$ rpki-client -vvf rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft File: 7ErjVswCMimNPNn9IEE1Z9u3_CU.mft (raw, json) Hash identifier: w+++C/UAbauOzD7X+PQK7AYmlkBnbjDHvW/qqcIhsLg= Subject key identifier: 4C:28:2F:5D:22:D7:6D:A7:74:94:0F:D0:F0:1E:8F:C8:D3:AF:6F:91 Authority key identifier: EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25 Certificate issuer: /CN=A91830A5/serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25 Certificate serial: 046B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft Manifest number: 0460 Signing time: Mon 12 May 2025 23:59:57 +0000 Manifest this update: Mon 12 May 2025 23:59:57 +0000 Manifest next update: Mon 19 May 2025 23:59:57 +0000 Files and hashes: 1: 7ErjVswCMimNPNn9IEE1Z9u3_CU.crl (hash: BmnFLgpVqrw4Lm8NIJP1HJ/fNYbFieqgE/U3c4B0nLI=) 2: 10854F3E516B11EC86C3243EC4F9AE02.roa (hash: 75+qcslrpbStlF9MBXstO6Kxv6zf8gOrBw7RkBWwZKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.crl rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1131 (0x46b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91830A5, serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25 Validity Not Before: May 12 23:59:57 2025 GMT Not After : May 19 23:59:57 2025 GMT Subject: CN=68228b7d-34b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ae:a2:f6:c4:8e:c9:61:e0:29:55:0a:4e:d7: 31:1a:a6:3d:7a:0e:e6:7d:f9:f2:ba:38:77:ef:0a: 59:7a:b4:07:24:ff:69:f0:ff:5d:bf:3a:fc:da:bc: 93:76:68:c6:a8:2d:2b:01:87:c2:f4:bf:31:d5:74: 94:52:a1:c6:cf:28:50:7e:3a:5b:57:7b:f5:f3:1f: 0f:86:38:cd:1c:d3:bb:db:1a:57:4e:c9:d5:f6:84: a2:c2:af:e6:38:77:8e:d6:f4:f3:53:f7:7d:bc:32: 80:e2:ef:88:c0:c2:d6:54:d6:a3:a8:68:bd:10:82: af:9e:e9:94:c1:24:46:8d:2c:4b:15:d6:4a:a3:72: 7d:a3:da:3e:94:5c:c6:60:36:c1:92:af:f5:56:69: 7b:45:67:7a:ad:c7:7d:10:60:b9:34:29:f5:38:af: 65:68:b3:c4:3d:8b:79:9a:fe:51:aa:62:ea:2d:84: 99:24:3e:d4:ed:f7:e7:d7:9b:ad:37:d0:53:a4:d6: fe:09:80:23:ed:48:4a:24:b9:c1:5f:41:81:ee:9c: 67:5a:fa:60:bc:aa:f0:b0:42:23:97:64:8a:ae:1d: 99:5b:38:52:e5:87:c3:aa:dd:54:b3:63:20:27:45: 80:a4:17:84:a0:12:18:0f:77:db:15:cd:7e:ce:c3: aa:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:28:2F:5D:22:D7:6D:A7:74:94:0F:D0:F0:1E:8F:C8:D3:AF:6F:91 X509v3 Authority Key Identifier: keyid:EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:36:59:72:75:3a:b0:c8:bb:8d:5a:31:0d:33:62:ae:f2:0b: 75:5d:44:24:33:b1:1f:4c:34:ff:f7:5b:16:08:58:59:87:a4: e4:88:64:0e:37:5a:fd:7f:d8:80:d7:a0:dc:8c:c8:6d:92:3a: 87:13:92:ce:a4:6c:01:f4:41:d6:71:5f:b6:00:ce:00:0e:86: b5:08:23:f8:db:bf:4c:d0:08:d4:0d:77:af:da:72:49:0c:52: 1d:a3:cf:e4:e4:3d:31:8b:c0:a1:fa:3c:90:74:78:3d:e9:c3: 24:77:e4:35:0a:b7:91:af:0a:14:97:50:35:d9:08:26:e1:d6: 89:c5:07:b7:7f:56:eb:41:b5:ae:57:36:d0:c8:25:bb:5a:ae: eb:d9:fd:0a:74:01:b6:0d:88:d5:94:12:f2:36:d0:c2:29:c2: da:c2:32:47:a5:1f:32:8b:01:71:10:ea:b9:76:0e:5b:36:ca: 48:04:0b:3d:a2:db:8b:9f:41:67:6e:32:eb:df:dd:87:30:d6: 3f:c2:60:c1:02:0a:78:ce:49:e5:92:5f:e8:01:80:01:e0:84: 6d:e7:70:a1:ee:c6:ba:68:8e:8a:ef:88:05:40:f1:bc:f3:27: cf:21:d0:b2:13:1c:1d:b9:a6:0d:c7:de:a5:fd:95:58:a0:8a: 57:13:b8:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODMwQTUxMTAvBgNVBAUTKEVDNEFFMzU2Q0MwMjMyMjk4RDNDRDlGRDIwNDEzNTY3 REJCN0ZDMjUwHhcNMjUwNTEyMjM1OTU3WhcNMjUwNTE5MjM1OTU3WjAYMRYwFAYD VQQDEw02ODIyOGI3ZC0zNGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxa6i9sSOyWHgKVUKTtcxGqY9eg7mffnyujh37wpZerQHJP9p8P9dvzr82ryT dmjGqC0rAYfC9L8x1XSUUqHGzyhQfjpbV3v18x8PhjjNHNO72xpXTsnV9oSiwq/m OHeO1vTzU/d9vDKA4u+IwMLWVNajqGi9EIKvnumUwSRGjSxLFdZKo3J9o9o+lFzG YDbBkq/1Vml7RWd6rcd9EGC5NCn1OK9laLPEPYt5mv5RqmLqLYSZJD7U7ffn15ut N9BTpNb+CYAj7UhKJLnBX0GB7pxnWvpgvKrwsEIjl2SKrh2ZWzhS5YfDqt1Us2Mg J0WApBeEoBIYD3fbFc1+zsOqqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwoL10i 122ndJQP0PAej8jTr2+RMB8GA1UdIwQYMBaAFOxK41bMAjIpjTzZ/SBBNWfbt/wl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzBBNS9EODI0MThGRTUx NjYxMUVDQUQ1NjU4NjdDNEY5QUUwMi83RXJqVnN3Q01pbU5QTm45SUVFMVo5dTNf Q1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFcmpWc3dDTWltTlBObjlJRUUxWjl1M19DVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzBBNS9EODI0MThGRTUxNjYxMUVDQUQ1NjU4NjdDNEY5QUUwMi83RXJqVnN3Q01p bU5QTm45SUVFMVo5dTNfQ1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUNllydTqwyLuNWjENM2Ku8gt1XUQkM7EfTDT/91sWCFhZh6TkiGQO N1r9f9iA16DcjMhtkjqHE5LOpGwB9EHWcV+2AM4ADoa1CCP4279M0AjUDXev2nJJ DFIdo8/k5D0xi8Ch+jyQdHg96cMkd+Q1CreRrwoUl1A12Qgm4daJxQe3f1brQbWu VzbQyCW7Wq7r2f0KdAG2DYjVlBLyNtDCKcLawjJHpR8yiwFxEOq5dg5bNspIBAs9 otuLn0FnbjLr392HMNY/wmDBAgp4zknlkl/oAYAB4IRt53Ch7sa6aI6K74gFQPG8 8yfPIdCyExwduaYNx96l/ZVYoIpXE7is -----END CERTIFICATE-----Generated at Wed May 14 04:42:10 2025 by rpki-client