$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft File: 7NpzBwy2x3kNxguGn7sEMdln3k4.mft (raw, json) Hash identifier: MufgHzShKv0Q1J0e2mZkkvUz1eEF8IY/+3yymAr6ZE4= Subject key identifier: 93:B6:FE:AC:49:C5:6C:F4:BA:13:4E:B3:06:1D:A7:14:E7:FD:9B:43 Authority key identifier: EC:DA:73:07:0C:B6:C7:79:0D:C6:0B:86:9F:BB:04:31:D9:67:DE:4E Certificate issuer: /CN=A91A5C43/serialNumber=ECDA73070CB6C7790DC60B869FBB0431D967DE4E Certificate serial: 06F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft Manifest number: 06ED Signing time: Fri 16 May 2025 22:16:13 +0000 Manifest this update: Fri 16 May 2025 22:16:12 +0000 Manifest next update: Fri 23 May 2025 22:16:12 +0000 Files and hashes: 1: 7NpzBwy2x3kNxguGn7sEMdln3k4.crl (hash: CMgZE7SBcyQmo0AsJ7jjHPshNbEbroP0przT5dos25k=) 2: 69482E56075411EFB23BE380C4F9AE02.roa (hash: ZFKSwCcup8+isfjjo8Cp7fgQpt81FqZFYGAbu1futQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.crl rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 22:16:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1785 (0x6f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5C43, serialNumber=ECDA73070CB6C7790DC60B869FBB0431D967DE4E Validity Not Before: May 16 22:16:12 2025 GMT Not After : May 23 22:16:12 2025 GMT Subject: CN=6827b92c-7ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0e:e3:1a:91:13:6b:6d:7a:92:8b:48:83:35: e5:39:f8:df:13:57:b4:e3:41:e3:28:5d:f5:af:98: ee:47:ae:00:72:ce:86:14:20:5e:38:9c:b3:3c:ef: e4:42:b9:c1:c5:5c:bf:48:dd:bd:c7:f2:85:07:d4: a1:30:d6:28:37:42:06:77:ed:5e:54:7b:3f:47:a8: 00:7c:d7:2e:a4:87:09:dd:28:ed:6a:9e:c2:f9:75: 10:fd:d2:37:a1:94:84:8a:e8:57:45:01:c0:6e:d2: 53:77:67:20:66:e0:61:06:5b:6e:a6:aa:b1:0d:b0: 7d:cf:ab:e7:03:6c:61:9b:20:1b:42:37:f5:5a:81: c1:26:02:d9:82:51:cd:73:55:c0:28:c6:35:80:54: 41:7b:2e:6c:95:07:db:51:dd:70:aa:89:5e:3e:5f: 2e:29:0a:3f:fe:6f:86:61:b3:d5:9c:a9:5b:25:d4: d4:d4:a5:d4:23:0f:b1:91:fa:b7:ed:90:38:5a:1b: da:d9:6a:89:fd:db:ca:75:11:ce:92:5d:bc:47:96: 2c:b5:c5:30:a6:d7:8b:6a:20:89:ab:bf:ea:90:b1: 2f:ec:a8:0d:f5:ef:7b:c5:e9:86:08:c5:6e:1d:f1: e0:77:62:69:2f:64:67:33:c1:db:b9:ac:68:f4:1b: 6d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B6:FE:AC:49:C5:6C:F4:BA:13:4E:B3:06:1D:A7:14:E7:FD:9B:43 X509v3 Authority Key Identifier: keyid:EC:DA:73:07:0C:B6:C7:79:0D:C6:0B:86:9F:BB:04:31:D9:67:DE:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:c7:7e:29:d7:19:39:b6:82:c2:36:08:04:f5:17:5b:b5:a1: 4e:33:05:0a:ed:18:a6:ba:2d:79:e3:ba:de:24:78:1f:a7:1a: 32:60:5b:89:df:96:e6:bb:fa:f0:42:c6:90:3a:ea:84:c1:28: bc:cf:2c:8d:97:f0:ee:37:9c:e9:7f:76:2b:e0:65:0f:aa:23: 6b:a7:99:fd:1e:a6:99:48:13:c8:ad:19:50:7f:6c:cc:75:b9: d5:39:f5:8b:0f:af:9f:28:c0:70:9e:d2:62:78:01:7d:cd:36: c1:49:8b:9f:a7:1a:2f:d6:03:ff:4c:ec:10:13:a5:fc:6c:da: de:9c:c6:25:b2:db:a0:b5:a0:95:2d:97:91:7d:3e:a5:3a:a8: 52:73:f2:39:28:e9:87:7b:05:c9:cd:6a:f9:7d:70:1b:b8:d8: 26:d1:4a:a5:5f:9b:1f:f4:a4:5a:09:dc:82:27:d9:90:f4:1a: 9c:a5:f9:d1:96:0d:ca:36:57:c4:eb:a1:c5:7d:20:1d:11:2a: 69:c7:0d:a9:58:84:bd:5e:3f:62:05:2d:39:9f:39:22:1f:45: 64:99:ea:6a:a8:91:81:f3:06:63:02:e4:f6:3e:3d:0c:af:ad: 03:42:85:39:05:fc:1d:5d:5f:87:f0:df:e7:bf:8f:ec:cc:0f: d3:bc:4b:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDNDMxMTAvBgNVBAUTKEVDREE3MzA3MENCNkM3NzkwREM2MEI4NjlGQkIwNDMx RDk2N0RFNEUwHhcNMjUwNTE2MjIxNjEyWhcNMjUwNTIzMjIxNjEyWjAYMRYwFAYD VQQDEw02ODI3YjkyYy03YWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3w7jGpETa216kotIgzXlOfjfE1e040HjKF31r5juR64Acs6GFCBeOJyzPO/k QrnBxVy/SN29x/KFB9ShMNYoN0IGd+1eVHs/R6gAfNcupIcJ3Sjtap7C+XUQ/dI3 oZSEiuhXRQHAbtJTd2cgZuBhBltupqqxDbB9z6vnA2xhmyAbQjf1WoHBJgLZglHN c1XAKMY1gFRBey5slQfbUd1wqolePl8uKQo//m+GYbPVnKlbJdTU1KXUIw+xkfq3 7ZA4Whva2WqJ/dvKdRHOkl28R5YstcUwpteLaiCJq7/qkLEv7KgN9e97xemGCMVu HfHgd2JpL2RnM8Hbuaxo9BttAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJO2/qxJ xWz0uhNOswYdpxTn/ZtDMB8GA1UdIwQYMBaAFOzacwcMtsd5DcYLhp+7BDHZZ95O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUM0My84OUUzNkU2QTRC MkMxMUVCOTExQkFENzBDNEY5QUUwMi83TnB6Qnd5Mngza054Z3VHbjdzRU1kbG4z azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdOcHpCd3kyeDNrTnhndUduN3NFTWRsbjNrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUM0My84OUUzNkU2QTRCMkMxMUVCOTExQkFENzBDNEY5QUUwMi83TnB6Qnd5Mngz a054Z3VHbjdzRU1kbG4zazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEx34p1xk5toLCNggE9RdbtaFOMwUK7Rimui1547reJHgfpxoyYFuJ 35bmu/rwQsaQOuqEwSi8zyyNl/DuN5zpf3Yr4GUPqiNrp5n9HqaZSBPIrRlQf2zM dbnVOfWLD6+fKMBwntJieAF9zTbBSYufpxov1gP/TOwQE6X8bNrenMYlstugtaCV LZeRfT6lOqhSc/I5KOmHewXJzWr5fXAbuNgm0UqlX5sf9KRaCdyCJ9mQ9BqcpfnR lg3KNlfE66HFfSAdESppxw2pWIS9Xj9iBS05nzkiH0VkmepqqJGB8wZjAuT2Pj0M r60DQoU5BfwdXV+H8N/nv4/szA/TvEt+ -----END CERTIFICATE-----Generated at Sat May 17 13:14:14 2025 by rpki-client