$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft File: 7AyaWMsKzUJztF4bkYE7___QgUA.mft (raw, json) Hash identifier: n+h5FEJIC90FEqZSTN1iNi5iyWwHfL8Bgv9dnB8h9eU= Subject key identifier: 40:AA:FD:89:B2:2E:84:D5:88:89:74:61:24:17:B5:18:05:81:12:60 Authority key identifier: EC:0C:9A:58:CB:0A:CD:42:73:B4:5E:1B:91:81:3B:FF:FF:D0:81:40 Certificate issuer: /CN=A91B7691/serialNumber=EC0C9A58CB0ACD4273B45E1B91813BFFFFD08140 Certificate serial: 01D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft Manifest number: 01CC Signing time: Tue 13 May 2025 02:16:58 +0000 Manifest this update: Tue 13 May 2025 02:16:57 +0000 Manifest next update: Tue 20 May 2025 02:16:57 +0000 Files and hashes: 1: 7AyaWMsKzUJztF4bkYE7___QgUA.crl (hash: Rohnewz5Dyd//K+5UnGTYh0rmWgJOvAZci9ElhtPGZ8=) 2: EB9F5762EE8F11EF98C58C75C4F9AE02.roa (hash: ScqtXrKQFBst0F27eHzdcS8cxxg6r7Zs+kEeCrfoHcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.crl rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 466 (0x1d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7691, serialNumber=EC0C9A58CB0ACD4273B45E1B91813BFFFFD08140 Validity Not Before: May 13 02:16:57 2025 GMT Not After : May 20 02:16:57 2025 GMT Subject: CN=6822ab99-9ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c5:c7:d2:50:c7:cb:cc:79:e7:f3:f8:ac:bd: bf:e6:4c:e9:9d:ba:20:f8:02:fa:02:47:0f:82:a2: c6:df:04:87:99:ab:df:0e:7c:2f:da:5a:b7:9a:bd: 4f:25:8e:e9:ac:63:dc:95:59:61:6f:1c:d4:ee:46: 36:98:3e:44:87:bc:78:97:b5:a9:92:34:10:5d:4a: 22:43:96:d2:a4:0e:e3:27:82:59:fd:c0:10:f1:05: 51:f7:ca:0f:39:a8:ea:2d:79:d7:6f:24:fa:08:0d: ba:52:f2:c6:ed:a7:09:ae:52:b9:8d:b6:eb:37:9a: 92:aa:bc:e3:c9:c5:34:2f:8c:77:42:c6:2e:3c:d8: 70:22:03:99:1f:4b:5a:44:95:e2:d0:32:28:6b:0a: bc:39:6a:b5:b9:d6:9b:94:32:6a:58:e2:c3:c3:97: f4:83:07:20:14:bf:3b:0d:0d:7b:f5:b3:b7:c8:c1: 42:e3:da:6d:10:67:b2:3e:6c:9f:98:60:ad:0c:59: fc:54:cb:33:ca:a9:fb:c7:57:db:2e:33:e8:37:17: e9:dc:a0:8a:8f:a3:cd:85:cb:4c:06:27:57:2c:85: ad:53:be:35:9a:41:76:62:70:46:31:36:4e:3c:79: 85:f8:98:c5:b5:66:cc:7d:69:29:ad:7c:04:29:9f: bf:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:AA:FD:89:B2:2E:84:D5:88:89:74:61:24:17:B5:18:05:81:12:60 X509v3 Authority Key Identifier: keyid:EC:0C:9A:58:CB:0A:CD:42:73:B4:5E:1B:91:81:3B:FF:FF:D0:81:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:40:db:73:52:b0:2d:f5:34:5f:83:e8:db:ad:77:be:d1:6c: 7e:58:04:fe:e8:8d:ab:2e:29:06:57:3f:4a:25:53:34:13:8d: cd:d4:85:e8:32:fa:03:0d:88:c6:8f:40:ef:5a:4c:c4:30:9e: e5:a6:59:03:eb:46:18:9e:a7:6d:64:84:aa:66:06:3b:00:e8: ea:60:a9:dd:cc:68:b9:d1:1b:27:89:96:6f:bf:6b:8a:42:4b: 77:5b:17:44:a4:c0:91:c2:45:16:bd:f7:1f:96:cb:9b:3c:2f: 1f:c7:e3:f2:5c:45:67:4c:da:f8:59:cf:e5:e3:78:9b:76:8a: 26:55:11:b8:32:70:35:05:dd:2a:5d:10:17:e1:56:84:3b:07: 7c:e8:9e:9c:b2:a4:a3:e2:81:c1:38:e1:98:d4:74:55:bf:19: 61:4c:54:ff:27:57:96:77:c7:ad:64:e6:f4:19:67:af:f1:1d: 27:34:a4:bf:b7:37:78:71:48:b5:ee:34:48:c9:28:b2:ce:5d: ff:1c:ce:36:ce:61:35:52:58:a4:b1:93:1e:b5:39:73:9f:38: e6:2f:75:4d:32:80:d5:83:11:8b:de:fe:b9:f0:10:05:1a:9d: 3a:99:a4:22:a7:6e:02:88:85:e7:8e:9a:7e:9f:00:0e:ca:5b: 9f:cf:31:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc2OTExMTAvBgNVBAUTKEVDMEM5QTU4Q0IwQUNENDI3M0I0NUUxQjkxODEzQkZG RkZEMDgxNDAwHhcNMjUwNTEzMDIxNjU3WhcNMjUwNTIwMDIxNjU3WjAYMRYwFAYD VQQDEw02ODIyYWI5OS05YWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMXH0lDHy8x55/P4rL2/5kzpnbog+AL6AkcPgqLG3wSHmavfDnwv2lq3mr1P JY7prGPclVlhbxzU7kY2mD5Eh7x4l7WpkjQQXUoiQ5bSpA7jJ4JZ/cAQ8QVR98oP OajqLXnXbyT6CA26UvLG7acJrlK5jbbrN5qSqrzjycU0L4x3QsYuPNhwIgOZH0ta RJXi0DIoawq8OWq1udablDJqWOLDw5f0gwcgFL87DQ179bO3yMFC49ptEGeyPmyf mGCtDFn8VMszyqn7x1fbLjPoNxfp3KCKj6PNhctMBidXLIWtU741mkF2YnBGMTZO PHmF+JjFtWbMfWkprXwEKZ+/AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFECq/Ymy LoTViIl0YSQXtRgFgRJgMB8GA1UdIwQYMBaAFOwMmljLCs1Cc7ReG5GBO///0IFA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzY5MS84MjE2NEQwNDdE NTkxMUVEQkVCNTVEMEFDNEY5QUUwMi83QXlhV01zS3pVSnp0RjRia1lFN19fX1Fn VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdBeWFXTXNLelVKenRGNGJrWUU3X19fUWdVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzY5MS84MjE2NEQwNDdENTkxMUVEQkVCNTVEMEFDNEY5QUUwMi83QXlhV01zS3pV Snp0RjRia1lFN19fX1FnVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzQNtzUrAt9TRfg+jbrXe+0Wx+WAT+6I2rLikGVz9KJVM0E43N1IXo MvoDDYjGj0DvWkzEMJ7lplkD60YYnqdtZISqZgY7AOjqYKndzGi50RsniZZvv2uK Qkt3WxdEpMCRwkUWvfcflsubPC8fx+PyXEVnTNr4Wc/l43ibdoomVRG4MnA1Bd0q XRAX4VaEOwd86J6csqSj4oHBOOGY1HRVvxlhTFT/J1eWd8etZOb0GWev8R0nNKS/ tzd4cUi17jRIySiyzl3/HM42zmE1UliksZMetTlznzjmL3VNMoDVgxGL3v658BAF Gp06maQip24CiIXnjpp+nwAOylufzzHy -----END CERTIFICATE-----Generated at Wed May 14 17:48:09 2025 by rpki-client