$ rpki-client -vvf rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft File: m7K00aj-gR3ElT2ALRAvXQSNCB0.mft (raw, json) Hash identifier: BAVC3uH4HEy00+LDpf9kCO0liiMIbD+zN+mPp/4X4jI= Subject key identifier: 56:B3:ED:EB:7A:90:CA:E4:2A:A6:1C:C7:A2:34:58:55:34:52:8B:94 Authority key identifier: 9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D Certificate issuer: /CN=A91454A8/serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D Certificate serial: 081F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft Manifest number: 081A Signing time: Thu 08 May 2025 20:42:32 +0000 Manifest this update: Thu 08 May 2025 20:42:31 +0000 Manifest next update: Thu 15 May 2025 20:42:31 +0000 Files and hashes: 1: m7K00aj-gR3ElT2ALRAvXQSNCB0.crl (hash: z7Na0dcItIzlp1GL75TVLEwAnLbk7rSP4NVACwmOfYo=) 2: 021C59CCD1D011EAA2763743C4F9AE02.roa (hash: kMnM6tT1AQ+rXlanuefvWJQM92bE9CI8Z0JTFvLVui8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 20:42:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2079 (0x81f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454A8, serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D Validity Not Before: May 8 20:42:31 2025 GMT Not After : May 15 20:42:31 2025 GMT Subject: CN=681d1738-60aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ae:19:26:20:80:a9:c2:9f:33:20:d4:8d:49: 41:98:2e:64:f5:17:d3:06:c6:25:19:20:14:c7:e0: c0:a9:12:f0:f3:5e:96:5b:c7:28:06:06:a4:35:3f: 9d:7b:fd:17:2d:38:6d:83:52:66:10:38:41:c8:36: e7:fb:89:37:5d:44:7c:3d:65:5b:87:82:0a:38:bf: 0b:dc:7a:ba:4b:4f:d7:23:60:3a:e4:d2:5e:64:4b: af:43:b5:77:ac:3e:bc:e1:f3:a2:f8:86:9a:84:8f: 04:bf:f0:1a:74:24:a5:b9:6f:98:a0:9f:ee:74:50: 92:83:9e:f0:cc:91:51:47:2a:34:66:aa:02:ac:ac: 9a:bd:ba:1e:b3:f5:8b:7f:aa:ca:6b:0d:5f:1f:66: 5c:12:2c:2e:17:5d:f4:fa:07:f0:77:bc:62:70:6e: 57:f9:4c:91:b9:77:51:dc:c9:19:df:40:fe:a0:53: 7d:02:e2:5f:42:8c:64:f5:38:1d:91:51:15:a3:a2: 70:ab:aa:eb:1f:a7:7a:4d:19:c4:60:d3:94:ad:3f: 80:86:d3:af:5c:ee:da:17:92:da:4c:0b:a9:e0:26: 4e:70:17:77:4c:7d:1f:16:97:1e:34:0e:7a:b9:b6: 27:8c:a7:09:3a:81:3d:c5:78:43:6c:e4:b6:14:20: 23:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B3:ED:EB:7A:90:CA:E4:2A:A6:1C:C7:A2:34:58:55:34:52:8B:94 X509v3 Authority Key Identifier: keyid:9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:46:41:15:3b:73:07:3d:d8:df:dc:51:b4:0b:7c:fa:88:d8: 3d:46:f3:60:09:cf:13:e6:70:a0:f7:4b:f5:df:ea:b2:e5:35: 92:9e:41:4f:7f:c4:ef:56:a8:3f:20:ba:67:85:0c:6e:8e:17: e9:b8:b2:be:a9:34:a1:c2:e1:d5:15:80:0c:2d:fa:ae:42:fe: 61:7b:23:ac:8f:5a:f6:33:45:65:22:53:fe:8b:f9:03:2a:b3: 35:35:fe:59:a6:cf:80:5a:7b:7e:50:e3:8e:58:35:59:7a:82: d8:79:84:ac:bc:56:c1:7f:cb:ff:e9:dc:2c:05:12:2c:60:a1: 3e:6f:1f:a7:f0:03:60:c3:4d:8a:4b:36:9b:84:4e:b4:d4:a4: c4:40:55:8b:13:e7:f7:7e:dd:b8:a0:2b:2d:f5:4b:6c:98:55: b0:d3:54:a4:f8:30:77:11:c4:4e:2d:39:f9:22:50:27:2f:3d: d4:0f:e7:83:51:23:5f:99:52:1f:f1:29:29:32:51:21:23:fb: 29:fa:3b:0e:f0:13:ba:90:60:a9:37:3d:85:94:d0:ec:b0:25: 5d:76:76:22:db:9c:e5:0a:27:d8:b0:7a:a9:20:10:59:52:46: 95:8c:91:7d:6f:99:a8:80:d5:ba:93:c1:a1:56:f2:50:90:da: f2:be:a0:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0QTgxMTAvBgNVBAUTKDlCQjJCNEQxQThGRTgxMURDNDk1M0Q4MDJEMTAyRjVE MDQ4RDA4MUQwHhcNMjUwNTA4MjA0MjMxWhcNMjUwNTE1MjA0MjMxWjAYMRYwFAYD VQQDEw02ODFkMTczOC02MGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1a4ZJiCAqcKfMyDUjUlBmC5k9RfTBsYlGSAUx+DAqRLw816WW8coBgakNT+d e/0XLThtg1JmEDhByDbn+4k3XUR8PWVbh4IKOL8L3Hq6S0/XI2A65NJeZEuvQ7V3 rD684fOi+IaahI8Ev/AadCSluW+YoJ/udFCSg57wzJFRRyo0ZqoCrKyavboes/WL f6rKaw1fH2ZcEiwuF130+gfwd7xicG5X+UyRuXdR3MkZ30D+oFN9AuJfQoxk9Tgd kVEVo6Jwq6rrH6d6TRnEYNOUrT+AhtOvXO7aF5LaTAup4CZOcBd3TH0fFpceNA56 ubYnjKcJOoE9xXhDbOS2FCAj+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFaz7et6 kMrkKqYcx6I0WFU0UouUMB8GA1UdIwQYMBaAFJuytNGo/oEdxJU9gC0QL10EjQgd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRBOC9FMjk1MjBCOEQx Q0QxMUVBQkE0QTM0NDBDNEY5QUUwMi9tN0swMGFqLWdSM0VsVDJBTFJBdlhRU05D QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL203SzAwYWotZ1IzRWxUMkFMUkF2WFFTTkNCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRBOC9FMjk1MjBCOEQxQ0QxMUVBQkE0QTM0NDBDNEY5QUUwMi9tN0swMGFqLWdS M0VsVDJBTFJBdlhRU05DQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASRkEVO3MHPdjf3FG0C3z6iNg9RvNgCc8T5nCg90v13+qy5TWSnkFP f8TvVqg/ILpnhQxujhfpuLK+qTShwuHVFYAMLfquQv5heyOsj1r2M0VlIlP+i/kD KrM1Nf5Zps+AWnt+UOOOWDVZeoLYeYSsvFbBf8v/6dwsBRIsYKE+bx+n8ANgw02K SzabhE601KTEQFWLE+f3ft24oCst9UtsmFWw01Sk+DB3EcROLTn5IlAnLz3UD+eD USNfmVIf8SkpMlEhI/sp+jsO8BO6kGCpNz2FlNDssCVddnYi25zlCifYsHqpIBBZ UkaVjJF9b5mogNW6k8GhVvJQkNryvqC/ -----END CERTIFICATE-----Generated at Sat May 10 02:17:00 2025 by rpki-client