$ rpki-client -vvf rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft File: frs7Qcl_MxP654HvYzI8SvYrj7c.mft (raw, json) Hash identifier: nZA7bK8X4a+ivduFTRAa6Kd0rn1lr4oNa71c+PSZVcM= Subject key identifier: 9D:7B:46:0E:92:EF:13:31:B3:1C:10:FB:75:C4:60:AB:91:95:F9:83 Authority key identifier: 7E:BB:3B:41:C9:7F:33:13:FA:E7:81:EF:63:32:3C:4A:F6:2B:8F:B7 Certificate issuer: /CN=A91B777C/serialNumber=7EBB3B41C97F3313FAE781EF63323C4AF62B8FB7 Certificate serial: 05EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft Manifest number: 05E5 Signing time: Wed 14 May 2025 23:01:47 +0000 Manifest this update: Wed 14 May 2025 23:01:46 +0000 Manifest next update: Wed 21 May 2025 23:01:46 +0000 Files and hashes: 1: frs7Qcl_MxP654HvYzI8SvYrj7c.crl (hash: X+3x5EovhLGBXqllNKqhGkdlh6gHD8eXl8hDDZmKKR0=) 2: 10BBF6CEB2E711EB8A61B44EC4F9AE02.roa (hash: 0y9VyknIsSUScmWS3621geMMX5dlAHgNZtNYOtKkDmI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.crl rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 23:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1516 (0x5ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B777C, serialNumber=7EBB3B41C97F3313FAE781EF63323C4AF62B8FB7 Validity Not Before: May 14 23:01:46 2025 GMT Not After : May 21 23:01:46 2025 GMT Subject: CN=682520db-d5fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:65:7e:7b:75:e6:9c:63:33:91:91:c0:77:d5: ef:db:47:59:ce:a8:02:e5:ed:d1:04:57:8f:b0:dc: 44:d3:57:d2:b3:ef:11:84:06:b2:da:fc:6d:51:c4: cc:e2:7c:97:b7:2c:1d:09:a3:ea:ff:1f:53:84:a5: 98:f9:21:1c:31:9c:ea:50:87:72:9a:4e:a3:69:99: 7f:55:1c:de:a9:43:de:66:94:f8:3a:a3:11:62:f7: 96:cb:d0:80:f5:c2:1c:89:93:f0:7e:47:4e:e4:a9: 66:10:e0:3b:1f:09:18:47:88:e0:9f:35:fb:1c:cd: ef:4f:82:94:5d:92:ee:31:fd:e2:a4:d2:2b:4a:17: 01:40:60:f0:49:1e:5f:80:d8:5b:8d:33:81:0c:13: 4a:19:cb:88:ce:7b:ae:8b:16:10:4e:8a:c4:53:ba: 3a:a0:d7:7f:4a:ec:c4:a9:1f:7e:08:f2:e3:ee:92: e4:9f:fe:7c:1b:40:29:c7:49:36:a6:77:03:39:f8: e9:be:bd:84:b8:58:a1:ca:84:8f:2e:c4:12:2a:88: bb:79:6a:b3:00:85:86:c9:82:f5:15:2f:7b:c3:14: 05:8c:63:24:76:10:3a:6c:77:66:04:47:d5:5f:37: 4c:07:a1:e3:f1:64:64:e4:5e:7b:0e:87:42:99:7e: a8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:7B:46:0E:92:EF:13:31:B3:1C:10:FB:75:C4:60:AB:91:95:F9:83 X509v3 Authority Key Identifier: keyid:7E:BB:3B:41:C9:7F:33:13:FA:E7:81:EF:63:32:3C:4A:F6:2B:8F:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:2f:82:f5:68:ae:de:10:a9:75:8e:2f:9d:41:d8:51:0a:7f: 71:ee:89:ef:7b:55:a5:78:d8:b1:1f:0b:e1:91:9f:a9:bf:d7: 5f:48:bc:99:86:91:10:17:26:19:57:14:d1:08:c9:27:a0:39: a5:40:15:e0:01:bf:d2:a7:ee:23:b8:c7:10:a5:20:f2:88:b9: f3:fd:98:6f:47:97:84:e3:aa:bf:5c:c7:bf:ff:80:4f:72:16: 2b:e4:77:59:f4:42:9f:8f:9d:df:7d:39:06:67:21:07:be:9a: 67:7e:1c:60:5b:e0:e3:f4:ee:5b:44:e3:08:e6:3a:cf:e6:bf: b6:e9:fe:bf:fa:36:17:8f:1c:b7:7c:73:50:2d:72:c9:e0:15: 90:69:bd:27:a8:ef:c7:13:7e:31:3b:47:93:a8:3a:6f:4d:0d: 1d:43:19:a9:f6:15:73:6d:e4:b7:14:1e:85:cf:7a:95:38:51: 3b:a3:b0:96:1e:23:59:62:6d:d5:a7:f0:d9:02:f1:96:c6:bc: 72:7b:d4:4c:3d:d7:77:d3:82:43:f7:12:98:0f:b6:8d:9d:1f: 99:a0:a7:90:ce:77:14:e5:20:66:9e:75:c8:90:f1:04:d4:f3: b8:8d:1b:76:db:b8:c8:52:e1:6c:d2:ea:b6:f3:a2:b3:22:97: f9:52:e6:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3N0MxMTAvBgNVBAUTKDdFQkIzQjQxQzk3RjMzMTNGQUU3ODFFRjYzMzIzQzRB RjYyQjhGQjcwHhcNMjUwNTE0MjMwMTQ2WhcNMjUwNTIxMjMwMTQ2WjAYMRYwFAYD VQQDEw02ODI1MjBkYi1kNWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnmV+e3XmnGMzkZHAd9Xv20dZzqgC5e3RBFePsNxE01fSs+8RhAay2vxtUcTM 4nyXtywdCaPq/x9ThKWY+SEcMZzqUIdymk6jaZl/VRzeqUPeZpT4OqMRYveWy9CA 9cIciZPwfkdO5KlmEOA7HwkYR4jgnzX7HM3vT4KUXZLuMf3ipNIrShcBQGDwSR5f gNhbjTOBDBNKGcuIznuuixYQTorEU7o6oNd/SuzEqR9+CPLj7pLkn/58G0Apx0k2 pncDOfjpvr2EuFihyoSPLsQSKoi7eWqzAIWGyYL1FS97wxQFjGMkdhA6bHdmBEfV XzdMB6Hj8WRk5F57DodCmX6o9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ17Rg6S 7xMxsxwQ+3XEYKuRlfmDMB8GA1UdIwQYMBaAFH67O0HJfzMT+ueB72MyPEr2K4+3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3Qy82Q0Q4MTMzQ0Iy REExMUVCOEIzODRBNjBDNEY5QUUwMi9mcnM3UWNsX014UDY1NEh2WXpJOFN2WXJq N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZyczdRY2xfTXhQNjU0SHZZekk4U3ZZcmo3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3Qy82Q0Q4MTMzQ0IyREExMUVCOEIzODRBNjBDNEY5QUUwMi9mcnM3UWNsX014 UDY1NEh2WXpJOFN2WXJqN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3L4L1aK7eEKl1ji+dQdhRCn9x7onve1WleNixHwvhkZ+pv9dfSLyZ hpEQFyYZVxTRCMknoDmlQBXgAb/Sp+4juMcQpSDyiLnz/ZhvR5eE46q/XMe//4BP chYr5HdZ9EKfj53ffTkGZyEHvppnfhxgW+Dj9O5bROMI5jrP5r+26f6/+jYXjxy3 fHNQLXLJ4BWQab0nqO/HE34xO0eTqDpvTQ0dQxmp9hVzbeS3FB6Fz3qVOFE7o7CW HiNZYm3Vp/DZAvGWxrxye9RMPdd304JD9xKYD7aNnR+ZoKeQzncU5SBmnnXIkPEE 1PO4jRt227jIUuFs0uq286KzIpf5UuaJ -----END CERTIFICATE-----Generated at Thu May 15 12:53:04 2025 by rpki-client