$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft File: 7a8emnnZ_ssQeIOv03V_qPcKMtc.mft (raw, json) Hash identifier: b1vZmMwa/UYLfobrfDmCDvJ8aedHtPF1Oo+kvSzb4jI= Subject key identifier: 68:79:2D:7C:E7:2B:75:CD:72:03:7A:26:5F:73:AF:78:DB:60:38:43 Authority key identifier: ED:AF:1E:9A:79:D9:FE:CB:10:78:83:AF:D3:75:7F:A8:F7:0A:32:D7 Certificate issuer: /CN=A91A2F6C/serialNumber=EDAF1E9A79D9FECB107883AFD3757FA8F70A32D7 Certificate serial: 0990 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7a8emnnZ_ssQeIOv03V_qPcKMtc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft Manifest number: 098A Signing time: Sat 10 May 2025 19:50:16 +0000 Manifest this update: Sat 10 May 2025 19:50:15 +0000 Manifest next update: Sat 17 May 2025 19:50:15 +0000 Files and hashes: 1: 7a8emnnZ_ssQeIOv03V_qPcKMtc.crl (hash: g6CcKlpenfO/QZMP8OhlpcFbf0H3x9SacOdMf6NNEq4=) 2: FA7CB46C8AB411EA89D83541C4F9AE02.roa (hash: yD0pXJuzsIcwlQVDxXtH8gNE+deycvgoI/IITsyuLRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.crl rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7a8emnnZ_ssQeIOv03V_qPcKMtc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2448 (0x990) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2F6C, serialNumber=EDAF1E9A79D9FECB107883AFD3757FA8F70A32D7 Validity Not Before: May 10 19:50:15 2025 GMT Not After : May 17 19:50:15 2025 GMT Subject: CN=681fadf7-9370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5d:d5:b7:a7:d8:ad:1f:c1:71:54:63:58:2d: 33:55:cc:22:e1:0c:93:61:0c:62:e1:0d:0d:8c:47: 6a:50:85:c0:35:6b:38:8d:73:58:3d:b9:0a:93:e8: 47:d0:56:31:4e:58:e5:00:b1:d2:1f:aa:ef:72:1f: 46:f9:dd:66:7e:62:4c:14:d4:b1:46:50:e0:8c:b0: 49:1e:05:03:9d:00:d0:10:7b:f4:51:ec:8a:6d:30: a0:9e:e5:f4:c9:67:e2:8f:d3:20:eb:5f:ed:7d:46: 4f:eb:e2:eb:f8:83:32:38:a8:72:5e:22:5c:65:ca: fc:a3:74:76:73:71:bb:bd:fa:b3:b4:c1:b9:8c:c2: 04:95:e5:b8:6b:86:68:b2:74:0e:d7:d1:d3:1a:fb: b7:34:15:00:4a:76:18:d1:c7:f0:00:92:c2:48:a0: 40:f9:b1:b2:69:5e:af:c8:c7:83:8b:5a:dc:90:13: 26:0e:67:66:85:08:7d:dc:70:b0:89:44:db:30:cd: cd:79:2e:0b:9d:bc:50:94:d6:39:c6:1d:e3:d5:bc: 23:da:ac:c2:df:31:ad:84:44:8c:7b:8a:bc:ad:c7: 52:4f:2a:a7:42:80:ec:77:0e:fe:b9:6a:90:63:6e: 68:33:c8:69:2c:0a:72:88:1d:26:35:e8:f1:76:34: 75:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:79:2D:7C:E7:2B:75:CD:72:03:7A:26:5F:73:AF:78:DB:60:38:43 X509v3 Authority Key Identifier: keyid:ED:AF:1E:9A:79:D9:FE:CB:10:78:83:AF:D3:75:7F:A8:F7:0A:32:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7a8emnnZ_ssQeIOv03V_qPcKMtc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:dc:4d:a9:e0:fd:51:b0:69:ba:2c:b3:17:fc:08:85:76:5f: b5:25:f0:9b:35:ea:ec:e5:63:5a:04:28:c2:a7:38:f5:39:7a: c3:fc:b4:42:d2:c1:11:09:b5:41:fc:78:06:34:0c:a0:6a:30: 4c:e3:37:2a:c5:9f:59:b4:79:2d:4b:2d:0b:13:be:ac:c0:06: 5d:71:af:5e:d0:0b:2e:2d:d1:65:c9:07:40:3a:d6:68:11:fd: c8:ed:0e:82:d2:3e:ec:30:d7:96:d6:3d:ce:bd:89:35:88:d9: cf:20:d7:53:53:d2:4c:ea:d8:e7:a2:61:d5:74:2e:79:c2:33: 91:aa:6c:4b:d1:63:15:c2:60:c8:66:e6:e8:fe:f6:ff:ae:16: f7:6f:36:22:6e:64:0d:02:29:c4:fe:12:61:f9:0e:d8:52:47: 62:02:d1:22:c9:44:62:d4:24:9b:8d:d4:9f:4d:29:eb:61:71: a4:ee:52:76:9e:a7:5a:ec:b3:60:32:2a:eb:c5:0f:e7:0e:3b: a0:6d:f6:5a:46:c7:67:b5:f2:6e:bc:11:2a:57:8f:9a:a4:0d: 63:87:91:aa:08:7e:01:f7:43:dd:60:23:7a:d4:4a:08:97:89: aa:63:d0:fa:fc:47:57:70:95:9c:f2:e0:8b:7c:11:43:32:67: 1a:13:30:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJGNkMxMTAvBgNVBAUTKEVEQUYxRTlBNzlEOUZFQ0IxMDc4ODNBRkQzNzU3RkE4 RjcwQTMyRDcwHhcNMjUwNTEwMTk1MDE1WhcNMjUwNTE3MTk1MDE1WjAYMRYwFAYD VQQDEw02ODFmYWRmNy05MzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxV3Vt6fYrR/BcVRjWC0zVcwi4QyTYQxi4Q0NjEdqUIXANWs4jXNYPbkKk+hH 0FYxTljlALHSH6rvch9G+d1mfmJMFNSxRlDgjLBJHgUDnQDQEHv0UeyKbTCgnuX0 yWfij9Mg61/tfUZP6+Lr+IMyOKhyXiJcZcr8o3R2c3G7vfqztMG5jMIEleW4a4Zo snQO19HTGvu3NBUASnYY0cfwAJLCSKBA+bGyaV6vyMeDi1rckBMmDmdmhQh93HCw iUTbMM3NeS4LnbxQlNY5xh3j1bwj2qzC3zGthESMe4q8rcdSTyqnQoDsdw7+uWqQ Y25oM8hpLApyiB0mNejxdjR1PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGh5LXzn K3XNcgN6Jl9zr3jbYDhDMB8GA1UdIwQYMBaAFO2vHpp52f7LEHiDr9N1f6j3CjLX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkY2Qy85RTMxRjNCMjhB QjMxMUVBOTNBNkJBM0VDNEY5QUUwMi83YThlbW5uWl9zc1FlSU92MDNWX3FQY0tN dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdhOGVtbm5aX3NzUWVJT3YwM1ZfcVBjS010Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkY2Qy85RTMxRjNCMjhBQjMxMUVBOTNBNkJBM0VDNEY5QUUwMi83YThlbW5uWl9z c1FlSU92MDNWX3FQY0tNdGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk3E2p4P1RsGm6LLMX/AiFdl+1JfCbNers5WNaBCjCpzj1OXrD/LRC 0sERCbVB/HgGNAygajBM4zcqxZ9ZtHktSy0LE76swAZdca9e0AsuLdFlyQdAOtZo Ef3I7Q6C0j7sMNeW1j3OvYk1iNnPINdTU9JM6tjnomHVdC55wjORqmxL0WMVwmDI Zubo/vb/rhb3bzYibmQNAinE/hJh+Q7YUkdiAtEiyURi1CSbjdSfTSnrYXGk7lJ2 nqda7LNgMirrxQ/nDjugbfZaRsdntfJuvBEqV4+apA1jh5GqCH4B90PdYCN61EoI l4mqY9D6/EdXcJWc8uCLfBFDMmcaEzCG -----END CERTIFICATE-----Generated at Sun May 11 22:29:24 2025 by rpki-client