$ rpki-client -vvf rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft File: 7D2Af3k8nPX84zXuFeCYREm0MJY.mft (raw, json) Hash identifier: IhI/F8RfL02K0zqeOwqYS4mb7R2bOvmpaeDsmyVSFGs= Subject key identifier: 33:F4:08:AD:EC:15:1C:65:92:8F:EB:0B:21:19:95:32:B6:2D:12:65 Authority key identifier: EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96 Certificate issuer: /CN=A91517CF/serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096 Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft Manifest number: 56 Signing time: Thu 15 May 2025 06:31:28 +0000 Manifest this update: Thu 15 May 2025 06:31:27 +0000 Manifest next update: Thu 22 May 2025 06:31:27 +0000 Files and hashes: 1: 7D2Af3k8nPX84zXuFeCYREm0MJY.crl (hash: pbcYUFV2KvpZewEQnhDZyUrv0oVLggaCqectIn5aUt8=) 2: 18164B6AB2C811EFA702DF80C4F9AE02.roa (hash: WLNXMP0ra3REMtSs7laKuUO//z/EEyMC3rb1Y8gR3Jk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.crl rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:31:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91517CF, serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096 Validity Not Before: May 15 06:31:27 2025 GMT Not After : May 22 06:31:27 2025 GMT Subject: CN=68258a3f-cdca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9f:6d:6e:e1:93:cc:23:7d:2e:79:a2:a5:f9: 14:b0:22:0a:70:b6:b9:32:d7:6f:1c:62:d1:98:28: 34:24:62:96:0f:0f:56:77:12:10:4d:ec:56:81:01: 6d:bd:61:58:01:ae:27:0a:4c:c2:13:12:81:bb:5a: c8:6d:f6:0e:9a:bc:af:0f:8f:b3:0c:67:0d:1c:9c: a6:97:41:5f:a4:2f:5b:bf:c7:0d:69:f3:90:37:e1: a3:2b:ad:3c:1f:af:1a:17:13:2a:16:6d:ed:72:41: 24:46:2a:a4:52:8a:3e:6f:4d:8d:ef:53:3e:e6:46: 5c:9b:13:74:5f:cb:7d:ad:a2:b6:7d:32:7a:9d:d9: c9:67:f6:78:2f:c4:68:36:55:99:62:df:72:02:b4: 35:58:59:2e:ec:02:24:f1:aa:a1:b4:34:43:c4:14: 84:6a:0d:21:b9:9b:22:75:30:80:58:31:de:7a:b2: 31:bc:04:46:21:a9:ba:cc:ec:80:86:b1:cb:a7:1c: 1e:72:10:83:79:b5:fb:1e:b1:7e:f0:18:e9:1a:a9: 51:be:ef:08:22:ec:cc:ad:16:46:a6:cd:57:5d:d2: cd:3f:18:2a:31:3b:7a:17:56:67:65:23:d2:57:fa: e6:76:0d:db:c8:b1:f8:94:db:88:c9:3c:0b:84:f8: 4b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F4:08:AD:EC:15:1C:65:92:8F:EB:0B:21:19:95:32:B6:2D:12:65 X509v3 Authority Key Identifier: keyid:EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:c2:46:96:21:8d:f6:db:89:ad:e9:7b:bb:da:fa:96:72:71: 35:f4:01:9d:c3:75:82:89:a9:ab:12:a7:30:30:82:13:32:f0: bc:09:b2:19:f2:6c:6f:1a:cc:15:61:6a:26:e2:c3:51:b7:dd: 06:bf:e0:e3:03:87:33:64:36:06:e2:f8:50:8e:3d:1d:83:32: ba:5c:70:6c:d5:18:61:4a:80:8c:eb:a0:60:8c:94:d3:af:9a: 92:11:27:03:cb:3e:a7:64:3b:16:9c:ca:74:89:39:42:4d:6e: 9f:52:f3:bb:1e:10:b7:65:e3:2e:b4:70:75:98:8b:56:15:fc: 8c:4a:46:b6:77:0d:b2:08:98:aa:ed:09:7b:50:1c:f9:d5:a2: f0:df:47:f4:fd:af:49:65:0a:b1:d8:6c:16:69:25:3c:f8:38: 90:fe:a8:6e:04:4a:1e:c6:00:33:ca:d3:55:a9:d2:c8:e1:79: 2d:29:71:d9:55:5a:68:04:6b:09:2e:1e:8b:34:3f:77:84:2e: 5f:a9:5f:97:09:e0:e6:98:b3:53:07:48:73:2b:0d:de:8f:bd: 58:c7:74:0e:c7:f7:47:ff:ca:ab:91:b4:e6:26:a9:28:64:cc: 7b:9e:1e:c7:d7:6e:c4:91:d7:0b:f6:33:4d:33:53:a9:fa:06: b1:3f:fd:ec -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MTdDRjExMC8GA1UEBRMoRUMzRDgwN0Y3OTNDOUNGNUZDRTMzNUVFMTVFMDk4NDQ0 OUI0MzA5NjAeFw0yNTA1MTUwNjMxMjdaFw0yNTA1MjIwNjMxMjdaMBgxFjAUBgNV BAMTDTY4MjU4YTNmLWNkY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPn21u4ZPMI30ueaKl+RSwIgpwtrky128cYtGYKDQkYpYPD1Z3EhBN7FaBAW29 YVgBricKTMITEoG7Wsht9g6avK8Pj7MMZw0cnKaXQV+kL1u/xw1p85A34aMrrTwf rxoXEyoWbe1yQSRGKqRSij5vTY3vUz7mRlybE3Rfy32torZ9Mnqd2cln9ngvxGg2 VZli33ICtDVYWS7sAiTxqqG0NEPEFIRqDSG5myJ1MIBYMd56sjG8BEYhqbrM7ICG scunHB5yEIN5tfsesX7wGOkaqVG+7wgi7MytFkamzVdd0s0/GCoxO3oXVmdlI9JX +uZ2DdvIsfiU24jJPAuE+EvDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUM/QIrewV HGWSj+sLIRmVMrYtEmUwHwYDVR0jBBgwFoAU7D2Af3k8nPX84zXuFeCYREm0MJYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxN0NGL0I0MTU1NDU4QjJD NzExRUY5MTZCQjY3RkM0RjlBRTAyLzdEMkFmM2s4blBYODR6WHVGZUNZUkVtME1K WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN0QyQWYzazhuUFg4NHpYdUZlQ1lSRW0wTUpZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx N0NGL0I0MTU1NDU4QjJDNzExRUY5MTZCQjY3RkM0RjlBRTAyLzdEMkFmM2s4blBY ODR6WHVGZUNZUkVtME1KWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAnCRpYhjfbbia3pe7va+pZycTX0AZ3DdYKJqasSpzAwghMy8LwJshny bG8azBVhaibiw1G33Qa/4OMDhzNkNgbi+FCOPR2DMrpccGzVGGFKgIzroGCMlNOv mpIRJwPLPqdkOxacynSJOUJNbp9S87seELdl4y60cHWYi1YV/IxKRrZ3DbIImKrt CXtQHPnVovDfR/T9r0llCrHYbBZpJTz4OJD+qG4ESh7GADPK01Wp0sjheS0pcdlV WmgEawkuHos0P3eELl+pX5cJ4OaYs1MHSHMrDd6PvVjHdA7H90f/yquRtOYmqShk zHueHsfXbsSR1wv2M00zU6n6BrE//ew= -----END CERTIFICATE-----Generated at Sat May 17 00:09:00 2025 by rpki-client