$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft File: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft (raw, json) Hash identifier: n6EM5BDU2Vxa0R/RLA/fKNlnJhVoqohyR0pV4tOyGgU= Subject key identifier: 91:30:66:7F:56:7A:6E:C4:D4:EF:1E:40:47:61:78:44:46:C4:A0:FE Authority key identifier: EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34 Certificate issuer: /CN=A912DD15/serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434 Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft Manifest number: 019F Signing time: Thu 15 May 2025 02:56:12 +0000 Manifest this update: Thu 15 May 2025 02:56:11 +0000 Manifest next update: Thu 22 May 2025 02:56:11 +0000 Files and hashes: 1: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl (hash: 98XcBBA10BiH9M+Zq0JO7ad63sDpUpg4KWcVxrIhYvg=) 2: E1C173F01EFD11EE88E45C83C4F9AE02.roa (hash: Ak66lCLN9uc1ZY05PmKcoomC7BRhGFb6BczYDdZUa4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:56:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DD15, serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434 Validity Not Before: May 15 02:56:11 2025 GMT Not After : May 22 02:56:11 2025 GMT Subject: CN=682557cb-48df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:97:9e:a0:97:1b:1e:6e:9f:b5:2c:7c:1f:74: 41:bc:a2:93:ad:cc:ab:d9:16:fd:3b:ca:76:fb:14: 3e:dd:d4:90:40:8a:d7:52:41:b8:e4:1c:1e:b4:1e: fe:73:16:21:72:0e:b2:14:45:37:59:0c:e7:16:d4: 78:b1:2c:7c:27:52:15:72:3c:ab:5c:57:2f:18:26: 1e:4e:9c:32:d8:4e:0f:16:cf:de:fa:1f:7f:34:e8: 85:94:f8:c2:56:ec:8f:c7:a3:0c:4f:86:68:80:38: 64:7e:71:1f:64:36:98:12:52:cf:f9:dd:7e:c5:bb: fc:b1:80:87:12:36:9d:d9:72:9d:03:af:09:59:45: a1:f6:57:f2:62:86:04:45:e9:85:9e:61:51:a7:99: 4b:9a:e9:16:04:28:ba:3a:09:c4:10:45:57:a9:13: 23:dc:64:83:ea:5f:e4:7c:fa:bd:e9:d9:10:0a:3e: 94:a0:d2:da:44:29:e4:42:48:95:73:01:9f:5d:32: bd:ea:c6:90:0f:b6:96:cd:02:f5:e7:1a:72:ec:77: 13:76:88:2b:92:cf:63:60:40:76:cf:d3:5c:80:86: 8f:a3:08:78:79:fa:4c:d1:16:b2:cc:c9:ea:af:04: 02:26:a7:4a:71:a6:a0:b2:1f:ed:cc:85:fc:1d:17: be:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:30:66:7F:56:7A:6E:C4:D4:EF:1E:40:47:61:78:44:46:C4:A0:FE X509v3 Authority Key Identifier: keyid:EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:a7:ea:6a:0d:61:c2:98:03:ad:d4:06:67:aa:15:d1:67:18: ca:8e:cc:82:6c:6b:0d:62:ad:53:bb:de:f6:07:84:78:97:cc: e8:80:15:53:7e:d7:ea:4c:99:38:33:70:73:e3:ba:32:28:6f: 39:a1:21:db:39:76:2a:31:37:76:26:93:f8:aa:42:fd:d3:af: 87:51:cd:c8:09:02:ba:2a:04:0e:32:29:fe:80:50:2e:f1:58: a4:04:a2:f6:24:cf:1f:95:0d:2a:12:95:e8:07:30:b2:1b:4a: 75:18:8e:f0:35:52:9a:19:a5:d7:5f:0e:06:8e:d8:36:7d:39: f3:1b:d6:a0:aa:bb:e3:16:d9:4f:7c:b4:a5:bd:10:63:d2:d3: 74:52:1c:f2:7d:c1:fb:fc:f6:3c:8d:0f:3c:b0:b5:91:f9:fa: 70:58:06:3c:ea:9e:95:f0:8b:d5:77:ef:d6:5a:e9:78:dc:82: bc:29:66:9b:73:b3:ae:51:77:ab:82:81:33:83:03:1b:8e:da: 11:4f:f6:1e:0f:3d:11:6c:74:2f:82:2e:c3:ed:68:1d:b1:32: 30:af:1d:2e:f8:58:47:b6:4f:91:7c:fc:41:84:6b:39:f1:43: ae:1f:c7:8b:a2:e0:36:6b:89:84:48:85:2c:a1:1e:8d:e6:ea: bc:ee:06:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkREMTUxMTAvBgNVBAUTKEVDNTFBOUVBMDZDMUM4NTdGNDhFQkQyRDI3M0E0MUYy MDFFQTY0MzQwHhcNMjUwNTE1MDI1NjExWhcNMjUwNTIyMDI1NjExWjAYMRYwFAYD VQQDEw02ODI1NTdjYi00OGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7ZeeoJcbHm6ftSx8H3RBvKKTrcyr2Rb9O8p2+xQ+3dSQQIrXUkG45BwetB7+ cxYhcg6yFEU3WQznFtR4sSx8J1IVcjyrXFcvGCYeTpwy2E4PFs/e+h9/NOiFlPjC VuyPx6MMT4ZogDhkfnEfZDaYElLP+d1+xbv8sYCHEjad2XKdA68JWUWh9lfyYoYE RemFnmFRp5lLmukWBCi6OgnEEEVXqRMj3GSD6l/kfPq96dkQCj6UoNLaRCnkQkiV cwGfXTK96saQD7aWzQL15xpy7HcTdogrks9jYEB2z9NcgIaPowh4efpM0RayzMnq rwQCJqdKcaagsh/tzIX8HRe+fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJEwZn9W em7E1O8eQEdheERGxKD+MB8GA1UdIwQYMBaAFOxRqeoGwchX9I69LSc6QfIB6mQ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREQxNS9DNzYxQTBBQUND NTIxMUVEQTgyOTFEMTBDNEY5QUUwMi83RkdwNmdiQnlGZjBqcjB0SnpwQjhnSHFa RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGR3A2Z2JCeUZmMGpyMHRKenBCOGdIcVpEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REQxNS9DNzYxQTBBQUNDNTIxMUVEQTgyOTFEMTBDNEY5QUUwMi83RkdwNmdiQnlG ZjBqcjB0SnpwQjhnSHFaRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCup+pqDWHCmAOt1AZnqhXRZxjKjsyCbGsNYq1Tu972B4R4l8zogBVT ftfqTJk4M3Bz47oyKG85oSHbOXYqMTd2JpP4qkL906+HUc3ICQK6KgQOMin+gFAu 8VikBKL2JM8flQ0qEpXoBzCyG0p1GI7wNVKaGaXXXw4Gjtg2fTnzG9agqrvjFtlP fLSlvRBj0tN0UhzyfcH7/PY8jQ88sLWR+fpwWAY86p6V8IvVd+/WWul43IK8KWab c7OuUXergoEzgwMbjtoRT/YeDz0RbHQvgi7D7WgdsTIwrx0u+FhHtk+RfPxBhGs5 8UOuH8eLouA2a4mESIUsoR6N5uq87gZE -----END CERTIFICATE-----Generated at Sat May 17 00:00:12 2025 by rpki-client