d7: 96:9a:cc:a4:36:c8:5d:f6:c5:70:df:9d:d8:06:ba:5c:8f:59: fe:ad:35:b0:da:72:1b:1e:21:37:b7:d1:97:a5:44:02:0f:6a: b3:9f:39:41:62:c0:ab:23:d9:1b:1d:1d:ed:49:84:29:d2:da: c8:ec:18:5a:53:36:65:1a:2d:8c:7b:8f:66:95:2e:03:b4:68: 03:41:15:37:21:72:d6:e4:20:75:13:85:22:14:93:bc:88:09: b3:5f:f0:07:29:52:a2:8d:dc:af:b1:03:78:8b:ab:63:e5:f5: de:25:d9:cb:cd:7e:a5:13:4f:62:32:c2:d6:d5:2c:64:71:1f: 82:90:a2:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDVGRUVERTlEMzgyNTQzRjA1MTUyN0ZBNTMzRDQ3QTkx NzA3N0U2MzIwHhcNMjUwNTE0MTYxMzI0WhcNMjUwNTIxMTYxMzI0WjAYMRYwFAYD VQQDEw02ODI0YzEyNC03NzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyy+7aQnt0wF7pvQtzFG2LAJWbQzLLlMwm4THWpe06KtOFnDJKIBiA60/3YnL rH9STXdJfEOR4ggD2amj3PJLeux4RxnIWH0Kw7JevZQjhuiwIxA4RRQ4zuxtX2fY VuDmrNB4pEMtdGtOK3d/jYISbucxpfkxYndwBbReFOR8lYtGRVlEgYb9U13uhYCM k7if/x2aID9me4jqXCmOlCBr13CDFwHguqp3taSOyN46tga7aT306ZhpH3CMzOtB HA/LUDtNBdGDVMj3v6UPZ3Jn4PDYNZzKcoNwialpj3lyc4TfW0bB9KAUdyCtNOW0 nutx5PyTPBNhjvh6zO12q57a4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4CpYc6 2hIxG9WZE+sK55hGtWYcMB8GA1UdIwQYMBaAFF/u3p04JUPwUVJ/pTPUepFwd+Yy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC9BRDYyOTIyMkI1 MjUxMUU2QUY2Qzg5NUVDNEY5QUUwMi9YLTdlblRnbFFfQlJVbi1sTTlSNmtYQjM1 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1gtN2VuVGdsUV9CUlVuLWxNOVI2a1hCMzVqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE5OC9BRDYyOTIyMkI1MjUxMUU2QUY2Qzg5NUVDNEY5QUUwMi9YLTdlblRnbFFf QlJVbi1sTTlSNmtYQjM1akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+yBxhYqYJ31gnLaD98VvtEJEcqyTg97ouoBAUw3/z0ZmfDmCI9mzS wMEg8AhShAqYO2IdrWw6Tfb4dWRncn2qx+SIwqim/GJhqY+psPSgsNubGRuvXoL/ RLYWyZ3k+eXuu60o8PTPqVf28G6EB/nz4rfilSs1AimdfY327deWmsykNshd9sVw 353YBrpcj1n+rTWw2nIbHiE3t9GXpUQCD2qznzlBYsCrI9kbHR3tSYQp0trI7Bha UzZlGi2Me49mlS4DtGgDQRU3IXLW5CB1E4UiFJO8iAmzX/AHKVKijdyvsQN4i6tj 5fXeJdnLzX6lE09iMsLW1SxkcR+CkKI7 -----END CERTIFICATE-----Generated at Fri May 16 16:44:49 2025 by rpki-client