$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft File: 7TaUIY3LHq89GvXGq8Axptt-bOU.mft (raw, json) Hash identifier: 17fTi/th6hev8WBEQ99/dpQNc5k94QYfn21IWYWTEAM= Subject key identifier: 85:A4:ED:AF:9C:7A:BF:D3:28:0E:AC:6E:9D:7B:1D:15:A5:41:AC:E0 Authority key identifier: ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5 Certificate issuer: /CN=A919EAF3/serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5 Certificate serial: 1986 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft Manifest number: 197A Signing time: Mon 12 May 2025 16:20:55 +0000 Manifest this update: Mon 12 May 2025 16:20:54 +0000 Manifest next update: Mon 19 May 2025 16:20:54 +0000 Files and hashes: 1: 7TaUIY3LHq89GvXGq8Axptt-bOU.crl (hash: o7DkklCpyUH6zTu2pEdFToEHyMG8rAzmOVFOUaQqBGg=) 2: 2958A208394011EF8BFF2329C4F9AE02.roa (hash: Rgcy8bLfZuMZaK0O0JgH1tVB2CHU0nZokr3ybevC1XM=) 3: 545743246D1911E7A4448D81C4F9AE02.roa (hash: 1AEdA1dYtxSEeV6/iG9fPyT5XqCCH+yVS2KSQ0ngLNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6534 (0x1986) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAF3, serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5 Validity Not Before: May 12 16:20:54 2025 GMT Not After : May 19 16:20:54 2025 GMT Subject: CN=68221fe7-7bec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ea:c5:1f:e4:dc:a9:df:45:58:c1:ee:18:78: 5b:6e:4f:3a:73:0e:0c:ce:25:ed:6a:68:74:6c:32: 66:ce:4b:50:5e:3f:43:c4:cd:15:a8:0a:88:b8:80: 56:66:86:7c:72:f5:ab:d9:1f:f6:91:2f:39:65:f6: bb:7b:f2:e6:5b:fb:6c:8b:bc:f1:28:f7:1f:ea:40: 3a:0b:10:c7:35:6e:53:de:08:ea:63:c7:33:b4:44: 77:2f:97:e1:f7:1d:cb:6c:c5:1e:79:4d:62:88:0f: b8:27:ae:30:65:6b:d4:c8:5a:79:6d:03:ce:8b:b9: 54:52:4e:08:f5:2c:89:61:d6:8b:56:ac:c7:85:ad: 39:27:28:00:f1:59:33:f5:3b:18:59:db:ca:ad:23: 35:07:55:7f:61:20:ce:65:e8:9f:5f:fb:65:30:ed: d9:8f:06:a0:e6:be:56:97:49:b8:64:17:31:58:6d: b9:43:cd:e4:f7:aa:00:cc:5b:ab:b5:8b:7f:64:4b: e9:42:02:61:09:2a:2e:5a:e6:b7:f5:3f:55:bb:8e: 4e:1c:ab:cd:e5:f3:f7:c6:fd:24:b5:a6:51:cd:76: 9c:c2:54:89:f5:65:e7:0c:d9:b1:18:84:af:36:10: 4d:fb:06:f8:41:5f:79:23:09:58:df:84:cc:6a:f3: 7a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A4:ED:AF:9C:7A:BF:D3:28:0E:AC:6E:9D:7B:1D:15:A5:41:AC:E0 X509v3 Authority Key Identifier: keyid:ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:a4:3b:27:45:e8:85:40:92:34:3c:55:97:5e:91:92:b2:a4: e8:40:05:1c:e9:d6:af:dc:cb:53:21:0e:3c:1b:d4:f6:03:9f: 79:4f:6b:8b:d1:6b:2a:8a:1f:55:0b:78:9a:7e:bf:b5:ff:c7: 53:fb:e2:2d:94:5d:23:02:f8:6d:b6:37:a2:56:b1:c3:75:64: 25:8f:bd:f0:2e:37:a6:4c:87:80:0b:27:25:5c:7f:bb:37:23: ea:06:1d:2a:f2:a4:ae:3e:d5:f5:50:04:97:e8:87:d1:b6:4e: 2e:70:62:9b:56:98:d1:83:e5:bc:66:f5:70:c9:21:e0:84:78: 62:18:2d:e2:58:be:08:f4:84:b3:1b:d7:39:1d:a8:5b:11:da: 55:73:cd:cb:4f:b3:9b:ba:d8:da:57:3e:d2:49:73:e9:41:ff: 90:af:2a:51:d7:d4:26:5b:eb:60:80:a4:80:a1:5a:1f:48:04: 2a:89:9c:09:52:2a:21:1c:12:e8:03:62:6c:5a:36:c3:38:f3: fe:96:94:c3:d3:6f:69:dc:39:cc:3d:ea:a4:0b:75:a9:bb:b4: 29:63:82:43:e1:8c:ee:19:07:a8:e3:93:e1:85:ef:db:1a:4d: 1e:7e:80:7d:37:32:f6:44:1c:5d:2d:66:fb:b8:ef:2d:34:c0: 9a:b8:ac:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBRjMxMTAvBgNVBAUTKEVEMzY5NDIxOERDQjFFQUYzRDFBRjVDNkFCQzAzMUE2 REI3RTZDRTUwHhcNMjUwNTEyMTYyMDU0WhcNMjUwNTE5MTYyMDU0WjAYMRYwFAYD VQQDEw02ODIyMWZlNy03YmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApurFH+Tcqd9FWMHuGHhbbk86cw4MziXtamh0bDJmzktQXj9DxM0VqAqIuIBW ZoZ8cvWr2R/2kS85Zfa7e/LmW/tsi7zxKPcf6kA6CxDHNW5T3gjqY8cztER3L5fh 9x3LbMUeeU1iiA+4J64wZWvUyFp5bQPOi7lUUk4I9SyJYdaLVqzHha05JygA8Vkz 9TsYWdvKrSM1B1V/YSDOZeifX/tlMO3Zjwag5r5Wl0m4ZBcxWG25Q83k96oAzFur tYt/ZEvpQgJhCSouWua39T9Vu45OHKvN5fP3xv0ktaZRzXacwlSJ9WXnDNmxGISv NhBN+wb4QV95IwlY34TMavN6nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWk7a+c er/TKA6sbp17HRWlQazgMB8GA1UdIwQYMBaAFO02lCGNyx6vPRr1xqvAMabbfmzl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFGMy85RDIwMERCQzZE MTgxMUU3QTgxNURBODBDNEY5QUUwMi83VGFVSVkzTEhxODlHdlhHcThBeHB0dC1i T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdUYVVJWTNMSHE4OUd2WEdxOEF4cHR0LWJPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUFGMy85RDIwMERCQzZEMTgxMUU3QTgxNURBODBDNEY5QUUwMi83VGFVSVkzTEhx ODlHdlhHcThBeHB0dC1iT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASpDsnReiFQJI0PFWXXpGSsqToQAUc6dav3MtTIQ48G9T2A595T2uL 0Wsqih9VC3iafr+1/8dT++ItlF0jAvhttjeiVrHDdWQlj73wLjemTIeACyclXH+7 NyPqBh0q8qSuPtX1UASX6IfRtk4ucGKbVpjRg+W8ZvVwySHghHhiGC3iWL4I9ISz G9c5HahbEdpVc83LT7ObutjaVz7SSXPpQf+QrypR19QmW+tggKSAoVofSAQqiZwJ UiohHBLoA2JsWjbDOPP+lpTD029p3DnMPeqkC3Wpu7QpY4JD4YzuGQeo45Phhe/b Gk0efoB9NzL2RBxdLWb7uO8tNMCauKwq -----END CERTIFICATE-----Generated at Wed May 14 10:50:41 2025 by rpki-client