$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft File: 7vvGU2P1cW1yTBF81UIh5BLZI8w.mft (raw, json) Hash identifier: ng/wrsRhC7lt+deTL3ar0u4Qp26y5v2zIGXVmCZ0G2E= Subject key identifier: 95:BE:24:69:F4:2C:2B:60:7E:02:BC:74:C3:71:DE:12:35:89:B7:DD Authority key identifier: EE:FB:C6:53:63:F5:71:6D:72:4C:11:7C:D5:42:21:E4:12:D9:23:CC Certificate issuer: /CN=A91F2A41/serialNumber=EEFBC65363F5716D724C117CD54221E412D923CC Certificate serial: 02D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft Manifest number: 02CC Signing time: Thu 15 May 2025 01:23:30 +0000 Manifest this update: Thu 15 May 2025 01:23:29 +0000 Manifest next update: Thu 22 May 2025 01:23:29 +0000 Files and hashes: 1: 7vvGU2P1cW1yTBF81UIh5BLZI8w.crl (hash: wJiVFTdFJpkV74zJtC6Bic5fd5kPq7nzhVD/O028+1Q=) 2: ABF61020E93C11ECA5406975C4F9AE02.roa (hash: pDFhcqRhca1GNa0ZmLkQpgslerwa9C5G+2JfTrt137w=) 3: ADBF1F6EE93C11ECA5406975C4F9AE02.roa (hash: qb7qUtAkoHjPv30O4ulR321GUnOwL4yDIMYd10CmtCA=) 4: 01C04C52FB8D11ECABCA1D0AC4F9AE02.roa (hash: IdffaUaBoSta1anksGvusIKN2vlycl68X+OeRcTSpcY=) 5: AD08F946E93C11ECA5406975C4F9AE02.roa (hash: 8j2o1z/nwnh5lm7+ZdnqPMHGr9wIM/IlvKvCsESoCt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.crl rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 01:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 728 (0x2d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2A41, serialNumber=EEFBC65363F5716D724C117CD54221E412D923CC Validity Not Before: May 15 01:23:29 2025 GMT Not After : May 22 01:23:29 2025 GMT Subject: CN=68254211-b2bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bf:c6:79:21:c5:17:bd:da:17:d5:41:fa:95: f3:e4:99:14:c6:89:b1:9c:a3:58:97:bd:02:0c:73: ab:c1:db:f5:ea:33:4c:18:a2:45:0d:6b:3e:08:9f: 3a:f2:ca:cc:f5:0e:29:64:0f:1d:7b:de:96:55:5b: 23:ca:8c:b8:fa:cd:6c:7d:53:20:53:29:db:83:0b: 84:27:00:8a:ae:c7:80:ae:12:ff:2d:c4:c8:3b:d8: 44:a0:47:72:3c:17:40:2e:c0:83:8a:32:51:10:6e: 81:5a:0b:b3:05:7b:18:d8:82:49:71:b3:78:0f:e2: bf:48:f7:bb:b6:79:b5:f9:e4:78:6f:a0:0d:99:73: 70:37:09:0c:f8:23:22:bb:fd:06:3f:93:8b:13:55: 71:68:e5:7f:25:f8:08:e4:74:ae:b0:dd:a4:1a:46: d0:73:2d:6c:14:ff:db:54:e7:10:7c:05:6e:0f:73: 7e:81:9e:e9:54:ce:72:79:ac:4f:24:7f:9c:5a:c1: 6a:3d:29:0c:77:76:89:39:de:75:17:85:b6:bd:be: 21:2c:a6:34:63:c7:25:89:ce:75:d8:7e:1c:ea:f8: f9:3a:1f:15:25:51:95:d5:72:24:24:b0:c2:d9:ce: 7e:37:f1:fc:8d:0b:46:ce:c4:4e:14:77:9c:b9:90: 4e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:BE:24:69:F4:2C:2B:60:7E:02:BC:74:C3:71:DE:12:35:89:B7:DD X509v3 Authority Key Identifier: keyid:EE:FB:C6:53:63:F5:71:6D:72:4C:11:7C:D5:42:21:E4:12:D9:23:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:c1:e4:9b:e4:e2:43:1b:9e:8c:18:12:e9:dc:12:79:cf:ef: f8:6a:87:d1:a6:39:66:d7:92:03:b1:80:28:7f:0d:bd:39:da: 7f:82:cc:8f:7c:da:ec:b7:9f:2c:dc:fb:e0:49:62:f7:03:95: 18:28:2d:ee:71:8d:69:45:87:ca:23:70:89:38:2e:77:bb:f2: b6:d8:cf:dd:d0:3d:18:5d:a3:de:8e:95:9c:76:85:5e:20:fc: 6d:67:f8:e1:e5:bd:ef:c8:2a:88:b5:68:49:55:7f:4d:f4:f4: 68:5d:56:c3:c6:74:a5:16:78:d0:d6:1c:90:c8:19:75:18:54: 9d:88:0f:c6:a1:3c:15:7c:6e:ef:c4:da:e1:2f:bb:0e:78:9e: ae:1a:12:19:8b:84:62:01:f4:e5:9b:c4:29:d4:a1:23:e4:0a: ae:be:62:24:d2:ed:6d:05:be:a5:a3:0f:45:b0:2a:80:39:ed: 93:cc:e6:5f:90:6b:bd:04:9f:91:51:a4:62:74:35:ac:62:1c: a5:ec:59:b3:06:fe:e8:0f:d9:46:96:c2:0d:8e:dc:d4:80:57: 2e:74:1e:4c:1d:8b:06:f8:3c:e1:6f:62:a7:9e:89:10:0b:6b: 59:ac:cd:89:25:9b:85:f9:c1:ee:7b:ee:23:e8:c2:db:09:18: 67:c8:08:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJBNDExMTAvBgNVBAUTKEVFRkJDNjUzNjNGNTcxNkQ3MjRDMTE3Q0Q1NDIyMUU0 MTJEOTIzQ0MwHhcNMjUwNTE1MDEyMzI5WhcNMjUwNTIyMDEyMzI5WjAYMRYwFAYD VQQDEw02ODI1NDIxMS1iMmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuL/GeSHFF73aF9VB+pXz5JkUxomxnKNYl70CDHOrwdv16jNMGKJFDWs+CJ86 8srM9Q4pZA8de96WVVsjyoy4+s1sfVMgUynbgwuEJwCKrseArhL/LcTIO9hEoEdy PBdALsCDijJREG6BWguzBXsY2IJJcbN4D+K/SPe7tnm1+eR4b6ANmXNwNwkM+CMi u/0GP5OLE1VxaOV/JfgI5HSusN2kGkbQcy1sFP/bVOcQfAVuD3N+gZ7pVM5yeaxP JH+cWsFqPSkMd3aJOd51F4W2vb4hLKY0Y8clic512H4c6vj5Oh8VJVGV1XIkJLDC 2c5+N/H8jQtGzsROFHecuZBOBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJW+JGn0 LCtgfgK8dMNx3hI1ibfdMB8GA1UdIwQYMBaAFO77xlNj9XFtckwRfNVCIeQS2SPM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkE0MS9CRDQxNDZEQUU5 MzUxMUVDQUM2NjU0NTJDNEY5QUUwMi83dnZHVTJQMWNXMXlUQkY4MVVJaDVCTFpJ OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd2dkdVMlAxY1cxeVRCRjgxVUloNUJMWkk4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkE0MS9CRDQxNDZEQUU5MzUxMUVDQUM2NjU0NTJDNEY5QUUwMi83dnZHVTJQMWNX MXlUQkY4MVVJaDVCTFpJOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqweSb5OJDG56MGBLp3BJ5z+/4aofRpjlm15IDsYAofw29Odp/gsyP fNrst58s3PvgSWL3A5UYKC3ucY1pRYfKI3CJOC53u/K22M/d0D0YXaPejpWcdoVe IPxtZ/jh5b3vyCqItWhJVX9N9PRoXVbDxnSlFnjQ1hyQyBl1GFSdiA/GoTwVfG7v xNrhL7sOeJ6uGhIZi4RiAfTlm8Qp1KEj5AquvmIk0u1tBb6low9FsCqAOe2TzOZf kGu9BJ+RUaRidDWsYhyl7FmzBv7oD9lGlsINjtzUgFcudB5MHYsG+Dzhb2KnnokQ C2tZrM2JJZuF+cHue+4j6MLbCRhnyAha -----END CERTIFICATE-----Generated at Thu May 15 21:47:54 2025 by rpki-client