$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft File: c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft (raw, json) Hash identifier: eTppO3P0SgUwTiq+RrEhNU5av2yNcoRTu1xwYv7vUVk= Subject key identifier: 10:83:FF:1E:7A:E4:B3:95:27:E5:28:CF:AE:EF:FD:BF:B1:B7:CB:AB Authority key identifier: 73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2 Certificate issuer: /CN=A91B2492/serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2 Certificate serial: 0B26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft Manifest number: 0B1D Signing time: Sat 10 May 2025 18:59:17 +0000 Manifest this update: Sat 10 May 2025 18:59:17 +0000 Manifest next update: Sat 17 May 2025 18:59:17 +0000 Files and hashes: 1: c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl (hash: l3SQg11ENiKYnLPv2a5yGJREKPUKj/QgNnNrAKiLokM=) 2: C8436A008D7B11EDB7EB7F37C4F9AE02.roa (hash: yUzUPNwrnnqA9y2QcEn+ohx6QfzL71Dl4zwJAGApA/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2854 (0xb26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2492, serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2 Validity Not Before: May 10 18:59:17 2025 GMT Not After : May 17 18:59:17 2025 GMT Subject: CN=681fa205-6790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:51:c2:c4:c3:00:c7:b7:f7:cd:e5:4d:56:5c: 6e:10:2f:69:49:2c:07:9e:e1:6b:fb:97:8b:25:20: 0e:86:4b:88:39:c8:b6:77:6e:4b:50:e3:fc:61:81: b9:56:df:84:e1:af:1b:7c:14:8d:e6:77:9e:18:fa: 5b:2b:c2:09:97:81:e8:1a:1f:42:03:bc:e4:55:6f: ff:cb:3e:34:4a:91:df:1c:13:c9:8b:e6:32:c1:7b: ef:84:57:7a:1b:51:91:fb:64:4e:17:9b:70:72:f8: 29:87:bf:81:80:0e:95:08:32:28:48:ae:de:7a:4a: ce:46:64:d5:65:5b:11:e1:ef:c9:3a:71:9f:6f:0e: 2e:35:1e:1c:40:8d:ca:29:83:57:4b:96:3a:33:e7: b3:1d:68:0d:40:11:58:36:61:e4:37:8f:cd:48:19: ae:f0:a0:a9:92:c3:bd:a5:16:67:46:b0:04:f8:c7: 8c:09:e7:68:a0:91:57:90:c8:5d:d8:91:8a:63:bf: 23:8f:d7:f7:5d:4d:1e:67:28:d1:f9:5f:af:e2:2b: bb:e4:31:37:e9:39:18:08:86:da:e0:12:e0:42:ae: b4:61:6a:12:36:46:f9:16:49:ef:b5:64:15:9f:46: bc:69:f4:1f:e1:2a:b8:1d:ab:26:4d:eb:66:cf:c9: 0f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:83:FF:1E:7A:E4:B3:95:27:E5:28:CF:AE:EF:FD:BF:B1:B7:CB:AB X509v3 Authority Key Identifier: keyid:73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:be:db:de:2e:e3:c7:c6:fd:f1:7a:85:02:3f:2a:9c:e6:3f: ed:b2:63:3f:99:33:6e:de:ec:b8:f8:5e:70:4a:bd:85:80:48: 44:53:30:c5:b7:e0:0a:50:ab:26:3c:e8:7c:f4:a2:43:3e:51: 84:9b:48:e3:ec:cc:29:ef:c2:6d:97:09:78:0b:93:63:8c:46: 26:06:b3:e4:60:a7:4b:69:ce:2b:6f:17:5a:4b:15:86:c6:5a: c2:d5:4a:2e:e1:98:8f:a3:69:8c:82:60:48:98:41:ef:72:ba: a0:1f:b9:df:d9:14:cb:9d:73:6f:51:02:fd:05:6f:95:ba:4b: dd:db:7e:cd:37:9b:41:6e:30:2c:83:4c:87:69:ff:ed:5f:39: f3:f3:e1:f9:5a:c8:3f:25:a0:b3:50:24:c8:f1:f7:b0:5f:a7: 49:d9:dc:bc:f6:81:9a:8c:20:ba:e9:8d:f4:e4:08:42:7b:a8: ca:be:59:a9:b8:2d:a6:61:7b:7e:3f:99:66:24:cc:26:ac:16: e8:85:08:bc:1d:b8:e6:1b:21:48:68:c1:23:4b:4e:11:8e:ae: 95:5d:64:ec:eb:c1:49:e6:a9:8a:78:34:40:d0:34:a1:4a:ab: 71:fc:6f:d9:cc:2e:e6:4e:ba:2f:fd:8d:d3:68:bd:98:e6:44: e2:38:52:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI0OTIxMTAvBgNVBAUTKDczQjU2MURGM0E1ODk3NkY3RkFEOTk3QTlCQThERTVG Njc2RENGQjIwHhcNMjUwNTEwMTg1OTE3WhcNMjUwNTE3MTg1OTE3WjAYMRYwFAYD VQQDEw02ODFmYTIwNS02NzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVHCxMMAx7f3zeVNVlxuEC9pSSwHnuFr+5eLJSAOhkuIOci2d25LUOP8YYG5 Vt+E4a8bfBSN5neeGPpbK8IJl4HoGh9CA7zkVW//yz40SpHfHBPJi+YywXvvhFd6 G1GR+2ROF5twcvgph7+BgA6VCDIoSK7eekrORmTVZVsR4e/JOnGfbw4uNR4cQI3K KYNXS5Y6M+ezHWgNQBFYNmHkN4/NSBmu8KCpksO9pRZnRrAE+MeMCedooJFXkMhd 2JGKY78jj9f3XU0eZyjR+V+v4iu75DE36TkYCIba4BLgQq60YWoSNkb5FknvtWQV n0a8afQf4Sq4HasmTetmz8kPEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCD/x56 5LOVJ+Uoz67v/b+xt8urMB8GA1UdIwQYMBaAFHO1Yd86WJdvf62Zepuo3l9nbc+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjQ5Mi9EQUQ1MTBENDND QjUxMUVBQjgyQ0NDNkNDNEY5QUUwMi9jN1ZoM3pwWWwyOV9yWmw2bTZqZVgyZHR6 N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3VmgzenBZbDI5X3JabDZtNmplWDJkdHo3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjQ5Mi9EQUQ1MTBENDNDQjUxMUVBQjgyQ0NDNkNDNEY5QUUwMi9jN1ZoM3pwWWwy OV9yWmw2bTZqZVgyZHR6N0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANvtveLuPHxv3xeoUCPyqc5j/tsmM/mTNu3uy4+F5wSr2FgEhEUzDF t+AKUKsmPOh89KJDPlGEm0jj7Mwp78Jtlwl4C5NjjEYmBrPkYKdLac4rbxdaSxWG xlrC1Uou4ZiPo2mMgmBImEHvcrqgH7nf2RTLnXNvUQL9BW+Vukvd237NN5tBbjAs g0yHaf/tXznz8+H5Wsg/JaCzUCTI8fewX6dJ2dy89oGajCC66Y305AhCe6jKvlmp uC2mYXt+P5lmJMwmrBbohQi8HbjmGyFIaMEjS04Rjq6VXWTs68FJ5qmKeDRA0DSh Sqtx/G/ZzC7mTrov/Y3TaL2Y5kTiOFLu -----END CERTIFICATE-----Generated at Mon May 12 07:15:22 2025 by rpki-client