$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft File: 7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json) Hash identifier: AS5tQabjxRjbvJ9ml58oqQD5wOgG5LiDZyl57KMA8iI= Subject key identifier: C0:73:74:E4:62:A3:7E:68:01:5F:47:FE:6A:32:B8:64:4A:6E:A6:27 Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40 Certificate issuer: /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40 Certificate serial: 01CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft Manifest number: 01C9 Signing time: Tue 13 May 2025 02:16:01 +0000 Manifest this update: Tue 13 May 2025 02:16:01 +0000 Manifest next update: Tue 20 May 2025 02:16:01 +0000 Files and hashes: 1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: Fp+Dno6eX/Hv57trt0xYAZokpNsUrvrrHqw4EpwOtwU=) 2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: bI9ehsJkdKReP7tO6LRGZVdy5KgC9pIKmuFrjzQkdWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40 Validity Not Before: May 13 02:16:01 2025 GMT Not After : May 20 02:16:01 2025 GMT Subject: CN=6822ab61-67b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:83:f1:98:03:03:4a:f3:16:88:f9:db:90:d4: f9:1e:a3:8d:ea:f2:b6:c6:57:2c:40:1d:2b:7a:2c: 44:dd:24:82:cc:6a:f1:a4:b3:bc:5b:a6:e0:9c:2a: 71:19:33:d4:d3:8e:db:66:8b:96:6b:9c:99:67:7b: 5e:7a:ab:4b:45:93:a3:95:a7:f0:db:f1:dc:bf:9f: 15:00:5b:38:bb:46:55:6f:63:0a:94:ec:25:a5:ab: cf:51:68:94:11:1e:5c:48:05:7a:8f:bf:31:5f:1c: 9c:44:e0:ab:b8:71:e5:0b:f4:37:e6:e5:e1:de:b3: 03:96:f5:ea:8e:2a:50:ec:de:10:4f:03:fe:2d:6f: 7f:31:8e:1a:16:2c:1a:a3:af:e7:2a:f5:c7:ae:82: e3:db:af:07:bf:31:58:a2:ff:95:f6:65:5f:cf:57: 03:cd:eb:d6:b6:66:9a:30:50:49:16:71:10:a4:a8: 54:b4:b5:c8:74:d7:b2:e2:fb:ce:e9:96:46:5d:5d: 89:8e:d7:49:71:be:44:ea:10:a6:33:83:7e:25:0d: 33:4f:2f:42:b0:5f:dd:5a:00:10:9e:05:fd:a7:a8: 76:2f:c5:d7:c6:db:50:7f:72:19:b6:2e:c8:60:02: 3f:db:20:fd:f8:dc:d0:ab:16:0e:5a:30:3a:33:65: b3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:73:74:E4:62:A3:7E:68:01:5F:47:FE:6A:32:B8:64:4A:6E:A6:27 X509v3 Authority Key Identifier: keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:84:a6:39:b2:16:6f:42:cb:6e:52:38:f7:87:d1:41:24:0b: 87:5f:64:e2:2c:85:ce:54:6b:58:71:39:e1:a5:db:59:b4:4a: ec:4e:45:ba:2e:d4:75:62:19:91:5a:b0:36:96:f6:58:f3:e5: ba:f2:61:53:a2:ba:6a:bd:7a:db:dd:cb:91:ef:b8:fa:b7:a0: f5:36:56:2b:87:ce:66:1d:be:4d:7c:bb:79:e2:87:47:f3:91: b9:ce:87:d3:dd:2a:d2:32:3c:ee:ae:38:4a:59:bb:d9:3c:6c: 12:ef:f3:ec:10:65:09:b2:c6:84:f2:30:47:18:a0:eb:40:97: ce:06:3d:21:f0:58:fa:bf:7f:7e:42:07:35:a6:0b:a7:63:46: f3:7e:5e:e2:43:b0:1d:78:df:83:d1:b2:14:a9:31:34:80:36: 86:14:1f:f6:ed:e4:54:5c:2c:3b:c3:3f:86:24:89:83:30:b0: 16:14:fc:24:b6:3d:c4:57:9d:cf:4c:da:08:d0:03:34:c7:f0: 31:86:90:a0:22:d2:db:bb:b5:e5:51:76:be:4a:c8:5f:a5:f1: 9c:fa:c9:67:02:e1:33:2c:2a:5b:ff:a8:b6:76:91:b1:30:ef: 52:59:c5:0a:25:43:d3:a4:8e:a8:ae:88:41:31:25:b8:27:49: aa:84:b8:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkzQjYxMTAvBgNVBAUTKEVERkQxNERCNkZEM0IwMkE3OTM1REFBRDQ3RkMwMjlG M0E3MDRDNDAwHhcNMjUwNTEzMDIxNjAxWhcNMjUwNTIwMDIxNjAxWjAYMRYwFAYD VQQDEw02ODIyYWI2MS02N2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1IPxmAMDSvMWiPnbkNT5HqON6vK2xlcsQB0reixE3SSCzGrxpLO8W6bgnCpx GTPU047bZouWa5yZZ3teeqtLRZOjlafw2/Hcv58VAFs4u0ZVb2MKlOwlpavPUWiU ER5cSAV6j78xXxycROCruHHlC/Q35uXh3rMDlvXqjipQ7N4QTwP+LW9/MY4aFiwa o6/nKvXHroLj268HvzFYov+V9mVfz1cDzevWtmaaMFBJFnEQpKhUtLXIdNey4vvO 6ZZGXV2JjtdJcb5E6hCmM4N+JQ0zTy9CsF/dWgAQngX9p6h2L8XXxttQf3IZti7I YAI/2yD9+NzQqxYOWjA6M2Wz6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMBzdORi o35oAV9H/moyuGRKbqYnMB8GA1UdIwQYMBaAFO39FNtv07AqeTXarUf8Ap86cExA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTNCNi83MEJDRkNFMDdD NTcxMUVEQTgxMDc4NjZDNEY5QUUwMi83ZjBVMjJfVHNDcDVOZHF0Ul93Q256cHdU RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdmMFUyMl9Uc0NwNU5kcXRSX3dDbnpwd1RFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTNCNi83MEJDRkNFMDdDNTcxMUVEQTgxMDc4NjZDNEY5QUUwMi83ZjBVMjJfVHND cDVOZHF0Ul93Q256cHdURUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDhKY5shZvQstuUjj3h9FBJAuHX2TiLIXOVGtYcTnhpdtZtErsTkW6 LtR1YhmRWrA2lvZY8+W68mFTorpqvXrb3cuR77j6t6D1NlYrh85mHb5NfLt54odH 85G5zofT3SrSMjzurjhKWbvZPGwS7/PsEGUJssaE8jBHGKDrQJfOBj0h8Fj6v39+ Qgc1pgunY0bzfl7iQ7AdeN+D0bIUqTE0gDaGFB/27eRUXCw7wz+GJImDMLAWFPwk tj3EV53PTNoI0AM0x/AxhpCgItLbu7XlUXa+SshfpfGc+slnAuEzLCpb/6i2dpGx MO9SWcUKJUPTpI6orohBMSW4J0mqhLg/ -----END CERTIFICATE-----Generated at Thu May 15 00:33:29 2025 by rpki-client