$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.mft File: 7N0mV0PpIRvOCq3LsCLObzO-CwY.mft (raw, json) Hash identifier: zZ+4Uq6EEYdlGEdfDZIoW8oZB7K6mgl4VF3iBQ7eiHM= Subject key identifier: 18:F7:8A:D0:00:50:64:39:44:81:B4:29:C9:CF:51:3D:10:CD:E4:DD Authority key identifier: EC:DD:26:57:43:E9:21:1B:CE:0A:AD:CB:B0:22:CE:6F:33:BE:0B:06 Certificate issuer: /CN=A91C1710/serialNumber=ECDD265743E9211BCE0AADCBB022CE6F33BE0B06 Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7N0mV0PpIRvOCq3LsCLObzO-CwY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.mft Manifest number: 071A Signing time: Sun 11 May 2025 00:09:58 +0000 Manifest this update: Sun 11 May 2025 00:09:57 +0000 Manifest next update: Sun 18 May 2025 00:09:57 +0000 Files and hashes: 1: 7N0mV0PpIRvOCq3LsCLObzO-CwY.crl (hash: c8fTxcftL9wx6tgGwmxg4ZWU6DxlFkK4t+ga4BmeL9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.crl rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7N0mV0PpIRvOCq3LsCLObzO-CwY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:09:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1710, serialNumber=ECDD265743E9211BCE0AADCBB022CE6F33BE0B06 Validity Not Before: May 11 00:09:57 2025 GMT Not After : May 18 00:09:57 2025 GMT Subject: CN=681fead6-bc41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:71:7c:c2:d9:8f:b9:46:db:c4:0c:17:73:34: 9f:0c:12:8b:e6:28:84:27:1d:88:1c:1f:bd:fb:46: 9b:0b:1f:55:96:c4:7f:48:49:65:d7:6e:21:0b:e4: ee:30:09:02:fb:91:6f:99:d4:69:dc:f2:7b:10:ae: 27:f7:8e:64:a9:01:75:be:42:f5:9b:3b:65:54:94: ed:45:66:39:c0:b3:db:ef:51:64:e4:80:cc:3a:d4: d8:c1:ff:6d:6d:2c:3b:0a:b3:a1:d3:86:02:46:33: 46:bb:30:84:3b:73:4e:a2:75:c3:c3:0c:88:62:b9: 54:9f:70:a2:30:19:fd:4c:82:8c:aa:0a:f3:3b:ca: 9a:c5:1f:49:ef:1e:d7:46:7f:eb:fa:b7:f4:3b:2a: d9:58:1f:1e:91:4c:1f:f4:3b:80:65:97:7e:d5:e0: eb:d9:bb:1c:3d:16:60:49:87:31:02:82:66:3a:34: 7c:e4:b3:ae:74:1c:3a:c4:41:d9:93:d9:02:d1:22: 77:76:62:80:4f:63:b5:8a:c8:70:cb:36:07:07:2e: 55:28:8e:51:1f:77:9d:51:53:d9:ae:1e:87:69:4c: 82:09:28:46:dd:25:57:ee:64:11:df:ed:1b:90:e3: aa:8a:c1:aa:f7:ca:c1:f2:63:f0:f6:01:42:7a:d1: a7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F7:8A:D0:00:50:64:39:44:81:B4:29:C9:CF:51:3D:10:CD:E4:DD X509v3 Authority Key Identifier: keyid:EC:DD:26:57:43:E9:21:1B:CE:0A:AD:CB:B0:22:CE:6F:33:BE:0B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7N0mV0PpIRvOCq3LsCLObzO-CwY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:c9:58:e6:6c:54:5d:c2:ac:6e:36:e5:7b:21:ed:d8:76:b1: f1:30:1c:6f:d5:93:58:de:9c:b8:43:6c:cb:97:7e:96:41:7e: 5a:e9:df:cd:f9:73:af:46:f7:49:84:78:3d:55:4b:b1:10:66: 9b:b0:5b:0d:d3:ae:08:92:59:e4:f3:ea:6d:3a:1f:5a:37:04: 31:1d:a3:37:b2:4d:5d:dc:b5:88:71:ea:b4:47:1e:66:b0:d4: fa:91:e5:cd:96:63:11:be:00:77:67:bf:d7:3b:99:80:27:85: 4a:64:9c:a5:81:80:b7:be:6e:77:57:a3:6f:1e:f4:b0:7f:2e: b0:de:c5:13:dd:b9:b7:45:b8:65:f5:f2:44:d3:78:a6:cf:97: 04:39:ec:7d:02:6e:13:21:c8:05:a5:f3:b7:80:93:69:d2:54: 66:78:3f:90:29:79:7e:36:13:f9:db:8e:61:db:d5:db:86:8d: cf:50:00:66:e0:ca:16:e0:df:35:f6:c9:59:a1:17:85:03:a9: de:40:a7:9a:0d:d1:69:24:59:e8:28:fa:28:a9:6d:d3:7d:cf: aa:55:ab:95:2b:e9:b1:6d:68:0c:ba:c5:a3:c8:e0:dd:84:84: 42:37:e2:44:b3:49:40:cf:2f:fa:95:11:ff:25:a6:07:18:c3: a8:24:ba:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE3MTAxMTAvBgNVBAUTKEVDREQyNjU3NDNFOTIxMUJDRTBBQURDQkIwMjJDRTZG MzNCRTBCMDYwHhcNMjUwNTExMDAwOTU3WhcNMjUwNTE4MDAwOTU3WjAYMRYwFAYD VQQDEw02ODFmZWFkNi1iYzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA83F8wtmPuUbbxAwXczSfDBKL5iiEJx2IHB+9+0abCx9VlsR/SEll124hC+Tu MAkC+5FvmdRp3PJ7EK4n945kqQF1vkL1mztlVJTtRWY5wLPb71Fk5IDMOtTYwf9t bSw7CrOh04YCRjNGuzCEO3NOonXDwwyIYrlUn3CiMBn9TIKMqgrzO8qaxR9J7x7X Rn/r+rf0OyrZWB8ekUwf9DuAZZd+1eDr2bscPRZgSYcxAoJmOjR85LOudBw6xEHZ k9kC0SJ3dmKAT2O1ishwyzYHBy5VKI5RH3edUVPZrh6HaUyCCShG3SVX7mQR3+0b kOOqisGq98rB8mPw9gFCetGnlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBj3itAA UGQ5RIG0KcnPUT0QzeTdMB8GA1UdIwQYMBaAFOzdJldD6SEbzgqty7Aizm8zvgsG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTcxMC8xODIyOUE4Njgy NkIxMUVDQTExQkE1MkJDNEY5QUUwMi83TjBtVjBQcElSdk9DcTNMc0NMT2J6Ty1D d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdOMG1WMFBwSVJ2T0NxM0xzQ0xPYnpPLUN3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTcxMC8xODIyOUE4NjgyNkIxMUVDQTExQkE1MkJDNEY5QUUwMi83TjBtVjBQcElS dk9DcTNMc0NMT2J6Ty1Dd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZyVjmbFRdwqxuNuV7Ie3YdrHxMBxv1ZNY3py4Q2zLl36WQX5a6d/N +XOvRvdJhHg9VUuxEGabsFsN064Iklnk8+ptOh9aNwQxHaM3sk1d3LWIceq0Rx5m sNT6keXNlmMRvgB3Z7/XO5mAJ4VKZJylgYC3vm53V6NvHvSwfy6w3sUT3bm3Rbhl 9fJE03imz5cEOex9Am4TIcgFpfO3gJNp0lRmeD+QKXl+NhP5245h29Xbho3PUABm 4MoW4N819slZoReFA6neQKeaDdFpJFnoKPooqW3Tfc+qVauVK+mxbWgMusWjyODd hIRCN+JEs0lAzy/6lRH/JaYHGMOoJLqN -----END CERTIFICATE-----Generated at Mon May 12 21:44:41 2025 by rpki-client