$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft File: 7F7zNU5M1TSrhiW5m3MS1vTkixU.mft (raw, json) Hash identifier: QAfbDH4cQN2yn6hyIEDw1TtV+IczkiQxUs5+MDl2ee0= Subject key identifier: 9D:64:82:CC:6B:53:4D:96:8D:6E:18:7E:CB:40:78:3D:00:BC:8D:15 Authority key identifier: EC:5E:F3:35:4E:4C:D5:34:AB:86:25:B9:9B:73:12:D6:F4:E4:8B:15 Certificate issuer: /CN=A91EF175/serialNumber=EC5EF3354E4CD534AB8625B99B7312D6F4E48B15 Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft Manifest number: C4 Signing time: Mon 05 May 2025 04:39:05 +0000 Manifest this update: Mon 05 May 2025 04:39:05 +0000 Manifest next update: Mon 12 May 2025 04:39:05 +0000 Files and hashes: 1: 7F7zNU5M1TSrhiW5m3MS1vTkixU.crl (hash: BELKs31zx8d4dQN5QK+KucfjQ+Wp2MJX4Tz1qSATNHM=) 2: 2636C6C6FBFC11EE85221046C4F9AE02.roa (hash: TkSH2eeRMqY94jagMtgrF0f2pi1KvzFN767qntLjkUk=) 3: A7EACE02FBFB11EE8DCAC620C4F9AE02.roa (hash: AVG8UOICPIOwfxF6CejSjbDjEsfHRJtOVBJAR9mZ1BQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.crl rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 04:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF175, serialNumber=EC5EF3354E4CD534AB8625B99B7312D6F4E48B15 Validity Not Before: May 5 04:39:05 2025 GMT Not After : May 12 04:39:05 2025 GMT Subject: CN=681840e9-fea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d5:c7:6b:db:a5:fc:aa:88:7c:c6:98:93:5c: af:d1:17:dc:84:36:f7:6b:a7:1b:be:d2:93:1f:1b: 66:16:8e:50:f2:f9:05:9d:5d:1d:44:d8:48:09:4a: c0:c5:33:d9:d3:30:d7:9c:f3:92:fb:e2:c1:a7:f4: 76:df:7a:e4:8d:d5:48:ef:37:cf:02:1e:00:98:c8: f0:39:cd:88:f2:8f:13:ac:4b:92:3e:26:31:86:55: 64:fa:12:dd:eb:55:1a:be:5d:9f:a4:01:bc:b7:a2: f6:11:a2:4d:04:81:9f:fe:d7:3e:52:f1:1c:e5:9d: 8b:20:3c:ff:72:0d:6c:1a:98:22:f2:64:12:d1:95: b7:89:4f:41:1c:8a:1c:29:d7:34:0c:7a:a8:0d:76: 51:32:1f:d5:f8:e3:85:d2:52:7a:c5:0e:9e:f1:dd: 6d:7b:ac:4f:c3:44:10:39:62:a2:64:ba:40:20:40: 3e:70:e0:d5:27:ae:39:8e:d7:27:d3:f8:43:ce:94: bb:a3:0f:e6:06:e3:18:75:41:ec:d3:f7:85:44:86: 63:ca:bb:d2:ff:df:6f:58:bc:6f:ca:04:69:20:15: 77:b8:3b:0a:ba:30:db:64:0f:fc:1a:f5:11:ee:49: 90:41:5a:20:4b:ab:1b:06:23:b0:cc:cc:34:fb:fa: 84:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:64:82:CC:6B:53:4D:96:8D:6E:18:7E:CB:40:78:3D:00:BC:8D:15 X509v3 Authority Key Identifier: keyid:EC:5E:F3:35:4E:4C:D5:34:AB:86:25:B9:9B:73:12:D6:F4:E4:8B:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:1a:d2:1f:bb:5a:58:cd:21:dd:24:65:54:d2:5d:56:3b:0a: bd:5d:3b:5e:7d:f4:d8:c3:9e:8c:91:f0:90:cf:e1:c2:9a:e5: 21:35:53:df:3d:ab:6c:ee:73:70:b8:95:29:a1:9b:fa:bf:33: 05:52:55:59:69:27:ba:42:2b:e9:23:d7:bb:c2:38:70:a2:9e: 22:57:d2:b3:32:2f:35:20:ec:82:14:43:f9:dd:1e:38:b2:31: ad:3c:d2:26:06:a1:d4:aa:67:ef:a9:89:e2:f0:01:a4:ff:81: 54:36:9d:9e:06:74:09:47:6a:a0:1c:13:fa:1c:21:0e:38:17: 5e:7d:5e:15:ac:2b:1a:e8:8d:dc:85:86:ae:a7:2c:0a:56:f3: 1a:a6:80:90:95:1f:f7:a2:fc:a6:fa:b7:04:47:60:54:69:e8: 7a:f9:b1:50:57:4f:f8:44:25:12:a2:9f:f8:8d:37:32:87:4c: 78:43:b7:0e:ab:21:1b:a8:72:0a:8b:71:54:11:7a:d2:f8:b5: f0:5d:21:08:b0:ac:99:fe:63:55:22:66:88:fa:f6:2f:2a:b5: 85:19:76:78:cd:db:1b:2b:e0:53:28:6d:5d:78:99:ef:93:b5: 86:97:5d:71:a1:61:aa:b8:1a:bf:9d:b3:0f:d2:0c:e1:4e:25: f2:1d:5e:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxNzUxMTAvBgNVBAUTKEVDNUVGMzM1NEU0Q0Q1MzRBQjg2MjVCOTlCNzMxMkQ2 RjRFNDhCMTUwHhcNMjUwNTA1MDQzOTA1WhcNMjUwNTEyMDQzOTA1WjAYMRYwFAYD VQQDEw02ODE4NDBlOS1mZWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztXHa9ul/KqIfMaYk1yv0RfchDb3a6cbvtKTHxtmFo5Q8vkFnV0dRNhICUrA xTPZ0zDXnPOS++LBp/R233rkjdVI7zfPAh4AmMjwOc2I8o8TrEuSPiYxhlVk+hLd 61Uavl2fpAG8t6L2EaJNBIGf/tc+UvEc5Z2LIDz/cg1sGpgi8mQS0ZW3iU9BHIoc Kdc0DHqoDXZRMh/V+OOF0lJ6xQ6e8d1te6xPw0QQOWKiZLpAIEA+cODVJ645jtcn 0/hDzpS7ow/mBuMYdUHs0/eFRIZjyrvS/99vWLxvygRpIBV3uDsKujDbZA/8GvUR 7kmQQVogS6sbBiOwzMw0+/qEfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1kgsxr U02WjW4YfstAeD0AvI0VMB8GA1UdIwQYMBaAFOxe8zVOTNU0q4YluZtzEtb05IsV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE3NS8wNDYwQUExOEZC RkIxMUVFQTFFRUFGMUZDNEY5QUUwMi83Rjd6TlU1TTFUU3JoaVc1bTNNUzF2VGtp eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGN3pOVTVNMVRTcmhpVzVtM01TMXZUa2l4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE3NS8wNDYwQUExOEZCRkIxMUVFQTFFRUFGMUZDNEY5QUUwMi83Rjd6TlU1TTFU U3JoaVc1bTNNUzF2VGtpeFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFGtIfu1pYzSHdJGVU0l1WOwq9XTteffTYw56MkfCQz+HCmuUhNVPf Pats7nNwuJUpoZv6vzMFUlVZaSe6QivpI9e7wjhwop4iV9KzMi81IOyCFEP53R44 sjGtPNImBqHUqmfvqYni8AGk/4FUNp2eBnQJR2qgHBP6HCEOOBdefV4VrCsa6I3c hYaupywKVvMapoCQlR/3ovym+rcER2BUaeh6+bFQV0/4RCUSop/4jTcyh0x4Q7cO qyEbqHIKi3FUEXrS+LXwXSEIsKyZ/mNVImaI+vYvKrWFGXZ4zdsbK+BTKG1deJnv k7WGl11xoWGquBq/nbMP0gzhTiXyHV63 -----END CERTIFICATE-----Generated at Tue May 6 02:58:12 2025 by rpki-client