$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft File: 7yfjyfFbWDsVypzMPJBdIpzi8NA.mft (raw, json) Hash identifier: 20Qb0EsyW6Tg3kWmCg0APBuZ4VSOEAy22IiPtmugBes= Subject key identifier: CF:FD:EB:4C:EE:74:E2:9D:B9:F9:A9:0F:0E:3C:15:39:F2:ED:87:58 Authority key identifier: EF:27:E3:C9:F1:5B:58:3B:15:CA:9C:CC:3C:90:5D:22:9C:E2:F0:D0 Certificate issuer: /CN=A91C1814/serialNumber=EF27E3C9F15B583B15CA9CCC3C905D229CE2F0D0 Certificate serial: 05D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7yfjyfFbWDsVypzMPJBdIpzi8NA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft Manifest number: 05CC Signing time: Sat 10 May 2025 22:38:48 +0000 Manifest this update: Sat 10 May 2025 22:38:47 +0000 Manifest next update: Sat 17 May 2025 22:38:47 +0000 Files and hashes: 1: 7yfjyfFbWDsVypzMPJBdIpzi8NA.crl (hash: OXy3T/zV3iprEZ7kyUgOcVd+xapjWTMQfMe9mALu/yU=) 2: 38378A3EBA3411EBB94A527CC4F9AE02.roa (hash: bXfsV+JRththOFdM9JTTJyhVvibLKGVpju+gIvVc/Sk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.crl rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7yfjyfFbWDsVypzMPJBdIpzi8NA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:38:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1489 (0x5d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1814, serialNumber=EF27E3C9F15B583B15CA9CCC3C905D229CE2F0D0 Validity Not Before: May 10 22:38:47 2025 GMT Not After : May 17 22:38:47 2025 GMT Subject: CN=681fd578-6549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4e:15:29:7c:53:70:a0:d3:ed:1a:fc:a5:e1: 35:3a:5a:d8:e8:46:dd:cb:2f:c2:d9:9b:15:32:db: 22:3b:52:bd:be:e2:ae:ed:16:bf:f7:a0:23:98:62: 0f:5d:b6:4c:44:ab:f9:27:65:d7:7f:f6:69:35:e6: d8:ef:6f:3c:1b:a1:09:5c:73:c3:f9:28:98:0e:db: 9c:41:9b:7d:05:17:90:1e:7b:47:eb:cb:91:62:e0: 8f:32:d0:33:f4:60:67:e1:06:ee:48:08:eb:c6:09: 91:20:cb:ca:76:4e:74:c4:06:d1:ec:53:23:44:a8: 8e:d5:10:41:81:b5:52:01:05:4f:c0:df:29:91:30: fe:de:b3:6a:49:4e:66:b9:8a:db:93:ea:7a:d3:be: 81:78:9c:a7:4f:18:a7:82:71:64:23:78:73:6f:83: 8d:74:37:30:b0:25:eb:06:bc:f1:a8:04:e8:01:23: ce:6c:0a:99:c4:9a:53:f6:9d:e0:46:e3:4f:99:7f: 3c:3e:eb:2b:9e:f1:cb:be:bb:89:d9:8e:c1:03:2d: 44:38:16:b3:1e:ff:59:42:c6:94:08:9d:40:01:00: a6:e1:f3:7f:5b:94:f1:ed:33:75:87:34:ef:a7:a1: 36:59:c0:3e:31:e0:17:c1:5c:fc:09:5a:ba:37:d8: eb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:FD:EB:4C:EE:74:E2:9D:B9:F9:A9:0F:0E:3C:15:39:F2:ED:87:58 X509v3 Authority Key Identifier: keyid:EF:27:E3:C9:F1:5B:58:3B:15:CA:9C:CC:3C:90:5D:22:9C:E2:F0:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7yfjyfFbWDsVypzMPJBdIpzi8NA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:67:d3:76:09:d7:8e:3c:83:1d:62:f7:d7:00:55:9c:4b:e5: f1:e2:03:71:16:0d:42:62:1a:55:1c:dd:c1:14:32:9d:28:3d: 3c:ce:47:fe:dd:1e:ad:c9:ce:e6:63:72:3a:d7:98:f6:76:9e: 1a:59:68:00:bd:a6:08:b2:7a:4f:4d:a2:0d:da:e8:95:f5:2f: 7d:b7:54:c9:64:ee:c6:f1:68:8f:6c:8e:84:c2:2e:28:83:a2: b5:c1:32:ce:2d:50:0a:07:c7:84:97:be:71:21:45:9b:f5:54: 37:c0:03:2a:25:4b:9c:14:2c:81:b1:7a:27:40:5e:2c:e9:26: ec:84:4c:3c:19:3e:85:1f:f9:22:2d:87:e5:8b:c0:1d:5d:1e: e0:8c:33:5a:64:63:4d:47:d0:3a:ea:58:a7:db:34:29:00:02: 69:71:fa:13:4a:68:45:6a:84:b2:f6:3c:64:36:2f:42:c6:7f: b1:3f:88:e0:d1:f3:0d:6b:ac:fb:31:ca:ae:1e:55:29:ed:a2: da:b4:d2:71:78:04:7c:bd:58:da:74:4d:39:c0:7e:db:23:97: ee:92:21:7b:5c:e2:6c:a1:d4:69:10:50:bf:1a:dc:d2:dc:95: 0c:a4:fd:12:21:1d:f9:ef:a6:54:3d:2f:cc:32:d1:40:a5:e1: bf:ea:c3:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE4MTQxMTAvBgNVBAUTKEVGMjdFM0M5RjE1QjU4M0IxNUNBOUNDQzNDOTA1RDIy OUNFMkYwRDAwHhcNMjUwNTEwMjIzODQ3WhcNMjUwNTE3MjIzODQ3WjAYMRYwFAYD VQQDEw02ODFmZDU3OC02NTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoE4VKXxTcKDT7Rr8peE1OlrY6Ebdyy/C2ZsVMtsiO1K9vuKu7Ra/96AjmGIP XbZMRKv5J2XXf/ZpNebY7288G6EJXHPD+SiYDtucQZt9BReQHntH68uRYuCPMtAz 9GBn4QbuSAjrxgmRIMvKdk50xAbR7FMjRKiO1RBBgbVSAQVPwN8pkTD+3rNqSU5m uYrbk+p6076BeJynTxingnFkI3hzb4ONdDcwsCXrBrzxqAToASPObAqZxJpT9p3g RuNPmX88PusrnvHLvruJ2Y7BAy1EOBazHv9ZQsaUCJ1AAQCm4fN/W5Tx7TN1hzTv p6E2WcA+MeAXwVz8CVq6N9jr/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/960zu dOKdufmpDw48FTny7YdYMB8GA1UdIwQYMBaAFO8n48nxW1g7FcqczDyQXSKc4vDQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTgxNC9GM0M4NTM5RUJB MzExMUVCOUM2OUMxNzhDNEY5QUUwMi83eWZqeWZGYldEc1Z5cHpNUEpCZElwemk4 TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd5Zmp5ZkZiV0RzVnlwek1QSkJkSXB6aThOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTgxNC9GM0M4NTM5RUJBMzExMUVCOUM2OUMxNzhDNEY5QUUwMi83eWZqeWZGYldE c1Z5cHpNUEpCZElwemk4TkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXZ9N2CdeOPIMdYvfXAFWcS+Xx4gNxFg1CYhpVHN3BFDKdKD08zkf+ 3R6tyc7mY3I615j2dp4aWWgAvaYIsnpPTaIN2uiV9S99t1TJZO7G8WiPbI6Ewi4o g6K1wTLOLVAKB8eEl75xIUWb9VQ3wAMqJUucFCyBsXonQF4s6SbshEw8GT6FH/ki LYfli8AdXR7gjDNaZGNNR9A66lin2zQpAAJpcfoTSmhFaoSy9jxkNi9Cxn+xP4jg 0fMNa6z7McquHlUp7aLatNJxeAR8vVjadE05wH7bI5fukiF7XOJsodRpEFC/GtzS 3JUMpP0SIR3576ZUPS/MMtFApeG/6sMD -----END CERTIFICATE-----Generated at Mon May 12 22:58:19 2025 by rpki-client