$ rpki-client -vvf rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft File: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft (raw, json) Hash identifier: AliWqduNKrzx02K8ZoZf/f9OZTCqTTdImVtDxXTAqH0= Subject key identifier: 24:40:06:90:AA:06:7C:C9:C4:AD:7D:EA:4B:BF:62:36:BA:3B:D2:E9 Authority key identifier: ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC Certificate issuer: /CN=A91A02D8/serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft Manifest number: B1 Signing time: Thu 15 May 2025 05:22:01 +0000 Manifest this update: Thu 15 May 2025 05:22:00 +0000 Manifest next update: Thu 22 May 2025 05:22:00 +0000 Files and hashes: 1: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl (hash: 7CSKTTnAz8gWbeYpWhkquDJwy/m6EcCm4ZMII2eKDNo=) 2: 86F9CBCC2AB711EF996EC819C4F9AE02.roa (hash: dEaYlEkH9R7ZFvmgUUxoyfXOgBDXEq+zy0JoQWINyBs=) 3: 2C7C9DD2258E11F0B42E1529C4F9AE02.roa (hash: YHdJB6Lo//ZRMPtezpeztutxSLNZz3RvoAPzpUPPGFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A02D8, serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC Validity Not Before: May 15 05:22:00 2025 GMT Not After : May 22 05:22:00 2025 GMT Subject: CN=682579f9-3d2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a1:1e:b5:a5:a3:29:9a:c9:a3:53:32:1a:d2: 7f:b0:6c:0f:eb:4d:5c:e1:f1:98:98:23:f0:6e:70: f4:36:ad:be:a3:ae:c6:f6:72:ac:96:09:d1:58:f1: da:42:8b:ba:23:2a:24:4d:01:5e:7b:8e:d6:83:b6: e9:a8:bc:f1:8c:fb:24:c8:56:44:12:3d:22:ca:f8: 89:92:dd:6e:61:fe:a1:a5:53:d8:c5:4f:7b:f6:23: b0:e0:4b:f2:5a:9a:43:eb:88:9e:ed:62:60:64:4c: a6:65:1d:0a:cf:bf:38:6e:b6:8b:2b:d9:5a:14:02: 65:a6:b8:ee:cd:b9:a0:81:8c:a0:4f:b9:f0:61:6c: ad:ab:1a:22:2f:f7:d1:01:d8:34:3d:30:26:8c:92: f1:84:6a:31:a0:40:f2:82:1e:b0:67:a5:0c:65:eb: b4:41:cd:e0:d6:f4:b2:76:4e:9b:8c:47:86:38:3c: 36:91:5e:86:fd:cb:4e:2a:a7:ac:a2:69:00:f9:b8: 6f:18:6e:27:92:14:b4:de:77:e3:47:c4:9e:6e:83: fc:79:e5:62:ee:42:99:83:9f:ab:f1:79:e4:38:aa: 66:ea:15:4a:ee:aa:6c:1f:78:01:11:d1:cf:d5:2d: 44:0b:0d:3c:d3:6b:5e:be:aa:80:a8:07:1c:26:3e: 29:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:40:06:90:AA:06:7C:C9:C4:AD:7D:EA:4B:BF:62:36:BA:3B:D2:E9 X509v3 Authority Key Identifier: keyid:ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:d8:48:2f:41:25:96:0b:40:36:f5:2e:38:be:b6:0a:4f:91: 08:f4:82:c6:48:f7:07:aa:35:de:ce:5d:10:2c:52:2f:7e:f7: 4f:e4:f1:9f:94:34:37:59:c6:77:db:53:ac:9e:02:49:c6:5a: 93:af:87:f3:a7:b7:55:51:1e:2e:52:f8:87:40:f4:90:ee:5d: c0:fe:c5:e5:28:54:ea:7c:8b:1e:cb:ee:72:12:1a:91:34:fd: 85:75:96:b8:ed:04:da:5f:a2:c4:68:34:57:27:ab:64:6a:1c: 78:e7:df:71:9e:9e:3c:38:b0:c8:8d:90:e9:7f:41:67:af:de: 05:00:20:82:7b:5e:34:da:b6:bd:e4:20:5a:e5:91:c8:05:0a: 89:a9:28:26:aa:9e:58:98:80:a9:40:22:70:df:ba:7b:95:c2: 10:8a:bd:26:9b:57:1d:64:d5:a7:0b:1b:78:ef:f4:46:63:ca: 44:fb:ad:c9:ff:84:97:a4:36:e8:cb:fe:a1:90:5a:3e:bf:2a: 68:45:a8:4b:91:6d:49:c1:d4:a3:53:40:81:45:a5:07:53:57: 11:16:8f:38:fd:c3:29:88:9a:b3:4b:77:62:2d:72:5c:9b:44: 4f:67:29:16:b8:04:46:c6:1a:be:bb:ff:95:68:5f:dc:18:74: 54:69:62:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAyRDgxMTAvBgNVBAUTKEVEOUIwRTYwODVBMjVERjI2NzQ5RkYyNzU4MUE0RThC QzdDMTg2Q0MwHhcNMjUwNTE1MDUyMjAwWhcNMjUwNTIyMDUyMjAwWjAYMRYwFAYD VQQDEw02ODI1NzlmOS0zZDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzaEetaWjKZrJo1MyGtJ/sGwP601c4fGYmCPwbnD0Nq2+o67G9nKslgnRWPHa Qou6IyokTQFee47Wg7bpqLzxjPskyFZEEj0iyviJkt1uYf6hpVPYxU979iOw4Evy WppD64ie7WJgZEymZR0Kz784braLK9laFAJlprjuzbmggYygT7nwYWytqxoiL/fR Adg0PTAmjJLxhGoxoEDygh6wZ6UMZeu0Qc3g1vSydk6bjEeGODw2kV6G/ctOKqes omkA+bhvGG4nkhS03nfjR8SeboP8eeVi7kKZg5+r8XnkOKpm6hVK7qpsH3gBEdHP 1S1ECw0802tevqqAqAccJj4p0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRABpCq BnzJxK196ku/Yja6O9LpMB8GA1UdIwQYMBaAFO2bDmCFol3yZ0n/J1gaTovHwYbM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDJEOC9FMDkyNDhFQTJB QjYxMUVGQjMzOUZEODFDNEY5QUUwMi83WnNPWUlXaVhmSm5TZjhuV0JwT2k4ZkJo c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdac09ZSVdpWGZKblNmOG5XQnBPaThmQmhzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDJEOC9FMDkyNDhFQTJBQjYxMUVGQjMzOUZEODFDNEY5QUUwMi83WnNPWUlXaVhm Sm5TZjhuV0JwT2k4ZkJoc3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCM2EgvQSWWC0A29S44vrYKT5EI9ILGSPcHqjXezl0QLFIvfvdP5PGf lDQ3WcZ321OsngJJxlqTr4fzp7dVUR4uUviHQPSQ7l3A/sXlKFTqfIsey+5yEhqR NP2FdZa47QTaX6LEaDRXJ6tkahx4599xnp48OLDIjZDpf0Fnr94FACCCe1402ra9 5CBa5ZHIBQqJqSgmqp5YmICpQCJw37p7lcIQir0mm1cdZNWnCxt47/RGY8pE+63J /4SXpDboy/6hkFo+vypoRahLkW1JwdSjU0CBRaUHU1cRFo84/cMpiJqzS3diLXJc m0RPZykWuARGxhq+u/+VaF/cGHRUaWJg -----END CERTIFICATE-----Generated at Fri May 16 09:33:31 2025 by rpki-client