$ rpki-client -vvf rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft File: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft (raw, json) Hash identifier: FWkCF3+Sfs2ieCTKkQQrprJL6/fTI3VO6gsbzDzyFZ8= Subject key identifier: 59:01:EC:A1:83:9E:70:E4:BC:D9:5C:84:91:63:7A:59:DA:AA:23:BB Authority key identifier: EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96 Certificate issuer: /CN=A91B04E3/serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396 Certificate serial: 0A84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft Manifest number: 0A7E Signing time: Fri 16 May 2025 19:50:59 +0000 Manifest this update: Fri 16 May 2025 19:50:59 +0000 Manifest next update: Fri 23 May 2025 19:50:59 +0000 Files and hashes: 1: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl (hash: NI9ktuWGMrX6dDy8IrE2zvmP4mxX1MA93OwKMHpsMsk=) 2: A7D265605BB411EAB5B9A73BC4F9AE02.roa (hash: wRiU0pz+/rk6H4beDLKQQM79S2Mgy7c+Kq9SVKFoW2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 19:50:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2692 (0xa84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B04E3, serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396 Validity Not Before: May 16 19:50:59 2025 GMT Not After : May 23 19:50:59 2025 GMT Subject: CN=68279723-1595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b9:7e:a7:7b:e3:0a:03:a2:49:69:6d:5c:83: 0f:98:53:23:dd:0f:d9:19:e4:f1:92:29:2a:5c:8c: 10:20:7e:a2:78:74:f2:6c:5c:bb:dd:08:c9:de:ec: f6:14:30:65:24:ae:04:22:6d:81:cf:aa:ac:74:0c: ab:fd:92:84:bf:a2:de:fe:85:d7:d1:2c:41:0a:ed: 7b:38:83:e3:3d:a3:c3:cc:1b:49:f9:3a:da:e2:4a: cf:f1:49:26:62:1e:88:0f:d6:ee:43:51:e6:c9:47: ed:da:e5:f3:34:bd:f3:cc:44:eb:a6:26:e6:1c:e6: 0c:0d:e8:67:55:f3:21:13:c9:8e:71:91:70:e1:c5: fd:c5:e0:4f:e7:28:dd:89:8f:b7:17:f7:88:f8:74: 17:a4:c5:24:c9:8d:85:23:8f:97:43:5d:6e:8b:18: 09:e7:1c:4f:2c:de:a9:c1:e6:4a:a3:03:96:b9:ff: 36:df:e8:2f:9e:49:bf:7b:2d:53:ba:c1:e0:85:11: ef:c6:94:1f:8c:60:22:83:58:c9:1e:e9:54:41:5b: 51:99:99:68:6a:35:ae:96:26:df:a1:dd:b3:48:f5: 63:3f:c1:ed:a3:4e:5e:2b:13:9f:c8:c1:15:e6:d9: c5:93:ac:94:19:c5:c6:e8:d6:06:20:c9:df:93:62: c2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:01:EC:A1:83:9E:70:E4:BC:D9:5C:84:91:63:7A:59:DA:AA:23:BB X509v3 Authority Key Identifier: keyid:EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:b2:0a:22:70:ce:bd:61:fa:bb:99:3d:6a:92:62:9e:fa:5d: 0e:11:9e:64:77:65:e1:21:c5:2a:d6:d7:f7:76:4f:37:3f:f2: 66:99:f9:79:f3:9a:b6:55:42:ce:fe:44:3d:f5:97:a1:91:04: d9:f6:59:ba:b1:23:02:05:e7:b7:4f:df:05:24:05:d3:7f:15: f1:60:ce:51:fc:09:d9:49:f9:86:02:bc:66:c8:0d:cd:00:f9: 76:d9:f1:bd:51:95:92:e1:ae:80:45:64:55:ce:ad:2f:8d:a9: 06:5e:cf:17:a5:cd:cb:27:02:2a:5e:77:fc:fc:70:4a:f0:d5: db:96:5f:bd:bb:3d:81:64:52:20:cc:6a:0a:0b:8c:48:2f:b9: 81:b9:49:c8:d1:69:03:d5:f7:52:2a:35:a6:49:c8:55:47:e6: 6a:3c:46:75:da:66:dd:41:2f:93:8e:4c:a5:74:92:fd:49:f8: 7c:07:07:1d:b4:94:d2:d6:2c:f4:c7:b6:f7:b9:27:c4:ed:cf: 27:ad:6f:bd:a4:17:2e:1a:49:0d:f4:af:9f:ef:be:7e:ba:9f: 5a:70:ff:37:cc:7e:9e:eb:59:76:4d:a6:f4:15:61:b5:7d:0e: 1d:ba:05:75:0e:25:79:96:57:7e:b0:51:8a:e4:56:55:27:2f: 0c:5d:ca:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA0RTMxMTAvBgNVBAUTKEVDNThCNDM3OEZDQkZGNENCMTI0MUY4MkYzQkNDMEU4 NzJFNEIzOTYwHhcNMjUwNTE2MTk1MDU5WhcNMjUwNTIzMTk1MDU5WjAYMRYwFAYD VQQDEw02ODI3OTcyMy0xNTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1bl+p3vjCgOiSWltXIMPmFMj3Q/ZGeTxkikqXIwQIH6ieHTybFy73QjJ3uz2 FDBlJK4EIm2Bz6qsdAyr/ZKEv6Le/oXX0SxBCu17OIPjPaPDzBtJ+Tra4krP8Ukm Yh6ID9buQ1HmyUft2uXzNL3zzETrpibmHOYMDehnVfMhE8mOcZFw4cX9xeBP5yjd iY+3F/eI+HQXpMUkyY2FI4+XQ11uixgJ5xxPLN6pweZKowOWuf823+gvnkm/ey1T usHghRHvxpQfjGAig1jJHulUQVtRmZloajWulibfod2zSPVjP8Hto05eKxOfyMEV 5tnFk6yUGcXG6NYGIMnfk2LCiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFkB7KGD nnDkvNlchJFjelnaqiO7MB8GA1UdIwQYMBaAFOxYtDePy/9MsSQfgvO8wOhy5LOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDRFMy8xNDgzQkQzNjVC QjQxMUVBODhENTY3M0JDNEY5QUUwMi83RmkwTjRfTF8weXhKQi1DODd6QTZITGtz NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGaTBONF9MXzB5eEpCLUM4N3pBNkhMa3M1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDRFMy8xNDgzQkQzNjVCQjQxMUVBODhENTY3M0JDNEY5QUUwMi83RmkwTjRfTF8w eXhKQi1DODd6QTZITGtzNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0sgoicM69Yfq7mT1qkmKe+l0OEZ5kd2XhIcUq1tf3dk83P/Jmmfl5 85q2VULO/kQ99ZehkQTZ9lm6sSMCBee3T98FJAXTfxXxYM5R/AnZSfmGArxmyA3N APl22fG9UZWS4a6ARWRVzq0vjakGXs8Xpc3LJwIqXnf8/HBK8NXbll+9uz2BZFIg zGoKC4xIL7mBuUnI0WkD1fdSKjWmSchVR+ZqPEZ12mbdQS+TjkyldJL9Sfh8Bwcd tJTS1iz0x7b3uSfE7c8nrW+9pBcuGkkN9K+f775+up9acP83zH6e61l2Tab0FWG1 fQ4dugV1DiV5lld+sFGK5FZVJy8MXcqn -----END CERTIFICATE-----Generated at Sat May 17 03:46:45 2025 by rpki-client